last executing test programs: 1m32.893988519s ago: executing program 3 (id=433): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x12000151) r3 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1m32.85101841s ago: executing program 3 (id=435): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) socket(0x1e, 0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000084000000", @ANYRES8=r0], 0x20, 0x4000040}, 0x4000000) 1m32.716340934s ago: executing program 3 (id=440): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x81ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m32.542183859s ago: executing program 3 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x800000000000000) 1m32.372632545s ago: executing program 3 (id=444): r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) 1m32.333618235s ago: executing program 3 (id=446): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 1m32.300104177s ago: executing program 32 (id=446): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 55.431719116s ago: executing program 5 (id=1035): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003700), 0x2200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000003740)={0xffffffffffffffff, 0x3, 0xa, 0x2, 0x98}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000c00)=""/78, 0x4e}], 0x1, 0x611, 0x1) 55.431278186s ago: executing program 5 (id=1036): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4db, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90PNp1ZNdldCnIBDJUQlLiCVkLihxImj2ClN1EMKtx44IBBIiAN3/gIu9AIVEuIM4oo4oCIoQQIkJCOP7TRJ7TSU1E4zv5808cw77jzva+t5O/POjCeA1DpZ/ZOJ6I+ITyPiYG1x4xtO1l5Wb1+drE6ZqFTOf5tJ3lddbry18e8ORMRKRPRExFOPRTyfuTtuaWl5ZqJQyC/UlwfLs/ODpaXlM5dmJ6bz0/m54bGz4+NjQ6Mj4zvW1uuvvnj93PtPdL/34yu3br720QfVavXX161vx06qNb0rDq8r2xcR/38QwTogV29Pb6crwn2pfn9/iohTSf4fjFzybQJpUKlUKr9U9rdavVIB9qxssg+cyQ5ERG0+mx0YqO3D/zn6soViqfzvi8XFuanavvKh6MpevFTID9WPFQ5FV6a6PJzM31ke2bQ8GpHsA7+e602WByaLhan2dnXAJgc25f8PuVr+AynhkB/SS/5Dem0j/3URsEdJbkgv+Q/pJf8hveQ/pJf8h/SS/5Be8h/Sa6v8725jPYC2evLcuepUadz/PnV5aXGmePnMVL40MzC7ODkwWVyYH5guFqeTe3Zm77W9QrE4P/yfWLwyWM6XyoOlpeULs8XFufKF5L7+C/mutrQK2I7DJ258nomIlf/2JlOs+y9frsLeVqlkotP3IAOdket0BwR0jKF/SK/fcIzf8kfCgIdbk5/o3aCnefEjMf9AwgFtkO10BYCOOX3M+T9IK+P/kF7G/yG97OMD9zn+H/ca/9e/wO5l/B/Sq7/F87/+sPbsrp4Yiog/RsRnua79jWd9AXtB9utMff//9MG/929e2535KTlF0B0RL719/s0rE+XywnC1/Lu18vJb9fKRTtQf2K5GnjbyGABIr9XbVycbUzvjfvNo7SKEu+Pvq49N9iTnEPpWMxuuVcjs0LULK9ci4miz+Jn6885rZz76VnN3xT9Sf83UNpHUd1/y3PT2xD+2Lv7f1sU//rs/FUiHG9X+Z6hZ/mWTnI61/NvY//Tv0LnN1v1fdq3/y7Xo/05s2NJKyxgvvPPyVy3jX4s43jR+I15PEmtz/GrdTm+zjbeeffovrdZV3q1tp1n8hurcYHl2frC0tHwm+R256fzc8NjZ8fGxodGR8cGLlwr5odrfpjH+d/STm1u1v69F/Fp7v2ja/mrZP7fZ/p//+vEzJ7eI/49Tzb//I8lr88+/NyL+tc343498+VyrddX4Uy3an90ifrVsdJvxS2887t5hANhFSkvLMxOFQn7BzO6f6d0d1TCzi2c+HN2hDd6r52h9vAk8HO4kfZOVbg4EAAAAAAAAAACAXakdlyV3uo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHvBrwEAAP//cj3XfA==") perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) writev(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) write$selinux_user(r1, 0x0, 0x2f) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 55.29020682s ago: executing program 5 (id=1039): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 55.164084075s ago: executing program 5 (id=1040): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 55.162457555s ago: executing program 5 (id=1041): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7d, &(0x7f0000000040)={0x0, 0xa172, 0x1f280, 0x0, 0x399}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 54.916141212s ago: executing program 5 (id=1048): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 54.898408223s ago: executing program 33 (id=1048): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 45.632913444s ago: executing program 6 (id=1231): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfb, &(0x7f0000000000)) 44.260943976s ago: executing program 6 (id=1246): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac1414b0e0000003808a8972bdc933091ce132d73006"], 0xdd12}], 0x1, 0x0, 0x0, 0x20040090}, 0x54) 44.194560808s ago: executing program 6 (id=1247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x6c000000, 0xf, 0x5, 0x4007c9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 44.175206888s ago: executing program 6 (id=1249): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 44.030490233s ago: executing program 6 (id=1251): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000038000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 43.925530576s ago: executing program 6 (id=1255): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) 43.925364266s ago: executing program 34 (id=1255): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) 32.26434751s ago: executing program 1 (id=1401): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 32.235495711s ago: executing program 1 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13c16}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 32.124583534s ago: executing program 1 (id=1409): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 32.059984416s ago: executing program 1 (id=1410): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 31.814189544s ago: executing program 1 (id=1414): io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) uname(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 30.338813609s ago: executing program 1 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 30.316402529s ago: executing program 35 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 16.365045713s ago: executing program 0 (id=1631): mkdir(&(0x7f0000000080)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 16.360880933s ago: executing program 0 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 16.276969056s ago: executing program 0 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c8fd040000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x404c850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.177883719s ago: executing program 0 (id=1634): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 15.942734246s ago: executing program 0 (id=1643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000240)="55c85626ea20986f652a6aa6bae066f399b2fe630c90dbd6066d78e407c6093061c12a78b53dd4eb78c054984767f81b966f04177ac7f9160f22f49398921a7a1e0b", 0x42, 0x40008c0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000380)="3cc85791ed58f1f3ee9886b189e1ae71adf522009545367b318804feccaa4c6d190274e2f9", 0x25, 0x4044805, 0x0, 0x0) 15.701971153s ago: executing program 0 (id=1653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r1, 0xc2699618ba151721, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) 15.701843583s ago: executing program 36 (id=1653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)={0x14, r1, 0xc2699618ba151721, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x20000010) 3.500892264s