last executing test programs: 27m17.797935524s ago: executing program 1 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 27m17.743460706s ago: executing program 1 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 27m17.663806538s ago: executing program 1 (id=258): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000007000000000000006400000000000000bc9952f8a00a9615a389bd48231da154220a3da994b8711f0eb2579ab26ab5993d24e75432d7353523f71d90a1e5ffd66b2043bc54b1f5d4a15755140b6279804061d71dee17da73b098fcc488b823d340867ee94f7e88b8798963a66a15754562245079c842934f923e3a0793807f79abf9b821df7eac01593fc29979816e127b7154d732ac78fec032c0bb43316b7db33e20d6fe4f7f3125be75d4cd84aad150bdad0ed6aaeedff0c5fa9584ff8a70cd9a03073a432610e17642a2fd028921940873793021518952"], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x2, 0xb4, 0x7f}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x99) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x25dfdbfe, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x23}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x33, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x4, 0xd7, &(0x7f0000000600)=""/215, 0x41000, 0x49, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xc, 0x4, 0xd6}, 0x10, 0x10b6b, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x4}, 0x94) r12 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000300), 0xffffffffffffffff, 0x2000) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f00000009c0)={'\x00', 0x90, 0x4, 0x6, 0xa, 0x9, 0x0}) fcntl$setown(r9, 0x8, r14) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40082404, &(0x7f0000000040)=0x5) 27m17.462320082s ago: executing program 1 (id=259): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, 0x0, 0x0) fcntl$getown(r3, 0x9) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000000f80)={0x184, r5, 0x121, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x64b}, {0x8, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xfffffff7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x57c00000}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x13, 0xff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7f}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0xc050) ptrace$cont(0x36, r1, 0x5, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvTF94p4UfP5UXZRWNjWhLCyoHD2g04WJiogc81lIJUsDQmgghUo3Bo/EvUI8mJp68eNLEGPWk8ap3Y0IMF9CDqZndmXa23ZbtdttV9/NJdnmemWf2eb4z8+w+Mw/TALpWJXtLIrZHxM8RMVDL1heo1P65ffPqxB83r04kMTf34u9Jtdytm1cniqLFdtvyzFAakb6bxP4G9U5fvnJufGpq8lKeH5k5//rI9OUrj509P35m8szkhbHjx48dHX3yibHH2xJnFtetfW9dPLD35MsfPD8xF69892nW3u35+nIcNYNrrrMSlZjLLSztr74/tOZP/2fZUUonvR1sCKvSExHZ4eqr9v+B6ImFgzcQz70zn/m6Qw0E1k3227RrydKe/N90/vcL+C9K9HHoUsUvfnb9W7w2cvzRaTeezt4nq/Hfzl+1Nb2RZteyg7Ur9uUuaU+ssf7tEXFq9s8Ps1c0vA8BANBeX2bjn0cbjf/SuKtUbmc+hzIYEYcjYndE/C8i9kTE/yOqZe+OiHtWWX9lUX7p+OfHLS0F1qRs/PdUPrdVP/5L8xLJfG5HNf6+5NWzU5NH8n0yFH2bsvzoCnV89exP7y+3rlIa/2WvrP5iLJi347feTfXbnB6fGV9DyHVuvB2xr7dR/Mn8mDfbA3sjYl8Ln5/ts7OPfHIgS+/ctnT9neNfQRvmmeY+jni4dvxnY1H8haRW03LzkyObY2ryyEhxViz1/Q/XXyjn+0rpuvg3NxfT5laDbSA7/lsbnv95/EU3KOZrp1dfx/Vf3lv2mmbp8U/i1Gy5RO38T0tLsvO/P3mpmu7Pl705PjNzaTSiP19Qt3xsYdsiX5TP4h861Lj/747466N8u/0RkZ3E90bEfRFxMG/7/RHxQEQcWiH+b5958LWV91CL538bZPGfXun4Rwwm5fn6FhI95775Yrn6m/v+O1ZNDeVLmvn+a7aBa9l3AAAA8G+RVuegk3S4SJduTu2JrenUxemZw5V448Lp2lz1YPSlxZ2ugdL90NH83nCRH1uUPxoRu6r/02hLNT88cXFqRycDB6rP6tT1/0jT4eHaul97Ot06YN2tah6t/HTgZ5+3vzHAhvK8JnQv/R+6l/4P3Uv/h+7VqP9fi7jdgaYAG8zvP3Qv/R+6l/4P3Uv/h6609JH44s+ttPKk/0Ji98k1bb7uibmBdfnk2dVv1bNOkUb5j3Ysm0giorUqIl25TH8TtXcskd6xzIkWd8sqEgfzxKaIaHaraxu2Vzv7vQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAufwcAAP//eDnc9Q==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) 27m14.55942574s ago: executing program 1 (id=266): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='nilfs2\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x10002, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r2 = open(0x0, 0x4827e, 0x20) fallocate(r2, 0x0, 0x832d, 0x87ffffd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 27m13.769171109s ago: executing program 1 (id=271): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x301f699}, 0x250, 0x1, 0xbd6, 0xe, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x60, 0x9, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r3, 0x0) read(r3, &(0x7f0000000080)=""/221, 0xdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008042) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000280)=""/155) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, 0x0, 0x0) 26m58.588825324s ago: executing program 32 (id=271): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x301f699}, 0x250, 0x1, 0xbd6, 0xe, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x60, 0x9, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r3, 0x0) read(r3, &(0x7f0000000080)=""/221, 0xdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20044804}, 0x4008042) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000280)=""/155) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, 0x0, 0x0) 25m12.182192753s ago: executing program 2 (id=799): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100"], 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3f74, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x39, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 25m11.46131519s ago: executing program 2 (id=801): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x402}, 0x100480, 0xe7e, 0x0, 0x3, 0x80000001, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f0000000180)='\t(*l\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) pipe(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xe, 0x80, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x8}, &(0x7f0000000200)={0x0, 0x100000001, 0x5, 0x3, 0x4, 0x10, 0x0, 0x9}, 0x0, &(0x7f0000000280), 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 25m11.127742178s ago: executing program 2 (id=805): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xfd, 0x0, 0x10, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x9}, 0x13014, 0x0, 0x2, 0x8, 0x3fe, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000200)='./config\x00', 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x14b142, 0x0) sendfile(r4, r4, 0x0, 0x1000000201005) mkdir(0x0, 0x1ff) memfd_secret(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 25m10.575695021s ago: executing program 2 (id=807): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, 0x5, 0x401, 0x1000000080001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(0x0, 0x800) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x4a040, 0x46) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x44000160) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@sr0, r4, &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x614e00, 0x100) 25m9.386150339s ago: executing program 2 (id=814): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) setns(0xc9, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r0}}, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000409000000030000000000000002000000007600571e002e0061"], 0x0, 0x3a, 0x0, 0x1, 0x3}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x45, 0x3, "ed02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc497834"}]}], {0x14}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000300)={0x1012, 0x29, 0x2, {0x7, [{{0x20, 0x3, 0x3}, 0x100000000, 0xbc, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flistxattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x70d59, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x1290, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x6, 0x0, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 25m8.828107852s ago: executing program 2 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x12397344714f8a93, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) getpriority(0x1, r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6015}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="0196b30600000000170000000c00000000000000000000000000000000532fd5768d6029333cd04c7b1d3ea3c2f00e35dc8dc5b892f129cab9f90f71c65d8671351daba3a10e9621eedb1100aede73fd6973814534111e1038d643c1029f3b66a128862e1b03e8ef37dacad5d548608dea91da19f3807024abda200d87c8360196e41b3688d2dc09792c22337bac300eff980f9bbc03ac4c68549e28455067f3e0502cb70bbc7a8b719d565ecb1a321936951fd213c6ab9fc9cca6321277aac274ffe10b76dbfcb2abdbf5b38a98acd0ecd3ccfc0da85a785adca65b0e5f327491aa03ca9af35c3ec551e7835666a44eef4c298adba095118519802f2207f4"], 0x20}}, 0x4000004) 25m8.827661582s ago: executing program 33 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x12397344714f8a93, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) getpriority(0x1, r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6015}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x20}}, 0x4000004) 22m5.843331973s ago: executing program 4 (id=1848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007002abd720000000000fe80000000000000000000100000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac1414bb00"/188], 0x104}}, 0x8000) 22m5.774542584s ago: executing program 4 (id=1849): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x402}, 0x100480, 0xe7e, 0x0, 0x3, 0x80000001, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x2000)=nil, 0x2000, &(0x7f0000000180)='\t(*l\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) pipe(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x134) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x138) write(r2, &(0x7f0000000000)='7', 0x1) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xe, 0x80, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x8}, &(0x7f0000000200)={0x0, 0x100000001, 0x5, 0x3, 0x4, 0x10, 0x0, 0x9}, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 22m4.884614455s ago: executing program 4 (id=1857): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) io_uring_enter(0xffffffffffffffff, 0x124, 0x14, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x12000d0, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) faccessat2(r1, &(0x7f00000000c0)='./file1\x00', 0x100, 0x3a00) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') lgetxattr(0x0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_names\x00') pread64(r2, &(0x7f00000003c0)=""/158, 0x9e, 0x4) setns(0xc9, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22m4.838777066s ago: executing program 4 (id=1858): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x60600, 0x900) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x400, &(0x7f0000000000)={[{@nodiscard}, {@nodiscard}]}, 0x1, 0x24b, &(0x7f0000001d40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x157) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, 0x0, &(0x7f0000000040)) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) write(r1, &(0x7f0000000280)='1.0\n', 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=r5, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c0001008400000003000000040001"], 0xc8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) read(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed8004, &(0x7f0000000340)={[{@noblock_validity}, {}, {@delalloc}, {@noload}, {@nobarrier}, {@lazytime}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\x96\xe1\xf0\xc7e,m\x86]\x89T\x94\x9f\xa9@C\xb8\x94\xdd\xee\x02\xa5\xad$\xf7|\x80\xf6\xb6\xcf\x15\x90\x8d\xba?\xe50{%\xfeV\xaf\xc0\xbc,\nT\xd8\x0eL\xf9\x17\xfc\x97\"'}}, {@obj_role={'obj_role', 0x3d, '\x18\r'}}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) 22m4.27691785s ago: executing program 4 (id=1860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) 22m3.148426936s ago: executing program 4 (id=1865): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x3b, 0x0, &(0x7f0000000080)={0x0, 0x2, [0xb6c, 0x2ed, 0xf71, 0x328]}) syz_open_dev$rtc(&(0x7f00000000c0), 0x1400000000, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200", @ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=r0], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a9) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) shutdown(r4, 0x1) 22m3.099160357s ago: executing program 34 (id=1865): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x3b, 0x0, &(0x7f0000000080)={0x0, 0x2, [0xb6c, 0x2ed, 0xf71, 0x328]}) syz_open_dev$rtc(&(0x7f00000000c0), 0x1400000000, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200", @ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=r0], 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a9) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f00000000c0)={0x0, {{0x29, 0x4e21, 0x6, @loopback, 0xb2}}}, 0x9ff9a974932df96) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) shutdown(r4, 0x1) 5.413451034s ago: executing program 6 (id=16417): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000540), &(0x7f0000000700)=r3}, 0x3d) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) 4.190442203s ago: executing program 6 (id=16432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.708619687s ago: executing program 3 (id=16455): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 2.626590889s ago: executing program 3 (id=16456): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f0000000540)="$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") 2.488505332s ago: executing program 7 (id=16457): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5"], 0xdd12}], 0x1}, 0x20040890) 2.440172033s ago: executing program 6 (id=16458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x1f00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000240001002abd7000fedbdf25030000000600030000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4f64, 0x830d}, 0x100700, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x7fff, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d9740501000000000800024000", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 2.431284413s ago: executing program 3 (id=16460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.368151955s ago: executing program 7 (id=16461): unshare(0x58000300) mount(0x0, 0x0, &(0x7f0000000080)='ncpfs\x00', 0x144000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000012c0)={[{@block_validity}, {@nouid32}, {@minixdf}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') sendmmsg$inet(r2, 0x0, 0x0, 0xf00) epoll_create1(0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023896) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) 2.253274328s ago: executing program 5 (id=16465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)="44639987072f3e78d0086b399a0345a9a3d861e9ee29", 0x16}, 0x68) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38) 2.17539111s ago: executing program 0 (id=16467): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.951321735s ago: executing program 3 (id=16468): pipe2(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 1.852369167s ago: executing program 0 (id=16469): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000540), &(0x7f0000000700)=r3}, 0x3d) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) 1.69711263s ago: executing program 3 (id=16470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.419973657s ago: executing program 7 (id=16471): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 1.31208321s ago: executing program 5 (id=16472): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 1.116722514s ago: executing program 5 (id=16473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={0x28, r1, 