last executing test programs: 2m50.120357729s ago: executing program 32 (id=272): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a07760940100010000000000050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 2m22.806306081s ago: executing program 33 (id=670): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x47e, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m49.059910036s ago: executing program 5 (id=1115): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b62"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="b292edaa5c8f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m48.977601206s ago: executing program 5 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x38}}, 0x20000000) 1m48.878168468s ago: executing program 5 (id=1121): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000ac1e0001000000000000000000000000fc00000000000000000000000000000100000000000400000a00000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000ffffffffffffffff0200000000000008010000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)='s', 0x1}], 0x1) 1m48.766842559s ago: executing program 5 (id=1124): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.541257353s ago: executing program 5 (id=1126): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f0000000240)='./file1\x00', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) inotify_init1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56645, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x8000) 1m48.282417626s ago: executing program 5 (id=1131): wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 1m48.282183076s ago: executing program 34 (id=1131): wait4(0x0, 0x0, 0x40000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 1m39.66673594s ago: executing program 1 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfffe}, {0x5, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) 1m39.556882902s ago: executing program 1 (id=1298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0xfffffffd}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m39.432596703s ago: executing program 1 (id=1301): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m39.113898618s ago: executing program 1 (id=1305): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) 1m39.032176369s ago: executing program 1 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 1m38.710312253s ago: executing program 1 (id=1315): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m38.683822964s ago: executing program 35 (id=1315): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m35.222758134s ago: executing program 6 (id=1366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 1m35.105856456s ago: executing program 6 (id=1367): socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0xfffffffe, 0xc2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.067526966s ago: executing program 6 (id=1368): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) 1m34.994839117s ago: executing program 6 (id=1369): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000002c0)={0x8}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m34.82272116s ago: executing program 6 (id=1374): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) 1m34.205875308s ago: executing program 6 (id=1378): socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x2c020400) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0x82) 1m34.185261669s ago: executing program 36 (id=1378): socket$nl_generic(0x10, 0x3, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x2c020400) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) unshare(0x40000800) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0x82) 1m3.494155699s ago: executing program 9 (id=1811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 1m3.440656799s ago: executing program 9 (id=1812): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$vsock_stream(r0, &(0x7f0000000100), 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb080045000024000000020011"], 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x64, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x82, 0x2}, @timestamp_addr={0x44, 0x4, 0xab, 0x1, 0xe}, @timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0xd, [{@loopback, 0x8}, {@multicast1, 0xffff965b}, {@local, 0x1}, {@local, 0x40}, {@multicast1, 0x5}, {@remote, 0x3}]}, @timestamp={0x44, 0x4, 0xfe, 0x0, 0x5}]}}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 1m2.75618438s ago: executing program 9 (id=1830): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x2, 0x4cb, 0x2, 0x95fb, 0x0, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1m2.176322148s ago: executing program 9 (id=1824): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m2.02508802s ago: executing program 9 (id=1826): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0xa, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x4, 0x800, 0x4000000000009, 0x200000100, 0x3, 0xfffffffffffffff4, 0x6, 0x1000000000005, 0x100, 0xd, 0xdd, 0xfffffffffffffffd, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x7, 0x7, 0xfffffffffffffffa, 0x80, 0x796, 0x5, 0x931, 0x1000101, 0xdfe, 0x1000000000008001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x100000000, 0x6a7, 0x102, 0x1, 0x83, 0x40, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80007fff, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5b9, 0x1, 0x1, 0x3, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x4000000008000, 0xe000000000002, 0xe4, 0x8000000000000014, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x5, 0xd3, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x9, 0x7, 0x8, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x4fffffffffffff, 0x7293, 0x0, 0x1, 0x100000007, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x13, 0x40, 0x7fffffffffffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m1.734808354s ago: executing program 9 (id=1832): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") rmdir(0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 1m1.734689374s ago: executing program 37 (id=1832): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") rmdir(0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) 14.397307483s ago: executing program 4 (id=2401): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x5a}}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6, 0x26, 0x5}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.9496872s ago: executing program 4 (id=2407): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2d, 0x2, 0x0) socketpair(0x1, 0x2, 0xffff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 13.822527862s ago: executing program 4 (id=2409): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 13.754715423s ago: executing program 4 (id=2411): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 13.686280193s ago: executing program 4 (id=2414): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2", 0x1}], 0x1}}], 0x1, 0x4000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 11.363142157s ago: executing program 4 (id=2462): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049370, 0x0) 11.344047067s ago: executing program 38 (id=2462): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049370, 0x0) 4.470723225s ago: executing program 8 (id=2560): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.429780126s ago: executing program 8 (id=2561): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.377930477s ago: executing program 8 (id=2562): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000c300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="fde690d0a7b4e4a526a767e81747187bfab8998488cae15c46da020e", 0x1c}, {&(0x7f00000004c0)='1', 0x1}, {&(0x7f0000000500)="f061fc97eff92c6cd319", 0xa}], 0x3}}], 0x1, 0x4000) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 4.312952018s ago: executing program 8 (id=2563): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000010000005910000000000000c343156a49"], 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.230790589s ago: executing program 8 (id=2565): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d2, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.528986469s ago: executing program 7 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.46103212s ago: executing program 7 (id=2575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x80, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0x2}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.342766372s ago: executing program 7 (id=2576): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000001040)=""/4096, 0x1000) 3.294688922s ago: executing program 7 (id=2578): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x20, 0xff, 0x88, 0x5, 0x200008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.217769404s ago: executing program 7 (id=2580): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.285721587s ago: executing program 0 (id=2598): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.926642352s ago: executing program 0 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0) 1.740503395s ago: executing program 0 (id=2605): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 1.530025438s ago: executing program 3 (id=2608): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x8003, 0x4, @local}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="200000000000000084000000020000000700040001000100ff8c0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000007000000ac1414010000000018000000000000008400000005000000000000000700000030000000000000008400000001000000008007000702000004000000000000000d0000000900000005000000", @ANYRES32=0x0, @ANYBLOB="12"], 0x98, 0x8004084}, 0x4041) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) 1.506608539s ago: executing program 3 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x9840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1.459722829s ago: executing program 3 (id=2610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x2e, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) poll(&(0x7f0000000240)=[{r1, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) 1.283212241s ago: executing program 0 (id=2613): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r5, 0x25, 0x4, @val=@netfilter={0x3, 0x0, 0x9}}, 0x20) 1.261258522s ago: executing program 8 (id=2614): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 1.241390482s ago: executing program 0 (id=2615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)=ANY=[], 0xffc9) 1.170762003s ago: executing program 0 (id=2616): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000000)={0x80, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.163265443s ago: executing program 2 (id=2617): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x19a8e, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='GPL\x00') socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) 1.001005075s ago: executing program 2 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xf, 0x10}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 780.307878ms ago: executing program 2 (id=2619): r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x100800, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000240)={0x9b, 0x0, 0x4, 0x1, 0x5}) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb1, 0x0, 0x2}, 0x9c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) 585.208552ms ago: executing program 3 (id=2620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe190816}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 526.196482ms ago: executing program 7 (id=2621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) 409.651714ms ago: executing program 3 (id=2622): syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 358.877245ms ago: executing program 2 (id=2623): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x408007}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 312.751385ms ago: executing program 2 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0) 21.63139ms ago: executing program 2 (id=2625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 3 (id=2626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000003c0)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000037c0)=""/193, 0xc1}], 0x1}, 0x1}], 0x1, 0x40, 0x0) kernel console output (not intermixed with test programs): 6.900409][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.909238][ T7227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 126.928653][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.955325][ T7227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 126.973155][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.992329][ T7227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 127.008588][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.037914][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 127.137016][ T7227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.176396][ T7227] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.200599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.207797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.226580][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.233720][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.293290][ T7227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.412391][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 127.540536][ T7481] loop6: detected capacity change from 0 to 512 [ 127.572494][ T7481] EXT4-fs: Ignoring removed i_version option [ 127.598015][ T7481] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.633247][ T7481] EXT4-fs (loop6): 1 truncate cleaned up [ 127.649635][ T7481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.667591][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1352'. [ 127.690525][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 127.690544][ T28] audit: type=1400 audit(1782264212.761:734): avc: denied { write } for pid=7480 comm="syz.6.1350" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.690935][ T7227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.778246][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1352'. [ 127.801934][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1352'. [ 127.925650][ T5480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.982140][ T7227] veth0_vlan: entered promiscuous mode [ 127.999263][ T7227] veth1_vlan: entered promiscuous mode [ 128.044879][ T7227] veth0_macvtap: entered promiscuous mode [ 128.061970][ T7227] veth1_macvtap: entered promiscuous mode [ 128.095196][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.116736][ T7227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.134880][ T7472] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.147395][ T7472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.158398][ T28] audit: type=1400 audit(1782264213.241:735): avc: denied { lock } for pid=7522 comm="syz.0.1357" path="socket:[21627]" dev="sockfs" ino=21627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.195033][ T7472] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.211616][ T7472] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.693964][ T28] audit: type=1400 audit(1782264213.761:736): avc: denied { accept } for pid=7546 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.811979][ T7552] loop6: detected capacity change from 0 to 4096 [ 128.850232][ T7552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.900939][ T28] audit: type=1400 audit(1782264213.971:737): avc: denied { write } for pid=7551 comm="syz.6.1369" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.924873][ T28] audit: type=1400 audit(1782264213.971:738): avc: denied { mounton } for pid=7551 comm="syz.6.1369" path="/130/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.966172][ T28] audit: type=1400 audit(1782264214.041:739): avc: denied { write } for pid=5480 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.989356][ T5480] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 129.001865][ T28] audit: type=1400 audit(1782264214.071:740): avc: denied { write } for pid=5480 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.024601][ T5480] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 129.096914][ T310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.146463][ T310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.205704][ T310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.257143][ T310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.453072][ T310] vlan2: left allmulticast mode [ 129.458744][ T310] vlan2: left promiscuous mode [ 129.464046][ T310] bridge0: port 3(vlan2) entered disabled state [ 129.491423][ T310] bridge_slave_1: left allmulticast mode [ 129.504750][ T5480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.511395][ T310] bridge_slave_1: left promiscuous mode [ 129.537959][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.578921][ T310] bridge_slave_0: left allmulticast mode [ 129.609633][ T310] bridge_slave_0: left promiscuous mode [ 129.633076][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.702212][ T28] audit: type=1400 audit(1782264214.771:741): avc: denied { write } for pid=7571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.865480][ T28] audit: type=1400 audit(1782264214.891:742): avc: denied { write } for pid=7586 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.901618][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.931291][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.953600][ T310] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 129.967631][ T310] bond0 (unregistering): Released all slaves [ 129.992412][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 130.095354][ T310] hsr_slave_0: left promiscuous mode [ 130.132630][ T310] hsr_slave_1: left promiscuous mode [ 130.155644][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.175385][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.231778][ T28] audit: type=1400 audit(1782264215.301:743): avc: denied { write } for pid=7610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.281041][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1389'. [ 130.364100][ T310] team0 (unregistering): Port device team_slave_1 removed [ 130.375020][ T310] team0 (unregistering): Port device team_slave_0 removed [ 130.418857][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 131.052180][ T7620] team1: entered promiscuous mode [ 131.065416][ T7620] team1: entered allmulticast mode [ 131.070877][ T7620] 8021q: adding VLAN 0 to HW filter on device team1 [ 131.235604][ T7652] loop0: detected capacity change from 0 to 2048 [ 131.284291][ T7652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.315238][ T7652] EXT4-fs (loop0): shut down requested (2) [ 131.407096][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.432676][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.451971][ T7582] bridge_slave_0: entered allmulticast mode [ 131.468148][ T7582] bridge_slave_0: entered promiscuous mode [ 131.495087][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.512597][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.520528][ T7582] bridge_slave_1: entered allmulticast mode [ 131.527922][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.535841][ T7582] bridge_slave_1: entered promiscuous mode [ 131.548969][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 131.568092][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.579324][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.602671][ T7582] team0: Port device team_slave_0 added [ 131.610532][ T7582] team0: Port device team_slave_1 added [ 131.651422][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.665914][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.717953][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.774175][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.802855][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.857111][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.906499][ T7582] hsr_slave_0: entered promiscuous mode [ 131.912949][ T7582] hsr_slave_1: entered promiscuous mode [ 131.920303][ T7582] debugfs: 'hsr0' already exists in 'hsr' [ 131.927657][ T7582] Cannot create hsr debugfs directory [ 131.940057][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 132.042383][ T7582] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 132.079064][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.094981][ T7582] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 132.108566][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.148023][ T7582] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 132.157324][ T7708] xt_hashlimit: size too large, truncated to 1048576 [ 132.157594][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.184261][ T7582] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 132.209057][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.308233][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.322674][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1408'. [ 132.352905][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.371306][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.378480][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.391276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.398867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.420653][ T7582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.432416][ T7582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.468441][ T7733] loop7: detected capacity change from 0 to 1024 [ 132.478368][ T7733] EXT4-fs: Ignoring removed bh option [ 132.499998][ T7733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.577001][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.808269][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.825843][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 132.920211][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 133.086015][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1425'. [ 133.100341][ T7582] veth0_vlan: entered promiscuous mode [ 133.112228][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1425'. [ 133.121342][ T310] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.130505][ T310] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.140116][ T310] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.152717][ T7582] veth1_vlan: entered promiscuous mode [ 133.168711][ T310] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.220146][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 133.220164][ T28] audit: type=1400 audit(1782264218.291:764): avc: denied { mount } for pid=7801 comm="syz.7.1428" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.254274][ T7582] veth0_macvtap: entered promiscuous mode [ 133.266724][ T28] audit: type=1400 audit(1782264218.291:765): avc: denied { mounton } for pid=7801 comm="syz.7.1428" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.284384][ T7582] veth1_macvtap: entered promiscuous mode [ 133.292099][ T28] audit: type=1400 audit(1782264218.351:766): avc: denied { unmount } for pid=6723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.336134][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1430'. [ 133.375845][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.434495][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.459825][ T7462] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.480508][ T7462] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.519434][ T7462] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.529492][ T7462] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.902639][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.909912][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.012015][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.042702][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.076146][ T7843] loop9: detected capacity change from 0 to 512 [ 134.111073][ T7843] EXT4-fs (loop9): 1 orphan inode deleted [ 134.123924][ T12] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.134449][ T7843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.142913][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.181973][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.218930][ T12] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.250306][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.262581][ T12] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.307877][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.349945][ T12] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.377845][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.770737][ T7865] loop7: detected capacity change from 0 to 128 [ 134.800623][ T7865] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.839868][ T7865] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.895438][ T28] audit: type=1400 audit(1782264219.961:767): avc: denied { write } for pid=7864 comm="syz.7.1452" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.961779][ T6723] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.974728][ T28] audit: type=1400 audit(1782264219.961:768): avc: denied { setattr } for pid=7864 comm="syz.7.1452" path="/68/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.180639][ T7879] xt_CT: No such helper "snmp_trap" [ 135.787543][ T7901] loop7: detected capacity change from 0 to 512 [ 135.797609][ T7901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.876857][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.991036][ T7921] loop9: detected capacity change from 0 to 2048 [ 136.009642][ T7921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.026782][ T28] audit: type=1400 audit(1782264221.101:769): avc: denied { write } for pid=7920 comm="syz.9.1472" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.946613][ T7949] loop8: detected capacity change from 0 to 512 [ 137.036850][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 137.051372][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 914 with error 28 [ 137.074629][ T7949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.106728][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 137.106728][ T12] [ 137.136596][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 137.146618][ T12] EXT4-fs (loop9): Free/Dirty block details [ 137.153269][ T7227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.154019][ T12] EXT4-fs (loop9): free_blocks=4096 [ 137.188467][ T12] EXT4-fs (loop9): dirty_blocks=944 [ 137.207990][ T12] EXT4-fs (loop9): Block reservation details [ 137.217299][ T12] EXT4-fs (loop9): i_reserved_data_blocks=59 [ 137.241142][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 137.274033][ T7582] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 137.528252][ T28] audit: type=1400 audit(1782264222.601:770): avc: denied { setattr } for pid=7963 comm="iou-wrk-7964" name="" dev="pipefs" ino=19157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 137.776810][ T7995] loop9: detected capacity change from 0 to 1024 [ 137.804618][ T7995] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 137.843879][ T7995] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 137.875695][ T7995] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 137.913219][ T7995] EXT4-fs (loop9): filesystem has both journal inode and journal device! [ 138.219983][ T8021] loop7: detected capacity change from 0 to 512 [ 138.257631][ T8021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.275473][ T8021] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.347668][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.386068][ T8044] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1500'. [ 138.693976][ T28] audit: type=1400 audit(1782264223.761:771): avc: denied { write } for pid=8043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.816265][ T28] audit: type=1400 audit(1782264223.891:772): avc: denied { write } for pid=8103 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.036498][ T28] audit: type=1326 audit(1782264224.111:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.8.1503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e34f6ce59 code=0x0 [ 139.102586][ T28] audit: type=1400 audit(1782264224.171:774): avc: denied { write } for pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.152268][ T28] audit: type=1400 audit(1782264224.221:775): avc: denied { write } for pid=8121 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.425661][ T28] audit: type=1400 audit(1782264224.471:776): avc: denied { write } for pid=8127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.499067][ T28] audit: type=1400 audit(1782264224.571:777): avc: denied { write } for pid=8153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.628686][ T28] audit: type=1400 audit(1782264224.701:778): avc: denied { create } for pid=8170 comm="syz.8.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.677344][ T28] audit: type=1400 audit(1782264224.701:779): avc: denied { bind } for pid=8170 comm="syz.8.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.742744][ T28] audit: type=1400 audit(1782264224.701:780): avc: denied { setopt } for pid=8170 comm="syz.8.