ago: executing program 4 (id=1887): syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0x3ba}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.424789166s ago: executing program 4 (id=1889): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 3.182797603s ago: executing program 4 (id=1895): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) 2.776161245s ago: executing program 4 (id=1902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.904822612s ago: executing program 4 (id=1911): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1959, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1.212937293s ago: executing program 4 (id=1926): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) 948.855821ms ago: executing program 2 (id=1930): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) flock(0xffffffffffffffff, 0x2) 899.425333ms ago: executing program 2 (id=1931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) 735.711777ms ago: executing program 8 (id=1935): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 636.797281ms ago: executing program 8 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 503.012755ms ago: executing program 9 (id=1941): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) creat(0x0, 0xa2) 494.176865ms ago: executing program 8 (id=1942): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x1b, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001100)={r3, 0x3}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 493.183605ms ago: executing program 2 (id=1943): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000004c0)=""/56, 0x22fe0}], 0x1}, 0x40) 457.028906ms ago: executing program 7 (id=1944): r0 = socket(0x1, 0x2, 0x0) close(0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000010}) 454.474946ms ago: executing program 9 (id=1945): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 454.248536ms ago: executing program 2 (id=1946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x6, 0x8, 0x7, 0x45, 0x8, 0x81}, &(0x7f00000003c0)=0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 422.607507ms ago: executing program 2 (id=1947): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 413.148767ms ago: executing program 8 (id=1948): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 394.367038ms ago: executing program 7 (id=1949): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 383.627348ms ago: executing program 2 (id=1950): ioperm(0x3, 0x5, 0x7) r0 = gettid() bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 345.30305ms ago: executing program 8 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 251.604982ms ago: executing program 9 (id=1952): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 251.473992ms ago: executing program 7 (id=1953): io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r3, r1, 0x11, 0x0, r3}, 0x14) 230.735083ms ago: executing program 9 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 193.266264ms ago: executing program 7 (id=1955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdc2}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 120.313516ms ago: executing program 7 (id=1956): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) creat(0x0, 0xa2) 119.704446ms ago: executing program 9 (id=1966): io_uring_enter(0xffffffffffffffff, 0x6b7c, 0x9d7e, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r3, r1, 0x11, 0x0, r3}, 0x14) 82.316157ms ago: executing program 9 (id=1957): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 67.317938ms ago: executing program 7 (id=1958): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005880)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 0s ago: executing program 8 (id=1959): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) kernel console output (not intermixed with test programs): uster size (4096), stripe is disabled [ 75.950499][ T5881] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.655: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.021240][ T5881] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.022636][ T5881] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 76.033860][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 76.033896][ C1] EXT4-fs (loop5): initial error at time 1781049330: ext4_map_blocks:791: inode 3: block 2 [ 76.033932][ C1] EXT4-fs (loop5): last error at time 1781049330: ext4_map_blocks:791: inode 3: block 2 [ 76.068466][ T5881] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.655: lblock 0 mapped to illegal pblock 48 (length 1) [ 76.082737][ T5881] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.082874][ T5881] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 76.129849][ T5881] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.655: Failed to acquire dquot type 0 [ 76.156719][ T5881] loop5: lost filesystem error report for type 5 error -117 [ 76.157876][ T5881] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 76.193975][ T5881] loop5: lost filesystem error report for type 5 error -117 [ 76.195503][ T5881] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.655: mark_inode_dirty error [ 76.232354][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.240317][ T5881] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.244234][ T5881] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 76.272041][ T5881] EXT4-fs (loop5): 1 orphan inode deleted [ 76.282044][ T5881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.294261][ T4142] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.308778][ T4142] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.308907][ T4142] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 76.348045][ T4142] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:19: Failed to release dquot type 0 [ 76.377160][ T28] audit: type=1400 audit(1781049331.166:459): avc: denied { write } for pid=5880 comm="syz.5.655" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.422216][ T28] audit: type=1400 audit(1781049331.166:460): avc: denied { add_name } for pid=5880 comm="syz.5.655" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.474929][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.482129][ T28] audit: type=1400 audit(1781049331.166:461): avc: denied { create } for pid=5880 comm="syz.5.655" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 76.506364][ T4142] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.543586][ T4142] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.553849][ T4142] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 76.586500][ T4142] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:19: Failed to release dquot type 0 [ 76.619237][ T4142] loop5: lost filesystem error report for type 5 error -117 [ 76.621310][ T4973] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 76.651281][ T4973] loop5: lost filesystem error report for type 5 error -117 [ 76.651403][ T4973] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 76.697882][ T28] audit: type=1400 audit(1781049331.486:462): avc: denied { read } for pid=5909 comm="syz.4.667" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.726618][ T4973] loop5: lost filesystem error report for type 5 error -117 [ 76.726740][ T4973] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 76.745540][ T4973] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.746056][ T28] audit: type=1400 audit(1781049331.486:463): avc: denied { open } for pid=5909 comm="syz.4.667" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.903603][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.934380][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.029434][ T5948] loop5: detected capacity change from 0 to 2048 [ 78.949299][ T5948] loop5: p1 p4 [ 78.955926][ T5948] loop5: p4 size 589824 extends beyond EOD, truncated [ 78.975469][ T5959] __nla_validate_parse: 292 callbacks suppressed [ 78.975489][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.685'. [ 79.003754][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 79.057857][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 79.059585][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 79.150653][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 79.152052][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 79.196051][ T5974] netlink: 'syz.4.693': attribute type 3 has an invalid length. [ 79.210425][ T5974] netlink: 'syz.4.693': attribute type 7 has an invalid length. [ 79.224457][ T5974] netlink: 198320 bytes leftover after parsing attributes in process `syz.4.693'. [ 79.234387][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.243861][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.349189][ T6001] sctp: [Deprecated]: syz.2.703 (pid 6001) Use of int in maxseg socket option. [ 79.349189][ T6001] Use struct sctp_assoc_value instead [ 79.370155][ T6003] loop1: detected capacity change from 0 to 512 [ 79.393346][ T6003] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.407248][ T6003] EXT4-fs (loop1): 1 truncate cleaned up [ 79.413637][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.433265][ T6001] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 80.159090][ T6001] bond1 (unregistering): Released all slaves [ 80.167355][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.287076][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.713'. [ 80.306017][ T6030] loop5: detected capacity change from 0 to 128 [ 80.329898][ T6030] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 80.395335][ T6044] loop4: detected capacity change from 0 to 1024 [ 80.403573][ T6044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.426257][ T6030] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 80.439857][ T6044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.452575][ T6030] FAT-fs (loop5): Filesystem has been set read-only [ 80.515690][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 80.515706][ T28] audit: type=1400 audit(1781049335.306:473): avc: denied { append } for pid=6043 comm="syz.4.720" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.550624][ T4973] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 80.577076][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.636809][ T6067] loop4: detected capacity change from 0 to 512 [ 80.643241][ T28] audit: type=1400 audit(1781049335.426:474): avc: denied { execute } for pid=6061 comm="syz.2.728" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.669320][ T28] audit: type=1400 audit(1781049335.426:475): avc: denied { execute_no_trans } for pid=6061 comm="syz.2.728" path="/71/bus/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.706657][ T6067] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 80.717203][ T6067] EXT4-fs (loop4): 1 truncate cleaned up [ 80.723676][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.739098][ T28] audit: type=1400 audit(1781049335.526:476): avc: denied { write } for pid=6066 comm="syz.4.727" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.760869][ T28] audit: type=1400 audit(1781049335.526:477): avc: denied { create } for pid=6066 comm="syz.4.727" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.803548][ T28] audit: type=1400 audit(1781049335.546:478): avc: denied { write } for pid=6066 comm="syz.4.727" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.847260][ T28] audit: type=1400 audit(1781049335.546:479): avc: denied { add_name } for pid=6066 comm="syz.4.727" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.869743][ T28] audit: type=1400 audit(1781049335.546:480): avc: denied { write } for pid=6066 comm="syz.4.727" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.913002][ T28] audit: type=1400 audit(1781049335.546:481): avc: denied { write } for pid=6066 comm="syz.4.727" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.937572][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.958833][ T28] audit: type=1400 audit(1781049335.546:482): avc: denied { write } for pid=6066 comm="syz.4.727" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.060676][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 81.090324][ T6092] loop4: detected capacity change from 0 to 512 [ 81.104847][ T6092] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.749: iget: bad i_size value: 38620345925642 [ 81.118669][ T6092] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.141906][ T6092] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.749: couldn't read orphan inode 15 (err -117) [ 81.152495][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 81.171481][ C1] EXT4-fs (loop4): initial error at time 1781049335: ext4_orphan_get:1397: inode 15 [ 81.183704][ C1] EXT4-fs (loop4): last error at time 1781049335: ext4_orphan_get:1397: inode 15 [ 81.240136][ T6092] loop4: lost filesystem error report for type 5 error -117 [ 81.281558][ T6092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.323531][ T6091] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.749: bg 0: block 5: invalid block bitmap [ 81.361624][ T6092] EXT4-fs (loop4): shut down requested (0) [ 81.464877][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.480658][ T6106] loop5: detected capacity change from 0 to 1024 [ 81.524720][ T6106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.560585][ T6106] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.747068][ T6132] netlink: 'syz.0.754': attribute type 2 has an invalid length. [ 81.772380][ T6056] loop1: detected capacity change from 0 to 512 [ 81.807802][ T6135] netlink: 'syz.0.754': attribute type 2 has an invalid length. [ 81.812570][ T6056] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.830470][ T6056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.845231][ T6056] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.861091][ T6056] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 81.868671][ T6056] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #16: comm syz.1.724: inode has both inline data and extents flags [ 81.882141][ T6056] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 81.882752][ T6056] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.724: couldn't read orphan inode 16 (err -117) [ 81.892182][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 81.892215][ C1] EXT4-fs (loop1): initial error at time 1781049336: ext4_orphan_get:1397: inode 16 [ 81.892762][ C1] EXT4-fs (loop1): last error at time 1781049336: ext4_orphan_get:1397: inode 16 [ 81.933535][ T6056] loop1: lost filesystem error report for type 5 error -117 [ 81.936149][ T6056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.968613][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.993693][ T6139] loop1: detected capacity change from 0 to 512 [ 82.007462][ T6139] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.755: iget: bad i_size value: 38620345925642 [ 82.012956][ T3391] IPVS: starting estimator thread 0... [ 82.021688][ T6139] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.027186][ T6139] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.755: couldn't read orphan inode 15 (err -117) [ 82.031197][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 82.048238][ T6139] loop1: lost filesystem error report for type 5 error -117 [ 82.054547][ C0] EXT4-fs (loop1): initial error at time 1781049336: ext4_orphan_get:1397: inode 15 [ 82.070757][ T6139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.071268][ C0] EXT4-fs (loop1): last error at time 1781049336: ext4_orphan_get:1402 [ 82.112393][ T6138] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.755: bg 0: block 5: invalid block bitmap [ 82.125144][ T6139] EXT4-fs (loop1): shut down requested (0) [ 82.144815][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.161509][ T6143] IPVS: using max 2736 ests per chain, 136800 per kthread [ 82.273682][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.406204][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 82.519010][ T6166] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.671200][ T6168] loop5: detected capacity change from 0 to 512 [ 82.884111][ T6168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.898914][ T6168] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.045676][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.152212][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.779'. [ 83.322419][ T6206] loop1: detected capacity change from 0 to 2048 [ 83.385301][ T6206] loop1: p1 p4 [ 83.390738][ T6206] loop1: p4 size 589824 extends beyond EOD, truncated [ 83.517118][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 83.517977][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 83.991330][ T3391] IPVS: starting estimator thread 0... [ 84.046381][ T6194] syz.4.776 (6194) used greatest stack depth: 9144 bytes left [ 84.112555][ T6238] IPVS: using max 2592 ests per chain, 129600 per kthread [ 84.198484][ T6242] sctp: [Deprecated]: syz.4.795 (pid 6242) Use of int in maxseg socket option. [ 84.198484][ T6242] Use struct sctp_assoc_value instead [ 84.306878][ T6242] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 84.354099][ T6242] bond2 (unregistering): Released all slaves [ 84.374994][ T6256] loop1: detected capacity change from 0 to 256 [ 84.623170][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.695907][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'. [ 84.696392][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.766726][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.815197][ T6281] loop5: detected capacity change from 0 to 512 [ 84.826632][ T6281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.837008][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.872812][ T6281] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 84.881277][ T6281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 84.889802][ T6281] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 84.900908][ T6281] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 84.905802][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.916836][ T6281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.945941][ T6281] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.810: dx entry: limit 65535 != root limit 120 [ 84.962292][ T6281] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.810: Corrupt directory, running e2fsck is recommended [ 84.996291][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.015175][ T6281] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.810: path /65/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 85.065801][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.093614][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.122610][ T6290] netlink: 190864 bytes leftover after parsing attributes in process `syz.2.815'. [ 85.151690][ T6248] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.232739][ T6295] pim6reg1: entered promiscuous mode [ 85.253184][ T6297] sctp: [Deprecated]: syz.1.816 (pid 6297) Use of int in maxseg socket option. [ 85.253184][ T6297] Use struct sctp_assoc_value instead [ 85.254220][ T6295] pim6reg1: entered allmulticast mode [ 85.338659][ T6297] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 85.353440][ T6297] bond2 (unregistering): Released all slaves [ 85.743947][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.827'. [ 85.755765][ T6328] erspan1: entered allmulticast mode [ 85.870939][ T6332] sctp: [Deprecated]: syz.5.830 (pid 6332) Use of int in maxseg socket option. [ 85.870939][ T6332] Use struct sctp_assoc_value instead [ 85.918220][ T6334] loop4: detected capacity change from 0 to 128 [ 85.937073][ T6334] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 85.951095][ T6332] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 86.017727][ T6332] bond1 (unregistering): Released all slaves [ 86.077459][ T6334] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 86.110450][ T6334] FAT-fs (loop4): Filesystem has been set read-only [ 86.184020][ T3302] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 86.221255][ T6311] loop1: detected capacity change from 0 to 512 [ 86.419493][ T6311] EXT4-fs: Mount option(s) incompatible with ext3 [ 86.507014][ T6367] netlink: 'syz.5.838': attribute type 1 has an invalid length. [ 86.520836][ T6367] netlink: 5 bytes leftover after parsing attributes in process `syz.5.838'. [ 86.723149][ T6385] loop5: detected capacity change from 0 to 512 [ 86.726467][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 86.781015][ T6385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.802010][ T6385] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.815758][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 86.815776][ T28] audit: type=1400 audit(1781049341.606:512): avc: denied { write } for pid=6383 comm="syz.5.840" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.864188][ T28] audit: type=1400 audit(1781049341.656:513): avc: denied { mount } for pid=6383 comm="syz.5.840" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.935382][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.099009][ T6424] loop1: detected capacity change from 0 to 128 [ 87.153212][ T6424] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 87.313656][ T6424] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 87.341409][ T6424] FAT-fs (loop1): Filesystem has been set read-only [ 87.386346][ T3296] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 87.458471][ T28] audit: type=1400 audit(1781049342.216:514): avc: denied { getopt } for pid=6451 comm="syz.2.846" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.515867][ T6470] 9pnet_fd: p9_fd_create_tcp (6470): problem connecting socket to 127.0.0.1 [ 87.526083][ T6470] 9pnet_fd: p9_fd_create_tcp (6470): problem connecting socket to 127.0.0.1 [ 87.548213][ T6470] 9pnet_fd: p9_fd_create_tcp (6470): problem connecting socket to 127.0.0.1 [ 87.568770][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 87.570497][ T6470] 9pnet_fd: p9_fd_create_tcp (6470): problem connecting socket to 127.0.0.1 [ 87.794359][ T6487] loop5: detected capacity change from 0 to 256 [ 87.873895][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 87.893127][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.915358][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.973184][ T6482] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 87.992392][ T6482] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.004603][ T6482] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.033485][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.064259][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.104116][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.174944][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.261024][ T6483] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.490667][ T6468] loop1: detected capacity change from 0 to 512 [ 88.643268][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 88.675329][ T6512] erspan1: entered allmulticast mode [ 88.929669][ T6504] loop4: detected capacity change from 0 to 164 [ 89.020571][ T6504] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 89.049053][ T6468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.097466][ T6468] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.348228][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.382936][ T6530] netlink: 190864 bytes leftover after parsing attributes in process `syz.1.878'. [ 89.583025][ T28] audit: type=1400 audit(1781049344.336:515): avc: denied { bind } for pid=6533 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.602342][ T28] audit: type=1400 audit(1781049344.366:516): avc: denied { write } for pid=6533 comm="syz.4.881" path="socket:[14987]" dev="sockfs" ino=14987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.672199][ T6550] loop4: detected capacity change from 0 to 2048 [ 89.693074][ T6550] loop4: p1 p4 [ 89.697642][ T6550] loop4: p4 size 589824 extends beyond EOD, truncated [ 89.947119][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 89.948013][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 90.312998][ T6560] loop4: detected capacity change from 0 to 128 [ 90.458223][ T6573] netlink: 190864 bytes leftover after parsing attributes in process `syz.5.891'. [ 90.555769][ T23] IPVS: starting estimator thread 0... [ 90.626105][ T6586] loop4: detected capacity change from 0 to 2048 [ 90.661222][ T6583] IPVS: using max 2736 ests per chain, 136800 per kthread [ 90.674271][ T6586] loop4: p1 p4 [ 90.689659][ T6586] loop4: p4 size 589824 extends beyond EOD, truncated [ 90.706135][ T28] audit: type=1400 audit(1781049345.496:517): avc: denied { name_connect } for pid=6604 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 90.736554][ T2981] loop4: p1 p4 [ 90.766003][ T2981] loop4: p4 size 589824 extends beyond EOD, truncated [ 90.810491][ T28] audit: type=1400 audit(1781049345.596:518): avc: denied { accept } for pid=6604 comm="syz.0.906" lport=58470 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.862932][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 90.864752][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 90.910496][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 90.924664][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 90.961069][ T6621] netlink: 'syz.1.913': attribute type 3 has an invalid length. [ 90.968982][ T6621] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 90.977271][ T6621] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.913'. [ 91.216433][ T6617] loop4: detected capacity change from 0 to 256 [ 91.274467][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.285197][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.296636][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.309541][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.320984][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.335159][ T6616] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.345389][ T6616] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.355692][ T6616] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.366383][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 91.377366][ T6617] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 92.253862][ T28] audit: type=1400 audit(1781049347.046:519): avc: denied { read } for pid=6671 comm="syz.5.932" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.284472][ T6661] loop1: detected capacity change from 0 to 128 [ 92.306376][ T6672] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 92.321709][ T28] audit: type=1400 audit(1781049347.046:520): avc: denied { open } for pid=6671 comm="syz.5.932" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.386808][ T28] audit: type=1400 audit(1781049347.046:521): avc: denied { mounton } for pid=6671 comm="syz.5.932" path="/93/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.654788][ T28] audit: type=1400 audit(1781049347.446:522): avc: denied { write } for pid=6685 comm="syz.4.941" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.698495][ T28] audit: type=1400 audit(1781049347.466:523): avc: denied { ioctl } for pid=6685 comm="syz.4.941" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.724301][ T9] IPVS: starting estimator thread 0... [ 92.831264][ T6696] IPVS: using max 2736 ests per chain, 136800 per kthread [ 93.040476][ T6695] loop5: detected capacity change from 0 to 512 [ 93.169872][ T6695] EXT4-fs: Mount option(s) incompatible with ext3 [ 93.226331][ T6700] loop4: detected capacity change from 0 to 512 [ 