0x1, 0x70bd2a, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a614}, 0x4008040) 1.116274514s ago: executing program 6 (id=16474): syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1100201628332080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593208001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 973.861798ms ago: executing program 5 (id=16475): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005d000000b7000000000000"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 973.262258ms ago: executing program 5 (id=16476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) syz_emit_ethernet(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000540)={0x60, 0x3, &(0x7f000033a000/0x1000)=nil, &(0x7f0000462000/0x3000)=nil, 0x5, &(0x7f0000000500)=[{0x50, 0x5, 0x6}], 0x1, 0x2, 0x0, 0x3d, 0x24, 0x47}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 953.569148ms ago: executing program 0 (id=16477): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 935.155348ms ago: executing program 0 (id=16478): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 726.895704ms ago: executing program 0 (id=16479): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 672.362385ms ago: executing program 3 (id=16480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 320.149613ms ago: executing program 7 (id=16481): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 198.988026ms ago: executing program 7 (id=16482): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 156.479437ms ago: executing program 6 (id=16483): ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) 150.338886ms ago: executing program 0 (id=16484): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x8480, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="107c70f21f6681b90bea5aaeaf8681826c7a5244f5a3345e013ed2d6a303668e16dca703afafc079c730a07e76e70c41", @ANYRES8, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 146.369157ms ago: executing program 7 (id=16485): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/83, 0x53, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) ioperm(0x4, 0x6, 0x5) syz_read_part_table(0x1055, &(0x7f0000000000)="$eJzszzGxwkAYBOC9eXmQVMEByAAFFNToCWCFDhP4wEyYkCtQABTf19zNzm7xh6/qSpK/ZluyW85JfZqc33t9knJK1hkyjq9Om+Sa3A//bca+aZOSx767dHWySLKav8O0rvGmzNPJ8faJGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1z0DAAD//xNHCpo=") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x0, 0xbc8, &(0x7f0000000f40)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 114.690287ms ago: executing program 6 (id=16486): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 0s ago: executing program 5 (id=16487): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) creat(&(0x7f0000000080)='./file1\x00', 0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) kernel console output (not intermixed with test programs): llmulticast mode [ 1631.587224][ T29] audit: type=1400 audit(1700007083.858:21227): avc: denied { write } for pid=4502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.647104][ T29] audit: type=1400 audit(1700007083.918:21228): avc: denied { write } for pid=4535 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.832504][ T4557] ./dev/sda1: Can't lookup blockdev [ 1631.928489][ T29] audit: type=1400 audit(1700007084.198:21229): avc: denied { write } for pid=4551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.997844][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15016'. [ 1632.028816][ T29] audit: type=1400 audit(1700007084.298:21230): avc: denied { write } for pid=4581 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.209415][ T4592] ./dev/sda1: Can't lookup blockdev [ 1632.422596][ T29] audit: type=1400 audit(1700007084.688:21231): avc: denied { write } for pid=4591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.495040][ T29] audit: type=1400 audit(1700007084.758:21232): avc: denied { write } for pid=4614 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.701272][ T4610] ./dev/sda1: Can't lookup blockdev [ 1632.816546][ T29] audit: type=1400 audit(1700007085.088:21233): avc: denied { write } for pid=4618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1632.869986][ T29] audit: type=1400 audit(1700007085.138:21234): avc: denied { write } for pid=4632 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.188424][ T4657] ./dev/sda1: Can't lookup blockdev [ 1633.251179][ T4662] ./dev/sda1: Can't lookup blockdev [ 1633.316609][ T4668] netlink: 'syz.3.15036': attribute type 1 has an invalid length. [ 1633.316657][ T4668] netlink: 'syz.3.15036': attribute type 2 has an invalid length. [ 1633.353363][ T4668] netlink: 'syz.3.15036': attribute type 13 has an invalid length. [ 1633.601854][ T4673] syzkaller0: entered promiscuous mode [ 1633.601889][ T4673] syzkaller0: entered allmulticast mode [ 1633.769232][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15042'. [ 1633.769259][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15042'. [ 1634.199915][ T4761] FAULT_INJECTION: forcing a failure. [ 1634.199915][ T4761] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.199961][ T4761] CPU: 1 UID: 0 PID: 4761 Comm: syz.6.15060 Not tainted syzkaller #0 PREEMPT(lazy) [ 1634.199993][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.200007][ T4761] Call Trace: [ 1634.200032][ T4761] [ 1634.200040][ T4761] __dump_stack+0x1d/0x30 [ 1634.200082][ T4761] dump_stack_lvl+0x95/0xd0 [ 1634.200125][ T4761] dump_stack+0x15/0x1b [ 1634.200155][ T4761] should_fail_ex+0x262/0x280 [ 1634.200187][ T4761] should_failslab+0x8c/0xb0 [ 1634.200271][ T4761] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1634.200314][ T4761] ? sock_alloc_inode+0x36/0xf0 [ 1634.200348][ T4761] ? sock_alloc_inode+0x36/0xf0 [ 1634.200384][ T4761] ? selinux_socket_create+0xfd/0x180 [ 1634.200443][ T4761] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1634.200474][ T4761] sock_alloc_inode+0x36/0xf0 [ 1634.200504][ T4761] alloc_inode+0x40/0x170 [ 1634.200531][ T4761] __sock_create+0x121/0x580 [ 1634.200614][ T4761] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 1634.200678][ T4761] __sys_socket+0xaf/0x180 [ 1634.200742][ T4761] __x64_sys_socket+0x3f/0x50 [ 1634.200838][ T4761] x64_sys_call+0x246e/0x2550 [ 1634.200868][ T4761] do_syscall_64+0x112/0x360 [ 1634.200905][ T4761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.201041][ T4761] RIP: 0033:0x7ff73e17e159 [ 1634.201188][ T4761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.201311][ T4761] RSP: 002b:00007ff73cbd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1634.201394][ T4761] RAX: ffffffffffffffda RBX: 00007ff73e405fa0 RCX: 00007ff73e17e159 [ 1634.201444][ T4761] RDX: 0000000000000300 RSI: 000000000000000a RDI: 0000000000000011 [ 1634.201492][ T4761] RBP: 00007ff73e215024 R08: 0000000000000000 R09: 0000000000000000 [ 1634.201533][ T4761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.201583][ T4761] R13: 00007ff73e406038 R14: 00007ff73e405fa0 R15: 00007ffd55280998 [ 1634.201712][ T4761] [ 1634.237970][ T4761] socket: no more sockets [ 1634.258646][ T4761] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1634.515091][ T4774] ./dev/sda1: Can't lookup blockdev [ 1634.769571][ T4808] FAULT_INJECTION: forcing a failure. [ 1634.769571][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.769613][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: syz.5.15074 Not tainted syzkaller #0 PREEMPT(lazy) [ 1634.769646][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.769675][ T4808] Call Trace: [ 1634.769683][ T4808] [ 1634.769694][ T4808] __dump_stack+0x1d/0x30 [ 1634.769730][ T4808] dump_stack_lvl+0x95/0xd0 [ 1634.769799][ T4808] dump_stack+0x15/0x1b [ 1634.769881][ T4808] should_fail_ex+0x262/0x280 [ 1634.769911][ T4808] should_failslab+0x8c/0xb0 [ 1634.769944][ T4808] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1634.769988][ T4808] ? sock_alloc_inode+0x36/0xf0 [ 1634.770069][ T4808] ? sock_alloc_inode+0x36/0xf0 [ 1634.770107][ T4808] ? selinux_socket_create+0xfd/0x180 [ 1634.770140][ T4808] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1634.770178][ T4808] sock_alloc_inode+0x36/0xf0 [ 1634.770209][ T4808] alloc_inode+0x40/0x170 [ 1634.770312][ T4808] __sock_create+0x121/0x580 [ 1634.770347][ T4808] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 1634.770440][ T4808] __sys_socket+0xaf/0x180 [ 1634.770482][ T4808] __x64_sys_socket+0x3f/0x50 [ 1634.770512][ T4808] x64_sys_call+0x246e/0x2550 [ 1634.770555][ T4808] do_syscall_64+0x112/0x360 [ 1634.770600][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.770649][ T4808] RIP: 0033:0x7f9196b8e159 [ 1634.770667][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.770697][ T4808] RSP: 002b:00007f91955e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1634.770775][ T4808] RAX: ffffffffffffffda RBX: 00007f9196e15fa0 RCX: 00007f9196b8e159 [ 1634.770795][ T4808] RDX: 0000000000000300 RSI: 000000000000000a RDI: 0000000000000011 [ 1634.770814][ T4808] RBP: 00007f9196c25024 R08: 0000000000000000 R09: 0000000000000000 [ 1634.770832][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.770858][ T4808] R13: 00007f9196e16038 R14: 00007f9196e15fa0 R15: 00007fff1d7db008 [ 1634.770887][ T4808] [ 1634.770914][ T4808] socket: no more sockets [ 1634.790744][ T4810] ./dev/sda1: Can't lookup blockdev [ 1634.876050][ T4808] xt_connbytes: Forcing CT accounting to be enabled [ 1634.876125][ T4808] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1634.959247][ T4813] ./dev/sda1: Can't lookup blockdev [ 1635.172746][ T4836] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15084'. [ 1635.190759][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15084'. [ 1636.070681][ T4927] syzkaller0: entered promiscuous mode [ 1636.070718][ T4927] syzkaller0: entered allmulticast mode [ 1636.135875][ T4939] netlink: 'syz.0.15108': attribute type 39 has an invalid length. [ 1636.302598][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1636.302626][ T29] audit: type=1400 audit(1700007088.568:21249): avc: denied { write } for pid=4943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.379353][ T4966] ./dev/sda1: Can't lookup blockdev [ 1636.403529][ T29] audit: type=1400 audit(1700007088.678:21250): avc: denied { write } for pid=4967 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.515256][ T4982] netlink: 'syz.0.15120': attribute type 1 has an invalid length. [ 1636.515340][ T4982] netlink: 'syz.0.15120': attribute type 2 has an invalid length. [ 1636.533909][ T4982] netlink: 'syz.0.15120': attribute type 13 has an invalid length. [ 1636.611164][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15122'. [ 1636.668242][ T4982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1636.668502][ T4998] ./dev/sda1: Can't lookup blockdev [ 1636.706636][ T5001] ./dev/sda1: Can't lookup blockdev [ 1636.713677][ T4999] netlink: 'syz.5.15128': attribute type 39 has an invalid length. [ 1636.719466][ T4982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1636.732346][ T4999] hsr_slave_0: left promiscuous mode [ 1636.732956][ T4999] hsr_slave_1: left promiscuous mode [ 1636.905260][ T29] audit: type=1400 audit(1700007089.178:21251): avc: denied { write } for pid=5007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1636.967022][ T29] audit: type=1400 audit(1700007089.238:21252): avc: denied { write } for pid=5035 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.024826][ T5038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15139'. [ 1637.184741][ T29] audit: type=1400 audit(1700007089.458:21253): avc: denied { write } for pid=5048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.214174][ T5066] netlink: 'syz.3.15145': attribute type 1 has an invalid length. [ 1637.214195][ T5066] netlink: 'syz.3.15145': attribute type 2 has an invalid length. [ 1637.218991][ T5064] ./dev/sda1: Can't lookup blockdev [ 1637.236600][ T5066] netlink: 'syz.3.15145': attribute type 13 has an invalid length. [ 1637.305180][ T5069] netlink: 'syz.7.15147': attribute type 39 has an invalid length. [ 1637.307713][ T5073] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1637.322721][ T29] audit: type=1400 audit(1700007089.588:21254): avc: denied { write } for pid=5072 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.509675][ T5096] ./dev/sda1: Can't lookup blockdev [ 1637.553674][ T5081] syzkaller0: entered promiscuous mode [ 1637.553698][ T5081] syzkaller0: entered allmulticast mode [ 1637.756411][ T29] audit: type=1400 audit(1700007090.028:21255): avc: denied { write } for pid=5102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.784933][T18501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.823635][ T5117] bond2: entered allmulticast mode [ 1637.847871][T18501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.879250][ T29] audit: type=1400 audit(1700007090.148:21256): avc: denied { write } for pid=5124 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1637.926980][T18501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.988021][T18501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.032600][ T5106] lo speed is unknown, defaulting to 1000 [ 1638.032905][ T5106] syzkaller0 speed is unknown, defaulting to 1000 [ 1638.034066][ T5106] wg0 speed is unknown, defaulting to 1000 [ 1638.202566][T18501] bridge0: port 3(team0) entered disabled state [ 1638.212542][T18501] bridge_slave_1: left allmulticast mode [ 1638.212574][T18501] bridge_slave_1: left promiscuous mode [ 1638.212850][T18501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.225297][T18501] bridge_slave_0: left allmulticast mode [ 1638.225351][T18501] bridge_slave_0: left promiscuous mode [ 1638.225573][T18501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.265388][ T29] audit: type=1400 audit(1700007090.538:21257): avc: denied { write } for pid=5142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.331324][ T29] audit: type=1400 audit(1700007090.598:21258): avc: denied { write } for pid=5160 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.363979][T18501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.376188][T18501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.386991][T18501] bond0 (unregistering): Released all slaves [ 1638.394971][T18501] bond1 (unregistering): Released all slaves [ 1638.404044][T18501] bond2 (unregistering): Released all slaves [ 1638.468137][T18501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.468159][T18501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.476380][T18501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.476402][T18501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.501467][T18501] veth1_macvtap: left promiscuous mode [ 1638.501550][T18501] veth0_macvtap: left promiscuous mode [ 1638.501630][T18501] veth1_vlan: left promiscuous mode [ 1638.501705][T18501] veth0_vlan: left promiscuous mode [ 1638.842881][T18501] team_slave_1 (unregistering): left promiscuous mode [ 1638.842917][T18501] team_slave_1 (unregistering): left allmulticast mode [ 1638.861341][T18501] team0 (unregistering): Port device team_slave_1 removed [ 1638.875318][T18501] team_slave_0 (unregistering): left promiscuous mode [ 1638.875348][T18501] team_slave_0 (unregistering): left allmulticast mode [ 1638.885400][T18501] team0 (unregistering): Port device team_slave_0 removed [ 1638.986486][ T5179] lo speed is unknown, defaulting to 1000 [ 