last executing test programs: 3m42.174610731s ago: executing program 2 (id=1134): socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x20000000000000ea, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x110028, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x7, 0x2, 0x2, 0x400, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r4, 0x1, 0x19, 0x0, &(0x7f0000000000)) fcntl$getflags(r2, 0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) 3m41.851570496s ago: executing program 2 (id=1135): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3m41.460195745s ago: executing program 2 (id=1138): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3m40.50371272s ago: executing program 2 (id=1145): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000340)) write(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="b84fc7", 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x317e, 0x4) 3m38.16506403s ago: executing program 2 (id=1170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x600}]) 3m38.086741354s ago: executing program 2 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3m38.086541214s ago: executing program 32 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2m8.187469686s ago: executing program 5 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x6}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x4}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fstat(r3, &(0x7f0000000280)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x100010, r1, 0x65646000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="01e723000000ffdbdf251500000024005d81"], 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r5, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f00000007c0)=0x2) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000225bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1736000000000000240012800b00010067726574617000001400028000000100", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x20048008}, 0x0) 2m8.102707239s ago: executing program 5 (id=1973): socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 2m8.071146891s ago: executing program 5 (id=1975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x440, &(0x7f0000000200)="$eJzs28tvG8UfAPDvrp3219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3G9u1k9h16hB/PtK2M7uzmvl6d7wzO3EAQ2s8+yeJ2BkRv0fEaD3bXGC8/t+tG5dm/75xaTaJavWtv5JauZs3Ls0WRYvzdhSZckT6WRL729S7eOHimZlKZf58np9cOvv+5OKFi8+dPjtzav7U/Lnp48ePHpl64dj0832JM4vr5r6PFg7sfe2dq2/Mnrj67s/fJkX8LXH0yfhKB5+sVvtc3WDtakgn5QE2hK6U6t00Rmr9fzRKsXzxRuPVTwfaOGBdVavV6gOdD1+uAptYEoNuATAYxYM+m/8W2z0aemwI11+qT4CyuG/lW/1IOdK8zEjL/LafxiPixOV/vsq2WJ/3EAAATb7Pxj/Pthv/pdH4Xuj/+RrKWETcFxG7I+JYROyJiPsjamUfjIiHuqy/dZHkzvFPeq2nwNYoG/+9mK9tNY//itFfjJXy3K5a/CPJydOV+cP5Z3IoRrZm+akV6vjhld++6HSscfyXbVn9xVgwb8e18tbmc+ZmlmbuJuZG1z+J2FduF39yeyUgiYi9EbGvxzpOP/3NgU7HVo9/BX1YZ6p+HfFU/fpfjpb4C8nK65OT/4vK/OHJ4q640y+/XnmzU/13FX8fZNd/e9v7/3b8Y0njeu1i93Vc+ePzjnOaXu//LcnbTfs+nFlaOj8VsSV5vd7oxv3TLeWml8tn8R862L7/747lT2J/RGQ38cMR8UhEPJq3/bGIeDwiDq4Q/08vP/Fe7/Gvryz+ua6u/3JiS7TuaZ8onfnxu6ZKx7qJP7v+R2upQ/metXz/raVdvd3NAAAA8N+TRsTOSNKJ2+k0nZio/w3/ntieVhYWl545ufDBubn6bwTGYiQt3nSNNrwPncqn9UV+uiV/JH9v/GVpWy0/MbtQmRt08DDkdnTo/5k/S4NuHbDu/F4Lhpf+D8OrHLGth9N6OQfYYDz/YXi16f+rPts9/GFzaPf8/3gA7QDuvZb+b9kPhoj5Pwwv/R+Gl/4PQ2lxW6z+I/m2iUgjuj9LYrMkIt0QzZBYp8Sgv5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6498AAAD//9ZX5VQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="93010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) pwrite64(r4, &(0x7f0000000040)='\x00', 0x1, 0x8081000) madvise(&(0x7f00009a6000/0x1000)=nil, 0x1000, 0x17) 2m7.155642084s ago: executing program 5 (id=1981): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x81}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x85, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r3, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4000) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_clone(0x6a00211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, &(0x7f0000000100), 0x61000004, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xba, 0x2, 0x5, 0x6, 0x0, 0xe021, 0x20002, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x17d4, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4000, 0x2, 0x7, 0x3, 0x4, 0x2, 0x7, 0x0, 0x5, 0x0, 0x4d29}, r6, 0x7, r0, 0x2) close(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x40) 2m6.475506527s ago: executing program 5 (id=1988): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m6.40215079s ago: executing program 5 (id=1989): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1000001224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000000)={0x5, 0x7, 0x8, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x0, 0x6, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) gettid() write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90800000053"], 0xfebc) 2m6.384714541s ago: executing program 33 (id=1989): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1000001224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000000)={0x5, 0x7, 0x8, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x0, 0x6, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfdc3) gettid() write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90800000053"], 0xfebc) 8.439544443s ago: executing program 3 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = gettid() syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xc, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x100000000}, 0x11ecca, 0x4001224, 0xfffffffb, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x89f3, 0x20001116) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x54}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfe4) io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.52891843s ago: executing program 6 (id=3255): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)="b84fc7", 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x317e, 0x4) 4.840802552s ago: executing program 3 (id=3266): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02020102000000fe8000000000000000000000000000bb280000000000000029"], 0x50}}], 0x1, 0x4040084) 4.730002027s ago: executing program 3 (id=3268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.075716168s ago: executing program 6 (id=3274): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x440, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="93010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) pwrite64(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x8081000) madvise(&(0x7f00009a6000/0x1000)=nil, 0x1000, 0x17) 3.913755856s ago: executing program 1 (id=3276): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x63) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a388, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x0, 0x8c2c, 0x0, 0x7, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711028000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}, {0x0, 0x8b}], 0x2, 0x8b, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x9, 0x6, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800080000000001000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf2505000000080004000200000005000500000000002000018014000400ff01000000000000000000000000000108000700", @ANYRES32=r3, @ANYBLOB="05000500fb000000080003000000000005000500000000001c000680060001000a0000000500020008000000060005004e220000050005000000000008000400e50000003000018008000300ffffffff0500020040000000080006000200000014000400fc00"/116], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fallocate(r0, 0x1, 0x5, 0x7) memfd_create(&(0x7f0000000080)='syzkaller\x00', 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r5 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmctl$IPC_RMID(r5, 0x0) 3.83695481s ago: executing program 3 (id=3277): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) 3.757424243s ago: executing program 4 (id=3278): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4c040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.134045992s ago: executing program 6 (id=3279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x1, &(0x7f00000006c0)=@raw=[@call={0x85, 0x0, 0x0, 0xaf}], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.892830844s ago: executing program 0 (id=3280): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.843422346s ago: executing program 0 (id=3281): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 2.76529817s ago: executing program 1 (id=3282): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1}, 0x7}], 0x1, 0x0, 0x0) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000"], 0x0) 2.75731077s ago: executing program 4 (id=3283): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x1000, @private0, 0xfffffeff}, {0xa, 0x4e22, 0x2, @empty, 0x9}}}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x380c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000080)=""/10, 0x2}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, @in6={0xa, 0x4e21, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockopt$SO_COOKIE(r0, 0x1, 0x4a, 0x0, &(0x7f0000000380)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000d04703000000181100000000000000", @ANYRES32, @ANYBLOB="0000fe0000000000b702000014000000b7030000000000018500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.711440763s ago: executing program 4 (id=3284): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000340)) write(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)="b84fc7", 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x317e, 0x4) 2.048970054s ago: executing program 0 (id=3285): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000340)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)="b84fc7", 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x317e, 0x4) 1.870704232s ago: executing program 1 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 1.860270392s ago: executing program 1 (id=3287): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@quota}, {@commit={'commit', 0x3d, 0xa}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000400)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [], {0x10, 0x7}, {0x20, 0x7}}, 0x24, 0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000000}) 1.726947689s ago: executing program 4 (id=3288): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4c040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.041507831s ago: executing program 1 (id=3289): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r2, 0xc0686611, &(0x7f0000000080)=0x68) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file3\x00', 0x3251136, &(0x7f0000000b40)=ANY=[], 0xf8, 0x1208, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)='p', 0x8200, 0x600}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) fchdir(r0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x20086, 0x0, 0x7, 0x0, 0x2000001400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000001c0)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) 963.811545ms ago: executing program 0 (id=3290): openat(0xffffffffffffff9c, 0x0, 0x42, 0x90) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x81}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x85, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) 780.244754ms ago: executing program 0 (id=3291): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 766.688324ms ago: executing program 6 (id=3292): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x63) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a388, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x0, 0x8c2c, 0x0, 0x7, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711028000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}, {0x0, 0x8b}], 0x2, 0x8b, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x9, 0x6, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@end]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x3000000, 0x40001000}) fallocate(r0, 0x1, 0x5, 0x7) memfd_create(&(0x7f0000000080)='syzkaller\x00', 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmctl$IPC_RMID(r4, 0x0) 756.206224ms ago: executing program 4 (id=3293): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xf}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c2000"], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) 704.911437ms ago: executing program 3 (id=3294): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x1000, @private0, 0xfffffeff}, {0xa, 0x4e22, 0x2, @empty, 0x9}}}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x380c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000080)=""/10, 0x2}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, @in6={0xa, 0x4e21, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockopt$SO_COOKIE(r0, 0x1, 0x4a, 0x0, &(0x7f0000000380)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000d0470300000018110000000000000000", @ANYRES32, @ANYBLOB="0000fe0000000000b702000014000000b7030000000000018500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 660.28444ms ago: executing program 4 (id=3295): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1128000, 0x1000, 0x4}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000340)) write(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)="b84fc7", 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x317e, 0x4) 650.36107ms ago: executing program 0 (id=3296): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 627.322331ms ago: executing program 3 (id=3297): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x63) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a388, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x0, 0x8c2c, 0x0, 0x7, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711028000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}, {0x0, 0x8b}], 0x2, 0x8b, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x9, 0x6, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x68, 0x0, 0x9, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800080000000001000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf2505000000080004000200000005000500000000002000018014000400ff01000000000000000000000000000108000700", @ANYRES32=r3, @ANYBLOB="05000500fb000000080003000000000005000500000000001c000680060001000a0000000500020008000000060005004e220000050005000000000008000400e50000003000018008000300ffffffff0500020040000000080006000200000014000400fc00"/116], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x3000000, 0x40001000}) fallocate(r0, 0x1, 0x5, 0x7) memfd_create(&(0x7f0000000080)='syzkaller\x00', 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmctl$IPC_RMID(r4, 0x0) 616.052291ms ago: executing program 1 (id=3298): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="546119c7", 0x4, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000, 0x4}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000340)) write(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)="b84fc7", 