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.885654][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bde8600: rx timeout, send abort [ 140.042984][ T8105] loop9: detected capacity change from 0 to 512 [ 140.385687][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811be0c800: rx timeout, send abort [ 140.395831][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bde8600: abort rx timeout. Force session deactivation [ 140.563923][ T8105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.891437][ T8105] EXT4-fs (loop9): orphan cleanup on readonly fs [ 140.895810][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811be0c800: abort rx timeout. Force session deactivation [ 141.004308][ T8105] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 141.106779][ T8336] loop0: detected capacity change from 0 to 256 [ 141.118484][ T8336] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 141.118510][ T8336] FAT-fs (loop0): Can't find a valid FAT filesystem [ 141.191869][ T8105] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 141.210978][ T8105] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1506: bad orphan inode 768 [ 141.245905][ T8105] loop9: lost filesystem error report for type 5 error -117 [ 141.298922][ C1] EXT4-fs (loop9): initial error at time 1782264226: ext4_orphan_get:1425 [ 141.326919][ C1] EXT4-fs (loop9): last error at time 1782264226: ext4_orphan_get:1425 [ 141.507658][ T8105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.707138][ T8380] netlink: 'syz.0.1530': attribute type 8 has an invalid length. [ 141.736735][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 141.757497][ T8380] veth1_to_team: entered promiscuous mode [ 141.772985][ T8380] gretap0: entered promiscuous mode [ 141.789840][ T8105] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 141.795049][ T8385] loop7: detected capacity change from 0 to 512 [ 141.809835][ T8380] veth1_to_team: left promiscuous mode [ 141.814412][ T8385] EXT4-fs: test_dummy_encryption option not supported [ 141.823087][ T8380] gretap0: left promiscuous mode [ 141.860586][ T8385] tipc: Started in network mode [ 141.865807][ T8385] tipc: Node identity ac14140f, cluster identity 4711 [ 141.872849][ T8385] tipc: Enabled bearer , priority 10 [ 141.958908][ T8389] loop7: detected capacity change from 0 to 512 [ 141.977180][ T8389] EXT4-fs: Ignoring removed bh option [ 141.978795][ T8105] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 142.029375][ T8389] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 142.033396][ T8397] syzkaller1: entered promiscuous mode [ 142.055093][ T8389] EXT4-fs (loop7): 1 truncate cleaned up [ 142.063119][ T8389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.097309][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.108018][ T8397] syzkaller1: entered allmulticast mode [ 142.114399][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.865236][ T3387] tipc: Node number set to 2886997007 [ 143.068141][ T8478] loop9: detected capacity change from 0 to 512 [ 143.092357][ T8478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.119980][ T8478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.140628][ T8478] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.191849][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.566594][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'. [ 143.590793][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'. [ 144.450188][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 144.450207][ T28] audit: type=1400 audit(1782264229.521:796): avc: denied { write } for pid=8551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.502683][ T28] audit: type=1400 audit(1782264229.571:797): avc: denied { write } for pid=8562 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.672783][ T8572] loop7: detected capacity change from 0 to 1024 [ 144.683327][ T8572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.696545][ T8572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.703407][ T8572] EXT4-fs: inline encryption not supported [ 144.709484][ T8572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.748070][ T8572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.803275][ T8572] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.890672][ T28] audit: type=1400 audit(1782264229.961:798): avc: denied { view } for pid=8582 comm="syz.9.1590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 145.022125][ T8538] loop8: detected capacity change from 0 to 164 [ 145.217582][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.320099][ T8601] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 145.349543][ T8604] loop7: detected capacity change from 0 to 2048 [ 145.381137][ T8604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.401820][ T28] audit: type=1400 audit(1782264230.471:799): avc: denied { setopt } for pid=8609 comm="syz.9.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.452831][ T28] audit: type=1400 audit(1782264230.501:800): avc: denied { write } for pid=8603 comm="syz.7.1595" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.514425][ T8607] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 145.557963][ T8607] bond4 (unregistering): Released all slaves [ 145.700808][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 145.862774][ T28] audit: type=1400 audit(1782264230.931:801): avc: denied { read } for pid=8620 comm="syz.9.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.879968][ T8538] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 146.308365][ T28] audit: type=1400 audit(1782264231.281:802): avc: denied { mount } for pid=8537 comm="syz.8.1577" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 146.730818][ T28] audit: type=1400 audit(1782264231.801:803): avc: denied { unmount } for pid=7227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 146.805001][ T7476] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 146.829690][ T7476] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 146.873068][ T7476] EXT4-fs (loop7): This should not happen!! Data will be lost [ 146.873068][ T7476] [ 146.896772][ T7476] EXT4-fs (loop7): Total free blocks count 0 [ 146.903002][ T7476] EXT4-fs (loop7): Free/Dirty block details [ 146.924450][ T7476] EXT4-fs (loop7): free_blocks=4096 [ 146.937975][ T7476] EXT4-fs (loop7): dirty_blocks=512 [ 146.949518][ T7476] EXT4-fs (loop7): Block reservation details [ 146.962128][ T7476] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 146.987331][ T7476] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 147.023534][ T6723] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 147.128564][ T8658] netlink: 'syz.9.1619': attribute type 1 has an invalid length. [ 147.147911][ T8658] netlink: 'syz.9.1619': attribute type 4 has an invalid length. [ 147.172731][ T8658] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1619'. [ 147.196937][ T8660] loop7: detected capacity change from 0 to 1024 [ 147.198871][ T8647] loop8: detected capacity change from 0 to 1024 [ 147.227376][ T8660] EXT4-fs: inline encryption not supported [ 147.245031][ T8660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.261833][ T8664] loop9: detected capacity change from 0 to 128 [ 147.273020][ T8647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.296089][ T8660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 147.309963][ T8664] syz.9.1621: attempt to access beyond end of device [ 147.309963][ T8664] loop9: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 147.325181][ T8660] System zones: 0-1, 3-36 [ 147.329998][ T28] audit: type=1400 audit(1782264232.401:804): avc: denied { write } for pid=8645 comm="syz.8.1615" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.337882][ T8647] EXT4-fs error (device loop8): ext4_empty_dir:3114: inode #11: block 623: comm syz.8.1615: Attempting to read directory block (623) that is past i_size (638464) [ 147.352179][ T28] audit: type=1400 audit(1782264232.401:805): avc: denied { write } for pid=8645 comm="syz.8.1615" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.394428][ T8660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.496826][ T7227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.074370][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.119761][ T8698] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 148.162492][ T8698] bond5: (slave geneve3): making interface the new active one [ 148.183809][ T8698] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 148.220874][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.230159][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.273516][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.297491][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 148.634147][ T8730] loop9: detected capacity change from 0 to 512 [ 148.665052][ T8730] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.688434][ T8730] EXT4-fs (loop9): 1 truncate cleaned up [ 148.706100][ T8730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.926711][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.001629][ T8748] loop7: detected capacity change from 0 to 512 [ 149.020974][ T8748] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 149.044262][ T8748] EXT4-fs (loop7): 1 truncate cleaned up [ 149.055535][ T8748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.094390][ T8753] loop0: detected capacity change from 0 to 1024 [ 149.102961][ T8753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.121609][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.174982][ T8753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.231545][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1659'. [ 149.457219][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.074609][ T8761] team2: entered promiscuous mode [ 150.080274][ T8761] team2: entered allmulticast mode [ 150.086367][ T8761] 8021q: adding VLAN 0 to HW filter on device team2 [ 150.455874][ T8798] xt_l2tp: v2 tid > 0xffff: 1114116 [ 150.817612][ T8827] loop7: detected capacity change from 0 to 512 [ 150.827030][ T8827] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 150.849041][ T8827] EXT4-fs (loop7): 1 truncate cleaned up [ 150.861456][ T8827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.895572][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 150.895591][ T28] audit: type=1400 audit(1782264235.971:835): avc: denied { write } for pid=8825 comm="syz.7.1686" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.974331][ T8842] netlink: 'syz.9.1689': attribute type 1 has an invalid length. [ 151.022344][ T8842] bond1: entered promiscuous mode [ 151.028734][ T8842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.037223][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.048903][ T8842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.062555][ T8842] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 151.074620][ T8842] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 151.087902][ T8842] bond1: (slave vti0): making interface the new active one [ 151.095759][ T8842] vti0: entered promiscuous mode [ 151.103035][ T8842] bond1: (slave vti0): Enslaving as an active interface with an up link [ 151.368405][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1698'. [ 151.402621][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.416456][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.581809][ T8913] loop9: detected capacity change from 0 to 512 [ 151.631410][ T8913] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1701: inode has both inline data and extents flags [ 151.635688][ T28] audit: type=1400 audit(1782264236.711:836): avc: denied { listen } for pid=8917 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.664659][ T28] audit: type=1400 audit(1782264236.741:837): avc: denied { accept } for pid=8917 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.693814][ T8913] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.695128][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 151.710869][ C0] EXT4-fs (loop9): initial error at time 1782264236: ext4_orphan_get:1399: inode 15 [ 151.720356][ C0] EXT4-fs (loop9): last error at time 1782264236: ext4_orphan_get:1399: inode 15 [ 151.742939][ T8913] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1701: couldn't read orphan inode 15 (err -117) [ 151.784679][ T8913] loop9: lost filesystem error report for type 5 error -117 [ 151.806099][ T8913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.869661][ T28] audit: type=1400 audit(1782264236.941:838): avc: denied { write } for pid=8912 comm="syz.9.1701" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.920710][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.938867][ T28] audit: type=1400 audit(1782264236.971:839): avc: denied { write } for pid=8912 comm="syz.9.1701" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.998407][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1704'. [ 152.154571][ T8963] netlink: 7 bytes leftover after parsing attributes in process `syz.9.1708'. [ 152.265938][ T8971] loop9: detected capacity change from 0 to 1024 [ 152.294088][ T8971] EXT4-fs: inline encryption not supported [ 152.332916][ T8971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.361760][ T8971] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 152.389157][ T8971] System zones: 0-1, 3-36 [ 152.402101][ T8971] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.428515][ T28] audit: type=1400 audit(1782264237.501:840): avc: denied { write } for pid=8970 comm="syz.9.1710" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.582151][ T8886] Set syz1 is full, maxelem 65536 reached [ 152.804094][ T28] audit: type=1326 audit(1782264237.871:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.3.1715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 152.851449][ T28] audit: type=1326 audit(1782264237.871:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.3.1715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 152.920039][ T28] audit: type=1326 audit(1782264237.901:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.3.1715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 152.980367][ T28] audit: type=1326 audit(1782264237.901:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.3.1715" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 153.101913][ T7582] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.202076][ T8979] loop7: detected capacity change from 0 to 1024 [ 153.279626][ T8979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.426477][ T8979] EXT4-fs error (device loop7): ext4_empty_dir:3114: inode #11: block 623: comm syz.7.1713: Attempting to read directory block (623) that is past i_size (638464) [ 153.785428][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.842291][ T9004] loop7: detected capacity change from 0 to 736 [ 153.882208][ T6848] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.397887][ T9010] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 154.543718][ T9010] bond6 (unregistering): Released all slaves [ 154.617610][ T9025] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 154.623974][ T9025] syzkaller1: Linktype set failed because interface is up [ 154.706319][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 155.749810][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 155.885243][ T3622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 155.887691][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 155.945080][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 155.951747][ T28] audit: type=1400 audit(1782264241.011:861): avc: denied { name_bind } for pid=9082 comm="syz.0.1755" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 155.998793][ T3378] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 156.021137][ T3378] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.542009][ T9146] loop0: detected capacity change from 0 to 512 [ 156.566375][ T9051] team0: entered promiscuous mode [ 156.578002][ T9051] team0: entered allmulticast mode [ 