last executing test programs: 10m17.802493895s ago: executing program 32 (id=996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x22, &(0x7f00000016c0)={@empty, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@can={0xc, {{0x4}, 0xa, 0x2, 0x0, 0x0, "80eb2430ba6e5759"}}}}, 0x0) 9m11.239099701s ago: executing program 33 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa415, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f00000000c0), &(0x7f0000001080), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x19, r0, 0xc, {0x7fffffffffffffff, 0x9}, 0x8}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000008b2f00001c0012"], 0x44}}, 0x0) 8m9.912747485s ago: executing program 34 (id=3607): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000206050000000000000000000100000005000400000000000900020073796d31000000000c000780"], 0x54}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300010000ff0f000000000007000000", @ANYRES32=r1, @ANYBLOB="80010000091004000c001a800800058004"], 0x2c}}, 0x0) 7m33.479645152s ago: executing program 35 (id=4404): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x1b8, 0x560, 0x2e0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x570) 7m32.61930808s ago: executing program 36 (id=4153): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 7m32.525454503s ago: executing program 37 (id=4429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r0, 0x101, 0x2) getdents64(r0, 0xfffffffffffffffe, 0x29) 7m15.11543744s ago: executing program 38 (id=4788): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@errors_remount}, {@lazytime}, {@grpjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000080)={0x17c04, r1, 0x2, 0xdf1c, 0x10000007, 0xdeb1}) 6m44.696518748s ago: executing program 39 (id=5561): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) r1 = io_uring_setup(0x7628, &(0x7f00000002c0)={0x0, 0x653f, 0x20, 0x0, 0x28e, 0x0, r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 6m26.326442524s ago: executing program 40 (id=5975): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008040}, 0xc4) 6m14.741972386s ago: executing program 41 (id=6231): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x4, 0x7}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m20.106999743s ago: executing program 42 (id=7296): r0 = fsopen(&(0x7f0000000280)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4m53.020713228s ago: executing program 43 (id=7493): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0xffff}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x2044055) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4912, 0x4) io_uring_enter(r0, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) 4m15.036525092s ago: executing program 44 (id=8306): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3m43.214420615s ago: executing program 45 (id=8968): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m13.203903855s ago: executing program 46 (id=9459): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x94101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x8b}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m5.975298633s ago: executing program 47 (id=9563): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)}]) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) 3m0.042340414s ago: executing program 48 (id=9655): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(0x3) 2m47.903177677s ago: executing program 49 (id=9817): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100), 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=@can_delroute={0x34, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x4, 0x4, 0xfffffffffffffffe, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "37c658519d2086c5"}, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40804) 2m19.028924335s ago: executing program 6 (id=10366): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="09bcb14c1516", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 2m18.919454479s ago: executing program 6 (id=10367): socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m18.913048119s ago: executing program 6 (id=10371): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x9, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m18.89321677s ago: executing program 50 (id=10369): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcff11997af0ce6ae066505acb612f691f3bd3508abca1be6eeb89c44ebb37392dc2bdb", 0x39}], 0x1}, 0x0) 2m18.793271074s ago: executing program 6 (id=10375): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x821040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m18.741291405s ago: executing program 6 (id=10377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x64000400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2m18.540983973s ago: executing program 6 (id=10384): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0xb000000) 2m18.506552424s ago: executing program 51 (id=10384): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0xb000000) 2m9.714016287s ago: executing program 7 (id=10459): set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c00001300", 0x6}], 0x1) 2m9.63815039s ago: executing program 7 (id=10461): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) shutdown(r0, 0x0) 2m9.521853794s ago: executing program 7 (id=10468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c8d4) 2m9.427309188s ago: executing program 7 (id=10472): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) listxattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xffff, 0x3}, 0x203, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1}, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d00000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) 2m9.35553191s ago: executing program 7 (id=10476): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m9.327027491s ago: executing program 7 (id=10477): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 2m5.056476553s ago: executing program 1 (id=10539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 2m4.3126558s ago: executing program 1 (id=10550): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142460", @ANYRES64=r0], 0xb2) 2m4.217755553s ago: executing program 1 (id=10552): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m4.163412885s ago: executing program 1 (id=10553): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2m4.125966517s ago: executing program 1 (id=10555): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40084) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 2m3.555447627s ago: executing program 1 (id=10560): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cae, 0x1c080, 0x8, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m3.554446007s ago: executing program 52 (id=10560): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cae, 0x1c080, 0x8, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m54.21962387s ago: executing program 53 (id=10477): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 1m44.571589203s ago: executing program 8 (id=10847): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x14, 0xfffffffd, 0x4}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) 1m44.569277633s ago: executing program 8 (id=10848): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.667603356s ago: executing program 8 (id=10862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="feff00000088"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m43.373728906s ago: executing program 8 (id=10870): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1m43.2595918s ago: executing program 8 (id=10873): ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x404c894}, 0x40) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m43.053261217s ago: executing program 8 (id=10875): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xdd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5, 0x7], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 1m27.628316337s ago: executing program 54 (id=10875): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xdd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5, 0x7], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 1m8.321548715s ago: executing program 2 (id=11352): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1m8.304464785s ago: executing program 2 (id=11353): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) listen(0xffffffffffffffff, 0x0) 1m7.33281856s ago: executing program 2 (id=11370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 1m7.286657322s ago: executing program 2 (id=11373): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque='`F'}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 1m6.413433693s ago: executing program 2 (id=11394): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m6.071281535s ago: executing program 2 (id=11407): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 51.06476444s ago: executing program 55 (id=11407): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.50088801s ago: executing program 9 (id=12600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 1.851237234s ago: executing program 5 (id=12615): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.583835823s ago: executing program 9 (id=12619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_gettime(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000280)={0xd9, "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"}) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) execve(0x0, 0x0, 0x0) 1.531241575s ago: executing program 3 (id=12620): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1.475842057s ago: executing program 9 (id=12622): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 1.37865297s ago: executing program 5 (id=12623): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.249752825s ago: executing program 5 (id=12624): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x12, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x0) 1.247581915s ago: executing program 3 (id=12634): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x31, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.08945038s ago: executing program 5 (id=12625): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x660cc1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 1.039444992s ago: executing program 5 (id=12627): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 898.767537ms ago: executing program 3 (id=12631): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r2}, 0x38) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 779.396582ms ago: executing program 0 (id=12633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) 779.053462ms ago: executing program 0 (id=12635): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 747.967273ms ago: executing program 0 (id=12636): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 524.822821ms ago: executing program 0 (id=12638): mmap(&(0x7f0000967000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0x74721000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xd, @loopback, 0xc0e}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000340)="99d08883dd24f8fb330286c261c9dda1613e62ccf93077", 0x17}, {0x0}, {0x0}], 0x3}}], 0x1, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) 485.728742ms ago: executing program 3 (id=12639): open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 480.366802ms ago: executing program 4 (id=12650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) 435.511214ms ago: executing program 0 (id=12640): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x4008891}, 0x4040005) 419.886574ms ago: executing program 0 (id=12641): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x9, 0x0, 0x401, 0x0, 0x8}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 419.224574ms ago: executing program 4 (id=12653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 350.874207ms ago: executing program 4 (id=12642): r0 = socket(0x1, 0x5, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 313.337358ms ago: executing program 9 (id=12643): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, 0x0, &(0x7f0000000180)) 273.85419ms ago: executing program 9 (id=12644): socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 238.911181ms ago: executing program 4 (id=12645): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 237.931781ms ago: executing program 3 (id=12646): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 151.510284ms ago: executing program 4 (id=12647): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000004}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 138.556244ms ago: executing program 4 (id=12649): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x1b) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 123.147805ms ago: executing program 9 (id=12651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x147) write(r2, &(0x7f0000000340)="6b53acc1a6df", 0x6) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 78.512026ms ago: executing program 5 (id=12652): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=12654): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x3a09406, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6fffff7473810000006f74732c67696489", @ANYRESHEX=0xee01, @ANYBLOB=',dots,dots,dots,nfs,sys_immutable,allow_utime=00000000000000000000010,dots,nodots,dots,nodots,usefree,dots,nodots,nodots,dots,nodots,nodots,dots,dots,showexec,dots,nodots,nodots,\x00'], 0x1, 0x1f5, &(0x7f0000000340)="$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") kernel console output (not intermixed with test programs): etdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.521938][ T8338] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.552728][ T8338] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.580380][ T8338] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.591611][ T4985] loop9: detected capacity change from 0 to 4096 [ 589.606159][ T4985] EXT4-fs: inline encryption not supported [ 589.613928][ T8338] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.625426][ T4985] EXT4-fs: test_dummy_encryption option not supported [ 589.643841][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 589.643860][ T28] audit: type=1400 audit(1782069355.929:3225): avc: denied { map } for pid=4984 comm="syz.9.10897" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 589.645329][ T8338] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.748502][ T8338] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.904634][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10899'. [ 591.136186][ T28] audit: type=1326 audit(1782069357.419:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.166899][ T28] audit: type=1326 audit(1782069357.419:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.221588][ T28] audit: type=1326 audit(1782069357.419:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.247645][ T5035] loop2: detected capacity change from 0 to 1764 [ 591.285462][ T28] audit: type=1326 audit(1782069357.419:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.356404][ T28] audit: type=1326 audit(1782069357.429:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.384115][ T28] audit: type=1326 audit(1782069357.429:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.416432][ T28] audit: type=1326 audit(1782069357.429:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.442165][ T28] audit: type=1326 audit(1782069357.429:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.467912][ T28] audit: type=1326 audit(1782069357.429:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.0.