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x317e, 0x4) 403.898821ms ago: executing program 6 (id=3299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x0, 0x7, 0x11000, 0x5, 0x8, 0x90000011, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@quota}, {@commit={'commit', 0x3d, 0xa}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000400)={{}, {0x1, 0x6}, [], {0x4, 0x2}, [], {0x10, 0x7}, {0x20, 0x7}}, 0x24, 0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000000}) 0s ago: executing program 6 (id=3300): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000940)}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000c40)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000004}, 0x4000000) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) kernel console output (not intermixed with test programs): t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.462552][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.464442][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.475348][ T29] audit: type=1400 audit(1789385827.060:1251): avc: denied { write } for pid=14859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.491370][T12298] bond0 (unregistering): Released all slaves [ 331.530384][T12298] tipc: Disabling bearer [ 331.530409][T12298] tipc: Left network mode [ 331.538316][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.538334][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.538806][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.538820][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.545669][T12298] veth1_macvtap: left promiscuous mode [ 331.545693][T12298] veth0_macvtap: left promiscuous mode [ 331.545759][T12298] veth1_vlan: left promiscuous mode [ 331.545795][T12298] veth0_vlan: left promiscuous mode [ 331.608265][T14869] loop4: detected capacity change from 0 to 512 [ 331.614312][T14869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 331.622675][T14869] EXT4-fs (loop4): 1 truncate cleaned up [ 331.637413][ T29] audit: type=1400 audit(1789385827.240:1252): avc: denied { write } for pid=14868 comm="syz.4.2733" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.711119][T12298] team0 (unregistering): Port device team_slave_1 removed [ 331.712391][ T29] audit: type=1400 audit(1789385827.300:1253): avc: denied { write } for pid=14862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.721913][T12298] team0 (unregistering): Port device team_slave_0 removed [ 331.950523][T14916] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 331.968680][T14916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.987111][T14916] bond3: (slave gretap3): Enslaving as a backup interface with an up link [ 332.073909][ T314] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.183728][ T314] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.479704][T14739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.481645][T14751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.507686][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.535176][T14751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.538591][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.539173][T14751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.542675][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.543438][T14751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.584976][T14751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.627184][T15010] netlink: 'syz.0.2741': attribute type 5 has an invalid length. [ 332.627217][T15010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2741'. [ 332.672084][T14751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.685145][T14751] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.688405][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.688442][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.694418][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.694456][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.705496][T15016] tipc: Enabling of bearer rejected, already enabled [ 332.758290][T14751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.758365][T14751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.941769][T15034] loop1: detected capacity change from 0 to 512 [ 332.945379][T15034] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.948252][T14751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.968713][T15034] EXT4-fs (loop1): 1 truncate cleaned up [ 333.062288][T15047] loop0: detected capacity change from 0 to 1024 [ 333.062663][T15047] EXT4-fs: Ignoring removed orlov option [ 333.085102][T14751] veth0_vlan: entered promiscuous mode [ 333.088876][T14751] veth1_vlan: entered promiscuous mode [ 333.104931][T14751] veth0_macvtap: entered promiscuous mode [ 333.106093][T14751] veth1_macvtap: entered promiscuous mode [ 333.126271][T14751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.133498][T14751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.185275][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.203865][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.204090][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.204220][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.270619][T15053] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20064 [ 333.537294][ T314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 333.575414][T15067] loop3: detected capacity change from 0 to 4096 [ 334.148945][T15079] loop6: detected capacity change from 0 to 1024 [ 334.149302][T15079] EXT4-fs: Ignoring removed orlov option [ 334.403785][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab400: rx timeout, send abort [ 334.903812][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab200: rx timeout, send abort [ 334.903856][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab400: abort rx timeout. Force session deactivation [ 335.143296][T15106] ip6t_srh: unknown srh invflags 4000 [ 335.147314][T15106] SELinux: invalid class [ 335.147424][T15106] SELinux: failed to load policy [ 335.179871][T15106] loop6: detected capacity change from 0 to 512 [ 335.180656][T15106] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 335.403865][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab200: abort rx timeout. Force session deactivation [ 335.551691][T15122] loop0: detected capacity change from 0 to 512 [ 335.565472][T15122] ext4 filesystem being mounted at /572/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.730074][T15134] loop4: detected capacity change from 0 to 512 [ 335.730536][T15134] EXT4-fs: Ignoring removed i_version option [ 335.731031][T15134] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.738602][T15134] EXT4-fs (loop4): orphan cleanup on readonly fs [ 335.746796][T15134] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 335.746887][T15134] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2778: Failed to acquire dquot type 1 [ 335.746911][T15134] loop4: lost filesystem error report for type 5 error -28 [ 335.747317][T15134] EXT4-fs (loop4): 1 truncate cleaned up [ 335.872510][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab200: rx timeout, send abort [ 336.372546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e30fe00: rx timeout, send abort [ 336.372585][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5ab200: abort rx timeout. Force session deactivation [ 336.462193][T15061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.539600][T15152] loop4: detected capacity change from 0 to 512 [ 336.558361][T15152] ext4 filesystem being mounted at /525/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.872591][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e30fe00: abort rx timeout. Force session deactivation [ 337.117163][T15181] loop4: detected capacity change from 0 to 512 [ 337.117818][T15181] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 337.118763][T15181] EXT4-fs (loop4): 1 truncate cleaned up [ 337.121761][T15181] EXT4-fs mount: 18 callbacks suppressed [ 337.121776][T15181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.125632][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 337.125648][ T29] audit: type=1400 audit(1789385832.710:1277): avc: denied { write } for pid=15180 comm="syz.4.2796" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.233996][T15187] loop1: detected capacity change from 0 to 512 [ 337.234481][T15187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 337.235763][T15187] EXT4-fs (loop1): 1 truncate cleaned up [ 337.239303][T15187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.253650][ T29] audit: type=1400 audit(1789385832.830:1278): avc: denied { write } for pid=15186 comm="syz.1.2798" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.276019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e30fe00: rx timeout, send abort [ 337.339069][T15192] ip6t_srh: unknown srh invflags 4000 [ 337.341521][T15192] SELinux: invalid class [ 337.341559][T15192] SELinux: failed to load policy [ 337.393414][T15195] loop6: detected capacity change from 0 to 512 [ 337.411007][T15192] loop0: detected capacity change from 0 to 512 [ 337.415506][T15192] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 337.432100][T15195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.432165][T15195] ext4 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.470596][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.709275][ T29] audit: type=1400 audit(1789385833.300:1279): avc: denied { write } for pid=15217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.733956][ T29] audit: type=1400 audit(1789385833.320:1280): avc: denied { write } for pid=15229 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.776023][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119971400: rx timeout, send abort [ 337.776071][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e30fe00: abort rx timeout. Force session deactivation [ 338.013758][ T29] audit: type=1400 audit(1789385833.570:1281): avc: denied { write } for pid=15231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.052966][ T29] audit: type=1400 audit(1789385833.640:1282): avc: denied { write } for pid=15243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.217529][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.227698][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.276069][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119971400: abort rx timeout. Force session deactivation [ 338.929766][T15264] ip6t_srh: unknown srh invflags 4000 [ 338.930690][T15264] SELinux: invalid class [ 338.930730][T15264] SELinux: failed to load policy [ 338.961262][T15264] loop0: detected capacity change from 0 to 512 [ 338.965428][T15264] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 339.237873][T15283] loop3: detected capacity change from 0 to 512 [ 339.238409][T15283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.259031][T15283] EXT4-fs (loop3): 1 truncate cleaned up [ 339.259405][T15283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.278656][ T29] audit: type=1400 audit(1789385834.850:1283): avc: denied { write } for pid=15280 comm="syz.3.2819" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.379851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e8b800: rx timeout, send abort [ 339.436392][T15291] loop4: detected capacity change from 0 to 512 [ 339.450320][T15291] EXT4-fs: Ignoring removed i_version option [ 339.454350][T15291] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 339.467782][T15291] EXT4-fs (loop4): orphan cleanup on readonly fs [ 339.484597][T15291] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 339.485356][T15291] Quota error (device loop4): write_blk: dquota write failed [ 339.485387][T15291] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 339.486057][T15291] Quota error (device loop4): write_blk: dquota write failed [ 339.486278][T15291] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2822: Failed to acquire dquot type 1 [ 339.486347][T15291] loop4: lost filesystem error report for type 5 error -28 [ 339.489970][T15291] EXT4-fs (loop4): 1 truncate cleaned up [ 339.505255][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 339.505275][ C1] EXT4-fs (loop4): initial error at time 1789385835: ext4_mb_generate_buddy:1317 [ 339.505301][ C1] EXT4-fs (loop4): last error at time 1789385835: ext4_acquire_dquot:7069 [ 339.578436][T15291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.606817][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.879908][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119ec3200: rx timeout, send abort [ 339.879931][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e8b800: abort rx timeout. Force session deactivation [ 340.197770][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.349878][T15309] loop6: detected capacity change from 0 to 512 [ 340.369249][T15309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 340.383879][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119ec3200: abort rx timeout. Force session deactivation [ 340.398467][T15309] EXT4-fs (loop6): 1 truncate cleaned up [ 340.401372][T15309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.466246][T15312] netlink: 'syz.3.2827': attribute type 1 has an invalid length. [ 340.553335][T15320] loop3: detected capacity change from 0 to 1024 [ 340.562030][T15320] EXT4-fs: Ignoring removed orlov option [ 340.575455][T15320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.650333][T15329] loop0: detected capacity change from 0 to 512 [ 340.666216][T15329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.667997][T15329] EXT4-fs (loop0): 1 truncate cleaned up [ 340.669970][T15329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.856858][T15347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.930780][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.029182][T15368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.030663][T15368] EXT4-fs (loop0): 1 truncate cleaned up [ 341.031178][T15368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.206971][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.242526][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.281823][T15387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.340006][T15390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.340065][T15390] ext4 filesystem being mounted at /543/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.356375][T15396] FAULT_INJECTION: forcing a failure. [ 341.356375][T15396] name failslab, interval 1, probability 0, space 0, times 0 [ 341.356408][T15396] CPU: 0 UID: 0 PID: 15396 Comm: syz.1.2848 Not tainted syzkaller #0 PREEMPT(lazy) [ 341.356487][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 341.356500][T15396] Call Trace: [ 341.356508][T15396] [ 341.356516][T15396] __dump_stack+0x1d/0x30 [ 341.356542][T15396] dump_stack_lvl+0x95/0xd0 [ 341.356630][T15396] dump_stack+0x15/0x1b [ 341.356651][T15396] should_fail_ex+0x262/0x280 [ 341.356681][T15396] ? find_get_context+0x75/0x4f0 [ 341.356770][T15396] should_failslab+0x8c/0xb0 [ 341.356801][T15396] __kmalloc_cache_noprof+0x7a/0x400 [ 341.356886][T15396] ? find_get_context+0x75/0x4f0 [ 341.356923][T15396] ? security_capable+0x7b/0x90 [ 341.356945][T15396] find_get_context+0x75/0x4f0 [ 341.357110][T15396] __se_sys_perf_event_open+0x908/0x1280 [ 341.357259][T15396] ? do_futex+0x391/0x460 [ 341.357293][T15396] __x64_sys_perf_event_open+0x67/0x80 [ 341.357325][T15396] x64_sys_call+0x1f25/0x2550 [ 341.357419][T15396] do_syscall_64+0x112/0x360 [ 341.357456][T15396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.357480][T15396] RIP: 0033:0x7fc931f6e159 [ 341.357495][T15396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.357512][T15396] RSP: 002b:00007fc9309c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 341.357556][T15396] RAX: ffffffffffffffda RBX: 00007fc9321f5fa0 RCX: 00007fc931f6e159 [ 341.357600][T15396] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 341.357613][T15396] RBP: 00007fc93200503b R08: 0000000000000001 R09: 0000000000000000 [ 341.357626][T15396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 341.357642][T15396] R13: 00007fc9321f6038 R14: 00007fc9321f5fa0 R15: 00007ffe6b9f11a8 [ 341.357665][T15396] [ 341.393536][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.448726][T15399] ip6t_srh: unknown srh invflags 4000 [ 341.455279][T15399] SELinux: invalid class [ 341.455332][T15399] SELinux: failed to load policy [ 341.661688][T15399] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 341.695877][T15405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.870189][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.914817][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.959154][T15434] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.096338][T15449] tipc: Enabling of bearer rejected, already enabled [ 342.197709][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 342.197725][ T29] audit: type=1400 audit(1789385837.790:1295): avc: denied { write } for pid=15450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.259376][ T29] audit: type=1400 audit(1789385837.850:1296): avc: denied { write } for pid=15483 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.346754][T15488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.354158][T15491] set_capacity_and_notify: 5 callbacks suppressed [ 342.354173][T15491] loop1: detected capacity change from 0 to 512 [ 342.377010][T15491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.377169][T15491] ext4 filesystem being mounted at /570/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.378793][ T29] audit: type=1400 audit(1789385837.970:1297): avc: denied { write } for pid=15490 comm="syz.1.2875" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.399157][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.502768][T15503] loop1: detected capacity change from 0 to 1024 [ 342.503100][T15503] EXT4-fs: Ignoring removed orlov option [ 342.529458][T15503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.582081][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.629693][T15514] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 342.629764][T15514] SELinux: failed to load policy [ 342.741799][T15514] loop4: detected capacity change from 0 to 512 [ 342.760641][T15514] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 342.831163][T15525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.944025][T15535] loop3: detected capacity change from 0 to 1024 [ 342.951217][T15535] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 342.957342][T15535] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.2892: lblock 2 mapped to illegal pblock 2 (length 1) [ 342.957433][T15535] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 342.957883][T15535] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 342.958032][T15535] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.2892: lblock 0 mapped to illegal pblock 48 (length 1) [ 342.958084][T15535] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 342.958411][T15535] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 342.958492][T15535] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.2892: Failed to acquire dquot type 0 [ 342.958531][T15535] loop3: lost filesystem error report for type 5 error -117 [ 342.959169][T15535] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 342.959268][T15535] loop3: lost filesystem error report for type 5 error -117 [ 342.959621][T15535] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.2892: mark_inode_dirty error [ 342.959743][T15535] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 342.960095][T15535] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 342.960357][T15535] EXT4-fs (loop3): 1 orphan inode deleted [ 342.964197][T15535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.128883][ T12] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.152623][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 343.152678][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 343.201411][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.202245][T14751] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 343.202378][T14751] loop3: lost filesystem error report for type 5 error -117 [ 343.202558][T14751] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 343.202641][T14751] loop3: lost filesystem error report for type 5 error -117 [ 343.202715][T14751] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 343.202781][T14751] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 343.203000][T14751] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 343.203068][T14751] loop3: lost filesystem error report for type 5 error -117 [ 343.468559][T15553] SELinux: policydb string SE Li does not match my string SE Linux [ 343.468759][T15553] SELinux: failed to load policy [ 343.511265][T15553] loop1: detected capacity change from 0 to 512 [ 343.521451][T15553] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 343.554820][T15556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.632707][T15562] loop0: detected capacity change from 0 to 512 [ 343.635031][T15562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 343.697584][T15562] EXT4-fs (loop0): 1 truncate cleaned up [ 343.698121][T15562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.704992][ T29] audit: type=1400 audit(1789385839.290:1298): avc: denied { write } for pid=15560 comm="syz.0.2902" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.720321][T15566] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 343.726325][T15566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.739421][T15566] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 343.833729][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.837110][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.944089][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.946408][T12298] bridge_slave_1: left allmulticast mode [ 343.946433][T12298] bridge_slave_1: left promiscuous mode [ 343.946616][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.947373][T12298] bridge_slave_0: left allmulticast mode [ 343.947392][T12298] bridge_slave_0: left promiscuous mode [ 343.947536][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.018163][T15583] ip6t_srh: unknown srh invflags 4000 [ 344.021294][T15583] SELinux: invalid class [ 344.021335][T15583] SELinux: failed to load policy [ 344.049582][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.052772][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.078246][T12298] bond0 (unregistering): Released all slaves [ 344.152197][T12298] tipc: Disabling bearer [ 344.152227][T12298] tipc: Disabling bearer [ 344.152242][T12298] tipc: Left network mode [ 344.155475][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.155554][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.159146][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.159162][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.201078][T12298] veth1_vlan: left promiscuous mode [ 344.201132][T12298] veth0_vlan: left promiscuous mode [ 344.245608][T15583] loop1: detected capacity change from 0 to 512 [ 344.281122][T15583] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 344.346524][T15596] loop1: detected capacity change from 0 to 512 [ 344.346878][T12298] team0 (unregistering): Port device team_slave_1 removed [ 344.349013][T15596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.352927][T15596] EXT4-fs (loop1): 1 truncate cleaned up [ 344.353419][T15596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.356484][ T29] audit: type=1400 audit(1789385839.950:1299): avc: denied { write } for pid=15595 comm="syz.1.2912" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.361891][T12298] team0 (unregistering): Port device team_slave_0 removed [ 344.399901][T15599] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.522949][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.522990][T15573] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.523034][T15573] bridge_slave_0: entered allmulticast mode [ 344.523486][T15573] bridge_slave_0: entered promiscuous mode [ 344.524418][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.524464][T15573] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.524614][T15573] bridge_slave_1: entered allmulticast mode [ 344.525051][T15573] bridge_slave_1: entered promiscuous mode [ 344.536740][T15573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.537853][T15573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.548133][T15573] team0: Port device team_slave_0 added [ 344.549138][T15573] team0: Port device team_slave_1 added [ 344.559531][T15573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.559547][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.559685][T15573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.560235][T15573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.560246][T15573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.560295][T15573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.578122][T15573] hsr_slave_0: entered promiscuous mode [ 344.578612][T15573] hsr_slave_1: entered promiscuous mode [ 344.578791][T15573] debugfs: 'hsr0' already exists in 'hsr' [ 344.578804][T15573] Cannot create hsr debugfs directory [ 344.740959][T15617] loop6: detected capacity change from 0 to 512 [ 344.741896][T15617] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.743418][T15617] EXT4-fs (loop6): 1 truncate cleaned up [ 344.759080][T15617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.763529][ T29] audit: type=1400 audit(1789385840.350:1300): avc: denied { write } for pid=15615 comm="syz.6.2915" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.834520][ T29] audit: type=1400 audit(1789385840.430:1301): avc: denied { write } for pid=15614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.083090][T15573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.085541][T15573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.086284][T15573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.092676][T15573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.093298][T15573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.102156][T15573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.102897][T15573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.110688][T15573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.162253][T15573] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.162289][T15573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.162417][T15573] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.162444][T15573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.218209][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.256039][T15573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.271516][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.272152][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.290935][T15573] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.304049][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.304180][T12298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.306352][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.306382][T12298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.561183][T15573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.597005][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.599932][T15714] tipc: Enabling of bearer rejected, already enabled [ 345.656390][T15731] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.721121][T15573] veth0_vlan: entered promiscuous mode [ 345.728627][T15573] veth1_vlan: entered promiscuous mode [ 345.763500][T15573] veth0_macvtap: entered promiscuous mode [ 345.770548][T15573] veth1_macvtap: entered promiscuous mode [ 345.792155][T15573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.803065][T15573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.824653][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.824760][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.824925][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.825008][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.885397][T15749] netlink: 'syz.6.2926': attribute type 1 has an invalid length. [ 345.911133][T15749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.937292][T15749] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 345.973824][T15763] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20064 [ 346.013913][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.040500][T15770] loop0: detected capacity change from 0 to 512 [ 346.066728][T15770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.066795][T15770] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.123883][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.175188][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.329755][T15814] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 346.345448][T15814] EXT4-fs (loop0): 1 truncate cleaned up [ 346.345831][T15814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.378742][T15800] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 346.390811][T15800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.409090][T15800] bond4: (slave gretap4): Enslaving as a backup interface with an up link [ 346.493738][ T42] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.564987][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.593063][T15848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 346.603974][ T42] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.622119][T15848] EXT4-fs (loop0): 1 truncate cleaned up [ 346.622870][T15848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.689554][T15857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.690525][T15857] EXT4-fs (loop3): 1 truncate cleaned up [ 346.690877][T15857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.862569][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.032860][T15872] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 347.056907][T15872] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.2940: lblock 2 mapped to illegal pblock 2 (length 1) [ 347.056957][T15872] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 347.060328][T15872] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.2940: lblock 0 mapped to illegal pblock 48 (length 1) [ 347.060398][T15872] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 347.061099][T15872] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2940: Failed to acquire dquot type 0 [ 347.061208][T15872] loop1: lost filesystem error report for type 5 error -117 [ 347.063423][T15872] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 347.063464][T15872] loop1: lost filesystem error report for type 5 error -117 [ 347.063704][ C1] EXT4-fs (loop1): error count since last fsck: 4 [ 347.063733][ C1] EXT4-fs (loop1): initial error at time 1789385842: ext4_map_blocks:790: inode 3: block 2 [ 347.063923][ C1] EXT4-fs (loop1): last error at time 1789385842: ext4_reserve_inode_write:6522 [ 347.173580][T15872] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.2940: mark_inode_dirty error [ 347.173650][T15872] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 347.175079][T15872] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 347.175450][T15872] EXT4-fs (loop1): 1 orphan inode deleted [ 347.179615][T15872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.194223][ T31] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 347.194397][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 347.447248][T15900] set_capacity_and_notify: 4 callbacks suppressed [ 347.447300][T15900] loop0: detected capacity change from 0 to 512 [ 347.723326][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.734209][ T3297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 347.734241][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 347.748659][ T3297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 347.748680][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 347.749140][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.749553][T15907] loop6: detected capacity change from 0 to 4096 [ 347.756301][ T3297] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 347.756327][ T3297] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 347.756423][ T3297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 347.756449][ T3297] loop1: lost filesystem error report for type 5 error -117 [ 347.774495][T15907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.845208][T15900] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 347.939321][T15913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.991559][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 347.991619][ T29] audit: type=1400 audit(1789385843.580:1331): avc: denied { write } for pid=15906 comm="syz.6.2953" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.038813][T15923] ip6t_srh: unknown srh invflags 4000 [ 348.050012][T15923] SELinux: invalid class [ 348.050271][T15923] SELinux: failed to load policy [ 348.130948][T15923] loop3: detected capacity change from 0 to 512 [ 348.140884][T15923] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 348.141748][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.346036][ T29] audit: type=1400 audit(1789385843.940:1332): avc: denied { write } for pid=15945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.383177][ T29] audit: type=1400 audit(1789385843.980:1333): avc: denied { write } for pid=15957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.477341][ T29] audit: type=1400 audit(1789385844.070:1334): avc: denied { write } for pid=15959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.512765][ T29] audit: type=1400 audit(1789385844.110:1335): avc: denied { write } for pid=15970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.722392][T15973] loop1: detected capacity change from 0 to 1024 [ 348.722801][T15973] EXT4-fs: Ignoring removed orlov option [ 348.734867][T15973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.886611][T15981] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.972942][T15985] loop6: detected capacity change from 0 to 512 [ 348.984080][T15985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 348.989407][T15985] EXT4-fs (loop6): 1 truncate cleaned up [ 348.990185][T15985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.014697][ T29] audit: type=1400 audit(1789385844.600:1336): avc: denied { write } for pid=15984 comm="syz.6.2969" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.093313][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.108871][T15993] ip6t_srh: unknown srh invflags 4000 [ 349.111172][T15993] SELinux: invalid class [ 349.111322][T15993] SELinux: failed to load policy [ 349.177874][T15993] loop1: detected capacity change from 0 to 512 [ 349.191444][T15993] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 349.194148][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.057088][T16014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.118411][T16018] loop6: detected capacity change from 0 to 512 [ 350.137919][T16018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 350.159231][T16018] EXT4-fs (loop6): 1 truncate cleaned up [ 350.160177][T16018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.177617][ T29] audit: type=1400 audit(1789385845.770:1337): avc: denied { write } for pid=16017 comm="syz.6.2983" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.182636][T16028] loop1: detected capacity change from 0 to 512 [ 350.184969][ T42] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 350.206717][T16028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 350.221674][T16028] EXT4-fs (loop1): 1 truncate cleaned up [ 350.222177][T16028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.224880][ T29] audit: type=1400 audit(1789385845.820:1338): avc: denied { write } for pid=16027 comm="syz.1.2985" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.328152][T16025] loop0: detected capacity change from 0 to 1024 [ 350.346703][T16025] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 350.385741][T16025] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.2984: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.385793][T16025] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.388003][T16025] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 350.388052][T16025] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.2984: lblock 0 mapped to illegal pblock 48 (length 1) [ 350.388092][T16025] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.388616][T16025] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 350.388696][T16025] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.2984: Failed to acquire dquot type 0 [ 350.388726][T16025] loop0: lost filesystem error report for type 5 error -117 [ 350.389212][T16025] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 350.389242][T16025] loop0: lost filesystem error report for type 5 error -117 [ 350.390363][T16025] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.2984: mark_inode_dirty error [ 350.390404][T16025] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.390767][T16025] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 350.390918][T16025] EXT4-fs (loop0): 1 orphan inode deleted [ 350.476834][T16025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.479842][ T3469] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.479881][ T3469] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.482113][ T3469] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0 [ 350.482135][ T3469] loop0: lost filesystem error report for type 5 error -117 [ 350.521393][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.572897][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.573226][T15573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 350.573275][T15573] loop0: lost filesystem error report for type 5 error -117 [ 350.573400][T15573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 350.573419][T15573] loop0: lost filesystem error report for type 5 error -117 [ 350.573519][T15573] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 350.573542][T15573] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.574825][T15573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 350.574873][T15573] loop0: lost filesystem error report for type 5 error -117 [ 350.730663][T16055] loop3: detected capacity change from 0 to 512 [ 350.731657][T16055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.732895][T16055] EXT4-fs (loop3): 1 truncate cleaned up [ 350.733475][T16055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.848151][T16059] netlink: 'syz.6.2992': attribute type 1 has an invalid length. [ 350.868762][T16059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.890724][T16059] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 350.905611][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.918613][T16063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.973762][ T314] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.019787][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.085963][ T314] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.091974][T16072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.116475][T16072] EXT4-fs (loop3): 1 truncate cleaned up [ 351.116955][T16072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.869827][T16082] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 351.890759][T16082] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.2999: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.890999][T16082] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.891585][T16082] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.2999: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.891737][T16082] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.892062][T16082] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.2999: Failed to acquire dquot type 0 [ 351.892102][T16082] loop6: lost filesystem error report for type 5 error -117 [ 351.892749][T16082] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 351.892809][T16082] loop6: lost filesystem error report for type 5 error -117 [ 351.893244][T16082] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.2999: mark_inode_dirty error [ 351.893346][T16082] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.899165][T16082] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 351.899475][T16082] EXT4-fs (loop6): 1 orphan inode deleted [ 351.903375][T16082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.958327][ T314] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.958368][ T314] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.958552][ T314] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 351.958594][ T314] loop6: lost filesystem error report for type 5 error -117 [ 352.047798][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.095441][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.095885][T12185] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 352.095914][T12185] loop6: lost filesystem error report for type 5 error -117 [ 352.095977][T12185] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 352.096052][T12185] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 352.096075][T12185] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 352.096214][T12185] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 352.116645][T16096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.118011][T16096] EXT4-fs (loop3): 1 truncate cleaned up [ 352.118292][T16096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.136254][T16099] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.157245][T16099] EXT4-fs (loop6): 1 truncate cleaned up [ 352.157681][T16099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.355620][T16107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.365064][T16105] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 352.376833][T16105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.392020][T16105] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 352.475146][ T3469] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.568677][T16113] set_capacity_and_notify: 4 callbacks suppressed [ 352.568713][T16113] loop3: detected capacity change from 0 to 512 [ 352.586864][ T80] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.597540][T16113] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 353.122263][T16020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.198197][T16129] loop0: detected capacity change from 0 to 1024 [ 353.212370][T16129] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 353.229284][T16129] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.3013: lblock 2 mapped to illegal pblock 2 (length 1) [ 353.229671][T16129] __quota_error: 8 callbacks suppressed [ 353.229721][T16129] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 353.229750][T16129] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.3013: lblock 0 mapped to illegal pblock 48 (length 1) [ 353.229962][T16129] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 353.229984][T16129] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.3013: Failed to acquire dquot type 0 [ 353.230202][T16129] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 353.230324][T16129] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.3013: mark_inode_dirty error [ 353.230492][T16129] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 353.230524][T16129] EXT4-fs (loop0): 1 orphan inode deleted [ 353.247937][ T42] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 353.252209][ T42] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 353.252231][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 353.297647][T15573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 353.297817][T15573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 353.297908][T15573] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 353.297978][T15573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 353.817348][T16144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 354.251145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e824c00: rx timeout, send abort [ 354.253021][ T314] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 354.751187][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811889b800: rx timeout, send abort [ 354.751223][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e824c00: abort rx timeout. Force session deactivation [ 354.848235][T16177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 