156.583461][ T9146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.593565][ T9051] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.639705][ T9146] EXT4-fs (loop0): 1 truncate cleaned up [ 156.643089][ T9143] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 156.667360][ T9143] bond2 (unregistering): Released all slaves [ 156.685602][ T9146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.757892][ T28] audit: type=1400 audit(1782264241.831:862): avc: denied { write } for pid=9141 comm="syz.0.1758" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.839843][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 156.871936][ T4692] IPVS: starting estimator thread 0... [ 156.975924][ T9166] IPVS: using max 2400 ests per chain, 120000 per kthread [ 157.022095][ T9174] netlink: 'syz.7.1757': attribute type 4 has an invalid length. [ 157.054175][ T9174] netlink: 'syz.7.1757': attribute type 4 has an invalid length. [ 157.125073][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1761'. [ 157.183055][ T9181] ip6erspan0: entered promiscuous mode [ 157.199265][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1762'. [ 157.324244][ T9191] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1765'. [ 157.565770][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.011916][ T9183] team2: entered promiscuous mode [ 158.017079][ T9183] team2: entered allmulticast mode [ 158.022406][ T9183] 8021q: adding VLAN 0 to HW filter on device team2 [ 158.065785][ T9213] loop8: detected capacity change from 0 to 512 [ 158.078933][ T9213] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1770: iget: bad i_size value: 38620345925642 [ 158.106731][ T9213] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.107284][ T9213] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1770: couldn't read orphan inode 15 (err -117) [ 158.116528][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 158.116565][ C0] EXT4-fs (loop8): initial error at time 1782264243: ext4_orphan_get:1399: inode 15 [ 158.116597][ C0] EXT4-fs (loop8): last error at time 1782264243: ext4_orphan_get:1399: inode 15 [ 158.162199][ T9213] loop8: lost filesystem error report for type 5 error -117 [ 158.163186][ T9213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.217348][ T28] audit: type=1400 audit(1782264243.291:863): avc: denied { write } for pid=9212 comm="syz.8.1770" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.293707][ T28] audit: type=1400 audit(1782264243.361:864): avc: denied { ioctl } for pid=9224 comm="syz.0.1784" path="socket:[27882]" dev="sockfs" ino=27882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.369404][ T9213] EXT4-fs (loop8): shut down requested (1) [ 158.445429][ T7227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.501366][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1779'. [ 159.119882][ T9265] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1789'. [ 159.187135][ T28] audit: type=1400 audit(1782264244.251:865): avc: denied { write } for pid=9270 comm="syz.9.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.193585][ T9271] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.226678][ T9271] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 159.428930][ T9277] loop8: detected capacity change from 0 to 512 [ 159.485639][ T9277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.498785][ T9277] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.628477][ T7227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.175312][ T28] audit: type=1400 audit(1782264245.251:866): avc: denied { create } for pid=9317 comm="syz.7.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.252598][ T28] audit: type=1400 audit(1782264245.321:867): avc: denied { read write } for pid=9317 comm="syz.7.1807" path="socket:[28808]" dev="sockfs" ino=28808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.300342][ T28] audit: type=1400 audit(1782264245.321:868): avc: denied { setopt } for pid=9317 comm="syz.7.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.663934][ T28] audit: type=1400 audit(1782264245.731:869): avc: denied { associate } for pid=9339 comm="syz.0.1815" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.870824][ T9347] loop8: detected capacity change from 0 to 4096 [ 160.921819][ T9347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.946239][ T28] audit: type=1400 audit(1782264246.021:870): avc: denied { write } for pid=9346 comm="syz.8.1819" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.973630][ T9351] loop0: detected capacity change from 0 to 1024 [ 160.980591][ T9351] EXT4-fs: inline encryption not supported [ 160.987345][ T9351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.017458][ T9351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 161.025869][ T28] audit: type=1326 audit(1782264246.091:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.7.1807" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e42ece59 code=0x7fc00000 [ 161.058570][ T9351] System zones: 0-1, 3-36 [ 161.083944][ T9351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.252939][ T9355] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 161.264946][ T28] audit: type=1400 audit(1782264246.331:872): avc: denied { write } for pid=9350 comm="syz.0.1820" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.307578][ T9355] bond1 (unregistering): Released all slaves [ 161.472170][ T9367] loop7: detected capacity change from 0 to 512 [ 161.510724][ T9367] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.540318][ T9367] EXT4-fs (loop7): 1 truncate cleaned up [ 161.550430][ T9367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.718044][ T28] audit: type=1400 audit(1782264246.791:873): avc: denied { write } for pid=9366 comm="syz.7.1823" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.779553][ T28] audit: type=1400 audit(1782264246.831:874): avc: denied { unmount } for pid=7582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.803620][ T7227] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.925788][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.962714][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.018803][ T310] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.131463][ T310] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.234210][ T310] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.302881][ T310] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.330511][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.337865][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.345344][ T9385] bridge_slave_0: entered allmulticast mode [ 162.351821][ T9385] bridge_slave_0: entered promiscuous mode [ 162.358612][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.365868][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.373357][ T9385] bridge_slave_1: entered allmulticast mode [ 162.380171][ T9385] bridge_slave_1: entered promiscuous mode [ 162.398553][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.409050][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.436567][ T9385] team0: Port device team_slave_0 added [ 162.443473][ T9385] team0: Port device team_slave_1 added [ 162.467933][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.475020][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.501357][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.512870][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.520166][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.546476][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.557644][ T310] bridge_slave_1: left allmulticast mode [ 162.563367][ T310] bridge_slave_1: left promiscuous mode [ 162.569183][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.577274][ T310] bridge_slave_0: left allmulticast mode [ 162.583024][ T310] bridge_slave_0: left promiscuous mode [ 162.588887][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.625907][ T310] bond1 (unregistering): (slave vti0): Releasing backup interface [ 162.633747][ T310] vti0 (unregistering): left promiscuous mode [ 162.652982][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.664249][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.673813][ T310] bond0 (unregistering): Released all slaves [ 162.682186][ T310] bond1 (unregistering): Released all slaves [ 162.707668][ T310] hsr_slave_0: left promiscuous mode [ 162.713460][ T310] hsr_slave_1: left promiscuous mode [ 162.719215][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.726721][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.734207][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.741728][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.751682][ T310] veth1_vlan: left promiscuous mode [ 162.757183][ T310] veth0_vlan: left promiscuous mode [ 162.808776][ T310] team0 (unregistering): Port device team_slave_1 removed [ 162.818711][ T310] team0 (unregistering): Port device team_slave_0 removed [ 162.861625][ T9385] hsr_slave_0: entered promiscuous mode [ 162.868990][ T9385] hsr_slave_1: entered promiscuous mode [ 162.874947][ T9385] debugfs: 'hsr0' already exists in 'hsr' [ 162.881082][ T9385] Cannot create hsr debugfs directory [ 162.972008][ T28] audit: type=1400 audit(1782264248.041:875): avc: denied { write } for pid=9402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.997500][ T28] audit: type=1400 audit(1782264248.041:876): avc: denied { write } for pid=9413 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.007856][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 163.093601][ T28] audit: type=1400 audit(1782264248.161:877): avc: denied { write } for pid=9416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.116766][ T28] audit: type=1400 audit(1782264248.191:878): avc: denied { write } for pid=9427 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.144099][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 163.188034][ T310] IPVS: stop unused estimator thread 0... [ 163.223890][ T28] audit: type=1400 audit(1782264248.291:879): avc: denied { write } for pid=9430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.258461][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 163.360730][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 163.707850][ T9385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.717017][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.725005][ T9385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.734793][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.743832][ T9385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.753415][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.761588][ T9385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.771582][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.814682][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.829049][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.839849][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.846996][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.859509][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.866820][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.898471][ T9385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.018285][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.151780][ T9385] veth0_vlan: entered promiscuous mode [ 164.160684][ T9385] veth1_vlan: entered promiscuous mode [ 164.179052][ T9385] veth0_macvtap: entered promiscuous mode [ 164.187194][ T9385] veth1_macvtap: entered promiscuous mode [ 164.198978][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.211301][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.221937][ T310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.231577][ T310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.241566][ T310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.251293][ T310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.219492][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1839'. [ 165.327018][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1839'. [ 165.332255][ T7453] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.400075][ T7453] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.438931][ T9747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.472763][ T9747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 165.532754][ T7453] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.542994][ T7453] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.593261][ T9747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.616946][ T9747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 165.630127][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1850'. [ 165.677213][ T9747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.692653][ T9747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 165.711588][ T9773] futex_wake_op: syz.8.1851 tries to shift op by 144; fix this program [ 165.728445][ T9773] futex_wake_op: syz.8.1851 tries to shift op by 144; fix this program [ 165.971095][ T9747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.005455][ T9747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 166.104957][ T3395] gretap0: entered promiscuous mode [ 166.115009][ T3395] gretap0: left promiscuous mode [ 166.151240][ T7476] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.159626][ T7476] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.187068][ T7455] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.195692][ T7455] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.216152][ T7455] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.234339][ T7455] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.252264][ T9799] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1861'. [ 166.267283][ T7476] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.276009][ T7476] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.599818][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 166.599853][ T28] audit: type=1400 audit(1782264251.641:912): avc: denied { read } for pid=9818 comm="syz.0.1867" path="socket:[29932]" dev="sockfs" ino=29932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.775299][ T28] audit: type=1326 audit(1782264251.831:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.1863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x0 [ 166.907031][ T28] audit: type=1400 audit(1782264251.951:914): avc: denied { name_bind } for pid=9834 comm="syz.7.1874" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 166.957744][ T9839] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 167.032018][ T9839] netlink: 'syz.0.1875': attribute type 4 has an invalid length. [ 167.068321][ T9839] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1875'. [ 168.180814][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1890'. [ 168.746336][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1897'. [ 168.762087][ T9907] team3: entered promiscuous mode [ 168.768137][ T9907] team3: entered allmulticast mode [ 168.773944][ T9907] 8021q: adding VLAN 0 to HW filter on device team3 [ 169.075913][ T28] audit: type=1400 audit(1782264254.051:915): avc: denied { firmware_load } for pid=9908 comm="syz.7.1898" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 169.178151][ T28] audit: type=1400 audit(1782264254.251:916): avc: denied { read } for pid=9911 comm="syz.4.