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 591.592931][ T5056] ipip0: entered promiscuous mode [ 591.986812][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10945'. [ 592.038647][ T5100] loop9: detected capacity change from 0 to 512 [ 592.088682][ T5100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.100737][ T5102] loop2: detected capacity change from 0 to 512 [ 592.101908][ T5100] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.179553][ T5102] EXT4-fs: Mount option(s) incompatible with ext3 [ 592.509913][ T5130] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 592.531896][ T5130] bond0 (unregistering): Released all slaves [ 593.531679][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.943970][ T5158] loop9: detected capacity change from 0 to 128 [ 594.483422][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10976'. [ 594.619219][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.627999][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.650224][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.672735][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.690967][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.711492][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.732009][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.745650][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.753890][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.763364][ T282] hid-generic 0103:0004:0000.0017: unknown main item tag 0x0 [ 594.794145][ T282] hid-generic 0103:0004:0000.0017: hidraw0: HID v0.05 Device [syz0] on syz1 [ 594.852425][ T5190] fido_id[5190]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 594.875253][ T5195] loop9: detected capacity change from 0 to 512 [ 594.891673][ T5195] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 594.905321][ T5195] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.10986: bad orphan inode 131083 [ 594.916260][ T5195] loop9: lost filesystem error report for type 5 error -117 [ 594.922376][ T5195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.018860][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.564486][ T5223] batman_adv: batadv0: Adding interface: dummy0 [ 595.571356][ T5223] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.599566][ T5223] batman_adv: batadv0: Interface activated: dummy0 [ 595.641017][ T5223] batadv0: mtu less than device minimum [ 595.676290][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.687311][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.698282][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.709148][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.720111][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.731030][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.742000][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.752946][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.763969][ T5223] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 596.044333][ T5247] Invalid option length (287) for dns_resolver key [ 596.082491][ T5249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5249 comm=syz.0.11006 [ 596.106517][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11006'. [ 596.549984][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11017'. [ 596.834359][ T5280] netlink: 64907 bytes leftover after parsing attributes in process `syz.0.11021'. [ 603.460797][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11026'. [ 603.513326][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.520682][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.572081][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.591662][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.637124][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.673688][ T5290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.724130][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.736886][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.753262][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.785744][ T68] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.822681][ T8338] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.875008][ T8338] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33302 - 0 [ 603.957764][ T8338] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.982158][ T8338] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33302 - 0 [ 604.001276][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.022360][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.039626][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 604.039642][ T28] audit: type=1400 audit(1782069370.329:3252): avc: denied { getattr } for pid=5322 comm="syz.9.11031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 604.074244][ T8338] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.084839][ T8338] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33302 - 0 [ 604.118660][ T8338] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.129253][ T8338] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33302 - 0 [ 604.212205][ T8338] bridge_slave_1: left allmulticast mode [ 604.222880][ T8338] bridge_slave_1: left promiscuous mode [ 604.228736][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.236682][ T8338] bridge_slave_0: left allmulticast mode [ 604.242423][ T8338] bridge_slave_0: left promiscuous mode [ 604.248345][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.301954][ T28] audit: type=1400 audit(1782069370.589:3253): avc: denied { write } for pid=5329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.352235][ T28] audit: type=1400 audit(1782069370.639:3254): avc: denied { write } for pid=5343 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 604.538279][ T8338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.569663][ T8338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.590322][ T8338] bond0 (unregistering): Released all slaves [ 604.606529][ T5351] loop9: detected capacity change from 0 to 4096 [ 604.640041][ T5351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.653490][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 604.679449][ T28] audit: type=1400 audit(1782069370.969:3255): avc: denied { write } for pid=5350 comm="syz.9.11035" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 604.714570][ T28] audit: type=1400 audit(1782069370.989:3256): avc: denied { write } for pid=5350 comm="syz.9.11035" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 604.761658][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.773951][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.787051][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.794388][ T5291] bridge_slave_0: entered allmulticast mode [ 604.811088][ T5291] bridge_slave_0: entered promiscuous mode [ 604.832039][ T8338] hsr_slave_0: left promiscuous mode [ 604.843262][ T8338] hsr_slave_1: left promiscuous mode [ 604.854175][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.867857][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.928494][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.935983][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.960095][ T8338] veth1_macvtap: left promiscuous mode [ 604.971452][ T8338] veth0_macvtap: left promiscuous mode [ 604.977078][ T8338] veth1_vlan: left promiscuous mode [ 604.982437][ T8338] veth0_vlan: left promiscuous mode [ 605.073318][ T8338] team0 (unregistering): Port device team_slave_1 removed [ 605.083313][ T8338] team0 (unregistering): Port device team_slave_0 removed [ 605.126498][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.149534][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.156964][ T5291] bridge_slave_1: entered allmulticast mode [ 605.163474][ T5291] bridge_slave_1: entered promiscuous mode [ 605.227380][ T28] audit: type=1400 audit(1782069371.519:3257): avc: denied { write } for pid=5391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.275599][ T28] audit: type=1400 audit(1782069371.559:3258): avc: denied { write } for pid=5402 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.324383][ T5377] batadv1: entered promiscuous mode [ 605.332382][ T5377] batadv1: entered allmulticast mode [ 605.348660][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 605.362684][ T5291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.380751][ T5291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.412769][ T5291] team0: Port device team_slave_0 added [ 605.420302][ T5291] team0: Port device team_slave_1 added [ 605.438391][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.446150][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.488541][ T5291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.527337][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.540768][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.596101][ T5291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.646861][ T28] audit: type=1400 audit(1782069371.929:3259): avc: denied { write } for pid=5411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.655175][ T5291] hsr_slave_0: entered promiscuous mode [ 605.698843][ T5291] hsr_slave_1: entered promiscuous mode [ 605.704883][ T5291] debugfs: 'hsr0' already exists in 'hsr' [ 605.711089][ T5291] Cannot create hsr debugfs directory [ 605.720700][ T28] audit: type=1400 audit(1782069372.009:3260): avc: denied { write } for pid=5430 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.772461][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 605.789112][ T8338] IPVS: stop unused estimator thread 0... [ 605.793395][ T5440] loop2: detected capacity change from 0 to 256 [ 605.819141][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11060'. [ 605.973725][ T28] audit: type=1400 audit(1782069372.259:3261): avc: denied { write } for pid=5449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.029735][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 606.317842][ T5291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 606.381320][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.389474][ T5291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 606.401447][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.427525][ T5291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 606.458260][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.469690][ T5291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 606.479459][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.508998][ T5530] loop9: detected capacity change from 0 to 128 [ 606.513352][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11070'. [ 606.545513][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.564097][ T5291] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.571817][ T5530] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 606.607916][ T5530] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.678838][ T5517] team0: Port device team_slave_0 removed [ 606.711154][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.718254][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.742692][ T2529] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 606.752599][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.759683][ T8331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.112444][ T5291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.212257][ T8331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.243542][ T8331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.423918][ T8331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.462927][ T8331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.549648][ T8331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.583192][ T8331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.689370][ T5291] veth0_vlan: entered promiscuous mode [ 607.723150][ T8331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.739086][ T8331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.759606][ T5291] veth1_vlan: entered promiscuous mode [ 607.822846][ T5291] veth0_macvtap: entered promiscuous mode [ 607.841027][ T8331] bridge_slave_1: left allmulticast mode [ 607.854007][ T8331] bridge_slave_1: left promiscuous mode [ 607.860040][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.868915][ T5683] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.891926][ T8331] bridge_slave_0: left allmulticast mode [ 607.897929][ T8331] bridge_slave_0: left promiscuous mode [ 607.903662][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.959188][ T5694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11099'. [ 608.038915][ T8331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.059659][ T8331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.078795][ T8331] bond0 (unregistering): Released all slaves [ 608.092280][ T5291] veth1_macvtap: entered promiscuous mode [ 608.202857][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.232719][ T8331] hsr_slave_0: left promiscuous mode [ 608.239978][ T8331] hsr_slave_1: left promiscuous mode [ 608.252327][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.260227][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.270286][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.277762][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.285543][ T5723] loop9: detected capacity change from 0 to 128 [ 608.328616][ T8331] veth1_macvtap: left promiscuous mode [ 608.334252][ T8331] veth0_macvtap: left promiscuous mode [ 608.340112][ T8331] veth1_vlan: left promiscuous mode [ 608.345401][ T8331] veth0_vlan: left promiscuous mode [ 608.352713][ T5723] FAT-fs (loop9): error, clusters badly computed (1 != 163841) [ 608.360521][ T5723] FAT-fs (loop9): Filesystem has been set read-only [ 608.368006][ T5723] FAT-fs (loop9): error, clusters badly computed (2 != 163842) [ 608.423293][ T5723] FAT-fs (loop9): error, clusters badly computed (3 != 163843) [ 608.433810][ T5723] FAT-fs (loop9): error, clusters badly computed (4 != 163844) [ 608.443931][ T5723] FAT-fs (loop9): error, clusters badly computed (5 != 163845) [ 608.454347][ T5723] FAT-fs (loop9): error, clusters badly computed (6 != 163846) [ 608.464937][ T5723] FAT-fs (loop9): error, clusters badly computed (7 != 163847) [ 608.487047][ T5723] FAT-fs (loop9): error, clusters badly computed (8 != 163848) [ 608.514451][ T5723] FAT-fs (loop9): error, clusters badly computed (9 != 163849) [ 608.524383][ T5723] FAT-fs (loop9): error, clusters badly computed (10 != 163850) [ 608.573787][ T8331] team0 (unregistering): Port device team_slave_1 removed [ 608.611101][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.634664][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.641824][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.649054][ T5620] bridge_slave_0: entered allmulticast mode [ 608.655592][ T5620] bridge_slave_0: entered promiscuous mode [ 608.662462][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.669632][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.677118][ T5620] bridge_slave_1: entered allmulticast mode [ 608.683651][ T5620] bridge_slave_1: entered promiscuous mode [ 608.742313][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.751794][ T8336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.772507][ T8336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.781267][ T8336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.789964][ T8336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.811494][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.883240][ T5620] team0: Port device team_slave_0 added [ 608.906174][ T5620] team0: Port device team_slave_1 added [ 608.966059][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.987775][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.050064][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.085434][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.098944][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.129185][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 609.129202][ T28] audit: type=1400 audit(1782069375.419:3323): avc: denied { bind } for pid=5761 comm="syz.5.11108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 609.198598][ T28] audit: type=1400 audit(1782069375.479:3324): avc: denied { write } for pid=5752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.221846][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.248124][ T8331] IPVS: stop unused estimator thread 0... [ 609.284220][ T28] audit: type=1400 audit(1782069375.569:3325): avc: denied { write } for pid=5771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.341117][ T5620] hsr_slave_0: entered promiscuous mode [ 609.357138][ T5620] hsr_slave_1: entered promiscuous mode [ 609.377745][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 609.383515][ T5620] Cannot create hsr debugfs directory [ 609.533276][ T28] audit: type=1400 audit(1782069375.819:3326): avc: denied { write } for pid=5776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.609130][ T28] audit: type=1400 audit(1782069375.899:3327): avc: denied { write } for pid=5791 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.945753][ T28] audit: type=1400 audit(1782069376.229:3328): avc: denied { write } for pid=5799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.993047][ T28] audit: type=1400 audit(1782069376.239:3329): avc: denied { ioctl } for pid=5805 comm="syz.4.11114" path="socket:[121037]" dev="sockfs" ino=121037 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 610.045895][ T28] audit: type=1400 audit(1782069376.279:3330): avc: denied { write } for pid=5817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.086320][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 610.123792][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.148927][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 610.164647][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.178276][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 610.187978][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.197295][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 610.208071][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.348748][ T28] audit: type=1400 audit(1782069376.639:3331): avc: denied { write } for pid=5839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.382510][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.423502][ T28] audit: type=1400 audit(1782069376.709:3332): avc: denied { write } for pid=5853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.434823][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.502172][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.509329][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.546230][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.553385][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.624330][ T5861] netlink: 'syz.5.11124': attribute type 3 has an invalid length. [ 610.636586][ T5861] netlink: 'syz.5.11124': attribute type 3 has an invalid length. [ 610.886532][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.070008][ T5620] veth0_vlan: entered promiscuous mode [ 611.084257][ T5620] veth1_vlan: entered promiscuous mode [ 611.126527][ T5620] veth0_macvtap: entered promiscuous mode [ 611.138891][ T5894] netlink: 2024 bytes leftover after parsing attributes in process `syz.9.11131'. [ 611.149654][ T5620] veth1_macvtap: entered promiscuous mode [ 611.157095][ T5894] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11131'. [ 611.192517][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.211011][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.232124][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.245365][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.710500][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.720072][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.063097][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11141'. [ 612.084625][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11141'. [ 613.405640][ T5989] syz_tun: entered allmulticast mode [ 613.411663][ T5988] syz_tun: left allmulticast mode [ 613.602296][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11165'. [ 613.704038][ T6010] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11172'. [ 613.715301][ T6010] net_ratelimit: 10 callbacks suppressed [ 613.715317][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.927274][ T6041] netlink: 'syz.9.11183': attribute type 11 has an invalid length. [ 613.955364][ T6041] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11183'. [ 613.979906][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11187'. [ 613.997003][ T6038] syzkaller0: entered promiscuous mode [ 614.002623][ T6038] syzkaller0: entered allmulticast mode [ 614.051229][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11187'. [ 614.218736][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11197'. [ 614.268270][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 614.268307][ T28] audit: type=1400 audit(1782069380.559:3334): avc: denied { mounton } for pid=6071 comm="syz.5.11199" path=2F3330302FE91F7189591E9233614B dev="tmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 614.301128][ T6074] loop4: detected capacity change from 0 to 2048 [ 614.352953][ T6074] GPT:first_usable_lbas don't match. [ 614.358489][ T6074] GPT:34 != 290 [ 614.361842][ T6078] team1: entered promiscuous mode [ 614.362858][ T6074] GPT: Use GNU Parted to correct GPT errors. [ 614.367835][ T6078] team1: entered allmulticast mode [ 614.386728][ T6074] loop4: p1 p2 p3 [ 614.387411][ T6078] 8021q: adding VLAN 0 to HW filter on device team1 [ 614.505745][ T5682] udevd[5682]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 614.728157][ T6086] Set syz1 is full, maxelem 65536 reached [ 614.850840][ T6105] netlink: 'syz.4.11209': attribute type 1 has an invalid length. [ 615.200535][ T6106] loop2: detected capacity change from 0 to 32768 [ 615.250967][ T6106] loop2: p1 p3 < > [ 615.451492][ T5684] udevd[5684]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 615.467407][ T5312] udevd[5312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 615.788587][ T6124] netlink: 'syz.4.11217': attribute type 3 has an invalid length. [ 616.047831][ T6130] syzkaller0: entered promiscuous mode [ 616.070501][ T6130] syzkaller0: entered allmulticast mode [ 616.128157][ T6136] loop9: detected capacity change from 0 to 128 [ 616.194453][ T8331] bio_check_eod: 101 callbacks suppressed [ 616.194471][ T8331] kworker/u8:12: attempt to access beyond end of device [ 616.194471][ T8331] loop9: rw=1, sector=145, nr_sectors = 6 limit=128 [ 616.299102][ T6144] __nla_validate_parse: 3 callbacks suppressed [ 616.299120][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11226'. [ 616.428653][ T6147] loop2: detected capacity change from 0 to 4096 [ 616.495190][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.584616][ T28] audit: type=1400 audit(1782069382.869:3335): avc: denied { write } for pid=6146 comm="syz.2.11227" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.695358][ T6160] netlink: 6 bytes leftover after parsing attributes in process `syz.0.11234'. [ 616.730660][ T6160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.767521][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.787088][ T6161] batadv0: mtu less than device minimum [ 616.819910][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.835706][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.850632][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.865297][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.880050][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.896090][ T6161] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 616.960667][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.960847][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.044558][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.175432][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.198855][ T6161] batman_adv: batadv0: Interface deactivated: dummy0 [ 617.213889][ T6161] batman_adv: batadv0: Removing interface: dummy0 [ 617.234420][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11239'. [ 617.569503][ T28] audit: type=1400 audit(1782069383.859:3336): avc: denied { write } for pid=6193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.715584][ T28] audit: type=1400 audit(1782069383.999:3337): avc: denied { write } for pid=6207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.996840][ T28] audit: type=1400 audit(1782069384.279:3338): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.078333][ T28] audit: type=1400 audit(1782069384.339:3339): avc: denied { write } for pid=6240 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.158462][ T6247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11256'. [ 618.185787][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11256'. [ 618.251922][ T6257] netlink: 6 bytes leftover after parsing attributes in process `syz.5.11258'. [ 618.310109][ T28] audit: type=1400 audit(1782069384.599:3340): avc: denied { write } for pid=6245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.383215][ T28] audit: type=1400 audit(1782069384.669:3341): avc: denied { write } for pid=6269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.559079][ T6276] netlink: 'syz.5.11262': attribute type 11 has an invalid length. [ 618.590195][ T6276] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11262'. [ 618.884619][ T6297] netlink: 'syz.5.11272': attribute type 1 has an invalid length. [ 618.902995][ T6297] netlink: 'syz.5.11272': attribute type 4 has an invalid length. [ 618.919801][ T6297] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11272'. [ 619.034336][ T28] audit: type=1400 audit(1782069385.319:3342): avc: denied { write } for pid=6298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.090299][ T28] audit: type=1400 audit(1782069385.379:3343): avc: denied { write } for pid=6311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.411175][ T6325] netlink: 'syz.2.11279': attribute type 11 has an invalid length. [ 619.422718][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11279'. [ 619.649751][ T6334] netlink: 'syz.2.11282': attribute type 3 has an invalid length. [ 619.685781][ T6334] netlink: 'syz.2.11282': attribute type 3 has an invalid length. [ 619.959040][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11293'. [ 619.978975][ T6359] netlink: 'syz.0.11293': attribute type 7 has an invalid length. [ 619.997200][ T6359] netlink: 'syz.0.11293': attribute type 8 has an invalid length. [ 620.016632][ T6359] erspan0: entered promiscuous mode [ 620.022623][ T6359] gretap0: entered promiscuous mode [ 620.031627][ T6359] erspan0: left promiscuous mode [ 620.090680][ T6359] gretap0: left promiscuous mode [ 620.106536][ T6362] netlink: 'syz.0.11293': attribute type 7 has an invalid length. [ 620.120087][ T6362] erspan0: entered promiscuous mode [ 620.126390][ T6362] gretap0: entered promiscuous mode [ 620.136197][ T6362] erspan0: left promiscuous mode [ 620.142046][ T6362] gretap0: left promiscuous mode [ 620.527850][ T6384] syzkaller0: entered promiscuous mode [ 620.533390][ T6384] syzkaller0: entered allmulticast mode [ 620.563414][ T28] audit: type=1326 audit(1782069386.849:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.589241][ T28] audit: type=1326 audit(1782069386.849:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.615511][ T28] audit: type=1326 audit(1782069386.869:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.664002][ T28] audit: type=1326 audit(1782069386.869:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.690352][ T28] audit: type=1326 audit(1782069386.879:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.719084][ T28] audit: type=1326 audit(1782069386.879:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.746152][ T28] audit: type=1326 audit(1782069386.879:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.772555][ T28] audit: type=1326 audit(1782069386.879:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.798445][ T28] audit: type=1326 audit(1782069386.879:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.844655][ T28] audit: type=1326 audit(1782069386.879:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.11306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 620.899820][ T6397] bridge3: entered promiscuous mode [ 621.836354][ T6459] loop4: detected capacity change from 0 to 512 [ 621.902916][ T6465] ±ÿ]×0¢ÊÞª: renamed from lo (while UP) [ 621.944440][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 621.959042][ T6459] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.013763][ T6459] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.11330: Failed to acquire dquot type 0 [ 622.040134][ T6459] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 622.132923][ T6476] program syz.9.11334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.001056][ T6599] 9p: Bad value for 'rfdno' [ 624.154692][ T6605] __nla_validate_parse: 4 callbacks suppressed [ 624.154708][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11381'. [ 624.293975][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11383'. [ 624.303497][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11383'. [ 624.312882][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11383'. [ 624.603601][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11391'. [ 624.614862][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11391'. [ 625.373108][ T6680] loop9: detected capacity change from 0 to 128 [ 625.410908][ T5299] IPVS: starting estimator thread 0... [ 625.426391][ T6682] net_ratelimit: 34 callbacks suppressed [ 625.426407][ T6682] IPVS: fo: FWM 3 0x00000003 - no destination available [ 625.515632][ T6683] IPVS: using max 2064 ests per chain, 103200 per kthread [ 625.989901][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11430'. [ 626.136767][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11436'. [ 626.142856][ T6727] dummy0: entered promiscuous mode [ 626.182653][ T6727] erspan0: entered promiscuous mode [ 626.210194][ T6727] hsr1: entered allmulticast mode [ 626.222367][ T6727] dummy0: entered allmulticast mode [ 626.243012][ T6727] erspan0: entered allmulticast mode [ 626.255285][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 626.255297][ T28] audit: type=1400 audit(1782069392.539:3368): avc: denied { rename } for pid=6733 comm="syz.0.11437" name="file0" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 626.307582][ T28] audit: type=1400 audit(1782069392.539:3369): avc: denied { unlink } for pid=6733 comm="syz.0.11437" name="file0" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 626.410945][ T6740] xt_hashlimit: size too large, truncated to 1048576 [ 627.763158][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11466'. [ 627.872956][ T6808] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11469'. [ 629.198169][ T6900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6900 comm=syz.4.11508 [ 629.210809][ T6900] __nla_validate_parse: 1 callbacks suppressed [ 629.210834][ T6900] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.11508'. [ 629.359918][ T6908] uprobe: syz.0.11512:6908 failed to unregister, leaking uprobe [ 633.154364][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11529'. [ 633.197832][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11529'. [ 633.299915][ T6971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11538'. [ 633.437729][ T6978] loop9: detected capacity change from 0 to 1024 [ 633.472898][ T6978] EXT4-fs: inline encryption not supported [ 633.493284][ T6978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 633.530001][ T6978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 633.548022][ T6978] System zones: 0-1, 3-36 [ 633.564677][ T6978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.628831][ T28] audit: type=1400 audit(1782069399.919:3370): avc: denied { write } for pid=6977 comm="syz.9.11542" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 634.412324][ T7017] validate_nla: 1 callbacks suppressed [ 634.412338][ T7017] netlink: 'syz.0.11555': attribute type 2 has an invalid length. [ 634.444482][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.509777][ T7023] tipc: Started in network mode [ 634.514781][ T7025] netlink: 'syz.0.11555': attribute type 2 has an invalid length. [ 634.549355][ T7023] tipc: Node identity 625e5c97efc5, cluster identity 4711 [ 634.567267][ T7023] tipc: Enabled bearer , priority 0 [ 634.593688][ T7030] syzkaller0: MTU too low for tipc bearer [ 634.604381][ T7030] tipc: Disabling bearer [ 634.845098][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11567'. [ 634.898066][ T7046] loop9: detected capacity change from 0 to 8192 [ 634.932409][ T7046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 634.952661][ T7046] FAT-fs (loop9): Filesystem has been set read-only [ 634.973290][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11567'. [ 634.978268][ T7046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 634.993238][ T7046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.002719][ T7046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.013473][ T7046] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.033398][ T7053] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.066080][ T7053] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.095737][ T7053] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.128667][ T7053] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 635.477384][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11579'. [ 636.906428][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11595'. [ 637.010009][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11597'. [ 637.069289][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11597'. [ 637.945007][ T7163] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.11615'. [ 637.998882][ T28] audit: type=1400 audit(1782069404.289:3371): avc: denied { append } for pid=7164 comm="syz.0.11616" name="icmp6" dev="proc" ino=4026534007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 638.109310][ T7173] netlink: 'syz.9.11620': attribute type 1 has an invalid length. [ 638.152630][ T7173] bond1: (slave gretap1): making interface the new active one [ 638.167663][ T7173] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 638.631002][ T28] audit: type=1400 audit(1782069404.919:3372): avc: denied { remount } for pid=7194 comm="syz.4.11629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 638.853939][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.861138][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.914091][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.924991][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.979183][ T7205] hsr1: left allmulticast mode [ 638.984174][ T7205] dummy0: left allmulticast mode [ 638.989448][ T7205] erspan0: left allmulticast mode [ 640.272959][ T8336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.703781][ T8336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.758095][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.770032][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.782785][ T7257] bridge_slave_0: entered allmulticast mode [ 640.789433][ T7257] bridge_slave_0: entered promiscuous mode [ 640.796699][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.803818][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.811069][ T7257] bridge_slave_1: entered allmulticast mode [ 640.817904][ T7257] bridge_slave_1: entered promiscuous mode [ 640.836918][ T8336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.873507][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.883928][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.906478][ T7257] team0: Port device team_slave_0 added [ 640.913250][ T7257] team0: Port device team_slave_1 added [ 640.920595][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11669'. [ 640.942604][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.954003][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.980155][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.991768][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.999052][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.025582][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.060567][ T8336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.112864][ T7257] hsr_slave_0: entered promiscuous mode [ 641.119095][ T7257] hsr_slave_1: entered promiscuous mode [ 641.135835][ T7257] debugfs: 'hsr0' already exists in 'hsr' [ 641.148458][ T7257] Cannot create hsr debugfs directory [ 641.249590][ T8336] bridge_slave_1: left allmulticast mode [ 641.266422][ T8336] bridge_slave_1: left promiscuous mode [ 641.276802][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.297851][ T8336] bridge_slave_0: left allmulticast mode [ 641.312789][ T8336] bridge_slave_0: left promiscuous mode [ 641.324160][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.382836][ T28] audit: type=1400 audit(1782069407.669:3373): avc: denied { write } for pid=7314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.436631][ T28] audit: type=1400 audit(1782069407.719:3374): avc: denied { write } for pid=7325 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.475886][ T8336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.508685][ T8336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.532786][ T8336] bond0 (unregistering): Released all slaves [ 641.554473][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 641.617283][ T7257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.634663][ T7257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.650937][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.658804][ T7257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 641.672415][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.713746][ T8336] hsr_slave_0: left promiscuous mode [ 641.725787][ T8336] hsr_slave_1: left promiscuous mode [ 641.731551][ T8336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.765159][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.826759][ T8336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.845064][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.874129][ T8336] veth1_macvtap: left promiscuous mode [ 641.891744][ T8336] veth0_macvtap: left promiscuous mode [ 641.904108][ T8336] veth1_vlan: left promiscuous mode [ 641.916431][ T8336] veth0_vlan: left promiscuous mode [ 641.936167][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11674'. [ 641.983647][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11675'. [ 642.037042][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11675'. [ 642.144258][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11675'. [ 642.256566][ T8336] team0 (unregistering): Port device