354.920836][T16179] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3029'. [ 355.041189][T12298] bridge_slave_1: left allmulticast mode [ 355.041225][T12298] bridge_slave_1: left promiscuous mode [ 355.041342][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.041798][T12298] bridge_slave_0: left allmulticast mode [ 355.041813][T12298] bridge_slave_0: left promiscuous mode [ 355.041932][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.097329][T12298] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 355.097530][T12298] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 355.099237][T12298] bond2 (unregistering): (slave gretap2): Removing an active aggregator [ 355.099381][T12298] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 355.141734][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.142559][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.143274][T12298] bond0 (unregistering): Released all slaves [ 355.148257][T12298] bond1 (unregistering): Released all slaves [ 355.150729][T12298] bond2 (unregistering): Released all slaves [ 355.218199][T12298] tipc: Disabling bearer [ 355.218245][T12298] tipc: Left network mode [ 355.228160][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.228178][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.231005][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.231022][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.248266][T12298] veth1_vlan: left promiscuous mode [ 355.248316][T12298] veth0_vlan: left promiscuous mode [ 355.253064][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811889b800: abort rx timeout. Force session deactivation [ 355.366851][T12298] team0 (unregistering): Port device team_slave_1 removed [ 355.381409][T12298] team0 (unregistering): Port device team_slave_0 removed [ 355.519867][T16183] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.519909][T16183] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.520053][T16183] bridge_slave_0: entered allmulticast mode [ 355.520887][T16183] bridge_slave_0: entered promiscuous mode [ 355.554001][T16183] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.554031][T16183] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.554272][T16183] bridge_slave_1: entered allmulticast mode [ 355.555063][T16183] bridge_slave_1: entered promiscuous mode [ 355.599910][T16183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.601916][T16183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.638654][T16183] team0: Port device team_slave_0 added [ 355.640696][T16183] team0: Port device team_slave_1 added [ 355.669841][T16183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.669855][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.669947][T16183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.670849][T16183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.671004][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.671044][T16183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.789869][T16183] hsr_slave_0: entered promiscuous mode [ 355.790554][T16183] hsr_slave_1: entered promiscuous mode [ 355.791064][T16183] debugfs: 'hsr0' already exists in 'hsr' [ 355.791087][T16183] Cannot create hsr debugfs directory [ 355.932483][ T29] audit: type=1400 audit(1789385851.520:1343): avc: denied { write } for pid=16211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.966040][ T29] audit: type=1400 audit(1789385851.560:1344): avc: denied { write } for pid=16222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.030659][ T29] audit: type=1400 audit(1789385851.620:1345): avc: denied { write } for pid=16224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.068434][ T29] audit: type=1400 audit(1789385851.660:1346): avc: denied { write } for pid=16235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.171066][T16242] loop4: detected capacity change from 0 to 1024 [ 356.171411][T16242] EXT4-fs: Ignoring removed orlov option [ 356.336744][ T29] audit: type=1400 audit(1789385851.930:1347): avc: denied { write } for pid=16237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.410554][ T29] audit: type=1400 audit(1789385852.000:1348): avc: denied { write } for pid=16256 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.439378][T16250] loop6: detected capacity change from 0 to 4096 [ 356.599765][ T29] audit: type=1400 audit(1789385852.190:1349): avc: denied { write } for pid=16258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.895263][T16303] loop6: detected capacity change from 0 to 512 [ 356.919758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811889b800: rx timeout, send abort [ 356.946286][T16303] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 357.148011][T16328] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3040'. [ 357.201850][T16158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.202708][T16183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.224449][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.230148][T16183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.245661][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.248757][T16183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.256778][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.259667][T16183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.272731][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.303252][T16340] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 357.339404][T16183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.351061][T16183] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.353589][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.353658][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.378023][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.378054][T12298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.419799][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a500e00: rx timeout, send abort [ 357.419851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811889b800: abort rx timeout. Force session deactivation [ 357.619217][T16183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.750537][T16183] veth0_vlan: entered promiscuous mode [ 357.759502][T16183] veth1_vlan: entered promiscuous mode [ 357.776445][T16183] veth0_macvtap: entered promiscuous mode [ 357.779080][T16183] veth1_macvtap: entered promiscuous mode [ 357.789073][T16183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.793277][T16183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.815476][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.815712][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.816002][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.816106][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.919868][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a500e00: abort rx timeout. Force session deactivation [ 357.955975][T16424] SELinux: invalid class [ 357.956126][T16424] SELinux: failed to load policy [ 358.048703][T16424] loop1: detected capacity change from 0 to 512 [ 358.078150][T16424] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 358.153215][T16446] loop6: detected capacity change from 0 to 512 [ 358.163371][T16446] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 358.175543][T16446] EXT4-fs (loop6): 1 truncate cleaned up [ 358.200023][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 358.327450][T16452] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3050'. [ 358.352249][T16454] loop6: detected capacity change from 0 to 1024 [ 358.352693][T16454] EXT4-fs: Ignoring removed orlov option [ 358.664742][T16470] loop6: detected capacity change from 0 to 512 [ 358.665273][T16470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 358.666505][T16470] EXT4-fs (loop6): 1 truncate cleaned up [ 358.668236][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 358.668251][ T29] audit: type=1400 audit(1789385854.260:1371): avc: denied { write } for pid=16469 comm="syz.6.3054" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.933777][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4600: rx timeout, send abort [ 359.433838][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4a00: rx timeout, send abort [ 359.433862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4600: abort rx timeout. Force session deactivation [ 359.933929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4a00: abort rx timeout. Force session deactivation [ 360.469760][T16488] loop6: detected capacity change from 0 to 1024 [ 360.470568][T16488] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 360.489640][T16488] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.3060: lblock 2 mapped to illegal pblock 2 (length 1) [ 360.489677][T16488] fserror_report: 4 callbacks suppressed [ 360.489709][T16488] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 360.489771][T16488] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 360.489788][T16488] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.3060: lblock 0 mapped to illegal pblock 48 (length 1) [ 360.489891][T16488] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 360.489955][T16488] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 360.489970][T16488] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3060: Failed to acquire dquot type 0 [ 360.489996][T16488] fserror_report: 7 callbacks suppressed [ 360.490008][T16488] loop6: lost filesystem error report for type 5 error -117 [ 360.491525][T16488] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 360.491601][T16488] loop6: lost filesystem error report for type 5 error -117 [ 360.491783][T16488] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.3060: mark_inode_dirty error [ 360.491806][T16488] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 360.491872][T16488] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 360.491908][T16488] EXT4-fs (loop6): 1 orphan inode deleted [ 360.514635][T12298] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 360.523280][T12298] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 360.523304][T12298] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 360.565769][T12185] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 360.565860][T12185] loop6: lost filesystem error report for type 5 error -117 [ 360.566011][T12185] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 360.566030][T12185] loop6: lost filesystem error report for type 5 error -117 [ 360.566125][T12185] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 360.566148][T12185] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 360.566237][T12185] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 360.566264][T12185] loop6: lost filesystem error report for type 5 error -117 [ 361.148217][T16441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.182389][T16499] loop0: detected capacity change from 0 to 1024 [ 361.182763][T16499] EXT4-fs: Ignoring removed orlov option [ 361.245181][T16505] netlink: 'syz.4.3063': attribute type 1 has an invalid length. [ 361.282797][T16505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.309042][T16505] bond5: (slave gretap5): Enslaving as a backup interface with an up link [ 361.404244][ T3469] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 361.516563][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e0ec400: rx timeout, send abort [ 361.524640][ T314] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 361.567934][T16519] loop3: detected capacity change from 0 to 512 [ 361.581621][T16519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 361.639105][T16519] EXT4-fs (loop3): 1 truncate cleaned up [ 361.670039][ T29] audit: type=1400 audit(1789385857.260:1372): avc: denied { write } for pid=16515 comm="syz.3.3068" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.016643][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e0ec200: rx timeout, send abort [ 362.016680][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e0ec400: abort rx timeout. Force session deactivation [ 362.335402][T16537] loop6: detected capacity change from 0 to 512 [ 362.375890][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 362.376895][T16537] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 362.414671][T16537] EXT4-fs (loop6): 1 truncate cleaned up [ 362.430832][ T29] audit: type=1400 audit(1789385858.020:1373): avc: denied { write } for pid=16536 comm="syz.6.3074" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.516811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e0ec200: abort rx timeout. Force session deactivation [ 362.576952][T16545] loop3: detected capacity change from 0 to 1024 [ 362.610757][T16545] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 362.637580][T16545] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.3076: lblock 2 mapped to illegal pblock 2 (length 1) [ 362.637663][T16545] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.639711][T16545] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 362.639849][T16545] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.3076: lblock 0 mapped to illegal pblock 48 (length 1) [ 362.639946][T16545] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.641405][T16545] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 362.641455][T16545] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3076: Failed to acquire dquot type 0 [ 362.641538][T16545] loop3: lost filesystem error report for type 5 error -117 [ 362.643359][T16545] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 362.643422][T16545] loop3: lost filesystem error report for type 5 error -117 [ 362.643693][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 362.643718][ C1] EXT4-fs (loop3): initial error at time 1789385858: ext4_map_blocks:790: inode 3: block 2 [ 362.643790][ C1] EXT4-fs (loop3): last error at time 1789385858: ext4_reserve_inode_write:6522 [ 362.652184][T16545] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.3076: mark_inode_dirty error [ 362.652251][T16545] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.652742][T16545] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 362.653055][T16545] EXT4-fs (loop3): 1 orphan inode deleted [ 362.658568][ T70] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 362.658606][ T70] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.659486][ T70] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 362.659506][ T70] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 362.659698][ T70] loop3: lost filesystem error report for type 5 error -117 [ 362.731012][T14751] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 362.731051][T14751] loop3: lost filesystem error report for type 5 error -117 [ 362.731251][T14751] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 362.731269][T14751] loop3: lost filesystem error report for type 5 error -117 [ 362.731329][T14751] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 