1638.992751][ T5179] syzkaller0 speed is unknown, defaulting to 1000 [ 1639.022737][ T5179] wg0 speed is unknown, defaulting to 1000 [ 1639.046200][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.046246][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.046332][ T5106] bridge_slave_0: entered allmulticast mode [ 1639.046979][ T5106] bridge_slave_0: entered promiscuous mode [ 1639.074978][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.075094][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.075170][ T5106] bridge_slave_1: entered allmulticast mode [ 1639.075636][ T5106] bridge_slave_1: entered promiscuous mode [ 1639.119594][ T5205] ./dev/sda1: Can't lookup blockdev [ 1639.150518][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.167168][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.187960][ T5213] netlink: 228 bytes leftover after parsing attributes in process `syz.6.15185'. [ 1639.216876][ T5106] team0: Port device team_slave_0 added [ 1639.224385][ T5106] team0: Port device team_slave_1 added [ 1639.259323][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.259356][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1639.259405][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.261008][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.261056][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1639.261203][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.382262][ T5106] hsr_slave_0: entered promiscuous mode [ 1639.382695][ T5106] hsr_slave_1: entered promiscuous mode [ 1639.382899][ T5106] debugfs: 'hsr0' already exists in 'hsr' [ 1639.382915][ T5106] Cannot create hsr debugfs directory [ 1639.537948][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1639.697482][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1639.855968][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1640.012868][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1640.320829][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15188'. [ 1640.365559][ T5290] UDC core: g1: couldn't find an available UDC or it's busy [ 1640.490943][ T5307] ./dev/sda1: Can't lookup blockdev [ 1640.541062][ T5106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1640.556486][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1640.566602][ T5106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1640.578015][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1640.586897][ T5106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1640.597246][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1640.608874][ T5106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1640.618472][ T5106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1640.680679][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.696677][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.707092][T18503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.707147][T18503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.724425][T18182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.724464][T18182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.947439][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.017478][ T5355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15202'. [ 1641.053993][ T5370] ./dev/sda1: Can't lookup blockdev [ 1641.088003][ T5106] veth0_vlan: entered promiscuous mode [ 1641.099085][ T5106] veth1_vlan: entered promiscuous mode [ 1641.118885][ T5106] veth0_macvtap: entered promiscuous mode [ 1641.128419][ T5106] veth1_macvtap: entered promiscuous mode [ 1641.141234][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.150150][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.159123][ T5210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.159292][ T5210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.159432][ T5210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.159528][ T5210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.357950][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1641.357978][ T29] audit: type=1400 audit(1700007093.628:21273): avc: denied { write } for pid=5388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.409842][ T29] audit: type=1400 audit(1700007093.678:21274): avc: denied { write } for pid=5399 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.529398][ T5411] UDC core: g1: couldn't find an available UDC or it's busy [ 1641.690140][T18503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.704670][ T29] audit: type=1400 audit(1700007093.978:21275): avc: denied { write } for pid=5404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.733414][ T5434] ./dev/sda1: Can't lookup blockdev [ 1641.762518][T18503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.778791][ T29] audit: type=1400 audit(1700007094.048:21276): avc: denied { write } for pid=5441 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.860248][T18503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.927124][T18503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.052524][ T29] audit: type=1400 audit(1700007094.318:21277): avc: denied { write } for pid=5454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.099481][ T29] audit: type=1400 audit(1700007094.368:21278): avc: denied { write } for pid=5474 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.228467][ T5426] lo speed is unknown, defaulting to 1000 [ 1642.229005][ T5426] syzkaller0 speed is unknown, defaulting to 1000 [ 1642.229640][ T5426] wg0 speed is unknown, defaulting to 1000 [ 1642.405005][T18503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.425002][T18503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.438086][T18503] bond0 (unregistering): Released all slaves [ 1642.446749][T18503] bond1 (unregistering): Released all slaves [ 1642.467555][T18503] bond2 (unregistering): Released all slaves [ 1642.480551][ T5497] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15232'. [ 1642.596186][T18503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.596215][T18503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.598593][T18503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.598659][T18503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.641223][T18503] veth1_macvtap: left promiscuous mode [ 1642.641266][T18503] veth0_macvtap: left promiscuous mode [ 1642.641449][T18503] veth1_vlan: left promiscuous mode [ 1642.641488][T18503] veth0_vlan: left promiscuous mode [ 1642.952534][T18503] team_slave_1 (unregistering): left promiscuous mode [ 1642.952569][T18503] team_slave_1 (unregistering): left allmulticast mode [ 1642.963621][T18503] team0 (unregistering): Port device team_slave_1 removed [ 1642.969113][T18503] team_slave_0 (unregistering): left promiscuous mode [ 1642.969171][T18503] team_slave_0 (unregistering): left allmulticast mode [ 1642.974832][T18503] team0 (unregistering): Port device team_slave_0 removed [ 1643.026807][ T5532] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15244'. [ 1643.114261][ T5503] syzkaller0: entered promiscuous mode [ 1643.114367][ T5503] syzkaller0: entered allmulticast mode [ 1643.254926][ T5557] UDC core: g1: couldn't find an available UDC or it's busy [ 1643.422109][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.422227][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.422335][ T5426] bridge_slave_0: entered allmulticast mode [ 1643.424245][ T5426] bridge_slave_0: entered promiscuous mode [ 1643.426562][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.426674][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.458415][ T5426] bridge_slave_1: entered allmulticast mode [ 1643.461271][ T5426] bridge_slave_1: entered promiscuous mode [ 1643.504771][ T5426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.521143][ T5426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.545935][ T5426] team0: Port device team_slave_0 added [ 1643.549065][ T5426] team0: Port device team_slave_1 added [ 1643.575594][ T29] audit: type=1400 audit(1700007095.848:21279): avc: denied { write } for pid=5567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1643.582464][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.582500][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.585510][ T5426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.587950][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.587981][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.588080][ T5426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.713797][ T29] audit: type=1400 audit(1700007095.988:21280): avc: denied { write } for pid=5594 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1643.741779][ T5426] hsr_slave_0: entered promiscuous mode [ 1643.746678][ T5426] hsr_slave_1: entered promiscuous mode [ 1643.747278][ T5426] debugfs: 'hsr0' already exists in 'hsr' [ 1643.747312][ T5426] Cannot create hsr debugfs directory [ 1643.779776][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1643.832472][ T5604] No source specified [ 1643.879927][ T5606] bond2: entered allmulticast mode [ 1643.976704][ T5616] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15270'. [ 1644.113548][ T29] audit: type=1400 audit(1700007096.378:21281): avc: denied { write } for pid=5614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.146320][ T5625] syzkaller0: entered promiscuous mode [ 1644.146349][ T5625] syzkaller0: entered allmulticast mode [ 1644.211942][ T29] audit: type=1400 audit(1700007096.478:21282): avc: denied { write } for pid=5634 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.274384][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1644.275120][ T5637] netlink: 'syz.3.15275': attribute type 29 has an invalid length. [ 1644.290150][ T5637] netlink: 'syz.3.15275': attribute type 29 has an invalid length. [ 1644.332149][ T5637] netlink: 'syz.3.15275': attribute type 29 has an invalid length. [ 1644.356550][ T5641] UDC core: g1: couldn't find an available UDC or it's busy [ 1644.464621][ T5426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1644.496666][ T5426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1644.497712][ T5426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1644.505379][ T5426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1644.510536][ T5426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1644.530978][ T5426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1644.531547][ T5426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1644.538603][ T5426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1644.662213][ T5426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.680662][ T5426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.689981][T18503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.690028][T18503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.699891][T23323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.700001][T23323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.940299][ T5687] bond3: entered allmulticast mode [ 1645.030248][ T5426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.072460][ T5675] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15278'. [ 1645.211131][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15278'. [ 1645.235871][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15282'. [ 1645.245189][ T5719] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15282'. [ 1645.336143][ T5426] veth0_vlan: entered promiscuous mode [ 1645.345213][ T5426] veth1_vlan: entered promiscuous mode [ 1645.363016][ T5426] veth0_macvtap: entered promiscuous mode [ 1645.374728][ T5426] veth1_macvtap: entered promiscuous mode [ 1645.399987][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.413590][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.423059][T23323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.425639][T23323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.425739][T23323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.425834][T23323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.575530][ T5748] syzkaller0: entered promiscuous mode [ 1645.575699][ T5748] syzkaller0: entered allmulticast mode [ 1645.754415][ T5770] netlink: 'syz.6.15288': attribute type 1 has an invalid length. [ 1645.754463][ T5770] netlink: 'syz.6.15288': attribute type 2 has an invalid length. [ 1645.773274][ T5770] netlink: 'syz.6.15288': attribute type 13 has an invalid length. [ 1645.845994][T18501] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.178290][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.240505][T18501] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.257882][ T5782] lo speed is unknown, defaulting to 1000 [ 1646.258208][ T5782] syzkaller0 speed is unknown, defaulting to 1000 [ 1646.258696][ T5782] wg0 speed is unknown, defaulting to 1000 [ 1646.258790][T28573] ip6_tunnel:  xmit: Local address not yet configured! [ 1646.317479][T18501] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.352941][ T5755] lo speed is unknown, defaulting to 1000 [ 1646.360023][ T5755] syzkaller0 speed is unknown, defaulting to 1000 [ 1646.360507][ T5755] wg0 speed is unknown, defaulting to 1000 [ 1646.388210][ T5820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15297'. [ 1646.424897][T18501] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.450191][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15297'. [ 1646.647002][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1646.647030][ T29] audit: type=1400 audit(1700007098.918:21295): avc: denied { write } for pid=5830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.714401][ T5858] netlink: 'syz.3.15305': attribute type 1 has an invalid length. [ 1646.714452][ T5858] netlink: 'syz.3.15305': attribute type 2 has an invalid length. [ 1646.732576][ T5858] netlink: 'syz.3.15305': attribute type 13 has an invalid length. [ 1646.754365][ T29] audit: type=1400 audit(1700007099.028:21296): avc: denied { write } for pid=5859 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1646.911856][T18501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.927276][T18501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.937918][T18501] bond0 (unregistering): Released all slaves [ 1646.950201][T18501] bond1 (unregistering): Released all slaves [ 1646.953854][ T5867] netlink: 'syz.0.15308': attribute type 29 has an invalid length. [ 1646.965778][T18501] bond2 (unregistering): Released all slaves [ 1646.972356][T18501] bond3 (unregistering): Released all slaves [ 1647.003591][ T5818] syzkaller0: entered promiscuous mode [ 1647.003644][ T5818] syzkaller0: entered allmulticast mode [ 1647.077887][ T5858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1647.121997][T18501] veth1_macvtap: left promiscuous mode [ 1647.122039][T18501] veth0_macvtap: left promiscuous mode [ 1647.122198][T18501] veth1_vlan: left promiscuous mode [ 1647.122243][T18501] veth0_vlan: left promiscuous mode [ 1647.235587][T18501] team_slave_1 (unregistering): left promiscuous mode [ 1647.235624][T18501] team_slave_1 (unregistering): left allmulticast mode [ 1647.251450][T18501] team0 (unregistering): Port device team_slave_1 removed [ 1647.255238][T18501] team_slave_0 (unregistering): left promiscuous mode [ 1647.255262][T18501] team_slave_0 (unregistering): left allmulticast mode [ 1647.277529][T18501] team0 (unregistering): Port device team_slave_0 removed [ 1647.300981][ T5885] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15313'. [ 1647.358550][T13118] wg0 speed is unknown, defaulting to 1000 [ 1647.358582][T13118] infiniband syz0: ib_query_port failed (-19) [ 1647.389652][ T5880] syzkaller0: entered promiscuous mode [ 1647.389682][ T5880] syzkaller0: entered allmulticast mode [ 1647.517555][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.517601][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.517760][ T5755] bridge_slave_0: entered allmulticast mode [ 1647.542750][ T5755] bridge_slave_0: entered promiscuous mode [ 1647.550126][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.550175][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.550241][ T5755] bridge_slave_1: entered allmulticast mode [ 1647.574104][ T5755] bridge_slave_1: entered promiscuous mode [ 1647.625458][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.639699][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.736315][ T5755] team0: Port device team_slave_0 added [ 1647.746314][ T5755] team0: Port device team_slave_1 added [ 1647.773290][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.773316][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.773362][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.776426][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.776471][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.779614][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.970604][ T5755] hsr_slave_0: entered promiscuous mode [ 1647.971059][ T5755] hsr_slave_1: entered promiscuous mode [ 1647.984271][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 1647.984294][ T5755] Cannot create hsr debugfs directory [ 1648.014554][ T29] audit: type=1400 audit(1700007100.288:21297): avc: denied { write } for pid=5923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.084370][ T29] audit: type=1400 audit(1700007100.358:21298): avc: denied { write } for pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.190799][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1648.269132][ T5949] syzkaller0: entered promiscuous mode [ 1648.269164][ T5949] syzkaller0: entered allmulticast mode [ 1648.512487][ T5755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1648.522898][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1648.523530][ T5755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1648.541542][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1648.549550][ T5755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1648.560112][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1648.560866][ T5755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1648.577772][ T29] audit: type=1400 audit(1700007100.848:21299): avc: denied { write } for pid=5966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.611748][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1648.644529][ T29] audit: type=1400 audit(1700007100.918:21300): avc: denied { write } for pid=5998 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.780369][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.793482][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.805458][T28573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.805495][T28573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.827202][T18503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.827253][T18503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.032862][ T29] audit: type=1400 audit(1700007101.298:21301): avc: denied { write } for pid=6013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.105969][ T29] audit: type=1400 audit(1700007101.378:21302): avc: denied { write } for pid=6053 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.198107][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.315721][ T29] audit: type=1400 audit(1700007101.588:21303): avc: denied { write } for pid=6060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.402775][ T29] audit: type=1400 audit(1700007101.668:21304): avc: denied { write } for pid=6087 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.499247][ T5755] veth0_vlan: entered promiscuous mode [ 1649.508462][ T5755] veth1_vlan: entered promiscuous mode [ 1649.531698][ T5755] veth0_macvtap: entered promiscuous mode [ 1649.542409][ T5755] veth1_macvtap: entered promiscuous mode [ 1649.556338][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.569401][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.593050][T18182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.595301][T18182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.595448][T18182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.595565][T18182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.718643][ T6117] validate_nla: 14 callbacks suppressed [ 1649.718675][ T6117] netlink: 'syz.5.15370': attribute type 29 has an invalid length. [ 1649.734016][ T6117] netlink: 'syz.5.15370': attribute type 29 has an invalid length. [ 1649.742442][ T6117] netlink: 'syz.5.15370': attribute type 29 has an invalid length. [ 1650.165437][ T6164] netlink: 'syz.0.15381': attribute type 29 has an invalid length. [ 1650.169174][ T6164] netlink: 'syz.0.15381': attribute type 29 has an invalid length. [ 1650.170026][ T6164] netlink: 'syz.0.15381': attribute type 29 has an invalid length. [ 1650.252663][T18182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.282355][ T6135] lo speed is unknown, defaulting to 1000 [ 1650.290537][ T6135] syzkaller0 speed is unknown, defaulting to 1000 [ 1650.305352][T18182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.400112][ T6166] syzkaller0: entered promiscuous mode [ 1650.400164][ T6166] syzkaller0: entered allmulticast mode [ 1650.468603][T18182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.493181][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1650.529867][T18182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.772178][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.772231][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.772369][ T6135] bridge_slave_0: entered allmulticast mode [ 1650.796279][ T6135] bridge_slave_0: entered promiscuous mode [ 1650.803508][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.803550][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.803707][ T6135] bridge_slave_1: entered allmulticast mode [ 1650.828137][ T6135] bridge_slave_1: entered promiscuous mode [ 1650.931873][T18182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.948601][T18182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.959838][T18182] bond0 (unregistering): Released all slaves [ 1650.969184][T18182] bond1 (unregistering): Released all slaves [ 1650.982029][T18182] bond2 (unregistering): Released all slaves [ 1651.030809][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1651.041669][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.055494][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.081184][T18182] hsr_slave_0: left promiscuous mode [ 1651.087077][T18182] hsr_slave_1: left promiscuous mode [ 1651.087447][T18182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.087466][T18182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.109222][T18182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.109249][T18182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.128897][T18182] veth1_macvtap: left promiscuous mode [ 1651.128935][T18182] veth0_macvtap: left promiscuous mode [ 1651.129078][T18182] veth1_vlan: left promiscuous mode [ 1651.129112][T18182] veth0_vlan: left promiscuous mode [ 1651.172571][ T6242] __nla_validate_parse: 1 callbacks suppressed [ 1651.172601][ T6242] netlink: 108 bytes leftover after parsing attributes in process `syz.6.15401'. [ 1651.315633][T18182] team_slave_1 (unregistering): left promiscuous mode [ 1651.315673][T18182] team_slave_1 (unregistering): left allmulticast mode [ 1651.330679][T18182] team0 (unregistering): Port device team_slave_1 removed [ 1651.341423][T18182] team_slave_0 (unregistering): left promiscuous mode [ 1651.341474][T18182] team_slave_0 (unregistering): left allmulticast mode [ 1651.356916][T18182] team0 (unregistering): Port device team_slave_0 removed [ 1651.417140][ T6260] netlink: 'syz.6.15409': attribute type 29 has an invalid length. [ 1651.447528][ T6218] syzkaller0: entered promiscuous mode [ 1651.447569][ T6218] syzkaller0: entered allmulticast mode [ 1651.463292][ T6135] team0: Port device team_slave_0 added [ 1651.467829][ T6260] netlink: 'syz.6.15409': attribute type 29 has an invalid length. [ 1651.488757][ T6260] netlink: 'syz.6.15409': attribute type 29 has an invalid length. [ 1651.489210][ T6135] team0: Port device team_slave_1 added [ 1651.519847][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.519866][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.519899][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.566157][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.566178][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.566222][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.654093][ T6135] hsr_slave_0: entered promiscuous mode [ 1651.654500][ T6135] hsr_slave_1: entered promiscuous mode [ 1651.654825][ T6135] debugfs: 'hsr0' already exists in 'hsr' [ 1651.654845][ T6135] Cannot create hsr debugfs directory [ 1651.738976][ T6279] netlink: 108 bytes leftover after parsing attributes in process `syz.6.15413'. [ 1651.824118][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1651.824146][ T29] audit: type=1400 audit(1700007104.098:21311): avc: denied { write } for pid=6263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1651.903605][ T29] audit: type=1400 audit(1700007104.178:21312): avc: denied { write } for pid=6294 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1651.947177][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1652.090867][ T29] audit: type=1400 audit(1700007104.358:21313): avc: denied { write } for pid=6301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.172380][ T6135] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1652.184367][ T29] audit: type=1400 audit(1700007104.458:21314): avc: denied { write } for pid=6319 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.213824][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1652.230039][ T6135] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1652.245067][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1652.254234][ T6135] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1652.266813][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1652.275681][ T6135] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1652.292553][ T6135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1652.351961][ T6334] netlink: 108 bytes leftover after parsing attributes in process `syz.7.15425'. [ 1652.406256][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.504415][ T29] audit: type=1400 audit(1700007104.778:21315): avc: denied { write } for pid=6336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.555916][ T29] audit: type=1400 audit(1700007104.828:21316): avc: denied { write } for pid=6355 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.686167][ T29] audit: type=1400 audit(1700007104.958:21317): avc: denied { write } for pid=6357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.737009][ T29] audit: type=1400 audit(1700007105.008:21318): avc: denied { write } for pid=6368 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.863547][ T29] audit: type=1400 audit(1700007105.128:21319): avc: denied { write } for pid=6370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.906194][ T29] audit: type=1400 audit(1700007105.178:21320): avc: denied { write } for pid=6381 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.344868][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.353728][T28573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.353808][T28573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.361131][T28573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.361170][T28573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.648425][ T6418] netlink: 'syz.0.15438': attribute type 39 has an invalid length. [ 1655.648581][ T6418] hsr_slave_0: left promiscuous mode [ 1655.657325][ T6418] hsr_slave_1: left promiscuous mode [ 1655.718102][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.888005][ T6433] syzkaller0: entered promiscuous mode [ 1655.888037][ T6433] syzkaller0: entered allmulticast mode [ 1656.081744][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15442'. [ 1656.093101][ T6449] netlink: 228 bytes leftover after parsing attributes in process `syz.6.15442'. [ 1656.146413][ T6135] veth0_vlan: entered promiscuous mode [ 1656.159237][ T6135] veth1_vlan: entered promiscuous mode [ 1656.214232][ T6135] veth0_macvtap: entered promiscuous mode [ 1656.226512][ T6135] veth1_macvtap: entered promiscuous mode [ 1656.252774][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.266614][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.313154][T18503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.313353][T18503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.313413][T18503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.313444][T18503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.744900][ T6500] netlink: 'syz.5.15450': attribute type 29 has an invalid length. [ 1656.747251][ T6500] netlink: 'syz.5.15450': attribute type 29 has an invalid length. [ 1656.748096][ T6500] netlink: 'syz.5.15450': attribute type 29 has an invalid length. [ 1656.847097][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1656.847145][ T29] audit: type=1400 audit(1700007109.118:21328): avc: denied { write } for pid=6512 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.892121][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15457'. [ 1656.902217][ T6516] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15457'. [ 1657.098626][ T6533] syzkaller0: entered promiscuous mode [ 1657.098659][ T6533] syzkaller0: entered allmulticast mode [ 1657.121981][ T29] audit: type=1400 audit(1700007109.388:21329): avc: denied { write } for pid=6526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.175443][ T29] audit: type=1400 audit(1700007109.448:21330): avc: denied { write } for pid=6549 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.249460][ T6555] netlink: 'syz.0.15464': attribute type 29 has an invalid length. [ 1657.270778][ T6555] netlink: 'syz.0.15464': attribute type 29 has an invalid length. [ 1657.371104][ T6563] netlink: 'syz.0.15464': attribute type 29 has an invalid length. [ 1657.424247][ T6528] lo speed is unknown, defaulting to 1000 [ 1657.424874][ T6528] syzkaller0 speed is unknown, defaulting to 1000 [ 1657.479890][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15470'. [ 1657.490057][ T6581] netlink: 228 bytes leftover after parsing attributes in process `syz.7.15470'. [ 1657.509781][T28573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.528826][ T29] audit: type=1400 audit(1700007109.798:21331): avc: denied { write } for pid=6568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.589228][ T29] audit: type=1400 audit(1700007109.858:21332): avc: denied { write } for pid=6587 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.710702][ T6575] syzkaller0: entered promiscuous mode [ 1657.710749][ T6575] syzkaller0: entered allmulticast mode [ 