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.528801][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 169.572125][ T28] audit: type=1400 audit(1782264254.641:917): avc: denied { create } for pid=9933 comm="syz.8.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.625082][ T28] audit: type=1400 audit(1782264254.641:918): avc: denied { ioctl } for pid=9933 comm="syz.8.1907" path="socket:[29499]" dev="sockfs" ino=29499 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.702675][ T28] audit: type=1326 audit(1782264254.701:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.3.1906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 169.753935][ T28] audit: type=1326 audit(1782264254.701:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.3.1906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 169.805855][ T28] audit: type=1326 audit(1782264254.701:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.3.1906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 170.039511][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 170.190827][ T9942] loop7: detected capacity change from 0 to 256 [ 170.213882][ T9942] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.618361][ T9969] loop4: detected capacity change from 0 to 512 [ 170.639387][ T9969] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.694685][ T9969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 170.704035][ T9969] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 170.715313][ T9969] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 171.506225][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 171.571703][ T9986] loop7: detected capacity change from 0 to 512 [ 171.675338][ T9986] EXT4-fs: Ignoring removed orlov option [ 171.692687][ T9986] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.944300][ T9986] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1928: corrupted in-inode xattr: e_value size too large [ 171.975198][ T9986] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.987168][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 172.016505][ C0] EXT4-fs (loop7): initial error at time 1782264257: ext4_iget_extra_inode:5180: inode 15 [ 172.038104][ C0] EXT4-fs (loop7): last error at time 1782264257: ext4_iget_extra_inode:5180: inode 15 [ 172.071791][ T9986] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1928: couldn't read orphan inode 15 (err -117) [ 172.093176][ T9986] loop7: lost filesystem error report for type 5 error -117 [ 172.827777][ T9986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.953422][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1928'. [ 172.988823][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 172.988841][ T28] audit: type=1400 audit(1782264258.061:937): avc: denied { write } for pid=9985 comm="syz.7.1928" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.046590][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.084601][T10031] netlink: 'syz.7.1943': attribute type 1 has an invalid length. [ 173.093095][T10031] netlink: 'syz.7.1943': attribute type 4 has an invalid length. [ 173.101063][T10031] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1943'. [ 173.177721][T10036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 173.457667][T10059] loop7: detected capacity change from 0 to 512 [ 173.467041][T10059] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 173.485849][T10059] EXT4-fs (loop7): 1 truncate cleaned up [ 173.492108][T10059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.508093][ T28] audit: type=1400 audit(1782264258.581:938): avc: denied { write } for pid=10058 comm="syz.7.1955" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.957134][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.075728][T10092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.108904][T10092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.337223][T10100] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1969'. [ 174.356843][T10100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.432811][T10102] syzkaller0: entered promiscuous mode [ 174.449645][T10102] syzkaller0: entered allmulticast mode [ 174.836764][T10112] loop0: detected capacity change from 0 to 512 [ 174.852120][T10112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.877643][T10112] EXT4-fs (loop0): 1 truncate cleaned up [ 174.890282][T10112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.936305][ T28] audit: type=1400 audit(1782264259.991:939): avc: denied { write } for pid=10111 comm="syz.0.1974" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.204352][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.221096][T10128] loop4: detected capacity change from 0 to 512 [ 175.255983][T10128] EXT4-fs: inline encryption not supported [ 175.275625][T10128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.311370][T10128] EXT4-fs (loop4): 1 truncate cleaned up [ 175.319409][T10128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.411174][ T9385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.664397][T10141] loop7: detected capacity change from 0 to 1024 [ 175.683480][T10141] EXT4-fs: Ignoring removed bh option [ 175.691963][T10141] EXT4-fs (loop7): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 175.736753][T10141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.010911][T10153] loop8: detected capacity change from 0 to 8192 [ 176.036432][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 176.146004][T10153] loop8: p1 < > p2 < > p3 p4 < > [ 176.154508][T10153] loop8: partition table partially beyond EOD, truncated [ 176.161892][T10153] loop8: p1 start 67108864 is beyond EOD, truncated [ 176.172228][T10153] loop8: p3 start 100859904 is beyond EOD, truncated [ 176.343300][ T28] audit: type=1400 audit(1782264261.411:940): avc: denied { remount } for pid=10174 comm="syz.8.1993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.405040][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 176.410706][ T2979] loop8: partition table partially beyond EOD, truncated [ 176.435200][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 176.455998][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 176.509042][ T28] audit: type=1400 audit(1782264261.581:941): avc: denied { write } for pid=10165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.585254][ T28] audit: type=1400 audit(1782264261.651:942): avc: denied { write } for pid=10187 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.633985][T10192] nullfs: Unknown parameter '01777777777777777777777ÿÿ' [ 176.651541][ T28] audit: type=1400 audit(1782264261.701:943): avc: denied { remount } for pid=10191 comm="syz.3.1998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 176.677930][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.797775][ T28] audit: type=1400 audit(1782264261.871:944): avc: denied { relabelfrom } for pid=10201 comm="syz.4.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 176.801946][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 176.853104][ T28] audit: type=1400 audit(1782264261.871:945): avc: denied { relabelto } for pid=10201 comm="syz.4.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 176.962463][ T28] audit: type=1400 audit(1782264262.031:946): avc: denied { write } for pid=10195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.016029][T10216] netlink: 'syz.4.2003': attribute type 10 has an invalid length. [ 177.261315][T10236] loop4: detected capacity change from 0 to 1024 [ 177.281322][T10236] EXT4-fs: Ignoring removed bh option [ 177.295934][T10236] EXT4-fs (loop4): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 177.334157][T10236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.693913][ T9385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.738804][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 177.748787][ T2979] loop8: partition table partially beyond EOD, truncated [ 177.763623][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 177.791470][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 178.388757][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 178.393973][ T2979] loop8: partition table partially beyond EOD, truncated [ 178.408156][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 178.415964][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 178.613852][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 178.621964][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.695310][T10303] loop7: detected capacity change from 0 to 4096 [ 178.715455][T10303] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 179.352097][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 179.357948][ T2979] loop8: partition table partially beyond EOD, truncated [ 179.367204][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 179.377266][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 179.550694][T10332] loop0: detected capacity change from 0 to 512 [ 179.589289][T10332] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.2033: bit already cleared for inode 11 [ 179.625432][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2034'. [ 179.652316][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.659574][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.685986][T10332] loop0: lost filesystem error report for type 5 error -117 [ 179.686513][T10332] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 179.702513][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 179.702538][ C0] EXT4-fs (loop0): initial error at time 1782264264: ext4_free_inode:356 [ 179.702563][ C0] EXT4-fs (loop0): last error at time 1782264264: ext4_free_inode:356 [ 179.752803][T10332] loop0: lost filesystem error report for type 5 error -117 [ 179.753089][T10332] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 179.817069][T10332] loop0: lost filesystem error report for type 5 error -117 [ 179.817331][T10332] EXT4-fs (loop0): 1 orphan inode deleted [ 179.833797][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.836270][T10332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.860343][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.908641][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 179.908659][ T28] audit: type=1400 audit(1782264264.981:952): avc: denied { watch } for pid=10344 comm="syz.4.2035" path="/39/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.017265][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.056942][ T68] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.079383][ T68] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.113601][T10353] loop7: detected capacity change from 0 to 512 [ 180.118510][ T68] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.132728][T10353] EXT4-fs: Ignoring removed oldalloc option [ 180.158458][T10353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.171774][ T68] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.196603][T10353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.259115][T10353] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.282561][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 180.287676][ T2979] loop8: partition table partially beyond EOD, truncated [ 180.294960][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 180.310052][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 180.317293][T10353] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2038: corrupted xattr block 33: invalid checksum [ 180.339996][T10353] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 180.349773][T10353] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2038: corrupted xattr block 33: invalid checksum [ 180.363661][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 180.375042][ T28] audit: type=1400 audit(1782264265.431:953): avc: denied { write } for pid=10352 comm="syz.7.2038" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.398048][ T2979] loop8: partition table partially beyond EOD, truncated [ 180.405309][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 180.412922][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 180.421525][T10353] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 180.501474][T10372] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2038: corrupted xattr block 33: invalid checksum [ 180.534948][T10372] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 180.553617][T10372] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2038: corrupted xattr block 33: invalid checksum [ 180.567573][ T28] audit: type=1400 audit(1782264265.621:954): avc: denied { unlink } for pid=10352 comm="syz.7.2038" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.602962][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 180.608127][ T2979] loop8: partition table partially beyond EOD, truncated [ 180.613587][T10372] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 180.626020][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 180.632344][ T28] audit: type=1400 audit(1782264265.621:955): avc: denied { read write } for pid=10352 comm="syz.7.2038" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.640292][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 180.684995][ T28] audit: type=1400 audit(1782264265.741:956): avc: denied { open } for pid=10352 comm="syz.7.2038" path=2F3138342F66696C65302F66696C6531202864656C6574656429 dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.711991][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 180.717180][ T2979] loop8: partition table partially beyond EOD, truncated [ 180.724491][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 180.731995][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 180.742627][T10352] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #15: comm syz.7.2038: corrupted xattr block 33: invalid checksum [ 180.756411][T10352] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 180.781295][T10352] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -74) [ 180.843758][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.128166][ T28] audit: type=1400 audit(1782264266.191:957): avc: denied { getopt } for pid=10380 comm="syz.8.