362.731353][T14751] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.731596][T14751] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 362.806032][T16556] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 362.816231][T16556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.850650][T16560] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3081'. [ 362.896869][T16556] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 362.923824][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 362.984346][T16562] loop6: detected capacity change from 0 to 512 [ 362.987774][T16562] EXT4-fs: Ignoring removed i_version option [ 362.991605][T16562] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.997718][T16562] EXT4-fs (loop6): orphan cleanup on readonly fs [ 363.001343][T16562] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 363.002074][T16562] Quota error (device loop6): write_blk: dquota write failed [ 363.002720][T16562] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3082: Failed to acquire dquot type 1 [ 363.004991][T16562] EXT4-fs (loop6): 1 truncate cleaned up [ 363.052585][T12298] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 363.079350][T16565] loop3: detected capacity change from 0 to 512 [ 363.082320][T16565] EXT4-fs: Ignoring removed i_version option [ 363.097559][T16565] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.100757][T16565] EXT4-fs (loop3): orphan cleanup on readonly fs [ 363.103350][T16565] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 363.106173][T16565] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3083: Failed to acquire dquot type 1 [ 363.110897][T16565] EXT4-fs (loop3): 1 truncate cleaned up [ 363.450957][T16579] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 363.455798][T16579] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.464235][T16579] bond6: (slave gretap6): Enslaving as a backup interface with an up link [ 363.512456][T16584] loop4: detected capacity change from 0 to 1024 [ 363.521377][T16584] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 363.534789][T16584] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.3090: lblock 2 mapped to illegal pblock 2 (length 1) [ 363.534825][T16584] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 363.535049][T16584] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.3090: lblock 0 mapped to illegal pblock 48 (length 1) [ 363.535284][T16584] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.3090: Failed to acquire dquot type 0 [ 363.535493][T16584] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 363.535747][T16584] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.3090: mark_inode_dirty error [ 363.535959][T16584] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 363.536062][T16584] EXT4-fs (loop4): 1 orphan inode deleted [ 363.563834][ T42] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 363.564038][ T42] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 363.567354][ T42] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 363.569711][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 363.569932][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 363.570054][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 363.570139][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 363.610326][T16588] loop4: detected capacity change from 0 to 512 [ 363.613262][T16588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 363.618476][T16588] EXT4-fs (loop4): 1 truncate cleaned up [ 363.683742][ T70] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 363.770518][T16592] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3092'. [ 363.849380][T16596] ip6t_srh: unknown srh invflags 4000 [ 363.850083][T16596] SELinux: invalid class [ 363.850109][T16596] SELinux: failed to load policy [ 363.884775][T16596] loop4: detected capacity change from 0 to 512 [ 363.888958][T16596] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 364.798301][T16613] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 364.802915][T16613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.811208][T16613] bond7: (slave gretap7): Enslaving as a backup interface with an up link [ 364.848238][T16616] loop4: detected capacity change from 0 to 1024 [ 364.854780][T16616] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 364.868234][T16616] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.3101: lblock 2 mapped to illegal pblock 2 (length 1) [ 364.868695][T16616] __quota_error: 11 callbacks suppressed [ 364.868826][T16616] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 364.868946][T16616] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.3101: lblock 0 mapped to illegal pblock 48 (length 1) [ 364.869433][T16616] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 364.869494][T16616] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.3101: Failed to acquire dquot type 0 [ 364.870057][T16616] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 364.870321][T16616] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.3101: mark_inode_dirty error [ 364.870748][T16616] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 364.870978][T16616] EXT4-fs (loop4): 1 orphan inode deleted [ 364.893928][ T314] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.894091][ T314] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 364.894128][ T314] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 364.914375][ T314] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 364.916671][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 364.916763][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 364.916889][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 364.916990][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 365.041816][T12298] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.265842][T16532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.318562][T16625] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3104'. [ 365.335640][T16627] loop6: detected capacity change from 0 to 512 [ 365.370073][T16627] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.406477][T16630] ip6t_srh: unknown srh invflags 4000 [ 365.408126][T16630] SELinux: invalid class [ 365.408227][T16630] SELinux: failed to load policy [ 365.427698][T16627] EXT4-fs (loop6): 1 truncate cleaned up [ 365.431216][ T29] audit: type=1400 audit(1789385861.020:1375): avc: denied { write } for pid=16626 comm="syz.6.3103" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.483871][T16630] loop3: detected capacity change from 0 to 512 [ 365.520203][T16630] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 365.956004][T16644] netlink: 'syz.0.3110': attribute type 5 has an invalid length. [ 365.956088][T16644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3110'. [ 366.361274][T16650] loop4: detected capacity change from 0 to 1024 [ 366.441452][T16653] loop1: detected capacity change from 0 to 512 [ 366.463223][T16653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 366.480876][T16653] EXT4-fs (loop1): 1 truncate cleaned up [ 366.503108][T16650] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 366.526114][ T29] audit: type=1400 audit(1789385862.120:1376): avc: denied { write } for pid=16652 comm="syz.1.3113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.586044][T16650] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.3112: lblock 2 mapped to illegal pblock 2 (length 1) [ 366.586095][T16650] fserror_report: 7 callbacks suppressed [ 366.586114][T16650] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.586625][T16650] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 366.586936][T16650] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.3112: lblock 0 mapped to illegal pblock 48 (length 1) [ 366.587090][T16650] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.587454][T16650] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 366.587483][T16650] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.3112: Failed to acquire dquot type 0 [ 366.587557][T16650] fserror_report: 13 callbacks suppressed [ 366.587574][T16650] loop4: lost filesystem error report for type 5 error -117 [ 366.588124][T16650] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 366.588153][T16650] loop4: lost filesystem error report for type 5 error -117 [ 366.588410][T16650] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.3112: mark_inode_dirty error [ 366.588499][T16650] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 366.588819][T16650] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 366.589296][T16650] EXT4-fs (loop4): 1 orphan inode deleted [ 366.625894][ T31] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.625974][ T31] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.661245][ T31] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 366.661272][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 366.661295][ T31] loop4: lost filesystem error report for type 5 error -117 [ 366.749313][T16662] netlink: 'syz.6.3115': attribute type 5 has an invalid length. [ 366.749346][T16662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3115'. [ 366.843003][T16665] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3116'. [ 366.875845][T16667] loop3: detected capacity change from 0 to 512 [ 366.884529][T16667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.885453][T16667] EXT4-fs (loop3): 1 truncate cleaned up [ 366.894866][ T29] audit: type=1400 audit(1789385862.490:1377): avc: denied { write } for pid=16666 comm="syz.3.3117" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.979131][T16672] ip6t_srh: unknown srh invflags 4000 [ 366.982997][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 366.983031][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 366.983487][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 366.983505][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 366.984369][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 366.984395][ T3296] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.984542][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 366.984568][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 367.005552][T16672] SELinux: invalid class [ 367.005642][T16672] SELinux: failed to load policy [ 367.216217][T14751] EXT4-fs unmount: 41 callbacks suppressed [ 367.216250][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.228166][T16684] netlink: 'syz.4.3122': attribute type 5 has an invalid length. [ 367.228198][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3122'. [ 367.362613][T16672] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 367.503811][T16701] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 367.519533][T16701] EXT4-fs (loop6): 1 truncate cleaned up [ 367.519973][T16701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.539003][ T29] audit: type=1400 audit(1789385863.130:1378): avc: denied { write } for pid=16699 comm="syz.6.3127" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.797712][T16706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 367.819412][T16706] EXT4-fs (loop0): 1 truncate cleaned up [ 367.820283][T16706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.891668][T16708] EXT4-fs: Ignoring removed orlov option [ 367.905398][T16708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.267259][T16722] set_capacity_and_notify: 4 callbacks suppressed [ 368.267275][T16722] loop1: detected capacity change from 0 to 512 [ 368.284262][T16722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 368.293269][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.312370][T16722] EXT4-fs (loop1): 1 truncate cleaned up [ 368.312895][T16722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.362563][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.390553][T16725] ip6t_srh: unknown srh invflags 4000 [ 368.390965][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.426469][T16725] SELinux: invalid class [ 368.426601][T16725] SELinux: failed to load policy [ 368.490981][ T3296] syz_tun (unregistering): left allmulticast mode [ 368.606317][T16725] loop3: detected capacity change from 0 to 512 [ 368.608810][T16725] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 368.644460][T12298] team0: left allmulticast mode [ 368.644481][T12298] team_slave_0: left allmulticast mode [ 368.644611][T12298] team_slave_1: left allmulticast mode [ 368.644669][T12298] team0: left promiscuous mode [ 368.644685][T12298] team_slave_0: left promiscuous mode [ 368.644766][T12298] team_slave_1: left promiscuous mode [ 368.645006][T12298] bridge0: port 3(team0) entered disabled state [ 368.645671][T12298] bridge_slave_1: left allmulticast mode [ 368.645690][T12298] bridge_slave_1: left promiscuous mode [ 368.645841][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.648107][T12298] bridge_slave_0: left allmulticast mode [ 368.648170][T12298] bridge_slave_0: left promiscuous mode [ 368.648366][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.977543][T16755] ip6t_srh: unknown srh invflags 4000 [ 368.990143][T16755] SELinux: invalid class [ 368.990672][T16755] SELinux: failed to load policy [ 369.138959][T16755] loop3: detected capacity change from 0 to 512 [ 369.192424][T16755] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 369.229646][T12298] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 369.229796][T12298] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 369.233352][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.261138][T12298] bond2 (unregistering): (slave gretap2): Removing an active aggregator [ 369.261924][T12298] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 369.286296][T12298] bond3 (unregistering): (slave gretap3): Removing an active aggregator [ 369.286505][T12298] bond3 (unregistering): (slave gretap3): Releasing backup interface [ 369.289263][T12298] bond4 (unregistering): (slave gretap4): Removing an active aggregator [ 369.289455][T12298] bond4 (unregistering): (slave gretap4): Releasing backup interface [ 369.292670][T12298] bond5 (unregistering): (slave gretap5): Removing an active aggregator [ 369.292791][T12298] bond5 (unregistering): (slave gretap5): Releasing backup interface [ 369.321062][T12298] bond6 (unregistering): (slave gretap6): Removing an active aggregator [ 369.321231][T12298] bond6 (unregistering): (slave gretap6): Releasing backup interface [ 369.339647][T12298] bond7 (unregistering): (slave gretap7): Removing an active aggregator [ 369.339813][T12298] bond7 (unregistering): (slave gretap7): Releasing backup interface [ 369.389574][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.391587][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.395939][T12298] bond0 (unregistering): Released all slaves [ 369.399011][T12298] bond1 (unregistering): Released all slaves [ 369.406096][T12298] bond2 (unregistering): Released all slaves [ 