1657.762041][T28573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.844024][T28573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.977988][T28573] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.150739][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.150797][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.150971][ T6528] bridge_slave_0: entered allmulticast mode [ 1658.151664][ T6528] bridge_slave_0: entered promiscuous mode [ 1658.183640][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.183679][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.205448][ T6528] bridge_slave_1: entered allmulticast mode [ 1658.205907][ T6528] bridge_slave_1: entered promiscuous mode [ 1658.222562][T28573] bridge_slave_1: left allmulticast mode [ 1658.222651][T28573] bridge_slave_1: left promiscuous mode [ 1658.222939][T28573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.302520][ T29] audit: type=1400 audit(1700007110.568:21333): avc: denied { write } for pid=6612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1658.356251][ T29] audit: type=1400 audit(1700007110.628:21334): avc: denied { write } for pid=6634 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1658.418673][T28573] bridge_slave_0: left allmulticast mode [ 1658.418705][T28573] bridge_slave_0: left promiscuous mode [ 1658.418860][T28573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.480569][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15481'. [ 1658.492151][ T6633] netlink: 228 bytes leftover after parsing attributes in process `syz.7.15481'. [ 1658.557269][T28573] bond0 (unregistering): Released all slaves [ 1658.578131][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1658.598632][T28573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.598655][T28573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.599695][T28573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.599727][T28573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.606711][T28573] batman_adv: batadv0: Interface deactivated: dummy0 [ 1658.606760][T28573] batman_adv: batadv0: Removing interface: dummy0 [ 1658.634028][T28573] veth1_macvtap: left promiscuous mode [ 1658.634108][T28573] veth0_macvtap: left promiscuous mode [ 1658.634254][T28573] veth1_vlan: left promiscuous mode [ 1658.634392][T28573] veth0_vlan: left promiscuous mode [ 1658.715063][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15486'. [ 1658.742327][T28573] team0 (unregistering): Port device team_slave_1 removed [ 1658.749666][T28573] team0 (unregistering): Port device team_slave_0 removed [ 1658.787984][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.802392][ T6645] syzkaller0: entered promiscuous mode [ 1658.854210][ T6585] lo speed is unknown, defaulting to 1000 [ 1658.854534][ T6585] syzkaller0 speed is unknown, defaulting to 1000 [ 1658.906861][ T6528] team0: Port device team_slave_0 added [ 1658.910050][ T6528] team0: Port device team_slave_1 added [ 1658.948105][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.948132][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.948164][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.953996][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.954034][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.954115][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.065811][ T6528] hsr_slave_0: entered promiscuous mode [ 1659.066275][ T6528] hsr_slave_1: entered promiscuous mode [ 1659.066493][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 1659.066512][ T6528] Cannot create hsr debugfs directory [ 1659.182664][ T29] audit: type=1400 audit(1700007111.448:21335): avc: denied { write } for pid=6666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.229494][ T29] audit: type=1400 audit(1700007111.498:21336): avc: denied { write } for pid=6684 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.272912][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1659.366808][ T6696] syzkaller0: entered promiscuous mode [ 1659.366885][ T6696] syzkaller0: entered allmulticast mode [ 1659.513071][ T29] audit: type=1400 audit(1700007111.778:21337): avc: denied { write } for pid=6705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.718733][ T6528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1659.731053][ T6528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1659.740423][ T6528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1659.753873][ T6528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1659.754527][ T6528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1659.772849][ T6528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1659.781571][ T6528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1659.790561][ T6528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1659.829683][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15496'. [ 1659.887555][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1659.913299][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.923028][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.923070][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.940145][T18501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.940186][T18501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.289804][ T6832] netlink: 108 bytes leftover after parsing attributes in process `syz.7.15507'. [ 1660.305066][ T6801] syzkaller0: entered promiscuous mode [ 1660.305106][ T6801] syzkaller0: entered allmulticast mode [ 1660.406627][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15508'. [ 1660.715653][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.741715][ T6858] lo speed is unknown, defaulting to 1000 [ 1660.742475][ T6858] syzkaller0 speed is unknown, defaulting to 1000 [ 1661.217309][ T6909] syzkaller0: entered promiscuous mode [ 1661.217404][ T6909] syzkaller0: entered allmulticast mode [ 1661.429549][ T6528] veth0_vlan: entered promiscuous mode [ 1661.446315][ T6528] veth1_vlan: entered promiscuous mode [ 1661.498552][ T6528] veth0_macvtap: entered promiscuous mode [ 1661.510759][ T6528] veth1_macvtap: entered promiscuous mode [ 1661.539834][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.551902][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.641909][T18181] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.642276][T18181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.642582][T18181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.664016][T18182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.987448][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1661.987545][ T29] audit: type=1400 audit(1700007114.258:21347): avc: denied { write } for pid=6982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.996828][ T7024] __nla_validate_parse: 3 callbacks suppressed [ 1661.996897][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15533'. [ 1662.082929][ T29] audit: type=1400 audit(1700007114.348:21348): avc: denied { write } for pid=7036 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.366107][ T29] audit: type=1400 audit(1700007114.638:21349): avc: denied { write } for pid=7053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.417816][ T29] audit: type=1400 audit(1700007114.688:21350): avc: denied { write } for pid=7069 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.686591][ T29] audit: type=1400 audit(1700007114.958:21351): avc: denied { write } for pid=7083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.749570][ T29] audit: type=1400 audit(1700007115.018:21352): avc: denied { write } for pid=7101 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.978472][ T29] audit: type=1400 audit(1700007115.248:21353): avc: denied { write } for pid=7114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.029984][ T29] audit: type=1400 audit(1700007115.298:21354): avc: denied { write } for pid=7133 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.328649][ T29] audit: type=1400 audit(1700007115.598:21355): avc: denied { write } for pid=7152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1663.437055][ T29] audit: type=1400 audit(1700007115.708:21356): avc: denied { write } for pid=7186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1665.311279][ T7360] netlink: 'syz.5.15546': attribute type 39 has an invalid length. [ 1665.325597][ T7360] hsr_slave_0: left promiscuous mode [ 1665.331680][ T7360] hsr_slave_1: left promiscuous mode [ 1665.398487][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15547'. [ 1665.881551][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15558'. [ 1665.897638][ T7413] netlink: 228 bytes leftover after parsing attributes in process `syz.7.15558'. [ 1666.984100][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15568'. [ 1667.038970][ T7518] syzkaller0: entered promiscuous mode [ 1667.039072][ T7518] syzkaller0: entered allmulticast mode [ 1667.174730][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15572'. [ 1667.184501][ T7533] netlink: 228 bytes leftover after parsing attributes in process `syz.7.15572'. [ 1667.210958][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1667.210980][ T29] audit: type=1400 audit(1700007119.478:21391): avc: denied { write } for pid=7521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.279869][ T29] audit: type=1400 audit(1700007119.548:21392): avc: denied { write } for pid=7549 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.517006][ T29] audit: type=1400 audit(1700007119.788:21393): avc: denied { write } for pid=7572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.580016][ T29] audit: type=1400 audit(1700007119.848:21394): avc: denied { write } for pid=7596 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1667.772261][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15586'. [ 1667.783175][ T7609] netlink: 228 bytes leftover after parsing attributes in process `syz.0.15586'. [ 1668.000492][ T29] audit: type=1400 audit(1700007120.268:21395): avc: denied { write } for pid=7618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.112804][ T29] audit: type=1400 audit(1700007120.378:21396): avc: denied { write } for pid=7670 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.349707][ T29] audit: type=1400 audit(1700007120.618:21397): avc: denied { write } for pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.415981][ T29] audit: type=1400 audit(1700007120.688:21398): avc: denied { write } for pid=7704 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.662948][ T7716] syzkaller0: entered promiscuous mode [ 1668.759347][ T29] audit: type=1400 audit(1700007121.028:21399): avc: denied { write } for pid=7714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.831853][ T29] audit: type=1400 audit(1700007121.098:21400): avc: denied { write } for pid=7737 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.237996][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1672.238070][ T29] audit: type=1400 audit(1700007124.508:21421): avc: denied { write } for pid=8193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.321649][ T29] audit: type=1400 audit(1700007124.588:21422): avc: denied { write } for pid=8227 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.703851][ T29] audit: type=1400 audit(1700007124.968:21423): avc: denied { write } for pid=8262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.756663][ T29] audit: type=1400 audit(1700007125.028:21424): avc: denied { write } for pid=8295 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.107562][ T29] audit: type=1400 audit(1700007125.378:21425): avc: denied { write } for pid=8307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.180926][ T29] audit: type=1400 audit(1700007125.448:21426): avc: denied { write } for pid=8347 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.454597][ T29] audit: type=1400 audit(1700007125.718:21427): avc: denied { write } for pid=8362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.525169][ T29] audit: type=1400 audit(1700007125.798:21428): avc: denied { write } for pid=8381 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.795654][ T29] audit: type=1400 audit(1700007126.068:21429): avc: denied { write } for pid=8389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1673.859815][ T29] audit: type=1400 audit(1700007126.128:21430): avc: denied { write } for pid=8415 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1675.213450][ T8504] å1ÿ: renamed from bond_slave_0 (while UP) [ 1675.683329][ T8554] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15771'. [ 1675.744135][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15771'. [ 1676.157901][ T8609] netlink: 'syz.3.15789': attribute type 1 has an invalid length. [ 1676.158023][ T8609] netlink: 'syz.3.15789': attribute type 2 has an invalid length. [ 1676.184483][ T8609] netlink: 'syz.3.15789': attribute type 13 has an invalid length. [ 1676.551707][ T8646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15801'. [ 1676.638315][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15801'. [ 1676.710372][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.710635][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.711014][ T8657] bridge0: entered allmulticast mode [ 1676.761647][ T8657] bridge_slave_1: left allmulticast mode [ 1676.761716][ T8657] bridge_slave_1: left promiscuous mode [ 1676.762072][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.763864][ T8671] netlink: 'syz.7.15807': attribute type 1 has an invalid length. [ 1676.763904][ T8671] netlink: 'syz.7.15807': attribute type 2 has an invalid length. [ 1676.775885][ T8657] bridge_slave_0: left allmulticast mode [ 1676.775947][ T8657] bridge_slave_0: left promiscuous mode [ 1676.778443][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.839042][ T8671] netlink: 'syz.7.15807': attribute type 13 has an invalid length. [ 1677.187586][ T8712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15818'. [ 1677.219388][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15818'. [ 1677.251142][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1677.251168][ T29] audit: type=1400 audit(1700007129.518:21443): avc: denied { write } for pid=8703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.311899][ T8708] syzkaller0: entered promiscuous mode [ 1677.311937][ T8708] syzkaller0: entered allmulticast mode [ 1677.324851][ T29] audit: type=1400 audit(1700007129.598:21444): avc: denied { write } for pid=8722 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.459050][ T8739] netlink: 'syz.0.15825': attribute type 1 has an invalid length. [ 1677.459109][ T8739] netlink: 'syz.0.15825': attribute type 2 has an invalid length. [ 1677.482601][ T8739] netlink: 'syz.0.15825': attribute type 13 has an invalid length. [ 1677.619254][ T29] audit: type=1400 audit(1700007129.888:21445): avc: denied { write } for pid=8740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.672205][ T29] audit: type=1400 audit(1700007129.938:21446): avc: denied { write } for pid=8760 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.010804][ T29] audit: type=1400 audit(1700007130.278:21447): avc: denied { write } for pid=8769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.074024][ T29] audit: type=1400 audit(1700007130.348:21448): avc: denied { write } for pid=8795 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.107971][ T8791] syzkaller0: entered promiscuous mode [ 1678.107995][ T8791] syzkaller0: entered allmulticast mode [ 1678.153598][ T8803] netlink: 'syz.6.15841': attribute type 1 has an invalid length. [ 1678.408054][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15849'. [ 1678.442025][ T8816] syzkaller0: entered promiscuous mode [ 1678.442125][ T8816] syzkaller0: entered allmulticast mode [ 1678.782620][ T29] audit: type=1400 audit(1700007131.048:21449): avc: denied { write } for pid=8839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.876551][ T29] audit: type=1400 audit(1700007131.148:21450): avc: denied { write } for pid=8864 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1678.914960][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15863'. [ 1679.007182][ T8874] syzkaller0: entered promiscuous mode [ 1679.007222][ T8874] syzkaller0: entered allmulticast mode [ 1679.642364][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15877'. [ 1679.659054][ T29] audit: type=1400 audit(1700007131.928:21451): avc: denied { write } for pid=8904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.733709][ T29] audit: type=1400 audit(1700007131.998:21452): avc: denied { write } for pid=8932 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1680.143997][ T8950] syzkaller0: entered promiscuous mode [ 1680.144060][ T8950] syzkaller0: entered allmulticast mode [ 1680.393200][ T8992] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15901'. [ 1680.484952][ T8985] syzkaller0: entered promiscuous mode [ 1680.484975][ T8985] syzkaller0: entered allmulticast mode [ 1680.940344][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15917'. [ 1680.979178][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15917'. [ 1681.047280][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15917'. [ 1681.373950][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15927'. [ 1681.384684][ T9097] netlink: 228 bytes leftover after parsing attributes in process `syz.5.15927'. [ 1681.524254][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15935'. [ 1681.550609][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15935'. [ 1681.602492][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15935'. [ 1681.618856][ T9127] loop0: detected capacity change from 0 to 1024 [ 1681.655978][ T9127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1681.779241][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.842571][ T9145] syzkaller0: entered promiscuous mode [ 1681.842776][ T9145] syzkaller0: entered allmulticast mode [ 1681.870825][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15943'. [ 1681.881612][ T9152] netlink: 228 bytes leftover after parsing attributes in process `syz.5.15943'. [ 1682.266596][ T9191] syzkaller0: entered promiscuous mode [ 1682.266644][ T9191] syzkaller0: entered allmulticast mode [ 1682.330343][ T9197] loop6: detected capacity change from 0 to 4096 [ 1682.337565][ T9197] EXT4-fs: quotafile must be on filesystem root [ 1682.552363][ T9216] SELinux: syz.3.15964 (9216) wrote to checkreqprot. This is no longer supported. [ 1682.848077][ T9229] loop0: detected capacity change from 0 to 8192 [ 1682.872893][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1682.872918][ T29] audit: type=1400 audit(1700007135.138:21465): avc: denied { write } for pid=9236 comm="syz.7.15970" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1682.928159][ T29] audit: type=1400 audit(1700007135.198:21466): avc: denied { write } for pid=9212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.038173][ T29] audit: type=1400 audit(1700007135.308:21467): avc: denied { write } for pid=9251 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.202039][ T9267] UDC core: g1: couldn't find an available UDC or it's busy [ 1683.221599][ T9240] syzkaller0: entered promiscuous mode [ 1683.221654][ T9240] syzkaller0: entered allmulticast mode [ 1683.296477][ T29] audit: type=1400 audit(1700007135.568:21468): avc: denied { write } for pid=9263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.346572][ T29] audit: type=1400 audit(1700007135.618:21469): avc: denied { write } for pid=9280 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.516477][ T9298] loop5: detected capacity change from 0 to 128 [ 1683.538522][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.538749][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.617599][ T29] audit: type=1400 audit(1700007135.888:21470): avc: denied { map } for pid=9301 comm="syz.0.15987" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1683.804758][ T9318] loop6: detected capacity change from 0 to 1024 [ 1683.816024][ T29] audit: type=1400 audit(1700007136.088:21471): avc: denied { write } for pid=9305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.850151][ T9318] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1683.869859][ T9318] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 1683.870302][ T9318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.897438][ T29] audit: type=1400 audit(1700007136.168:21472): avc: denied { write } for pid=9324 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.919512][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fee00: rx timeout, send abort [ 1683.929487][ T29] audit: type=1400 audit(1700007136.208:21473): avc: denied { write } for pid=9316 comm="syz.6.15991" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1683.989227][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.225083][ T29] audit: type=1400 audit(1700007136.498:21474): avc: denied { write } for pid=9338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.410858][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fe000: rx timeout, send abort [ 1684.419569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fee00: abort rx timeout. Force session deactivation [ 1684.894624][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.894893][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1684.910923][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fe000: abort rx timeout. Force session deactivation [ 1685.530391][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77b800: rx timeout, send abort [ 1685.710611][ T9456] loop6: detected capacity change from 0 to 512 [ 1685.732822][ T9456] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1685.828523][ T9456] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.16022: invalid indirect mapped block 2683928664 (level 1) [ 1685.828573][ T9456] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1685.843071][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1685.843100][ C1] EXT4-fs (loop6): initial error at time 1700007138: ext4_free_branches:1023: inode 13 [ 1685.843138][ C1] EXT4-fs (loop6): last error at time 1700007138: ext4_free_branches:1023: inode 13 [ 1685.886314][ T9456] EXT4-fs (loop6): 1 truncate cleaned up [ 1685.886821][ T9456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.934605][ T9456] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1685.978912][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.030444][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5aae00: rx timeout, send abort [ 1686.030494][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b77b800: abort rx timeout. Force session deactivation [ 1686.359363][ T9504] validate_nla: 8 callbacks suppressed [ 1686.359392][ T9504] netlink: 'syz.5.16033': attribute type 1 has an invalid length. [ 1686.359410][ T9504] netlink: 'syz.5.16033': attribute type 2 has an invalid length. [ 1686.530492][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5aae00: abort rx timeout. Force session deactivation [ 1687.084059][ T9544] loop0: detected capacity change from 0 to 128 [ 1687.095172][ T9544] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1687.111635][ T9544] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1687.263910][ T5106] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1687.363879][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b75ca00: rx timeout, send abort [ 1687.462933][ T9582] loop0: detected capacity change from 0 to 512 [ 1687.478756][ T9582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1687.478951][ T9582] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1687.611695][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.658239][ T9601] __nla_validate_parse: 2 callbacks suppressed [ 1687.658311][ T9601] netlink: 52 bytes leftover after parsing attributes in process `syz.5.16054'. [ 1687.658358][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16054'. [ 1687.738523][ T9611] loop5: detected capacity change from 0 to 512 [ 1687.749544][ T9611] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.16056: corrupted in-inode xattr: invalid ea_ino [ 1687.749600][ T9611] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1687.750050][ T9611] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.16056: couldn't read orphan inode 15 (err -117) [ 1687.750123][ T9611] loop5: lost filesystem error report for type 5 error -117 [ 1687.751005][ T9611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1687.839344][ T5426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.863928][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b75ca00: abort rx timeout. Force session deactivation [ 1687.864026][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fea00: rx timeout, send abort [ 1687.998843][ T9632] loop3: detected capacity change from 0 to 128 [ 1688.121210][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1688.121239][ T29] audit: type=1400 audit(1700007140.388:21498): avc: denied { write } for pid=9633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.176307][ T29] audit: type=1400 audit(1700007140.448:21499): avc: denied { write } for pid=9654 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.252342][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.252546][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.303801][ T9661] loop6: detected capacity change from 0 to 4096 [ 1688.364135][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fea00: abort rx timeout. Force session deactivation [ 1688.379682][ T9661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.450153][ T29] audit: type=1400 audit(1700007140.718:21500): avc: denied { getopt } for pid=9659 comm="syz.6.16071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1688.506544][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.568593][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124bd2000: rx timeout, send abort [ 1688.637030][ T29] audit: type=1400 audit(1700007140.908:21501): avc: denied { write } for pid=9667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.953168][ T29] audit: type=1400 audit(1700007141.138:21502): avc: denied { write } for pid=9692 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.068631][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fe400: rx timeout, send abort [ 1689.068701][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124bd2000: abort rx timeout. Force session deactivation [ 1689.280484][ T9699] syzkaller0: entered promiscuous mode [ 1689.280531][ T9699] syzkaller0: entered allmulticast mode [ 1689.568689][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a5fe400: abort rx timeout. Force session deactivation [ 1689.669171][ T29] audit: type=1400 audit(1700007141.928:21503): avc: denied { getopt } for pid=9712 comm="syz.0.16086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1690.151736][ T29] audit: type=1400 audit(1700007142.418:21504): avc: denied { write } for pid=9726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.466705][ T29] audit: type=1400 audit(1700007142.738:21505): avc: denied { write } for pid=9748 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1690.656389][ T29] audit: type=1326 audit(1700007142.928:21506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.5.16103" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6d417e159 code=0x0 [ 1690.692046][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1a00: rx timeout, send abort [ 1691.192073][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afdfe00: rx timeout, send abort [ 1691.192123][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1a00: abort rx timeout. Force session deactivation [ 1691.316325][ T9793] UDC core: g1: couldn't find an available UDC or it's busy [ 1691.330939][ T29] audit: type=1400 audit(1700007143.598:21507): avc: denied { write } for pid=9772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.692199][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811afdfe00: abort rx timeout. Force session deactivation [ 1692.898250][ T9874] loop3: detected capacity change from 0 to 164 [ 1692.992142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1000: rx timeout, send abort [ 1693.200206][ T9889] rock: directory entry would overflow storage [ 1693.200221][ T9889] rock: sig=0x4f50, size=4, remaining=3 [ 1693.200258][ T9889] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1693.242500][ T9892] UDC core: g1: couldn't find an available UDC or it's busy [ 1693.404735][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1693.404767][ T29] audit: type=1400 audit(1700007145.678:21515): avc: denied { write } for pid=9887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.492194][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b942e00: rx timeout, send abort [ 1693.492234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1000: abort rx timeout. Force session deactivation [ 1693.528957][ T29] audit: type=1400 audit(1700007145.798:21516): avc: denied { write } for pid=9902 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.954566][ T9917] loop6: detected capacity change from 0 to 512 [ 1693.976632][ T29] audit: type=1400 audit(1700007146.248:21517): avc: denied { write } for pid=9915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.999792][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b942e00: abort rx timeout. Force session deactivation [ 1694.023438][ T9917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1694.023592][ T9917] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1694.062158][ T29] audit: type=1400 audit(1700007146.328:21518): avc: denied { read } for pid=9946 comm="syz.0.16137" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1694.062200][ T29] audit: type=1400 audit(1700007146.328:21519): avc: denied { open } for pid=9946 comm="syz.0.16137" path="/209/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1694.085713][ T29] audit: type=1400 audit(1700007146.328:21520): avc: denied { ioctl } for pid=9946 comm="syz.0.16137" path="/209/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1694.110577][ T29] audit: type=1400 audit(1700007146.368:21521): avc: denied { write } for pid=9948 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.144613][ T29] audit: type=1400 audit(1700007146.418:21522): avc: denied { write } for pid=9916 comm="syz.6.16129" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1694.172711][ T29] audit: type=1400 audit(1700007146.438:21523): avc: denied { ioctl } for pid=9916 comm="syz.6.16129" path="/89/file1/bus" dev="loop6" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1694.207927][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ccaca00: rx timeout, send abort [ 1694.240547][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.354290][ T9966] loop7: detected capacity change from 0 to 128 [ 1694.362931][ T9966] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 