93.385456][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 93.690752][ T6727] netlink: 'syz.0.953': attribute type 83 has an invalid length. [ 93.827050][ T6712] loop5: detected capacity change from 0 to 128 [ 94.142738][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.163735][ T6700] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.358055][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.367864][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.963'. [ 94.460689][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 94.489569][ T28] audit: type=1400 audit(1781049349.276:524): avc: denied { lock } for pid=6760 comm="syz.5.971" path="socket:[15651]" dev="sockfs" ino=15651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 94.568454][ T28] audit: type=1400 audit(1781049349.356:525): avc: denied { read append } for pid=6766 comm="syz.5.974" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.613450][ T28] audit: type=1400 audit(1781049349.356:526): avc: denied { open } for pid=6766 comm="syz.5.974" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.906059][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 94.941811][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 95.419541][ T28] audit: type=1400 audit(1781049350.206:527): avc: denied { associate } for pid=6810 comm="syz.4.989" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.467862][ T6801] loop5: detected capacity change from 0 to 164 [ 95.625990][ T28] audit: type=1400 audit(1781049350.416:528): avc: denied { shutdown } for pid=6818 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.726178][ T6759] syz.0.970 (6759) used greatest stack depth: 8824 bytes left [ 95.737956][ T6801] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 95.913073][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 96.267409][ T6859] loop4: detected capacity change from 0 to 128 [ 96.286502][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 96.319136][ T6859] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 96.336352][ T6859] FAT-fs (loop4): Filesystem has been set read-only [ 96.389966][ T3302] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 96.551737][ T6877] loop4: detected capacity change from 0 to 4096 [ 96.571649][ T6877] EXT4-fs: test_dummy_encryption option not supported [ 96.632964][ T6877] xt_hashlimit: size too large, truncated to 1048576 [ 96.852277][ T6896] tipc: Started in network mode [ 96.884207][ T6896] tipc: Node identity 2007ff, cluster identity 4711 [ 96.901264][ T6896] tipc: Node number set to 2099199 [ 96.921270][ T4140] tipc: Subscription rejected, illegal request [ 96.941991][ T6901] loop4: detected capacity change from 0 to 128 [ 96.987400][ T6901] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.014765][ T6901] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.324700][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.398426][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 97.398445][ T28] audit: type=1400 audit(1781049352.186:535): avc: denied { watch watch_reads } for pid=6917 comm="syz.4.1027" path="/200/file1" dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.875313][ T6933] loop5: detected capacity change from 0 to 512 [ 97.893962][ T6933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.907098][ T6933] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.920101][ T28] audit: type=1400 audit(1781049352.706:536): avc: denied { write } for pid=6932 comm="syz.5.1036" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.925105][ T6938] netlink: 'syz.0.1037': attribute type 4 has an invalid length. [ 98.013927][ T4973] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.298090][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 98.465721][ T28] audit: type=1400 audit(1781049353.256:537): avc: denied { bind } for pid=6975 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.515226][ T28] audit: type=1400 audit(1781049353.256:538): avc: denied { setopt } for pid=6975 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.545028][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'. [ 98.556303][ T6984] netlink: 'syz.2.1057': attribute type 7 has an invalid length. [ 98.565540][ T6984] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 98.573903][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 98.635343][ T28] audit: type=1400 audit(1781049353.426:539): avc: denied { ioctl } for pid=6998 comm="syz.4.1062" path="socket:[16017]" dev="sockfs" ino=16017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.684087][ T7001] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 98.718275][ T7001] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 98.862433][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1072'. [ 98.865619][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.878661][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.886259][ T6973] bridge_slave_0: entered allmulticast mode [ 98.894114][ T6973] bridge_slave_0: entered promiscuous mode [ 98.920829][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.928087][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.938452][ T6973] bridge_slave_1: entered allmulticast mode [ 98.945312][ T6973] bridge_slave_1: entered promiscuous mode [ 98.966126][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.977119][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.006637][ T6973] team0: Port device team_slave_0 added [ 99.013699][ T6973] team0: Port device team_slave_1 added [ 99.031356][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.038396][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.064833][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.076458][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.083804][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.110912][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.144640][ T6973] hsr_slave_0: entered promiscuous mode [ 99.150670][ T6973] hsr_slave_1: entered promiscuous mode [ 99.156988][ T6973] debugfs: 'hsr0' already exists in 'hsr' [ 99.163163][ T6973] Cannot create hsr debugfs directory [ 99.182540][ T7041] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1078'. [ 99.193234][ T7041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.288206][ T6973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.303327][ T6973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.313696][ T6973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.332135][ T6973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.345346][ T6973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.356141][ T6973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.364890][ T6973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.374312][ T6973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.449256][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.467535][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.481037][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.488342][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.508427][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.515556][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.744165][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.929143][ T6973] veth0_vlan: entered promiscuous mode [ 99.953138][ T6973] veth1_vlan: entered promiscuous mode [ 99.987590][ T6973] veth0_macvtap: entered promiscuous mode [ 100.000345][ T6973] veth1_macvtap: entered promiscuous mode [ 100.012111][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.026206][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.037039][ T4145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.046808][ T4145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.059300][ T4145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.068242][ T4145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.106614][ T28] audit: type=1400 audit(1781049354.896:540): avc: denied { mounton } for pid=6973 comm="syz-executor" path="/root/syzkaller.rjZyxf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.116362][ T7083] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.141931][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.149513][ T7083] bridge_slave_0: entered allmulticast mode [ 100.156359][ T7083] bridge_slave_0: entered promiscuous mode [ 100.164153][ T7083] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.175922][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.183553][ T7083] bridge_slave_1: entered allmulticast mode [ 100.190374][ T7083] bridge_slave_1: entered promiscuous mode [ 100.213746][ T7083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.224418][ T7083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.249462][ T7083] team0: Port device team_slave_0 added [ 100.259650][ T7083] team0: Port device team_slave_1 added [ 100.308682][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.317261][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.343653][ T7083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.354896][ T7083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.362104][ T7083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.388285][ T7083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.456021][ T7083] hsr_slave_0: entered promiscuous mode [ 100.460279][ T28] audit: type=1400 audit(1781049355.246:541): avc: denied { ioctl } for pid=7124 comm="syz.1.1093" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.471807][ T7083] hsr_slave_1: entered promiscuous mode [ 100.499519][ T7130] loop6: detected capacity change from 0 to 1024 [ 100.520977][ T7083] debugfs: 'hsr0' already exists in 'hsr' [ 100.532072][ T7083] Cannot create hsr debugfs directory [ 100.535218][ T7130] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 100.546967][ T7130] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 100.556782][ T7130] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1095: Failed to acquire dquot type 0 [ 100.568658][ T7130] loop6: lost filesystem error report for type 5 error -117 [ 100.569083][ T7130] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 100.576420][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 100.576442][ C1] EXT4-fs (loop6): initial error at time 1781049355: ext4_acquire_dquot:7034 [ 100.576462][ C1] EXT4-fs (loop6): last error at time 1781049355: ext4_acquire_dquot:7034 [ 100.608576][ T7130] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 100.618336][ T7130] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.1095: corrupted inode contents [ 100.630283][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.630574][ T7130] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #13: comm syz.6.1095: mark_inode_dirty error [ 100.651244][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.651668][ T7130] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.1095: corrupted inode contents [ 100.672737][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.673171][ T7130] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.1095: mark_inode_dirty error [ 100.673729][ T7083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.682401][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.705495][ T7130] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.1095: corrupted inode contents [ 100.726978][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.727243][ T7130] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 100.745021][ T7130] loop6: lost filesystem error report for type 5 error -117 [ 100.745204][ T7130] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #13: comm syz.6.1095: corrupted inode contents [ 100.764632][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.764837][ T7130] EXT4-fs error (device loop6): ext4_truncate:4690: inode #13: comm syz.6.1095: mark_inode_dirty error [ 100.786000][ T7083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.786537][ T7130] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.797798][ T7130] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 100.818921][ T7130] loop6: lost filesystem error report for type 5 error -117 [ 100.819600][ T7130] EXT4-fs (loop6): 1 truncate cleaned up [ 100.833599][ T7130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.863967][ T7083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.892097][ T6973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.925415][ T7083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.992095][ T7083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.001420][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.009619][ T7083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.019483][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.027466][ T7083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.036770][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.044730][ T7083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.053953][ T7083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.102875][ T7083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.121296][ T7083] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.132240][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.139426][ T4145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.152401][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.159601][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.360456][ T7083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.490954][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 101.503353][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 101.530184][ T7083] veth0_vlan: entered promiscuous mode [ 101.547037][ T7083] veth1_vlan: entered promiscuous mode [ 101.571641][ T7083] veth0_macvtap: entered promiscuous mode [ 101.582403][ T7083] veth1_macvtap: entered