369.411701][T12298] bond3 (unregistering): Released all slaves [ 369.415520][T12298] bond4 (unregistering): Released all slaves [ 369.419627][T12298] bond5 (unregistering): Released all slaves [ 369.424285][T12298] bond6 (unregistering): Released all slaves [ 369.427608][T12298] bond7 (unregistering): Released all slaves [ 369.606643][T12298] tipc: Disabling bearer [ 369.606665][T12298] tipc: Left network mode [ 369.627478][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.627494][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.627913][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.627927][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.629631][T16782] loop3: detected capacity change from 0 to 1024 [ 369.630041][T16782] EXT4-fs: Ignoring removed orlov option [ 369.630640][T12298] veth1_vlan: left promiscuous mode [ 369.630682][T12298] veth0_vlan: left promiscuous mode [ 369.807535][T12298] team0 (unregistering): Port device team_slave_1 removed [ 369.822522][T12298] team0 (unregistering): Port device team_slave_0 removed [ 369.876357][T16782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.141918][T16793] loop1: detected capacity change from 0 to 4096 [ 370.157617][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.158849][T16793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.185934][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.185963][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.186096][T16732] bridge_slave_0: entered allmulticast mode [ 370.189503][T16732] bridge_slave_0: entered promiscuous mode [ 370.190552][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.190583][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.190718][T16732] bridge_slave_1: entered allmulticast mode [ 370.191991][T16732] bridge_slave_1: entered promiscuous mode [ 370.216337][T16732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.217264][T16732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.229028][T16732] team0: Port device team_slave_0 added [ 370.230084][T16732] team0: Port device team_slave_1 added [ 370.245574][T16732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.245588][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.245618][T16732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.246153][T16732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.246164][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.246220][T16732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.263849][T16732] hsr_slave_0: entered promiscuous mode [ 370.264215][T16732] hsr_slave_1: entered promiscuous mode [ 370.264410][T16732] debugfs: 'hsr0' already exists in 'hsr' [ 370.264423][T16732] Cannot create hsr debugfs directory [ 370.533172][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 370.533188][ T29] audit: type=1400 audit(1789385866.120:1381): avc: denied { write } for pid=16802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.592117][ T29] audit: type=1400 audit(1789385866.180:1382): avc: denied { write } for pid=16825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.631530][ T29] audit: type=1400 audit(1789385866.220:1383): avc: denied { write } for pid=16791 comm="syz.1.3148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.667364][T16732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.680294][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.682235][T16732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.698016][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.701758][T16732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.736075][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.742024][T16732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.750015][T16732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.800315][ T29] audit: type=1400 audit(1789385866.390:1384): avc: denied { write } for pid=16827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.824013][T16732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.829737][T16732] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.832124][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.832156][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.838731][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.838765][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.872463][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.895569][ T29] audit: type=1400 audit(1789385866.490:1385): avc: denied { write } for pid=16850 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.949256][T16854] netlink: 'syz.1.3158': attribute type 5 has an invalid length. [ 370.949348][T16854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3158'. [ 371.568791][T16875] loop6: detected capacity change from 0 to 4096 [ 371.587935][T16732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.636267][T16875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.692954][ T29] audit: type=1400 audit(1789385867.280:1386): avc: denied { write } for pid=16857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.790491][ T29] audit: type=1400 audit(1789385867.380:1387): avc: denied { write } for pid=16898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.969430][T16732] veth0_vlan: entered promiscuous mode [ 371.989280][ T29] audit: type=1400 audit(1789385867.580:1388): avc: denied { write } for pid=16874 comm="syz.6.3161" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.015880][T16732] veth1_vlan: entered promiscuous mode [ 372.043639][T16732] veth0_macvtap: entered promiscuous mode [ 372.045397][T16732] veth1_macvtap: entered promiscuous mode [ 372.068587][T16732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.070368][T16732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.101241][ T29] audit: type=1400 audit(1789385867.690:1389): avc: denied { write } for pid=16902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.150586][T16926] loop1: detected capacity change from 0 to 512 [ 372.153009][T16926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 372.161169][T16926] EXT4-fs (loop1): 1 truncate cleaned up [ 372.161583][T16926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.171903][ T29] audit: type=1400 audit(1789385867.760:1390): avc: denied { write } for pid=16925 comm="syz.1.3168" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.183816][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.184386][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.184451][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.184563][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.273626][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.379301][T16939] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 372.476010][T16930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.520927][T16966] loop4: detected capacity change from 0 to 1024 [ 372.522708][T16966] EXT4-fs: Ignoring removed orlov option [ 372.541032][T16966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.726526][T16930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.924505][T16732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.959155][T17003] loop4: detected capacity change from 0 to 512 [ 372.968039][T17003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.969070][T17003] EXT4-fs (loop4): 1 truncate cleaned up [ 372.969423][T17003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.983600][T16930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.028299][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.075258][T17012] loop6: detected capacity change from 0 to 512 [ 373.078893][T17012] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 373.102502][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105929a00: rx timeout, send abort [ 373.113630][T17012] EXT4-fs (loop6): 1 truncate cleaned up [ 373.114218][T17012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.140946][T16930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.227496][T17024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.387225][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.602521][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811886e200: rx timeout, send abort [ 373.602587][ C0] vcan0: j1939_tp_rxtimer: 0xffff888105929a00: abort rx timeout. Force session deactivation [ 373.639836][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.655410][T17072] set_capacity_and_notify: 1 callbacks suppressed [ 373.655473][T17072] loop6: detected capacity change from 0 to 512 [ 373.662988][T17072] EXT4-fs: Ignoring removed i_version option [ 373.704104][T17072] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 373.736695][T17072] EXT4-fs (loop6): orphan cleanup on readonly fs [ 373.750583][T17072] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 373.753750][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 373.753862][ C0] EXT4-fs (loop6): initial error at time 1789385869: ext4_mb_generate_buddy:1317 [ 373.753919][ C0] EXT4-fs (loop6): last error at time 1789385869: ext4_mb_generate_buddy:1317 [ 373.758960][T17072] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3184: Failed to acquire dquot type 1 [ 373.758999][T17072] loop6: lost filesystem error report for type 5 error -28 [ 373.770018][T17072] EXT4-fs (loop6): 1 truncate cleaned up [ 373.775162][T17072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.848758][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.883880][T16732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.102639][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811886e200: abort rx timeout. Force session deactivation [ 374.371032][T17125] loop1: detected capacity change from 0 to 512 [ 374.389046][T17125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 374.393513][T17125] EXT4-fs (loop1): 1 truncate cleaned up [ 374.411902][T17125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.529040][T17121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.647682][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 374.803802][T17163] loop6: detected capacity change from 0 to 512 [ 374.806956][T17163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 374.808743][T17163] EXT4-fs (loop6): 1 truncate cleaned up [ 374.809103][T17163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.810120][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 374.933981][T17174] loop0: detected capacity change from 0 to 512 [ 374.935836][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.937747][T17174] EXT4-fs: Ignoring removed i_version option [ 374.951297][T17174] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 374.973160][T17174] EXT4-fs (loop0): orphan cleanup on readonly fs [ 374.988858][T17174] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 374.992030][T17174] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.3197: Failed to acquire dquot type 1 [ 374.992079][T17174] loop0: lost filesystem error report for type 5 error -28 [ 374.993685][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 374.993706][ C0] EXT4-fs (loop0): initial error at time 1789385870: ext4_mb_generate_buddy:1317 [ 374.993736][ C0] EXT4-fs (loop0): last error at time 1789385870: ext4_acquire_dquot:7069 [ 375.058194][T17174] EXT4-fs (loop0): 1 truncate cleaned up [ 375.069807][T17174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.102673][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.134473][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 375.178052][T17204] loop3: detected capacity change from 0 to 512 [ 375.182179][T17204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.188371][T17204] EXT4-fs (loop3): 1 truncate cleaned up [ 375.188662][T17204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.240306][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.261834][T17211] loop1: detected capacity change from 0 to 1024 [ 375.262319][T17211] EXT4-fs: Ignoring removed orlov option [ 375.274293][T17211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.440763][T17219] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20064 [ 375.492897][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.591946][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.701279][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.701936][T17221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.740435][T17229] netlink: 'syz.6.3206': attribute type 5 has an invalid length. [ 375.740463][T17229] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3206'. [ 375.845570][T17221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.936043][T17221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.022095][T17221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.190554][T17121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.347746][T17121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.388618][T17252] ip6t_srh: unknown srh invflags 4000 [ 376.392390][T17121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.402889][T17252] SELinux: invalid class [ 376.403243][T17252] SELinux: failed to load policy [ 376.554428][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 376.554444][ T29] audit: type=1400 audit(1789385872.120:1424): avc: denied { write } for pid=17244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.809325][ T29] audit: type=1400 audit(1789385872.400:1425): avc: denied { write } for pid=17261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.961811][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 377.010622][T17252] loop0: detected capacity change from 0 to 512 [ 377.130699][T17252] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 377.202058][T17272] ip6t_srh: unknown srh invflags 4000 [ 377.209831][T17272] SELinux: invalid class [ 377.209953][T17272] SELinux: failed to load policy [ 377.268734][T17272] loop0: detected capacity change from 0 to 512 [ 377.309904][T17272] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 377.347194][T17281] loop0: detected capacity change from 0 to 1024 [ 377.349752][T17281] EXT4-fs: Ignoring removed orlov option [ 377.476250][T17281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.557020][T17288] netlink: 'syz.4.3217': attribute type 5 has an invalid length. [ 377.557087][T17288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'. [ 377.915605][ T29] audit: type=1400 audit(1789385873.510:1426): avc: denied { write } for pid=17276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.933729][ T29] audit: type=1400 audit(1789385873.520:1427): avc: denied { write } for pid=17298 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.948539][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 378.022836][T17303] loop3: detected capacity change from 0 to 512 [ 378.081299][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.082273][T17303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 378.115693][T17303] EXT4-fs (loop3): 1 truncate cleaned up [ 