1694.363031][ T9966] FAT-fs (loop7): Filesystem has been set read-only [ 1694.406413][ T9967] syzkaller0: entered promiscuous mode [ 1694.406454][ T9967] syzkaller0: entered allmulticast mode [ 1694.583181][ T29] audit: type=1400 audit(1700007146.828:21524): avc: denied { write } for pid=9963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.611132][ T9990] lo speed is unknown, defaulting to 1000 [ 1694.611465][ T9990] syzkaller0 speed is unknown, defaulting to 1000 [ 1694.685437][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1000: rx timeout, send abort [ 1694.707985][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ccaca00: abort rx timeout. Force session deactivation [ 1695.185899][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9a1000: abort rx timeout. Force session deactivation [ 1695.711079][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16167'. [ 1695.748618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811aa34e00: rx timeout, send abort [ 1695.768934][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16167'. [ 1696.162339][T10072] loop3: detected capacity change from 0 to 128 [ 1696.174133][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.174235][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.248616][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4a7e00: rx timeout, send abort [ 1696.248665][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811aa34e00: abort rx timeout. Force session deactivation [ 1696.329353][T10080] loop7: detected capacity change from 0 to 512 [ 1696.359789][T10080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.359859][T10080] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1696.419592][ T5755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.465726][T10097] syzkaller0: entered promiscuous mode [ 1696.465752][T10097] syzkaller0: entered allmulticast mode [ 1696.748667][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4a7e00: abort rx timeout. Force session deactivation [ 1697.180983][T10120] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16182'. [ 1697.414590][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881275bea00: rx timeout, send abort [ 1697.721668][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16182'. [ 1697.760148][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.760232][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.914610][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812a20a600: rx timeout, send abort [ 1697.914658][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881275bea00: abort rx timeout. Force session deactivation [ 1698.414702][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812a20a600: abort rx timeout. Force session deactivation [ 1698.545393][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1698.545426][ T29] audit: type=1400 audit(1700007150.818:21534): avc: denied { write } for pid=10174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.625470][T10191] syzkaller1: entered promiscuous mode [ 1698.625588][T10191] syzkaller1: entered allmulticast mode [ 1698.668063][ T29] audit: type=1400 audit(1700007150.938:21535): avc: denied { write } for pid=10201 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.993455][T10211] syzkaller0: entered promiscuous mode [ 1698.993488][T10211] syzkaller0: entered allmulticast mode [ 1699.009094][T10220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16208'. [ 1699.129097][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b491400: rx timeout, send abort [ 1699.150204][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16208'. [ 1699.453194][ T29] audit: type=1400 audit(1700007151.638:21536): avc: denied { write } for pid=10221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.453248][ T29] audit: type=1400 audit(1700007151.708:21537): avc: denied { write } for pid=10238 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.581626][T10243] loop6: detected capacity change from 0 to 1024 [ 1699.629146][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b942e00: rx timeout, send abort [ 1699.629209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b491400: abort rx timeout. Force session deactivation [ 1699.718556][T10255] loop7: detected capacity change from 0 to 128 [ 1699.751480][T10243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1699.770693][T10253] loop5: detected capacity change from 0 to 1024 [ 1699.798373][T10253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1699.985085][ T29] audit: type=1400 audit(1700007152.258:21538): avc: denied { write } for pid=10257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.038279][T10282] syzkaller0: entered promiscuous mode [ 1700.038356][T10282] syzkaller0: entered allmulticast mode [ 1700.075504][ T29] audit: type=1400 audit(1700007152.348:21539): avc: denied { write } for pid=10285 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.129266][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b942e00: abort rx timeout. Force session deactivation [ 1700.223808][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.410435][T10293] loop0: detected capacity change from 0 to 512 [ 1700.418861][T10293] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1700.675009][ T5426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.701867][ T29] audit: type=1400 audit(1700007152.968:21540): avc: denied { write } for pid=10300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.781152][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b44fa00: rx timeout, send abort [ 1700.800967][ T29] audit: type=1400 audit(1700007153.068:21541): avc: denied { write } for pid=10332 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.002501][ T29] audit: type=1400 audit(1700007153.268:21542): avc: denied { write } for pid=10340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.082714][ T29] audit: type=1400 audit(1700007153.348:21543): avc: denied { write } for pid=10355 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1701.105734][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16242'. [ 1701.116718][T10357] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16242'. [ 1701.281187][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a055600: rx timeout, send abort [ 1701.281237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b44fa00: abort rx timeout. Force session deactivation [ 1701.377776][T10379] syzkaller0: entered promiscuous mode [ 1701.377816][T10379] syzkaller0: entered allmulticast mode [ 1701.492504][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16249'. [ 1701.517538][T10391] loop7: detected capacity change from 0 to 4096 [ 1701.534807][T10391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1701.574060][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16253'. [ 1701.580604][T10398] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16253'. [ 1701.634203][ T5755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.692194][T10404] loop6: detected capacity change from 0 to 128 [ 1701.781247][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a055600: abort rx timeout. Force session deactivation [ 1701.961977][T10425] syzkaller0: entered promiscuous mode [ 1701.962080][T10425] syzkaller0: entered allmulticast mode [ 1702.047446][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19be00: rx timeout, send abort [ 1702.122075][T10445] loop3: detected capacity change from 0 to 512 [ 1702.128713][T10445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1702.134558][T10445] EXT4-fs (loop3): 1 truncate cleaned up [ 1702.135422][T10445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1702.176722][ T6135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.342776][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.342975][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.547465][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a20a600: rx timeout, send abort [ 1702.547520][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19be00: abort rx timeout. Force session deactivation [ 1702.708730][T10488] syzkaller0: entered promiscuous mode [ 1702.708761][T10488] syzkaller0: entered allmulticast mode [ 1702.847994][T10511] loop3: detected capacity change from 0 to 128 [ 1703.047521][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812a20a600: abort rx timeout. Force session deactivation [ 1703.824183][T10550] netlink: 'syz.0.16287': attribute type 1 has an invalid length. [ 1703.824230][T10550] netlink: 'syz.0.16287': attribute type 2 has an invalid length. [ 1703.842060][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1703.842138][ T29] audit: type=1400 audit(1700007156.108:21554): avc: denied { write } for pid=10535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1703.876579][T10550] netlink: 'syz.0.16287': attribute type 13 has an invalid length. [ 1703.935616][ T29] audit: type=1400 audit(1700007156.208:21555): avc: denied { write } for pid=10553 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.217785][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19b000: rx timeout, send abort [ 1704.244693][ T29] audit: type=1400 audit(1700007156.518:21556): avc: denied { write } for pid=10558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.293827][ T29] audit: type=1400 audit(1700007156.568:21557): avc: denied { write } for pid=10569 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.446226][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16289'. [ 1704.569572][ T29] audit: type=1326 audit(1700007156.838:21558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.7.16293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196662e159 code=0x0 [ 1704.716156][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19ac00: rx timeout, send abort [ 1704.717845][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19b000: abort rx timeout. Force session deactivation [ 1705.182364][ T29] audit: type=1400 audit(1700007157.448:21559): avc: denied { write } for pid=10586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.216224][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19ac00: abort rx timeout. Force session deactivation [ 1705.962159][ T29] audit: type=1400 audit(1700007157.648:21560): avc: denied { write } for pid=10622 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.595148][ T29] audit: type=1400 audit(1700007158.868:21561): avc: denied { write } for pid=10649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.687191][ T29] audit: type=1400 audit(1700007158.958:21562): avc: denied { write } for pid=10661 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.948846][ T29] audit: type=1400 audit(1700007159.218:21563): avc: denied { write } for pid=10674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.984121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b76b000: rx timeout, send abort [ 1707.484176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19a400: rx timeout, send abort [ 1707.484219][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b76b000: abort rx timeout. Force session deactivation [ 1707.966467][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.975924][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.984327][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813d19a400: abort rx timeout. Force session deactivation [ 1707.998866][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.999016][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.092185][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1709.092358][ T29] audit: type=1400 audit(1700007161.358:21567): avc: denied { write } for pid=10785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.973992][ T29] audit: type=1400 audit(1700007162.248:21568): avc: denied { write } for pid=10803 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.123193][T10808] loop0: detected capacity change from 0 to 164 [ 1710.465726][T10836] loop5: detected capacity change from 0 to 512 [ 1710.474412][T10836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1710.852033][ T29] audit: type=1400 audit(1700007163.118:21569): avc: denied { write } for pid=10828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.079787][T10836] EXT4-fs (loop5): 1 truncate cleaned up [ 1711.080615][T10836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.184050][ T29] audit: type=1400 audit(1700007163.358:21570): avc: denied { write } for pid=10820 comm="syz.5.16334" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1711.184103][ T29] audit: type=1400 audit(1700007163.358:21571): avc: denied { create } for pid=10820 comm="syz.5.16334" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1711.560868][ T29] audit: type=1400 audit(1700007163.828:21572): avc: denied { write } for pid=10860 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.645817][ T5426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.775738][T10905] af_packet: packet size is too long (33022 > 2016) [ 1711.919265][T10925] loop6: detected capacity change from 0 to 512 [ 1711.925803][T10925] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1711.939554][T10925] EXT4-fs (loop6): 1 truncate cleaned up [ 1711.940198][T10925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1711.946568][ T29] audit: type=1400 audit(1700007164.218:21573): avc: denied { write } for pid=10906 comm="syz.6.16346" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1711.985690][ T29] audit: type=1400 audit(1700007164.258:21574): avc: denied { read write } for pid=10930 comm="syz.3.16352" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1711.985729][ T29] audit: type=1400 audit(1700007164.258:21575): avc: denied { open } for pid=10930 comm="syz.3.16352" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1711.989434][T10928] loop0: detected capacity change from 0 to 1024 [ 1712.001981][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.005644][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.010781][T27720] wiimote 0005:057E:0306.0003: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1712.011009][T27720] wiimote 0005:057E:0306.0003: New device registered [ 1712.015182][T27720] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 1712.021047][T10930] wiimote 0005:057E:0306.0003: Device removed [ 1712.031031][T27720] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input8 [ 1712.034912][ T29] audit: type=1400 audit(1700007164.308:21576): avc: denied { read } for pid=2970 comm="acpid" name="event4" dev="devtmpfs" ino=3018 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1712.035572][T27720] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input9 [ 1712.038856][T27720] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input7 [ 1712.121255][T10928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.213618][T10938] fido_id[10938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1712.555211][T10969] loop7: detected capacity change from 0 to 512 [ 1712.580620][T10969] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1712.588718][T10969] EXT4-fs (loop7): 1 truncate cleaned up [ 1712.595943][T10969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1712.641048][ T5755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.646900][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.848804][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.374538][T11006] loop0: detected capacity change from 0 to 128 [ 