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.228465][T10359] Set syz1 is full, maxelem 65536 reached [ 181.291769][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 181.297106][ T2979] loop8: partition table partially beyond EOD, truncated [ 181.310032][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 181.312347][T10408] syz_tun: entered allmulticast mode [ 181.319523][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 181.359194][T10407] syz_tun: left allmulticast mode [ 182.387117][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 182.395868][ T2979] loop8: partition table partially beyond EOD, truncated [ 182.412203][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 182.435413][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 182.517897][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 182.523057][ T2979] loop8: partition table partially beyond EOD, truncated [ 182.538146][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 182.553862][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 182.593511][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2076'. [ 182.793814][ T68] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 183.450107][T10463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.517118][T10454] team4: entered promiscuous mode [ 183.531236][T10454] team4: entered allmulticast mode [ 183.557338][T10454] 8021q: adding VLAN 0 to HW filter on device team4 [ 183.688600][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 183.700281][ T2979] loop8: partition table partially beyond EOD, truncated [ 183.717211][ T28] audit: type=1400 audit(1782264268.791:958): avc: denied { read } for pid=10492 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.746506][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 183.765491][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 183.851922][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2091'. [ 184.084919][T10511] netlink: 'syz.0.2093': attribute type 10 has an invalid length. [ 184.915316][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 184.920479][ T2979] loop8: partition table partially beyond EOD, truncated [ 184.927844][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 184.949384][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 185.056057][ T28] audit: type=1400 audit(1782264270.121:959): avc: denied { ioctl } for pid=10522 comm="syz.8.2099" path="net:[4026533850]" dev="nsfs" ino=4026533850 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 185.108829][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 185.116407][ T2979] loop8: partition table partially beyond EOD, truncated [ 185.136632][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 185.151321][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 185.217073][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 185.223934][ T2979] loop8: partition table partially beyond EOD, truncated [ 185.307409][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 185.334460][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 185.747166][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 185.769467][ T2979] loop8: partition table partially beyond EOD, truncated [ 185.788193][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 185.810696][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 185.865918][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 185.871152][ T2979] loop8: partition table partially beyond EOD, truncated [ 185.879987][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 185.897385][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 186.122626][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 186.128205][ T2979] loop8: partition table partially beyond EOD, truncated [ 186.153305][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 186.172379][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 186.260619][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 186.274973][ T2979] loop8: partition table partially beyond EOD, truncated [ 186.290096][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 186.304819][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 186.412805][ T28] audit: type=1400 audit(1782264271.481:960): avc: denied { shutdown } for pid=10598 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.448220][ T28] audit: type=1400 audit(1782264271.511:961): avc: denied { write } for pid=10598 comm="syz.0.2132" path="socket:[32100]" dev="sockfs" ino=32100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.474942][ T28] audit: type=1400 audit(1782264271.521:962): avc: denied { setopt } for pid=10597 comm="syz.7.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.604203][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 186.636159][T10611] team1: entered promiscuous mode [ 186.636388][T10605] loop7: detected capacity change from 0 to 8192 [ 186.647086][T10611] team1: entered allmulticast mode [ 186.653721][T10611] 8021q: adding VLAN 0 to HW filter on device team1 [ 186.665413][T10605] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.675885][T10605] FAT-fs (loop7): Filesystem has been set read-only [ 186.682674][T10605] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.692428][T10605] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.701625][T10605] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.711414][T10605] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.723792][T10612] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.735011][T10612] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.744165][T10612] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.754357][T10612] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 186.817475][ T28] audit: type=1400 audit(1782264271.891:963): avc: denied { read } for pid=10613 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.505232][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 187.519176][ T2979] loop8: partition table partially beyond EOD, truncated [ 187.566240][T10626] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 187.577338][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 187.596370][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 187.633114][T10636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10636 comm=syz.4.2148 [ 187.656543][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 187.663717][ T2979] loop8: partition table partially beyond EOD, truncated [ 187.685220][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 187.705303][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 187.731904][ T28] audit: type=1400 audit(1782264272.801:964): avc: denied { setopt } for pid=10640 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.767540][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 187.783184][ T2979] loop8: partition table partially beyond EOD, truncated [ 187.805891][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 187.835017][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 188.164193][ T28] audit: type=1400 audit(1782264273.231:965): avc: denied { kexec_image_load } for pid=10662 comm="syz.0.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 188.578489][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2160'. [ 189.369928][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'. [ 189.934571][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'. [ 189.954943][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 189.958146][T10698] loop7: detected capacity change from 0 to 256 [ 189.968332][ T2979] loop8: partition table partially beyond EOD, truncated [ 189.975522][T10698] vfat: Unknown parameter 'nnonumtail' [ 189.979338][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 189.992538][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 190.001878][T10698] loop7: detected capacity change from 0 to 1024 [ 190.010008][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 190.027437][T10698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.044926][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.067340][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.089226][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 190.090202][ T28] audit: type=1400 audit(1782264275.161:966): avc: denied { watch watch_reads } for pid=10704 comm="syz.8.2176" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 190.094664][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.126411][ T2979] loop8: partition table partially beyond EOD, truncated [ 190.127748][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.135193][ T2979] loop8: p1 start 67108864 is beyond EOD, [ 190.144467][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.161111][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 190.163199][ T2979] truncated [ 190.196049][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.207784][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 190.230014][ T28] audit: type=1400 audit(1782264275.161:967): avc: denied { write } for pid=10697 comm="syz.7.2175" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.265802][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 190.273307][ T2979] loop8: partition table partially beyond EOD, truncated [ 190.285295][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 190.296858][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 190.537491][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 190.625488][ T2979] loop8: partition table partially beyond EOD, truncated [ 190.640249][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 190.649535][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 190.772843][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 190.780701][ T28] audit: type=1400 audit(1782264275.851:968): avc: denied { read write } for pid=10729 comm="syz.8.2187" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 190.807107][ T2979] loop8: partition table partially beyond EOD, truncated [ 190.830693][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 190.830898][T10732] netlink: 'syz.7.2188': attribute type 9 has an invalid length. [ 190.843795][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 190.871741][ T28] audit: type=1400 audit(1782264275.851:969): avc: denied { open } for pid=10729 comm="syz.8.2187" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 191.073593][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 191.079320][ T2979] loop8: partition table partially beyond EOD, truncated [ 191.087003][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 191.096886][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 191.142589][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 191.149136][ T2979] loop8: partition table partially beyond EOD, truncated [ 191.163361][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 191.177534][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 191.792736][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 191.807076][ T2979] loop8: partition table partially beyond EOD, truncated [ 191.832303][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 191.850901][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 191.910402][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 191.921435][ T2979] loop8: partition table partially beyond EOD, truncated [ 191.931493][ T28] audit: type=1400 audit(1782264277.011:970): avc: denied { watch watch_reads } for pid=10778 comm="syz.4.2207" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 191.936657][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 191.981594][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 192.056677][T10786] tipc: Started in network mode [ 192.080181][T10786] tipc: Node identity 84e, cluster identity 4711 [ 192.090050][T10786] tipc: Node number set to 2126 [ 192.246610][T10795] loop4: detected capacity change from 0 to 1024 [ 192.266790][T10795] EXT4-fs: Ignoring removed orlov option [ 192.304923][T10795] EXT4-fs: inline encryption not supported [ 192.355456][T10795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.448407][ T28] audit: type=1400 audit(1782264277.521:971): avc: denied { write } for pid=10797 comm="syz.7.2213" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.487914][ T28] audit: type=1400 audit(1782264277.551:972): avc: denied { write } for pid=10787 comm="syz.4.2209" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.590244][ T28] audit: type=1400 audit(1782264277.661:973): avc: denied { write } for pid=10787 comm="syz.4.2209" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.688074][ T9385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.751882][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 192.768336][ T2979] loop8: partition table partially beyond EOD, truncated [ 192.792679][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 192.812182][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 192.875714][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 192.880906][ T2979] loop8: partition table partially beyond EOD, truncated [ 192.895077][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 192.925554][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 193.006732][T10845] futex_wake_op: syz.4.2224 tries to shift op by 32; fix this program [ 194.048136][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 194.053334][ T2979] loop8: partition table partially beyond EOD, truncated [ 194.062316][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 194.069662][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 194.216725][T10918] loop0: detected capacity change from 0 to 128 [ 194.227161][T10918] syz.0.2235: attempt to access beyond end of device [ 194.227161][T10918] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 194.242824][T10918] syz.0.2235: attempt to access beyond end of device [ 194.242824][T10918] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 194.259441][T10918] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 194.276554][ T28] audit: type=1400 audit(1782264279.351:974): avc: denied { append } for pid=10915 comm="syz.8.2236" name="icmp6" dev="proc" ino=4026533991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 194.312655][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 194.329102][T10918] syz.0.2235: attempt to access beyond end of device [ 194.329102][T10918] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 194.344517][ T2979] loop8: partition table partially beyond EOD, truncated [ 194.352390][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 194.359937][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 194.366837][T10918] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 194.403239][T10929] __nla_validate_parse: 72 callbacks suppressed [ 194.403259][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2242'. [ 194.412858][T10918] syz.0.2235: attempt to access beyond end of device [ 194.412858][T10918] loop0: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 194.435039][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 194.440298][ T2979] loop8: partition table partially beyond EOD, truncated [ 194.448609][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 194.455881][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 194.474516][T10918] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 194.516866][T10929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.550120][T10936] netlink: 'syz.7.2242': attribute type 10 has an invalid length. [ 194.562896][T10934] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 194.613510][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2242'. [ 194.687520][T10936] dummy0: entered promiscuous mode [ 194.744474][T10936] bond1: (slave dummy0): Releasing backup interface [ 194.861426][T10875] loop4: detected capacity change from 0 to 512 [ 195.134490][T10875] EXT4-fs: Mount option(s) incompatible with ext3 [ 195.193451][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 195.282596][T10955] devtmpfs: Unknown parameter '´ËAJQ|ÕÉ ŠQZ¡3&LvªPÎ@ÃùëLT´bqBÖbã‚.