378.116080][T17303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.152869][ T29] audit: type=1400 audit(1789385873.740:1428): avc: denied { write } for pid=17302 comm="syz.3.3219" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.206404][ T29] audit: type=1400 audit(1789385873.800:1429): avc: denied { write } for pid=17301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.237045][ T29] audit: type=1400 audit(1789385873.830:1430): avc: denied { write } for pid=17328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.253591][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 378.416995][T17335] ip6t_srh: unknown srh invflags 4000 [ 378.419244][T17335] SELinux: invalid class [ 378.419306][T17335] SELinux: failed to load policy [ 378.478541][T17346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 378.485089][T17346] EXT4-fs (loop0): 1 truncate cleaned up [ 378.485377][T17346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.505836][T17335] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 378.523813][ T29] audit: type=1400 audit(1789385874.110:1431): avc: denied { write } for pid=17333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.529240][ T29] audit: type=1400 audit(1789385874.120:1432): avc: denied { write } for pid=17344 comm="syz.0.3226" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.586634][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.588492][ T29] audit: type=1400 audit(1789385874.180:1433): avc: denied { write } for pid=17351 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.602953][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 378.776571][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.829414][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 379.189585][T17393] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.263069][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 379.266840][T17393] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.317725][T17393] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.361213][T17393] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.398138][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 379.509861][T17417] set_capacity_and_notify: 2 callbacks suppressed [ 379.509879][T17417] loop6: detected capacity change from 0 to 1024 [ 379.516034][T17417] EXT4-fs: Ignoring removed orlov option [ 379.537476][T17417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.624847][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 379.737378][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 379.886726][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.907057][T17449] loop6: detected capacity change from 0 to 512 [ 379.907614][T17449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.908635][T17449] EXT4-fs (loop6): 1 truncate cleaned up [ 379.909229][T17449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.067297][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.096809][T17472] loop1: detected capacity change from 0 to 1024 [ 381.102007][T17472] EXT4-fs: Ignoring removed orlov option [ 381.129618][T17472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.471331][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.867650][T17489] loop4: detected capacity change from 0 to 4096 [ 381.876509][T17489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.962691][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 381.962706][ T29] audit: type=1400 audit(1789385877.550:1443): avc: denied { write } for pid=17488 comm="syz.4.3251" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 382.042411][T16732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.065276][T17492] netlink: 'syz.4.3252': attribute type 5 has an invalid length. [ 382.065357][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3252'. [ 382.238124][T17496] loop1: detected capacity change from 0 to 1024 [ 382.239905][T17496] EXT4-fs: Ignoring removed orlov option [ 382.251190][T17497] loop6: detected capacity change from 0 to 1024 [ 382.251890][T17497] EXT4-fs: Ignoring removed orlov option [ 382.260052][T17496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.281245][T17497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.547700][T17425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.614703][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.684286][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.821871][ T29] audit: type=1400 audit(1789385878.410:1444): avc: denied { write } for pid=17506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.859980][ T29] audit: type=1400 audit(1789385878.450:1445): avc: denied { write } for pid=17538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.130226][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 383.349409][T17562] loop4: detected capacity change from 0 to 1024 [ 383.349812][T17562] EXT4-fs: Ignoring removed orlov option [ 383.370698][T17562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.471918][ T29] audit: type=1400 audit(1789385879.060:1446): avc: denied { write } for pid=17563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.556624][ T29] audit: type=1400 audit(1789385879.150:1447): avc: denied { write } for pid=17580 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.679615][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 383.835878][ T29] audit: type=1400 audit(1789385879.430:1448): avc: denied { write } for pid=17584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.928094][ T29] audit: type=1400 audit(1789385879.520:1449): avc: denied { write } for pid=17602 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.082921][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 384.098935][T17614] loop6: detected capacity change from 0 to 512 [ 384.099509][T17614] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 384.120866][T17614] EXT4-fs (loop6): 1 truncate cleaned up [ 384.121215][T17614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.141200][T17612] loop0: detected capacity change from 0 to 1024 [ 384.142649][T17612] EXT4-fs: Ignoring removed orlov option [ 384.159001][ T29] audit: type=1400 audit(1789385879.730:1450): avc: denied { write } for pid=17613 comm="syz.6.3274" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.161353][T17612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.245375][T17622] netlink: 'syz.1.3276': attribute type 5 has an invalid length. [ 384.245407][T17622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3276'. [ 384.382618][T16732] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.568711][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 384.615656][ T29] audit: type=1400 audit(1789385880.130:1451): avc: denied { write } for pid=17619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.615687][ T29] audit: type=1400 audit(1789385880.150:1452): avc: denied { write } for pid=17643 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.994960][T12185] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.238515][T15573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.546121][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a712800: rx timeout, send abort [ 386.046159][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4200: rx timeout, send abort [ 386.046225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a712800: abort rx timeout. Force session deactivation [ 386.279650][T17697] loop1: detected capacity change from 0 to 1024 [ 386.280021][T17697] EXT4-fs: Ignoring removed orlov option [ 386.296823][T17697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.546225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4200: abort rx timeout. Force session deactivation [ 387.089284][T16183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.128052][T17710] loop1: detected capacity change from 0 to 4096 [ 387.142403][T17710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.237662][T17713] loop0: detected capacity change from 0 to 512 [ 387.243288][T17713] EXT4-fs: Ignoring removed i_version option [ 387.247857][T17713] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.259009][T17713] EXT4-fs (loop0): orphan cleanup on readonly fs [ 387.264684][T17713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 387.265280][T17713] Quota error (device loop0): write_blk: dquota write failed [ 387.265312][T17713] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 387.265432][T17713] Quota error (device loop0): write_blk: dquota write failed [ 387.265652][T17713] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 387.265831][T17713] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.3290: Failed to acquire dquot type 1 [ 387.265862][T17713] loop0: lost filesystem error report for type 5 error -28 [ 387.267649][T17713] EXT4-fs (loop0): 1 truncate cleaned up [ 387.319207][T17628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.334680][ T29] audit: type=1400 audit(1789385882.920:1453): avc: denied { write } for pid=17709 comm="syz.1.3289" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.449026][T17720] netlink: 'syz.6.3292': attribute type 5 has an invalid length. [ 387.449078][T17720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3292'. [ 387.558599][T17731] netlink: 'syz.3.3297': attribute type 5 has an invalid length. [ 387.558730][T17731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3297'. [ 387.664190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.754395][T17740] loop6: detected capacity change from 0 to 1024 [ 387.758887][T17740] EXT4-fs: Ignoring removed orlov option [ 387.780875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a922c00: rx timeout, send abort [ 388.183748][T17733] ================================================================== [ 388.183791][T17733] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 388.183842][T17733] [ 388.183846][T17733] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 0: [ 388.183862][T17733] tick_do_update_jiffies64+0x113/0x1c0 [ 388.183888][T17733] tick_nohz_handler+0x88/0x380 [ 388.183913][T17733] __hrtimer_run_queues+0x1f8/0x510 [ 388.183937][T17733] hrtimer_interrupt+0x27b/0x860 [ 388.183959][T17733] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 388.183986][T17733] sysvec_apic_timer_interrupt+0x6f/0x80 [ 388.184015][T17733] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.184040][T17733] pcpu_memcg_post_alloc_hook+0x113/0x190 [ 388.184085][T17733] pcpu_alloc_noprof+0xa70/0xf70 [ 388.184115][T17733] futex_hash_allocate+0x20f/0x890 [ 388.184142][T17733] futex_hash_allocate_default+0x157/0x170 [ 388.184172][T17733] copy_process+0x18be/0x2340 [ 388.184198][T17733] kernel_clone+0x1c0/0x5f0 [ 388.184224][T17733] __se_sys_clone3+0x1f5/0x230 [ 388.184249][T17733] __x64_sys_clone3+0x31/0x40 [ 388.184274][T17733] x64_sys_call+0x437/0x2550 [ 388.184300][T17733] do_syscall_64+0x112/0x360 [ 388.184332][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.184353][T17733] [ 388.184360][T17733] read to 0xffffffff86e07a00 of 8 bytes by task 17733 on cpu 1: [ 388.184376][T17733] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 388.184413][T17733] count_shadow_nodes+0x6a/0x250 [ 388.184432][T17733] do_shrink_slab+0x61/0x650 [ 388.184456][T17733] shrink_slab+0x53b/0x8e0 [ 388.184478][T17733] shrink_node+0x6b8/0x2000 [ 388.184503][T17733] do_try_to_free_pages+0x408/0xca0 [ 388.184534][T17733] try_to_free_mem_cgroup_pages+0x201/0x420 [ 388.184573][T17733] mem_cgroup_force_empty_write+0x77/0x100 [ 388.184601][T17733] cgroup_file_write+0x197/0x350 [ 388.184635][T17733] kernfs_fop_write_iter+0x1d2/0x2e0 [ 388.184661][T17733] vfs_write+0x57f/0x9a0 [ 388.184691][T17733] ksys_write+0xdc/0x1a0 [ 388.184719][T17733] __x64_sys_write+0x40/0x50 [ 388.184746][T17733] x64_sys_call+0x154e/0x2550 [ 388.184772][T17733] do_syscall_64+0x112/0x360 [ 388.184804][T17733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.184827][T17733] [ 388.184830][T17733] value changed: 0x0000000100002233 -> 0x0000000100002234 [ 388.184842][T17733] [ 388.184845][T17733] Reported by Kernel Concurrency Sanitizer on: [ 388.184856][T17733] CPU: 1 UID: 0 PID: 17733 Comm: syz.1.3298 Not tainted syzkaller #0 PREEMPT(lazy) [ 388.184885][T17733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 388.184900][T17733] ================================================================== [ 388.280933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4000: rx timeout, send abort [ 388.280987][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a922c00: abort rx timeout. Force session deactivation [ 388.496731][ T29] audit: type=1400 audit(1789385884.090:1454): avc: denied { write } for pid=17746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.536438][ T29] audit: type=1400 audit(1789385884.130:1455): avc: denied { write } for pid=17759 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.635733][ T29] audit: type=1400 audit(1789385884.230:1456): avc: denied { write } for pid=17763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.676357][ T29] audit: type=1400 audit(1789385884.270:1457): avc: denied { write } for pid=17774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.781016][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5c4000: abort rx timeout. Force session deactivation [ 388.876127][ T29] audit: type=1400 audit(1789385884.470:1458): avc: denied { write } for pid=17778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.295613][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 394.295629][ T29] audit: type=1400 audit(1789385889.890:1462): avc: denied { write } for pid=17820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.314430][ T29] audit: type=1400 audit(1789385889.900:1463): avc: denied { write } for pid=17831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.697126][ T29] audit: type=1400 audit(1789385890.290:1464): avc: denied { write } for pid=17834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.735407][ T29] audit: type=1400 audit(1789385890.330:1465): avc: denied { write } for pid=17845 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.878758][ T29] audit: type=1400 audit(1789385890.470:1466): avc: denied { write } for pid=17848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.915262][ T29] audit: type=1400 audit(1789385890.510:1467): avc: denied { write } for pid=17859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.138390][ T29] audit: type=1400 audit(1789385890.730:1468): avc: denied { write } for pid=17862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.174603][ T29] audit: type=1400 audit(1789385890.770:1469): avc: denied { write } for pid=17873 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.271452][ T29] audit: type=1400 audit(1789385890.860:1470): avc: denied { write } for pid=17876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.308318][ T29] audit: type=1400 audit(1789385890.900:1471): avc: denied { write } for pid=17887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1