1713.469523][T11026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16361'. [ 1713.497296][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16361'. [ 1713.677923][T11046] loop6: detected capacity change from 0 to 512 [ 1713.735869][T11046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.735999][T11046] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.764139][T11046] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #2: block 11: comm syz.6.16365: lblock 16 mapped to illegal pblock 11 (length 18) [ 1713.811190][ T6528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.114454][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.7.16376'. [ 1715.142590][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16376'. [ 1715.293645][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1715.293673][ T29] audit: type=1400 audit(1700007167.568:21593): avc: denied { write } for pid=11100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.354243][ T29] audit: type=1400 audit(1700007167.628:21594): avc: denied { write } for pid=11131 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.616106][ T29] audit: type=1400 audit(1700007168.888:21595): avc: denied { write } for pid=11148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.673058][ T29] audit: type=1400 audit(1700007168.928:21596): avc: denied { write } for pid=11165 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.847830][T11181] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16393'. [ 1716.865361][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16393'. [ 1716.877334][T11183] loop0: detected capacity change from 0 to 512 [ 1716.911087][T11183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.929947][ T29] audit: type=1400 audit(1700007169.198:21597): avc: denied { write } for pid=11180 comm="syz.0.16395" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1716.990795][ T29] audit: type=1400 audit(1700007169.258:21598): avc: denied { write } for pid=11171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.994814][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.047828][T11200] loop0: detected capacity change from 0 to 1024 [ 1717.056580][T11200] EXT4-fs: Ignoring removed orlov option [ 1717.076129][ T29] audit: type=1400 audit(1700007169.348:21599): avc: denied { write } for pid=11202 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.101775][T11200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.120338][ T29] audit: type=1400 audit(1700007169.388:21600): avc: denied { write } for pid=11199 comm="syz.0.16399" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.145684][ T29] audit: type=1400 audit(1700007169.418:21601): avc: denied { write } for pid=11199 comm="syz.0.16399" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.150404][T11200] EXT4-fs error (device loop0): __ext4_new_inode:1289: comm syz.0.16399: failed to insert inode 12: doubly allocated? [ 1717.150893][ T29] audit: type=1400 audit(1700007169.418:21602): avc: denied { write } for pid=11199 comm="syz.0.16399" name="A" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1717.161411][T11200] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 1717.358272][ T5106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.342560][T11219] loop0: detected capacity change from 0 to 128 [ 1718.349979][T11219] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1718.610452][T11248] loop7: detected capacity change from 0 to 512 [ 1718.625681][T11248] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.16411: inode has both inline data and extents flags [ 1718.625720][T11248] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1718.639067][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1718.639092][ C0] EXT4-fs (loop7): initial error at time 1700007170: ext4_orphan_get:1403: inode 15 [ 1718.639117][ C0] EXT4-fs (loop7): last error at time 1700007170: ext4_orphan_get:1403: inode 15 [ 1718.639192][T11248] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.16411: couldn't read orphan inode 15 (err -117) [ 1718.639224][T11248] loop7: lost filesystem error report for type 5 error -117 [ 1718.675829][T11248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.731977][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.732504][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.776663][ T5755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.950818][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16418'. [ 1720.214810][T11316] loop0: detected capacity change from 0 to 764 [ 1720.406437][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1720.406465][ T29] audit: type=1400 audit(1700007172.678:21616): avc: denied { write } for pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.428394][ T29] audit: type=1400 audit(1700007172.698:21617): avc: denied { write } for pid=11355 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.713009][ T29] audit: type=1400 audit(1700007172.968:21618): avc: denied { write } for pid=11363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.800852][ T29] audit: type=1400 audit(1700007173.068:21619): avc: denied { write } for pid=11379 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.849796][ T29] audit: type=1400 audit(1700007174.118:21620): avc: denied { shutdown } for pid=11431 comm="syz.5.16439" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1721.944673][ T29] audit: type=1400 audit(1700007174.218:21621): avc: denied { write } for pid=11383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.046682][ T29] audit: type=1400 audit(1700007174.318:21622): avc: denied { write } for pid=11458 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.165842][T11472] syzkaller0: entered promiscuous mode [ 1722.165874][T11472] syzkaller0: entered allmulticast mode [ 1722.275654][ T29] audit: type=1400 audit(1700007174.548:21623): avc: denied { write } for pid=11480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.328697][ T29] audit: type=1400 audit(1700007174.598:21624): avc: denied { write } for pid=11504 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.490540][T11528] loop3: detected capacity change from 0 to 512 [ 1722.511304][T11528] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1722.511595][T11528] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.16454: invalid indirect mapped block 2683928664 (level 1) [ 1722.511698][T11528] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1722.512986][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1722.513027][ C0] EXT4-fs (loop3): initial error at time 1700007942: ext4_free_branches:1023: inode 13 [ 1722.513092][ C0] EXT4-fs (loop3): last error at time 1700007942: ext4_free_branches:1023: inode 13 [ 1722.517246][T11528] EXT4-fs (loop3): 1 truncate cleaned up [ 1722.518116][T11528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1722.551809][T11528] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1722.610402][ T6135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.645883][ T29] audit: type=1400 audit(1700007942.924:21625): avc: denied { write } for pid=11523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.709611][T11550] loop3: detected capacity change from 0 to 512 [ 1722.788627][T11550] EXT4-fs (loop3): invalid inodes per group: 462880 [ 1723.105484][T11605] loop7: detected capacity change from 0 to 1024 [ 1723.127101][T11605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1723.544334][T11603] netlink: 56 bytes leftover after parsing attributes in process `syz.6.16458'. [ 1723.883233][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16458'. [ 1723.898041][ T5755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.022764][T11639] FAULT_INJECTION: forcing a failure. [ 1724.022764][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.022827][T11639] CPU: 1 UID: 0 PID: 11639 Comm: syz.5.16472 Not tainted syzkaller #0 PREEMPT(lazy) [ 1724.022871][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1724.022958][T11639] Call Trace: [ 1724.022967][T11639] [ 1724.022977][T11639] __dump_stack+0x1d/0x30 [ 1724.023008][T11639] dump_stack_lvl+0x95/0xd0 [ 1724.023056][T11639] dump_stack+0x15/0x1b [ 1724.023083][T11639] should_fail_ex+0x262/0x280 [ 1724.023112][T11639] ? security_inode_alloc+0x37/0x100 [ 1724.023146][T11639] should_failslab+0x8c/0xb0 [ 1724.023238][T11639] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1724.023277][T11639] ? security_inode_alloc+0x37/0x100 [ 1724.023368][T11639] security_inode_alloc+0x37/0x100 [ 1724.023421][T11639] inode_init_always_gfp+0x495/0x4e0 [ 1724.023448][T11639] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1724.023500][T11639] alloc_inode+0x58/0x170 [ 1724.023524][T11639] new_inode+0x1d/0xe0 [ 1724.023580][T11639] shmem_get_inode+0x250/0x7b0 [ 1724.023625][T11639] shmem_mknod+0x44/0x170 [ 1724.023652][T11639] shmem_mkdir+0x33/0x70 [ 1724.023678][T11639] vfs_mkdir+0x291/0x3e0 [ 1724.023796][T11639] filename_mkdirat+0x138/0x300 [ 1724.023838][T11639] __se_sys_mkdirat+0x32/0xf0 [ 1724.023901][T11639] __x64_sys_mkdirat+0x43/0x50 [ 1724.023939][T11639] x64_sys_call+0x368/0x2550 [ 1724.023972][T11639] do_syscall_64+0x112/0x360 [ 1724.024074][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.024102][T11639] RIP: 0033:0x7fe6d417e159 [ 1724.024121][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.024181][T11639] RSP: 002b:00007fe6d2bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1724.024206][T11639] RAX: ffffffffffffffda RBX: 00007fe6d4405fa0 RCX: 00007fe6d417e159 [ 1724.024223][T11639] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1724.024240][T11639] RBP: 00007fe6d4215024 R08: 0000000000000000 R09: 0000000000000000 [ 1724.024257][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.024272][T11639] R13: 00007fe6d4406038 R14: 00007fe6d4405fa0 R15: 00007ffd2e942468 [ 1724.024341][T11639] [ 1724.301397][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.310055][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.335872][T11722] loop0: detected capacity change from 0 to 128 [ 1725.347125][T11727] loop5: detected capacity change from 0 to 164 [ 1725.360028][ T15] ================================================================== [ 1725.360062][ T15] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 1725.360100][ T15] [ 1725.360109][ T15] write to 0xffffffff86e65e68 of 8 bytes by task 11727 on cpu 0: [ 1725.360132][ T15] prb_reserve_in_last+0x9c7/0xae0 [ 1725.360162][ T15] vprintk_store+0x45b/0x910 [ 1725.360192][ T15] vprintk_emit+0x1a4/0x610 [ 1725.360229][ T15] vprintk_default+0x26/0x30 [ 1725.360267][ T15] vprintk+0x1d/0x30 [ 1725.360287][ T15] _printk+0x79/0xa0 [ 1725.360304][ T15] parse_rock_ridge_inode_internal+0xe83/0x10c0 [ 1725.360339][ T15] parse_rock_ridge_inode+0x3d/0xe0 [ 1725.360372][ T15] __isofs_iget+0xbca/0x10f0 [ 1725.360400][ T15] isofs_fill_super+0xe2a/0x1340 [ 1725.360441][ T15] get_tree_bdev_flags+0x291/0x300 [ 1725.360469][ T15] get_tree_bdev+0x1f/0x30 [ 1725.360500][ T15] isofs_get_tree+0x1c/0x30 [ 1725.360529][ T15] vfs_get_tree+0x57/0x1d0 [ 1725.360555][ T15] do_new_mount+0x288/0x8d0 [ 1725.360594][ T15] path_mount+0x4ad/0xb90 [ 1725.360633][ T15] __se_sys_mount+0x28c/0x2e0 [ 1725.360654][ T15] __x64_sys_mount+0x67/0x80 [ 1725.360677][ T15] x64_sys_call+0xc3b/0x2550 [ 1725.360711][ T15] do_syscall_64+0x112/0x360 [ 1725.360749][ T15] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.360781][ T15] [ 1725.360789][ T15] read to 0xffffffff86e65e60 of 16 bytes by task 15 on cpu 1: [ 1725.360818][ T15] _prb_read_valid+0x183/0x930 [ 1725.360850][ T15] prb_read_valid+0x3c/0x60 [ 1725.360882][ T15] nbcon_kthread_func+0x1ff/0x690 [ 1725.360912][ T15] kthread+0x223/0x270 [ 1725.360934][ T15] ret_from_fork+0x146/0x330 [ 1725.360965][ T15] ret_from_fork_asm+0x1a/0x30 [ 1725.360998][ T15] [ 1725.361003][ T15] Reported by Kernel Concurrency Sanitizer on: [ 1725.361013][ T15] CPU: 1 UID: 0 PID: 15 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(lazy) [ 1725.361041][ T15] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1725.361054][ T15] ================================================================== [ 1725.609846][T11747] rock: directory entry would overflow storage [ 1725.609938][T11747] rock: sig=0x4f50, size=4, remaining=3 [ 1725.610029][T11747] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1726.177921][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1726.177957][ T29] audit: type=1400 audit(1700007946.441:21633): avc: denied { write } for pid=11718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.203951][ T29] audit: type=1400 audit(1700007946.461:21634): avc: denied { write } for pid=11765 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.368955][ T29] audit: type=1400 audit(1700007946.630:21635): avc: denied { write } for pid=11771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.402784][ T29] audit: type=1400 audit(1700007946.660:21636): avc: denied { write } for pid=11782 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.526763][ T29] audit: type=1400 audit(1700007946.780:21637): avc: denied { write } for pid=11786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.561004][ T29] audit: type=1400 audit(1700007946.819:21638): avc: denied { write } for pid=11797 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.696099][ T29] audit: type=1400 audit(1700007946.949:21639): avc: denied { write } for pid=11801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.729013][ T29] audit: type=1400 audit(1700007946.989:21640): avc: denied { write } for pid=11812 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.853176][ T29] audit: type=1400 audit(1700007947.108:21641): avc: denied { write } for pid=11816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.886780][ T29] audit: type=1400 audit(1700007947.138:21642): avc: denied { write } for pid=11827 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.212359][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 1731.212398][ T29] audit: type=1400 audit(1700007951.452:21711): avc: denied { write } for pid=12341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.251267][ T29] audit: type=1400 audit(1700007951.492:21712): avc: denied { write } for pid=12352 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.376977][ T29] audit: type=1400 audit(1700007951.621:21713): avc: denied { write } for pid=12356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.410325][ T29] audit: type=1400 audit(1700007951.651:21714): avc: denied { write } for pid=12367 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.537189][ T29] audit: type=1400 audit(1700007951.781:21715): avc: denied { write } for pid=12371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.578652][ T29] audit: type=1400 audit(1700007951.821:21716): avc: denied { write } for pid=12382 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.702224][ T29] audit: type=1400 audit(1700007951.940:21717): avc: denied { write } for pid=12386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.737243][ T29] audit: type=1400 audit(1700007951.980:21718): avc: denied { write } for pid=12397 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.863403][ T29] audit: type=1400 audit(1700007952.100:21719): avc: denied { write } for pid=12401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.898637][ T29] audit: type=1400 audit(1700007952.140:21720): avc: denied { write } for pid=12412 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1