¼žöŒ µzV~Yµ£éð [ 195.282596][T10955] 4Ôìö! x¾¼ñyþ}äj' [ 195.283457][ T2979] loop8: p1 < > p2 < > p3 p4 < > [ 195.301209][ T2979] loop8: partition table partially beyond EOD, truncated [ 195.314095][ T2979] loop8: p1 start 67108864 is beyond EOD, truncated [ 195.327177][ T2979] loop8: p3 start 100859904 is beyond EOD, truncated [ 195.398413][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2252'. [ 195.471712][T10961] netlink: 'syz.8.2254': attribute type 1 has an invalid length. [ 195.580685][T10961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.625619][T10966] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 195.674864][T10969] bond1: entered promiscuous mode [ 195.692899][T10969] bond1: entered allmulticast mode [ 196.192624][T10986] loop0: detected capacity change from 0 to 8192 [ 196.220449][T10986] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.470064][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.506930][ T28] audit: type=1326 audit(1782264281.581:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 196.537006][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.576637][ T28] audit: type=1326 audit(1782264281.611:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 196.651140][ T28] audit: type=1326 audit(1782264281.611:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 196.721114][ T28] audit: type=1326 audit(1782264281.611:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 196.785025][ T28] audit: type=1326 audit(1782264281.611:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5b58d0ce59 code=0x7ffc0000 [ 196.852023][ T28] audit: type=1326 audit(1782264281.681:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b58ccd68e code=0x7ffc0000 [ 196.929004][ T28] audit: type=1326 audit(1782264281.681:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b58ccd68e code=0x7ffc0000 [ 196.989722][ T28] audit: type=1326 audit(1782264281.681:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b58ccd68e code=0x7ffc0000 [ 197.059932][ T28] audit: type=1326 audit(1782264281.681:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b58ccd68e code=0x7ffc0000 [ 197.128746][ T28] audit: type=1326 audit(1782264281.681:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11008 comm="syz.3.2272" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b58ccd68e code=0x7ffc0000 [ 197.207675][T11053] vhci_hcd vhci_hcd.0: invalid port number 253 [ 197.214031][T11053] vhci_hcd vhci_hcd.0: default hub control req: 6018 v0304 i00fd l0 [ 198.657028][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 200.543362][T11161] loop7: detected capacity change from 0 to 512 [ 200.570118][T11161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.648156][T11161] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.768775][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2302'. [ 200.857167][ T6723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.925153][T11169] loop7: detected capacity change from 0 to 512 [ 200.983594][T11169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 201.027853][T11169] ext4 filesystem being mounted at /239/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.065059][T11169] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2303: Failed to acquire dquot type 0 [ 201.108093][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 201.268571][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 201.287505][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 201.891935][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2319'. [ 202.364591][T11238] netlink: 'syz.7.2330': attribute type 4 has an invalid length. [ 202.425127][T11240] netlink: 'syz.7.2330': attribute type 4 has an invalid length. [ 202.756322][ T7472] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 203.090729][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 203.555037][T11274] netlink: 'syz.8.2342': attribute type 11 has an invalid length. [ 203.563306][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2342'. [ 208.193815][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2376'. [ 208.206624][T11357] netlink: 'syz.7.2376': attribute type 7 has an invalid length. [ 208.220003][T11357] netlink: 'syz.7.2376': attribute type 8 has an invalid length. [ 208.228175][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2376'. [ 208.242243][T11357] erspan0: entered promiscuous mode [ 208.248670][T11357] gretap0: entered promiscuous mode [ 208.251202][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2376'. [ 208.263799][T11357] erspan0: left promiscuous mode [ 208.263950][T11365] netlink: 'syz.7.2376': attribute type 7 has an invalid length. [ 208.277450][T11357] gretap0: left promiscuous mode [ 208.277581][T11365] netlink: 'syz.7.2376': attribute type 8 has an invalid length. [ 208.290529][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2376'. [ 208.335383][T11365] erspan0: entered promiscuous mode [ 208.341342][T11365] gretap0: entered promiscuous mode [ 208.347712][T11365] erspan0: left promiscuous mode [ 208.353458][T11365] gretap0: left promiscuous mode [ 208.369287][T11371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.443311][T11371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.537552][T11371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.688662][T11371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.774794][ T7472] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.794945][ T7472] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.803712][ T7472] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.812143][ T7472] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.889035][ T3387] IPVS: starting estimator thread 0... [ 208.897216][T11393] IPVS: fo: FWM 3 0x00000003 - no destination available [ 208.933620][T11400] loop4: detected capacity change from 0 to 512 [ 208.948155][T11400] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.962996][T11400] EXT4-fs (loop4): 1 truncate cleaned up [ 208.969762][T11400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.982657][T11395] IPVS: using max 2064 ests per chain, 103200 per kthread [ 208.994144][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 208.994164][ T28] audit: type=1400 audit(1782264294.061:1053): avc: denied { write } for pid=11399 comm="syz.4.2392" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.031228][ T28] audit: type=1400 audit(1782264294.061:1054): avc: denied { write } for pid=11399 comm="syz.4.2392" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.044426][ T9385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.054171][ T28] audit: type=1400 audit(1782264294.061:1055): avc: denied { create } for pid=11399 comm="syz.4.2392" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 209.139475][T11415] loop0: detected capacity change from 0 to 128 [ 209.150539][T11415] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.206100][T11415] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.290894][ T5306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.540419][T11431] loop0: detected capacity change from 0 to 512 [ 209.586887][T11431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.612996][T11431] EXT4-fs (loop0): 1 truncate cleaned up [ 209.620037][T11431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.665871][T11431] futex_wake_op: syz.0.2403 tries to shift op by 144; fix this program [ 209.693064][T11431] futex_wake_op: syz.0.2403 tries to shift op by 144; fix this program [ 209.756020][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.828194][T11438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.841207][T11438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.857499][T11438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.978001][T11444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.000078][T11438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.024428][T11438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.047504][T11438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.088380][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2413'. [ 210.149688][T11438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.160157][T11438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.171443][T11438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.247444][T11438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.258884][T11438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.269409][T11438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.352475][ T8074] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.360942][ T8074] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.369504][ T8074] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.381645][ T8074] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.389998][ T8074] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.399003][ T8074] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.412757][ T8074] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.421369][ T8074] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.429944][ T8074] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.442214][ T8074] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.463869][ T8074] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.488611][ T8074] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.001935][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 211.468634][T11529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2451'. [ 211.473644][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2436'. [ 211.919669][T11563] loop0: detected capacity change from 0 to 1024 [ 211.947711][T11563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.970132][ T28] audit: type=1400 audit(1782264297.041:1056): avc: denied { write } for pid=11562 comm="syz.0.2454" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.993638][T11563] EXT4-fs (loop0): shut down requested (0) [ 212.255779][ T5306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.314257][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 212.453641][T11582] syzkaller0: entered promiscuous mode [ 212.491541][T11582] syzkaller0: entered allmulticast mode [ 212.504321][T11582] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 212.787690][T11584] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.797389][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.805297][T11584] bridge_slave_0: entered allmulticast mode [ 212.812203][T11584] bridge_slave_0: entered promiscuous mode [ 212.823857][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.833438][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.840806][T11584] bridge_slave_1: entered allmulticast mode [ 212.847570][T11584] bridge_slave_1: entered promiscuous mode [ 212.866148][T11584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.876753][T11584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.897626][T11584] team0: Port device team_slave_0 added [ 212.917509][T11584] team0: Port device team_slave_1 added [ 212.952341][T11584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.959562][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.986230][T11584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.103602][T11584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.132896][T11584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.177848][T11584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.241556][T11584] hsr_slave_0: entered promiscuous mode [ 213.259844][T11584] hsr_slave_1: entered promiscuous mode [ 213.270503][T11584] debugfs: 'hsr0' already exists in 'hsr' [ 213.281315][T11584] Cannot create hsr debugfs directory [ 213.413850][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.423873][T11639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.468489][T11639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.492189][T11639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.527228][T11639] veth1_macvtap: left promiscuous mode [ 213.533341][T11639] veth0_macvtap: left promiscuous mode [ 213.548437][T11639] veth0_macvtap: entered promiscuous mode [ 213.554839][T11639] veth1_macvtap: entered promiscuous mode [ 213.564711][T11639] veth0_to_team: entered promiscuous mode [ 213.571701][T11639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.587080][T11639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.597334][T11639] 8021q: adding VLAN 0 to HW filter on device eth0 [ 213.605904][T11639] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.614181][T11639] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.623159][T11639] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.710781][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.719321][ T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 38430 - 0 [ 213.729560][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.743161][ T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 38430 - 0 [ 213.755905][ T310] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.773520][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.782055][ T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 38430 - 0 [ 213.791712][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.800352][ T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 38430 - 0 [ 214.289098][T11677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.297923][T11677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.323071][T11679] futex_wake_op: syz.7.2494 tries to shift op by 144; fix this program [ 214.332029][T11679] futex_wake_op: syz.7.2494 tries to shift op by 144; fix this program [ 214.564072][T11584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.581495][T11584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.600413][T11584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.634987][T11584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.652608][T11584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.669120][T11584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.677908][T11584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.687601][T11584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.780655][T11584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.807092][T11584] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.828577][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.835770][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.850016][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.857238][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.126843][T11584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.274744][T11584] veth0_vlan: entered promiscuous mode [ 215.297532][T11584] veth1_vlan: entered promiscuous mode [ 215.334241][T11584] veth0_macvtap: entered promiscuous mode [ 215.348421][T11584] veth1_macvtap: entered promiscuous mode [ 