team_slave_1 removed [ 642.276660][ T8336] team0 (unregistering): Port device team_slave_0 removed [ 642.348349][ T7257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.381646][ T7257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.392284][ T7257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 642.492574][ T28] audit: type=1400 audit(1782069408.779:3375): avc: denied { write } for pid=7346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.541563][ T28] audit: type=1400 audit(1782069408.829:3376): avc: denied { write } for pid=7359 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.584488][ T7257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.622179][ T7257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.633023][ T7257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 642.647084][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 642.722647][ T7257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.753706][ T7257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.776775][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11691'. [ 642.787022][ T7257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 643.019804][ T28] audit: type=1400 audit(1782069409.309:3377): avc: denied { write } for pid=7380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.080055][ T28] audit: type=1400 audit(1782069409.369:3378): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.253486][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 643.275190][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 643.351100][ T7257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 643.363201][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.384078][ T7257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 643.417310][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.437797][ T7257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 643.470390][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11690'. [ 643.481320][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.496642][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11690'. [ 643.507527][ T7257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 643.532924][ T7257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.597849][ T28] audit: type=1400 audit(1782069409.889:3379): avc: denied { write } for pid=7406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.653804][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.674540][ T28] audit: type=1400 audit(1782069409.949:3380): avc: denied { write } for pid=7436 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.694565][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.709158][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 643.723655][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.730750][ T8348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.754116][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.761207][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.934464][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.063891][ T7257] veth0_vlan: entered promiscuous mode [ 644.073449][ T7257] veth1_vlan: entered promiscuous mode [ 644.094426][ T7257] veth0_macvtap: entered promiscuous mode [ 644.102510][ T7257] veth1_macvtap: entered promiscuous mode [ 644.114550][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.126860][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.138699][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.148132][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.163835][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.179191][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.432868][ T7484] loop9: detected capacity change from 0 to 164 [ 644.453257][ T7484] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 644.661341][ T7490] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11704'. [ 644.708627][ T7501] gretap1: left promiscuous mode [ 644.725876][ T7501] bond2: left promiscuous mode [ 644.730948][ T7501] bond3: left promiscuous mode [ 644.741060][ T7501] gre1: left promiscuous mode [ 644.751928][ T7501] team1: left promiscuous mode [ 644.761515][ T7501] team1: left allmulticast mode [ 644.930775][ T8333] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.945237][ T8333] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.953826][ T8333] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.972327][ T8333] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.432171][ T28] audit: type=1400 audit(1782069411.719:3381): avc: denied { mounton } for pid=7543 comm="syz.5.11726" path="/file0" dev="ramfs" ino=126853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 645.574044][ T7539] loop9: detected capacity change from 0 to 512 [ 646.184240][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11739'. [ 646.413744][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11744'. [ 646.816103][ T7610] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.866481][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.002408][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.011043][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.024177][ T7610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.034992][ T7610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.048075][ T7610] veth1_vlan: left promiscuous mode [ 648.055375][ T7610] veth0_vlan: left promiscuous mode [ 648.061368][ T7610] veth0_vlan: entered promiscuous mode [ 648.070664][ T7610] veth1_vlan: entered promiscuous mode [ 648.081690][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.107959][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.116635][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.124975][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.135309][ T7610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.165066][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.191110][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.198333][ T8336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.211724][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.218877][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.265743][ T8338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.281380][ T8338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.316481][ T8333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.339591][ T8333] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.384607][ T7646] loop9: detected capacity change from 0 to 1024 [ 648.392004][ T8338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.397278][ T4967] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.408786][ T8336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.470687][ T7646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 648.506081][ T7646] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.568133][ T28] audit: type=1400 audit(1782069414.859:3382): avc: denied { write } for pid=7645 comm="syz.9.11769" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 648.591193][ T7646] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.11769: lblock 3 mapped to illegal pblock 3 (length 1) [ 648.596321][ T4964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.613485][ T7646] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 648.640113][ T7646] EXT4-fs (loop9): This should not happen!! Data will be lost [ 648.640113][ T7646] [ 648.670354][ T2529] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 648.682365][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 648.731140][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.767306][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.787200][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.803223][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.812676][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.836737][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.849975][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.860959][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11775'. [ 648.883336][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.890885][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.898931][ T4966] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 648.930535][ T7671] dummy0: entered promiscuous mode [ 648.936539][ T7671] erspan0: entered promiscuous mode [ 648.942572][ T7671] debugfs: 'hsr1' already exists in 'hsr' [ 648.948325][ T7671] Cannot create hsr debugfs directory [ 648.953809][ T7671] hsr1: entered allmulticast mode [ 648.958865][ T7671] dummy0: entered allmulticast mode [ 648.964116][ T7671] erspan0: entered allmulticast mode [ 649.058213][ T7688] team1: entered promiscuous mode [ 649.063830][ T7688] team1: entered allmulticast mode [ 649.070287][ T7688] 8021q: adding VLAN 0 to HW filter on device team1 [ 649.241063][ T28] audit: type=1326 audit(1782069415.529:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.271541][ T28] audit: type=1326 audit(1782069415.529:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.300386][ T28] audit: type=1326 audit(1782069415.529:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.334143][ T7697] netlink: 'syz.9.11787': attribute type 5 has an invalid length. [ 649.342782][ T7697] netlink: 'syz.9.11787': attribute type 6 has an invalid length. [ 649.351380][ T28] audit: type=1326 audit(1782069415.529:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.378161][ T28] audit: type=1326 audit(1782069415.559:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.404166][ T28] audit: type=1326 audit(1782069415.559:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.432501][ T28] audit: type=1326 audit(1782069415.589:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.460668][ T28] audit: type=1326 audit(1782069415.589:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.9.11786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 649.891607][ T7720] loop3: detected capacity change from 0 to 256 [ 650.102041][ T7742] loop3: detected capacity change from 0 to 512 [ 650.119574][ T7742] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 651.366845][ T7802] loop9: detected capacity change from 0 to 128 [ 651.394730][ T7802] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 651.427336][ T7802] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 651.485614][ T8348] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.055585][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.151345][ T7865] __nla_validate_parse: 26 callbacks suppressed [ 652.151359][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11856'. [ 652.211239][ T7867] netlink: 'syz.0.11867': attribute type 1 has an invalid length. [ 652.240407][ T7867] bond4: entered promiscuous mode [ 652.245681][ T7867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.251197][ T7872] loop3: detected capacity change from 0 to 128 [ 652.259302][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11867'. [ 652.271886][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11867'. [ 652.346191][ T7867] bond4: (slave bridge4): making interface the new active one [ 652.363848][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.363848][ T8338] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 652.393923][ T7867] bridge4: entered promiscuous mode [ 652.403650][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.403650][ T8338] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 652.418129][ T7867] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 652.455708][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.455708][ T8338] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 652.496036][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.496036][ T8338] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 652.519909][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.519909][ T8338] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 652.546641][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.546641][ T8338] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 652.560634][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.560634][ T8338] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 652.574227][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.574227][ T8338] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 652.587917][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.587917][ T8338] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 652.601544][ T8338] kworker/u8:15: attempt to access beyond end of device [ 652.601544][ T8338] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 652.691846][ T36] Buffer I/O error on dev loop3, logical block 616, lost async page write [ 653.023077][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.048451][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.071811][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.093538][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.119409][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.140273][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.158526][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11871'. [ 653.470343][ T28] audit: type=1400 audit(1782069419.759:3391): avc: denied { write } for pid=7923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.670727][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 653.670744][ T28] audit: type=1400 audit(1782069419.959:3393): avc: denied { write } for pid=7949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.748504][ T28] audit: type=1400 audit(1782069420.009:3394): avc: denied { write } for pid=7960 