215.362035][T11584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.376196][T11584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.388112][ T7478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.399325][ T7478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.621739][ T7478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.632330][ T7478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.709693][T11746] futex_wake_op: syz.3.2506 tries to shift op by 144; fix this program [ 215.733494][T11746] futex_wake_op: syz.3.2506 tries to shift op by 144; fix this program [ 215.866219][ T28] audit: type=1400 audit(1782264300.941:1057): avc: denied { watch } for pid=11758 comm="syz.3.2513" path="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.030195][ T28] audit: type=1400 audit(1782264301.101:1058): avc: denied { bind } for pid=11764 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.104927][ T28] audit: type=1400 audit(1782264301.101:1059): avc: denied { listen } for pid=11764 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.178112][ T28] audit: type=1400 audit(1782264301.131:1060): avc: denied { accept } for pid=11764 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.233742][ T28] audit: type=1400 audit(1782264301.201:1061): avc: denied { mounton } for pid=11769 comm="syz.3.2519" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.585232][T11750] loop0: detected capacity change from 0 to 128 [ 217.075307][T11750] FAT-fs (loop0): error, clusters badly computed (1 != 163841) [ 217.096724][T11750] FAT-fs (loop0): Filesystem has been set read-only [ 217.120042][T11750] FAT-fs (loop0): error, clusters badly computed (2 != 163842) [ 217.137462][T11750] FAT-fs (loop0): error, clusters badly computed (3 != 163843) [ 217.173949][T11750] FAT-fs (loop0): error, clusters badly computed (4 != 163844) [ 217.193260][T11750] FAT-fs (loop0): error, clusters badly computed (5 != 163845) [ 217.239681][T11750] FAT-fs (loop0): error, clusters badly computed (6 != 163846) [ 217.251017][T11750] FAT-fs (loop0): error, clusters badly computed (7 != 163847) [ 217.258681][T11750] FAT-fs (loop0): error, clusters badly computed (8 != 163848) [ 217.266580][T11750] FAT-fs (loop0): error, clusters badly computed (9 != 163849) [ 217.274212][T11750] FAT-fs (loop0): error, clusters badly computed (10 != 163850) [ 217.735180][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.984182][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.094382][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.338353][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.416995][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.569644][ T12] bridge_slave_1: left allmulticast mode [ 218.578903][ T12] bridge_slave_1: left promiscuous mode [ 218.595583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.668122][ T12] bridge_slave_0: left allmulticast mode [ 218.673998][ T12] bridge_slave_0: left promiscuous mode [ 218.680011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.790203][ T28] audit: type=1400 audit(1782264303.861:1062): avc: denied { write } for pid=11849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.863251][ T28] audit: type=1400 audit(1782264303.931:1063): avc: denied { write } for pid=11874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.904262][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.933398][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.944902][ T12] bond0 (unregistering): Released all slaves [ 218.959222][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 218.960637][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2556'. [ 219.033815][ T12] hsr_slave_0: left promiscuous mode [ 219.041078][ T12] hsr_slave_1: left promiscuous mode [ 219.047375][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.062132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.079680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.089433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.115411][ T12] veth1_macvtap: left promiscuous mode [ 219.121095][ T12] veth0_macvtap: left promiscuous mode [ 219.205139][ T28] audit: type=1400 audit(1782264304.251:1064): avc: denied { write } for pid=11890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.232634][ T28] audit: type=1400 audit(1782264304.311:1065): avc: denied { write } for pid=11901 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.342114][ T12] team0 (unregistering): Port device team_slave_1 removed [ 219.374424][ T12] team0 (unregistering): Port device team_slave_0 removed [ 219.422603][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 219.691527][ T28] audit: type=1400 audit(1782264304.761:1066): avc: denied { write } for pid=11916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.779112][ T12] IPVS: stop unused estimator thread 0... [ 219.821667][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 220.247313][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.363497][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 220.652800][T11990] netlink: 'syz.3.2581': attribute type 4 has an invalid length. [ 220.687158][T11990] netlink: 'syz.3.2581': attribute type 4 has an invalid length. [ 221.058672][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 221.058694][ T28] audit: type=1400 audit(1782264306.131:1071): avc: denied { mount } for pid=12006 comm="syz.3.2587" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 221.562658][T12036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12036 comm=syz.2.2599 [ 221.578271][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 221.937870][ T28] audit: type=1400 audit(1782264307.001:1072): avc: denied { connect } for pid=12045 comm="syz.0.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.088207][ T28] audit: type=1400 audit(1782264307.161:1073): avc: denied { bind } for pid=12053 comm="syz.2.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 222.467456][T12069] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 222.834335][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 222.883176][T12084] team0: Port device team_slave_0 removed [ 223.954772][T12077] ================================================================== [ 223.963083][T12077] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 223.970046][T12077] [ 223.972395][T12077] read-write to 0xffff88811c1037e4 of 4 bytes by task 12081 on cpu 1: [ 223.980578][T12077] fifo_open+0x89/0x5b0 [ 223.984754][T12077] do_dentry_open+0x49f/0xa60 [ 223.989465][T12077] vfs_open+0x37/0x1e0 [ 223.993575][T12077] path_openat+0x1b39/0x2000 [ 223.998208][T12077] do_file_open+0x16c/0x290 SYZFAIL: failed to recv rpc [ 224.002769][T12077] do_sys_openat2+0xa0/0x130 [ 224.007405][T12077] __x64_sys_openat+0xf2/0x120 [ 224.012225][T12077] x64_sys_call+0x1e39/0x3020 [ 224.016947][T12077] do_syscall_64+0x136/0x3c0 [ 224.021559][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.027475][T12077] [ 224.029827][T12077] read to 0xffff88811c1037e4 of 4 bytes by task 12077 on cpu 0: [ 224.037474][T12077] wait_for_partner+0xc9/0x1d0 [ 224.042272][T12077] fifo_open+0x443/0x5b0 [ 224.046533][T12077] do_dentry_open+0x49f/0xa60 [ 224.051227][T12077] vfs_open+0x37/0x1e0 [ 224.055317][T12077] path_openat+0x1b39/0x2000 [ 224.059980][T12077] do_file_open+0x16c/0x290 [ 224.064633][T12077] do_sys_openat2+0xa0/0x130 [ 224.069272][T12077] __se_sys_openat2+0x193/0x1f0 [ 224.074241][T12077] __x64_sys_openat2+0x55/0x70 [ 224.079118][T12077] x64_sys_call+0x2170/0x3020 [ 224.083810][T12077] do_syscall_64+0x136/0x3c0 [ 224.088413][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.094318][T12077] [ 224.096752][T12077] value changed: 0x00000001 -> 0x00000002 [ 224.102472][T12077] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 224.104797][T12077] Reported by Kernel Concurrency Sanitizer on: [ 224.110954][T12077] CPU: 0 UID: 0 PID: 12077 Comm: syz.0.2616 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 224.121906][T12077] Tainted: [W]=WARN [ 224.125709][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.135770][T12077] ================================================================== [ 224.926911][ T7472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.989163][ T7472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.049891][ T7472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.087805][ T7472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.156248][ T7472] bridge_slave_1: left allmulticast mode [ 225.161991][ T7472] bridge_slave_1: left promiscuous mode [ 225.167898][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.175760][ T7472] bridge_slave_0: left allmulticast mode [ 225.181426][ T7472] bridge_slave_0: left promiscuous mode [ 225.187277][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.234443][ T7472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.244862][ T7472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.254295][ T7472] bond0 (unregistering): Released all slaves [ 225.280521][ T7472] hsr_slave_0: left promiscuous mode [ 225.287769][ T7472] hsr_slave_1: left promiscuous mode [ 225.293619][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.301392][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.309343][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.317199][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.329868][ T7472] veth1_macvtap: left promiscuous mode [ 225.335798][ T7472] veth0_macvtap: left promiscuous mode [ 225.341352][ T7472] veth1_vlan: left promiscuous mode [ 225.347256][ T7472] veth0_vlan: left promiscuous mode [ 225.359692][ T28] audit: type=1400 audit(1782264310.431:1074): avc: denied { write } for pid=12112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.395300][ T28] audit: type=1400 audit(1782264310.451:1075): avc: denied { write } for pid=12123 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.442299][ T7472] team0 (unregistering): Port device team_slave_1 removed [ 225.472836][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 225.550394][ T28] audit: type=1400 audit(1782264310.621:1076): avc: denied { write } for pid=12126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.574365][ T28] audit: type=1400 audit(1782264310.641:1077): avc: denied { write } for pid=12137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.585694][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 225.672040][ T28] audit: type=1400 audit(1782264310.741:1078): avc: denied { write } for pid=12140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.695319][ T28] audit: type=1400 audit(1782264310.761:1079): avc: denied { write } for pid=12151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.706735][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 225.795511][ T28] audit: type=1400 audit(1782264310.871:1080): avc: denied { write } for pid=12154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.831115][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 226.445274][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 226.929146][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.939085][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 226.948974][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.959014][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 38430 - 0 [ 227.007789][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.017698][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 227.027683][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.037499][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 38430 - 0 [ 227.088388][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.098197][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 227.108190][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.118098][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 38430 - 0 [ 227.147828][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.157651][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 227.167563][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.177428][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 38430 - 0 [ 227.281795][ T12] bond3 (unregistering): (slave erspan1): Releasing active interface [ 227.290130][ T12] erspan1 (unregistering): left promiscuous mode [ 227.301950][ T12] bond4 (unregistering): (slave gre2): Releasing backup interface [ 227.310369][ T12] gre2 (unregistering): left promiscuous mode [ 227.321497][ T12] bond5 (unregistering): (slave geneve3): Releasing active interface [ 227.340510][ T12] bond0 (unregistering): Released all slaves [ 227.348081][ T12] bond1 (unregistering): Released all slaves [ 227.357381][ T12] bond2 (unregistering): (slave veth3): Releasing backup interface [ 227.366490][ T12] bond2 (unregistering): Released all slaves [ 227.375413][ T12] bond3 (unregistering): Released all slaves [ 227.384006][ T12] bond4 (unregistering): Released all slaves [ 227.392368][ T12] bond5 (unregistering): Released all slaves [ 227.438628][ T12] tipc: Left network mode [ 227.444676][ T12] hsr_slave_0: left promiscuous mode [ 227.450519][ T12] hsr_slave_1: left promiscuous mode [ 227.459070][ T12] veth0_to_team: left promiscuous mode [ 227.464664][ T12] veth1_macvtap: left promiscuous mode [ 227.470243][ T12] veth0_macvtap: left promiscuous mode [ 227.490581][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 227.490598][ T28] audit: type=1400 audit(1782264312.561:1082): avc: denied { write } for pid=12178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.542655][ T28] audit: type=1400 audit(1782264312.611:1083): avc: denied { write } for pid=12189 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.607741][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 227.695669][ T28] audit: type=1400 audit(1782264312.771:1084): avc: denied { write } for pid=12194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.718849][ T28] audit: type=1400 audit(1782264312.771:1085): avc: denied { write } for pid=12205 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.731270][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 227.817520][ T28] audit: type=1400 audit(1782264312.891:1086): avc: denied { write } for pid=12208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.856512][ T28] audit: type=1400 audit(1782264312.931:1087): avc: denied { write } for pid=12219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.891837][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 227.900179][ T12] IPVS: stop unused estimator thread 0... [ 227.983696][ T28] audit: type=1400 audit(1782264313.051:1088): avc: denied { write } for pid=12222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.016901][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 228.036668][ T28] audit: type=1400 audit(1782264313.051:1089): avc: denied { write } for pid=12233 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.142197][ T28] audit: type=1400 audit(1782264316.211:1090): avc: denied { write } for pid=12243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.165455][ T28] audit: type=1400 audit(1782264316.211:1091): avc: denied { write } for pid=12254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1