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.164160][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.171425][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.256128][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.265845][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.359255][ T8336] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.373119][ T8336] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.391335][ T8336] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.428376][ T8336] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.675168][ T28] audit: type=1400 audit(1782069420.959:3395): avc: denied { map } for pid=8004 comm="syz.9.11900" path="socket:[128813]" dev="sockfs" ino=128813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 654.732335][ T28] audit: type=1400 audit(1782069420.959:3396): avc: denied { read } for pid=8004 comm="syz.9.11900" path="socket:[128813]" dev="sockfs" ino=128813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 655.101575][ T28] audit: type=1400 audit(1782069421.389:3397): avc: denied { write } for pid=8016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.172882][ T28] audit: type=1400 audit(1782069421.459:3398): avc: denied { write } for pid=8042 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.453269][ T8338] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.462399][ T8338] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.481092][ T8338] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.503243][ T8338] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.606588][ T8072] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 655.616540][ T28] audit: type=1400 audit(1782069421.899:3399): avc: denied { relabelto } for pid=8071 comm="syz.5.11924" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 655.664759][ T28] audit: type=1400 audit(1782069421.899:3400): avc: denied { associate } for pid=8071 comm="syz.5.11924" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2312 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 655.721324][ T28] audit: type=1400 audit(1782069421.899:3401): avc: denied { read } for pid=8071 comm="syz.5.11924" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 655.794079][ T28] audit: type=1400 audit(1782069421.899:3402): avc: denied { open } for pid=8071 comm="syz.5.11924" path="/444/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 655.857653][ T8082] netlink: 'syz.3.11928': attribute type 1 has an invalid length. [ 656.153523][ T8099] netlink: 'syz.0.11934': attribute type 7 has an invalid length. [ 656.171644][ T8099] netlink: 'syz.0.11934': attribute type 8 has an invalid length. [ 656.478197][ T8138] futex_wake_op: syz.9.11946 tries to shift op by 144; fix this program [ 656.489930][ T8138] futex_wake_op: syz.9.11946 tries to shift op by 144; fix this program [ 656.774540][ T8168] loop3: detected capacity change from 0 to 1024 [ 656.784786][ T8168] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 656.800068][ T8168] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.11958: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 656.818223][ T8168] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 656.818367][ T8168] EXT4-fs error (device loop3): ext4_quota_enable:7235: comm syz.3.11958: Bad quota inode: 3, type: 0 [ 656.838354][ T8168] loop3: lost filesystem error report for type 5 error -117 [ 656.838465][ T8168] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 656.860597][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 656.860628][ C0] EXT4-fs (loop3): initial error at time 1782069423: ext4_ext_check_inode:521: inode 3 [ 656.860661][ C0] EXT4-fs (loop3): last error at time 1782069423: ext4_quota_enable:7235 [ 656.885491][ T8168] EXT4-fs (loop3): mount failed [ 657.233019][ T8189] __nla_validate_parse: 18 callbacks suppressed [ 657.233107][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11966'. [ 657.310482][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11970'. [ 657.321821][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11970'. [ 657.615225][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11979'. [ 657.663388][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11982'. [ 657.766487][ T8234] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 657.930177][ T8258] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 658.050797][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12004'. [ 658.144009][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12006'. [ 658.834593][ T8337] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.12024'. [ 659.137996][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12029'. [ 660.386908][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12050'. [ 660.457145][ T8411] futex_wake_op: syz.5.12054 tries to shift op by 144; fix this program [ 660.475974][ T8411] futex_wake_op: syz.5.12054 tries to shift op by 144; fix this program [ 661.515740][ T8476] netlink: 'syz.0.12076': attribute type 10 has an invalid length. [ 661.732864][ T8494] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 662.099506][ T8522] loop9: detected capacity change from 0 to 256 [ 662.332290][ T8536] __nla_validate_parse: 4 callbacks suppressed [ 662.332426][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12107'. [ 662.362788][ T8540] futex_wake_op: syz.0.12109 tries to shift op by 144; fix this program [ 662.379631][ T8540] futex_wake_op: syz.0.12109 tries to shift op by 144; fix this program [ 662.607651][ T8560] netlink: 'syz.9.12117': attribute type 10 has an invalid length. [ 662.842385][ T8582] futex_wake_op: syz.4.12124 tries to shift op by 144; fix this program [ 662.862868][ T8582] futex_wake_op: syz.4.12124 tries to shift op by 144; fix this program [ 663.011327][ T8589] loop3: detected capacity change from 0 to 512 [ 663.028195][ T8589] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 663.056757][ T8589] EXT4-fs (loop3): 1 truncate cleaned up [ 663.064421][ T8589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.111857][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 663.111873][ T28] audit: type=1400 audit(1782069429.399:3406): avc: denied { write } for pid=8587 comm="syz.3.12130" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 663.350983][ T7257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.275331][ T8620] futex_wake_op: syz.3.12140 tries to shift op by 144; fix this program [ 664.288611][ T8620] futex_wake_op: syz.3.12140 tries to shift op by 144; fix this program [ 664.299643][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12151'. [ 664.830241][ T8654] netlink: 'syz.5.12155': attribute type 39 has an invalid length. [ 664.908214][ T8657] IPv4: Oversized IP packet from 127.202.26.0 [ 665.306399][ T28] audit: type=1326 audit(1782069431.599:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.382052][ T28] audit: type=1326 audit(1782069431.619:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.449607][ T28] audit: type=1326 audit(1782069431.619:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.517476][ T28] audit: type=1326 audit(1782069431.619:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.547083][ T8683] syzkaller1: entered promiscuous mode [ 665.557862][ T8683] syzkaller1: entered allmulticast mode [ 665.591051][ T28] audit: type=1326 audit(1782069431.619:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.617063][ T28] audit: type=1326 audit(1782069431.619:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.657788][ T28] audit: type=1326 audit(1782069431.619:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.708430][ T28] audit: type=1326 audit(1782069431.619:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.746814][ T28] audit: type=1326 audit(1782069431.619:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.12161" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 665.807996][ T8699] loop9: detected capacity change from 0 to 512 [ 665.851188][ T8699] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 665.877515][ T8699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 665.896150][ T8699] System zones: 1-12 [ 665.902856][ T8699] EXT4-fs (loop9): 1 truncate cleaned up [ 665.909182][ T8699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.181576][ T8709] Set syz1 is full, maxelem 65536 reached [ 666.697606][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.767568][ T8723] futex_wake_op: syz.0.12185 tries to shift op by 144; fix this program [ 666.778523][ T8723] futex_wake_op: syz.0.12185 tries to shift op by 144; fix this program [ 667.460617][ T8785] futex_wake_op: syz.4.12197 tries to shift op by 144; fix this program [ 667.479833][ T8785] futex_wake_op: syz.4.12197 tries to shift op by 144; fix this program [ 669.166839][ T8930] netlink: 'syz.4.12227': attribute type 4 has an invalid length. [ 669.175160][ T8930] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12227'. [ 669.203503][ T8930] .`: renamed from bond0 [ 669.233793][ T8938] netlink: 'syz.5.12230': attribute type 1 has an invalid length. [ 669.241642][ T8938] netlink: 'syz.5.12230': attribute type 4 has an invalid length. [ 669.249483][ T8938] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12230'. [ 669.310383][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12233'. [ 670.054652][ T8969] netlink: 'syz.9.12243': attribute type 4 has an invalid length. [ 670.118713][ T8969] netlink: 152 bytes leftover after parsing attributes in process `syz.9.12243'. [ 670.195838][ T8969] .`: renamed from bond0 [ 670.530484][ T8971] Set syz1 is full, maxelem 65536 reached [ 670.715556][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12249'. [ 671.180400][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.249188][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.296499][ T9002] loop9: detected capacity change from 0 to 512 [ 671.328501][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.340276][ T9002] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 671.385550][ T9002] EXT4-fs (loop9): 1 truncate cleaned up [ 671.392509][ T9002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.406855][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.424799][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 671.424811][ T28] audit: type=1400 audit(1782069437.709:3426): avc: denied { write } for pid=9001 comm="syz.9.12255" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 671.576450][ T36] bridge_slave_1: left allmulticast mode [ 671.589853][ T36] bridge_slave_1: left promiscuous mode [ 671.597510][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.606011][ T36] bridge_slave_0: left allmulticast mode [ 671.611912][ T36] bridge_slave_0: left promiscuous mode [ 671.627001][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.739766][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.749868][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.761017][ T36] bond0 (unregistering): Released all slaves [ 671.769133][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.807457][ T28] audit: type=1400 audit(1782069438.099:3427): avc: denied { mount } for pid=9028 comm="syz.0.12262" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 671.893474][ T36] hsr_slave_0: left promiscuous mode [ 671.905607][ T36] hsr_slave_1: left promiscuous mode [ 671.911324][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.918731][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.933915][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.941315][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.952783][ T36] veth1_macvtap: left promiscuous mode [ 671.961473][ T36] veth0_macvtap: left promiscuous mode [ 672.016395][ T28] audit: type=1400 audit(1782069438.269:3428): avc: denied { write } for pid=9030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.046446][ T36] team0 (unregistering): Port device team_slave_1 removed [ 672.056808][ T36] team0 (unregistering): Port device team_slave_0 removed [ 672.100763][ T28] audit: type=1400 audit(1782069438.379:3429): avc: denied { write } for pid=9051 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.166737][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 672.261876][ T9065] netlink: 'syz.9.12272': attribute type 1 has an invalid length. [ 672.295688][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.369959][ T9065] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 672.388202][ T9065] netlink: 'syz.9.12272': attribute type 10 has an invalid length. [ 672.396337][ T8331] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 672.396583][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12272'. [ 672.417263][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.424345][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.432041][ T9003] bridge_slave_0: entered allmulticast mode [ 672.439278][ T9003] bridge_slave_0: entered promiscuous mode [ 672.446060][ T9065] dummy0: entered promiscuous mode [ 672.452921][ T9065] bond0: (slave dummy0): Removing an active aggregator [ 672.460643][ T9065] bond0: (slave dummy0): Releasing backup interface [ 672.474433][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.485605][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.493016][ T9003] bridge_slave_1: entered allmulticast mode [ 672.499553][ T9003] bridge_slave_1: entered promiscuous mode [ 672.520351][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.561982][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.572941][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12278'. [ 672.602493][ T28] audit: type=1400 audit(1782069438.879:3430): avc: denied { write } for pid=9074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.656606][ T28] audit: type=1400 audit(1782069438.929:3431): avc: denied { write } for pid=9096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.250943][ T9003] team0: Port device team_slave_0 added [ 673.264200][ T9003] team0: Port device team_slave_1 added [ 673.270559][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 673.324325][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.334370][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.361947][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.378142][ T9113] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 673.393816][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.405909][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.442912][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.531208][ T9003] hsr_slave_0: entered promiscuous mode [ 673.548318][ T9003] hsr_slave_1: entered promiscuous mode [ 673.562221][ T9003] debugfs: 'hsr0' already exists in 'hsr' [ 673.572551][ T9003] Cannot create hsr debugfs directory [ 673.584208][ T28] audit: type=1400 audit(1782069439.869:3432): avc: denied { write } for pid=9115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.610038][ T9129] netlink: 'syz.5.12287': attribute type 1 has an invalid length. [ 673.639124][ T9129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.645899][ T28] audit: type=1400 audit(1782069439.929:3433): avc: denied { write } for pid=9140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.684351][ T9129] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 673.699950][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 673.787011][ T9129] bond2: entered promiscuous mode [ 673.792105][ T9129] bond2: entered allmulticast mode [ 673.954231][ T28] audit: type=1400 audit(1782069440.239:3434): avc: denied { write } for pid=9154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.003859][ T28] audit: type=1400 audit(1782069440.289:3435): avc: denied { write } for pid=9171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.072294][ T9003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.089998][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.100344][ T9003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.114817][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.124310][ T9003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.133314][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.141682][ T9003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.152477][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.194712][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.208228][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.222718][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.229966][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.253558][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.260718][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.328326][ T9201] netlink: 'syz.4.12296': attribute type 39 has an invalid length. [ 674.362188][ T9207] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12297'. [ 674.473063][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.610939][ T9003] veth0_vlan: entered promiscuous mode [ 674.625120][ T9003] veth1_vlan: entered promiscuous mode [ 674.642771][ T9003] veth0_macvtap: entered promiscuous mode [ 674.652756][ T9003] veth1_macvtap: entered promiscuous mode [ 674.665146][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.678635][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.744071][ T8322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.756265][ T8322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.775225][ T8322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.826383][ T8322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.864003][ T9269] loop3: detected capacity change from 0 to 512 [ 674.870729][ T9269] EXT4-fs: Ignoring removed i_version option [ 674.874333][ T9270] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.12306'. [ 674.877254][ T9269] EXT4-fs: Ignoring removed nobh option [ 674.892265][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12306'. [ 674.904653][ T9269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 674.918560][ T9269] EXT4-fs (loop3): 1 truncate cleaned up [ 674.926934][ T9269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.983066][ T9003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.348182][ T9289] loop9: detected capacity change from 0 to 512 [ 675.356082][ T9289] EXT4-fs: inline encryption not supported [ 675.380480][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12315'. [ 675.382042][ T9289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 675.390970][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12315'. [ 675.403287][ T9289] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 675.432988][ T9289] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.12314: Failed to acquire dquot type 1 [ 675.445657][ T9289] loop9: lost filesystem error report for type 5 error -5 [ 675.445927][ T9289] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 675.469949][ T9289] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #12: comm syz.9.12314: corrupted inode contents [ 675.482956][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.483473][ T9289] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #12: comm syz.9.12314: mark_inode_dirty error [ 675.492952][ C1] EXT4-fs (loop9): error count since last fsck: 3 [ 675.493014][ C1] EXT4-fs (loop9): initial error at time 1782069441: ext4_acquire_dquot:7041 [ 675.493084][ C1] EXT4-fs (loop9): last error at time 1782069441: ext4_do_update_inode:5742: inode 12 [ 675.533331][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.534255][ T9289] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #12: comm syz.9.12314: corrupted inode contents [ 675.557405][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.557961][ T9289] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.12314: mark_inode_dirty error [ 675.583850][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.584609][ T9289] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #12: comm syz.9.12314: corrupted inode contents [ 675.605656][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.605849][ T9289] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 675.623552][ T9289] loop9: lost filesystem error report for type 5 error -117 [ 675.625220][ T9289] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #12: comm syz.9.12314: corrupted inode contents [ 675.645739][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.647902][ T9289] EXT4-fs error (device loop9): ext4_truncate:4691: inode #12: comm syz.9.12314: mark_inode_dirty error [ 675.676788][ T9289] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 675.680864][ T9289] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 675.728081][ T9289] loop9: lost filesystem error report for type 5 error -117 [ 675.731845][ T9289] EXT4-fs (loop9): 1 truncate cleaned up [ 675.777764][ T9289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.806228][ T9312] netlink: 'syz.0.12322': attribute type 1 has an invalid length. [ 675.814871][ T9312] netlink: 'syz.0.12322': attribute type 1 has an invalid length. [ 675.856794][ T9314] all: renamed from lo [ 675.915263][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.015787][ T9328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 676.023628][ T9328] IPv6: NLM_F_CREATE should be set when creating new route [ 676.031408][ T9328] IPv6: NLM_F_CREATE should be set when creating new route [ 676.039535][ T9328] IPv6: NLM_F_CREATE should be set when creating new route [ 676.054789][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12329'. [ 676.361658][ T9349] loop9: detected capacity change from 0 to 1024 [ 676.374469][ T9349] EXT4-fs: Ignoring removed orlov option [ 676.442600][ T9349] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.493919][ T9349] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12338: bg 0: block 481: padding at end of block bitmap is not set [ 676.533301][ T9364] netlink: 'syz.0.12342': attribute type 1 has an invalid length. [ 676.564373][ T9364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.623178][ T9364] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 676.652386][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.668658][ T9367] bond5: entered promiscuous mode [ 676.677059][ T9367] bond5: entered allmulticast mode [ 676.876795][ T9394] tipc: Enabled bearer , priority 0 [ 676.886078][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 676.886100][ T28] audit: type=1326 audit(1782069443.179:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 676.958322][ T28] audit: type=1326 audit(1782069443.209:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 676.986036][ T9394] syzkaller0: entered promiscuous mode [ 676.994146][ T9394] syzkaller0: entered allmulticast mode [ 677.008012][ T9394] tipc: Resetting bearer [ 677.014572][ T28] audit: type=1326 audit(1782069443.209:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.046634][ T28] audit: type=1326 audit(1782069443.209:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.073885][ T28] audit: type=1326 audit(1782069443.209:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.102862][ T28] audit: type=1326 audit(1782069443.209:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.128681][ T28] audit: type=1326 audit(1782069443.209:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.154427][ T28] audit: type=1326 audit(1782069443.209:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.188161][ T28] audit: type=1326 audit(1782069443.209:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.215170][ T28] audit: type=1326 audit(1782069443.209:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.12354" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 677.259504][ T9393] tipc: Resetting bearer [ 677.284342][ T9393] tipc: Disabling bearer [ 677.294175][ T9400] ªªªªªª: renamed from vlan0 [ 677.540376][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12369'. [ 678.017201][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12381'. [ 678.077168][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12383'. [ 678.136447][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12385'. [ 678.190344][ T9470] Set syz1 is full, maxelem 6117 reached [ 678.504325][ T9501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 678.512454][ T9501] IPv6: NLM_F_CREATE should be set when creating new route [ 678.520788][ T9501] IPv6: NLM_F_CREATE should be set when creating new route [ 678.528665][ T9501] IPv6: NLM_F_CREATE should be set when creating new route [ 678.555408][ T9503] macvlan2: entered promiscuous mode [ 678.561866][ T9503] bridge0: entered promiscuous mode [ 679.280944][ T9539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.288573][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 679.296113][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 679.303634][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 679.499082][ T9547] tipc: Enabling of bearer rejected, failed to enable media [ 679.525884][ T8333] bridge_slave_0: left allmulticast mode [ 679.531789][ T8333] bridge_slave_0: left promiscuous mode [ 679.537913][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.697530][ T8333] bond1 (unregistering): (slave geneve2): Releasing active interface [ 679.738659][ T8333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.754242][ T9553] netlink: 'syz.4.12417': attribute type 1 has an invalid length. [ 679.763015][ T9553] netlink: 'syz.4.12417': attribute type 1 has an invalid length. [ 679.771948][ T8333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.797696][ T8333] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 679.814918][ T8333] bond0 (unregistering): Released all slaves [ 679.830328][ T8333] bond1 (unregistering): Released all slaves [ 679.941415][ T8333] hsr_slave_0: left promiscuous mode [ 679.955603][ T8333] hsr_slave_1: left promiscuous mode [ 679.978122][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.998979][ T8333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.010809][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.025561][ T8333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.036311][ T9573] __nla_validate_parse: 2 callbacks suppressed [ 680.036327][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12429'. [ 680.065885][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12429'. [ 680.079656][ T8333] veth1_macvtap: left promiscuous mode [ 680.091564][ T8333] veth0_macvtap: left promiscuous mode [ 680.118160][ T8333] veth1_vlan: left promiscuous mode [ 680.129210][ T8333] veth0_vlan: left promiscuous mode [ 680.175599][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12433'. [ 680.268305][ T8333] team0 (unregistering): Port device team_slave_1 removed [ 680.278487][ T8333] team0 (unregistering): Port device team_slave_0 removed [ 680.324462][ T9598] netlink: 'syz.9.12435': attribute type 1 has an invalid length. [ 680.340058][ T9598] netlink: 'syz.9.12435': attribute type 1 has an invalid length. [ 680.355365][ T9596] loop9: detected capacity change from 0 to 128 [ 680.384245][ T9596] vfat: Unknown parameter '6^[sõg®é±¦ûM÷úŽ«7íe6>~µ&›ä-ˆ§±o' [ 680.427714][ T9601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.435265][ T9601] IPv6: NLM_F_CREATE should be set when creating new route [ 680.443054][ T9601] IPv6: NLM_F_CREATE should be set when creating new route [ 680.450493][ T9601] IPv6: NLM_F_CREATE should be set when creating new route [ 680.584739][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12442'. [ 680.593817][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12442'. [ 680.698270][ T9616] macvlan2: entered promiscuous mode [ 680.700184][ T9618] loop9: detected capacity change from 0 to 512 [ 680.720310][ T9618] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 680.727781][ T9616] bridge0: entered promiscuous mode [ 680.741364][ T9618] EXT4-fs (loop9): orphan cleanup on readonly fs [ 680.751565][ T9618] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.12445: Block bitmap for bg 0 marked uninitialized [ 680.764802][ T9618] loop9: lost filesystem error report for type 5 error -117 [ 680.764893][ T9618] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 680.780872][ T9618] loop9: lost filesystem error report for type 5 error -117 [ 680.781150][ T9618] EXT4-fs (loop9): 1 orphan inode deleted [ 680.794733][ T9618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 680.856931][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.889765][ T5299] IPVS: starting estimator thread 0... [ 681.006719][ T9627] IPVS: using max 2688 ests per chain, 134400 per kthread [ 681.661059][ T9704] Set syz1 is full, maxelem 6117 reached [ 681.862315][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12472'. [ 682.134588][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12478'. [ 682.293703][ T9778] Set syz1 is full, maxelem 6117 reached [ 682.452559][ T9795] can0: slcan on ttyS3. [ 682.725370][ T9795] loop3: detected capacity change from 0 to 4096 [ 682.754181][ T9795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 682.770240][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 682.770256][ T28] audit: type=1400 audit(1782069449.059:3456): avc: denied { write } for pid=9803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.800177][ T9795] EXT4-fs: Ignoring removed i_version option [ 682.820802][ T9795] EXT4-fs (loop3): cluster size (1024) smaller than block size (4096) [ 682.868275][ T28] audit: type=1400 audit(1782069449.149:3457): avc: denied { write } for pid=9836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.975822][ T9795] can0 (unregistered): slcan off ttyS3. [ 683.047824][ T9861] sctp: [Deprecated]: syz.5.12490 (pid 9861) Use of int in max_burst socket option. [ 683.047824][ T9861] Use struct sctp_assoc_value instead [ 683.104426][ T28] audit: type=1400 audit(1782069449.389:3458): avc: denied { write } for pid=9844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.151198][ T28] audit: type=1400 audit(1782069449.439:3459): avc: denied { write } for pid=9873 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.841243][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12495'. [ 683.868754][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12495'. [ 683.871381][ T9913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.885002][ T9913] IPv6: NLM_F_CREATE should be set when creating new route [ 683.892364][ T9913] IPv6: NLM_F_CREATE should be set when creating new route [ 683.899580][ T9913] IPv6: NLM_F_CREATE should be set when creating new route [ 684.105220][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12507'. [ 684.119058][ T9937] tipc: Enabling of bearer rejected, failed to enable media [ 684.210772][ T9944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.221231][ T9941] loop3: detected capacity change from 0 to 1024 [ 684.231945][ T9946] loop9: detected capacity change from 0 to 512 [ 684.238836][ T9941] EXT4-fs: inline encryption not supported [ 684.241452][ T9946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.254975][ T9946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 684.296434][ T9941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.308911][ T9946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.323394][ T9946] ext4 filesystem being mounted at /458/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.340848][ T9946] EXT4-fs (loop9): shut down requested (0) [ 684.343589][ T28] audit: type=1400 audit(1782069450.629:3460): avc: denied { accept } for pid=9945 comm="syz.9.12512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 684.401407][ T9946] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 684.410535][ T9946] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 684.419416][ T28] audit: type=1400 audit(1782069450.699:3461): avc: denied { write } for pid=9945 comm="syz.9.12512" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 684.441370][ T28] audit: type=1400 audit(1782069450.729:3462): avc: denied { link } for pid=9945 comm="syz.9.12512" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 684.466946][ T9003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.481209][ T2529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.755065][ T9978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.174990][ T9999] xt_hashlimit: size too large, truncated to 1048576 [ 685.573509][T10009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12535'. [ 685.838282][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12541'. [ 685.847374][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12541'. [ 686.575420][T10050] loop3: detected capacity change from 0 to 32768 [ 686.972904][T10078] sctp: [Deprecated]: syz.0.12563 (pid 10078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.972904][T10078] Use struct sctp_sack_info instead [ 687.080089][ T28] audit: type=1326 audit(1782069453.369:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.0.12567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 687.139567][ T28] audit: type=1326 audit(1782069453.369:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.0.12567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 687.207573][ T28] audit: type=1326 audit(1782069453.369:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.0.12567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b63dce59 code=0x7ffc0000 [ 687.337366][T10102] netlink: 'syz.0.12575': attribute type 1 has an invalid length. [ 687.354587][T10102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.379764][T10102] bond6: (slave veth21): Enslaving as a backup interface with a down link [ 687.433285][T10107] loop3: detected capacity change from 0 to 2048 [ 687.452485][T10102] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 687.471636][ T8333] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 687.487674][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12577'. [ 687.499804][T10107] loop3: p2 p3 p7 [ 687.504160][T10106] netlink: 'syz.0.12575': attribute type 10 has an invalid length. [ 687.515393][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12575'. [ 687.524019][T10109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 687.533274][ T5301] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 687.540924][T10106] dummy0: entered promiscuous mode [ 687.547207][T10106] bond6: (slave dummy0): Removing an active aggregator [ 687.554617][T10106] bond6: (slave dummy0): Releasing backup interface [ 687.647850][ T5312] udevd[5312]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 687.661369][ T5682] udevd[5682]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 687.673099][ T5684] udevd[5684]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 688.391646][T10156] netlink: 'syz.3.12596': attribute type 27 has an invalid length. [ 688.408879][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12595'. [ 688.430920][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12595'. [ 688.490280][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.497632][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.624272][T10156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.643899][T10156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.776404][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12606'. [ 688.789080][T10156] macvlan2: left promiscuous mode [ 688.811378][T10160] bridge0: left promiscuous mode [ 688.824122][T10160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.832423][T10160] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.842775][T10160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.877698][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.884887][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.895121][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.902238][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.919959][T10160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.930885][T10160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.945403][T10160] veth1_vlan: left promiscuous mode [ 688.951362][T10160] veth0_vlan: left promiscuous mode [ 688.957489][T10160] veth0_vlan: entered promiscuous mode [ 688.966424][T10160] veth1_vlan: entered promiscuous mode [ 688.975950][T10160] veth1_macvtap: left promiscuous mode [ 688.982250][T10160] veth0_macvtap: left promiscuous mode [ 688.989143][T10160] veth0_macvtap: entered promiscuous mode [ 688.996309][T10160] veth1_macvtap: entered promiscuous mode [ 689.004934][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.014036][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.030257][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.040349][T10160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.049305][ T5299] bridge0: entered promiscuous mode [ 689.318103][T10212] loop3: detected capacity change from 0 to 1024 [ 689.347526][T10212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 689.392626][T10212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.407520][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 689.407536][ T28] audit: type=1400 audit(1782069455.699:3481): avc: denied { write } for pid=10211 comm="syz.3.12618" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 689.436337][ T28] audit: type=1400 audit(1782069455.699:3482): avc: denied { write } for pid=10211 comm="syz.3.12618" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 689.485557][ T9003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.498568][ T28] audit: type=1326 audit(1782069455.769:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.553586][ T28] audit: type=1326 audit(1782069455.819:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.599442][ T28] audit: type=1326 audit(1782069455.819:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.676914][ T28] audit: type=1326 audit(1782069455.819:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.758162][ T28] audit: type=1326 audit(1782069455.819:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.819685][ T28] audit: type=1326 audit(1782069455.819:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.873049][ T28] audit: type=1326 audit(1782069455.819:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.889651][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12634'. [ 689.899195][ T28] audit: type=1326 audit(1782069455.819:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.9.12619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da64ce59 code=0x7ffc0000 [ 689.978885][T10235] loop3: detected capacity change from 0 to 4096 [ 690.062779][T10235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.099955][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12629'. [ 690.164731][ T9003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.590881][T10275] loop3: detected capacity change from 0 to 512 [ 690.604879][T10275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.821760][T10294] __nla_validate_parse: 1 callbacks suppressed [ 690.821781][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12645'. [ 690.876728][ T9003] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.715645][T10302] ================================================================== [ 691.723769][T10302] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 691.731085][T10302] [ 691.733423][T10302] write to 0xffff88811b7c9ed8 of 4 bytes by task 10305 on cpu 0: [ 691.741150][T10302] touch_atime+0x1cb/0x300 [ 691.745594][T10302] shmem_file_read_iter+0x3ed/0x4b0 [ 691.750815][T10302] copy_splice_read+0x47a/0x6b0 [ 691.755688][T10302] splice_direct_to_actor+0x27c/0x680 [ 691.761088][T10302] do_splice_direct+0x119/0x1a0 [ 691.765959][T10302] do_sendfile+0x37d/0x640 [ 691.770405][T10302] __x64_sys_sendfile64+0x105/0x150 [ 691.775639][T10302] x64_sys_call+0x2dc4/0x3020 [ 691.780342][T10302] do_syscall_64+0x136/0x3c0 [ 691.784950][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.790862][T10302] [ 691.793196][T10302] read to 0xffff88811b7c9ed8 of 4 bytes by task 10302 on cpu 1: [ 691.800842][T10302] atime_needs_update+0x25f/0x3e0 [ 691.805899][T10302] touch_atime+0x4a/0x300 [ 691.810258][T10302] shmem_file_read_iter+0x3ed/0x4b0 [ 691.815497][T10302] copy_splice_read+0x47a/0x6b0 [ 691.820376][T10302] splice_direct_to_actor+0x27c/0x680 [ 691.825796][T10302] do_splice_direct+0x119/0x1a0 [ 691.830675][T10302] do_sendfile+0x37d/0x640 [ 691.835111][T10302] __x64_sys_sendfile64+0x105/0x150 [ 691.840329][T10302] x64_sys_call+0x2dc4/0x3020 [ 691.845052][T10302] do_syscall_64+0x136/0x3c0 [ 691.849661][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.855669][T10302] [ 691.858001][T10302] value changed: 0x3b9a69bb -> 0x0098363c [ 691.863727][T10302] [ 691.866077][T10302] Reported by Kernel Concurrency Sanitizer on: [ 691.872251][T10302] CPU: 1 UID: 0 PID: 10302 Comm: syz.9.12651 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 691.883306][T10302] Tainted: [W]=WARN [ 691.887115][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.897177][T10302] ================================================================== [ 692.050227][T10313] loop3: detected capacity change from 0 to 256