promiscuous mode [ 101.595610][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.616515][ T7083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.654930][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.654942][ T7190] netlink: 'syz.2.1110': attribute type 16 has an invalid length. [ 101.655305][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.689820][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.699489][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.759351][ T7195] sock: sock_set_timeout: `syz.0.1088' (pid 7195) tries to set negative timeout [ 101.869410][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 101.960538][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 102.034226][ T7223] loop4: detected capacity change from 0 to 1024 [ 102.044996][ T28] audit: type=1400 audit(1781049356.836:542): avc: denied { create } for pid=7224 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.096284][ T7223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.166486][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.338762][ T7246] ipvlan2: entered promiscuous mode [ 102.345100][ T7246] team0: Device ipvlan2 failed to register rx_handler [ 102.491351][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'. [ 102.810852][ T7269] loop6: detected capacity change from 0 to 512 [ 102.828203][ T7269] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 102.839795][ T7269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 102.849365][ T7269] System zones: 1-12 [ 102.856797][ T7269] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.876916][ T7269] EXT4-fs (loop6): 1 truncate cleaned up [ 102.883319][ T7269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.921944][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 102.921961][ T28] audit: type=1400 audit(1781049357.716:544): avc: denied { read write } for pid=7280 comm="syz.1.1138" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.952569][ T28] audit: type=1400 audit(1781049357.716:545): avc: denied { open } for pid=7280 comm="syz.1.1138" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.995136][ T6973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.999465][ T7285] netlink: 'syz.2.1141': attribute type 4 has an invalid length. [ 103.019773][ T7285] netlink: 'syz.2.1141': attribute type 4 has an invalid length. [ 103.298745][ T7312] loop4: detected capacity change from 0 to 512 [ 103.326731][ T7312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.339644][ T7312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 103.347741][ T7312] System zones: 1-12 [ 103.352574][ T7312] EXT4-fs (loop4): 1 truncate cleaned up [ 103.358738][ T7312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.912090][ T28] audit: type=1400 audit(1781049358.706:546): avc: denied { read } for pid=7360 comm="syz.6.1158" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.957628][ T28] audit: type=1400 audit(1781049358.706:547): avc: denied { open } for pid=7360 comm="syz.6.1158" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.080521][ T7377] netlink: 'syz.6.1160': attribute type 4 has an invalid length. [ 104.138960][ T7377] netlink: 'syz.6.1160': attribute type 4 has an invalid length. [ 104.250557][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.370990][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.378352][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.513781][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.542517][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.587184][ T4131] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.597737][ T4131] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.624987][ T4131] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.646043][ T4131] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.801603][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1178'. [ 104.815265][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.829395][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.136176][ T7479] netlink: 'syz.4.1190': attribute type 39 has an invalid length. [ 105.220176][ T4131] bridge_slave_1: left allmulticast mode [ 105.226146][ T4131] bridge_slave_1: left promiscuous mode [ 105.232080][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.257415][ T4131] bridge_slave_0: left allmulticast mode [ 105.263937][ T4131] bridge_slave_0: left promiscuous mode [ 105.286353][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.302457][ T28] audit: type=1400 audit(1781049360.096:548): avc: denied { bind } for pid=7474 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.354325][ T28] audit: type=1400 audit(1781049360.146:549): avc: denied { read } for pid=7474 comm="syz.2.1188" path="socket:[18024]" dev="sockfs" ino=18024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.408700][ T28] audit: type=1400 audit(1781049360.196:550): avc: denied { setopt } for pid=7474 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.448021][ T28] audit: type=1400 audit(1781049360.226:551): avc: denied { name_bind } for pid=7492 comm="syz.1.1196" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 105.478192][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.492633][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.608033][ T4131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.626607][ T4131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.641273][ T4131] bond0 (unregistering): Released all slaves [ 105.694519][ T4131] tipc: Left network mode [ 105.706289][ T4131] hsr_slave_0: left promiscuous mode [ 105.715079][ T4131] hsr_slave_1: left promiscuous mode [ 105.731721][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.757437][ T4131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.830682][ T28] audit: type=1400 audit(1781049360.616:552): avc: denied { write } for pid=7503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.870275][ T28] audit: type=1400 audit(1781049360.646:553): avc: denied { write } for pid=7520 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.893841][ T4131] team0 (unregistering): Port device team_slave_1 removed [ 105.904504][ T4131] team0 (unregistering): Port device team_slave_0 removed [ 105.942027][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 106.017901][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 106.140498][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 106.356713][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 106.612281][ T7545] loop4: detected capacity change from 0 to 764 [ 106.683533][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 106.940705][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.964094][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.130802][ T7626] loop6: detected capacity change from 0 to 512 [ 107.152013][ T7626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.210623][ T7626] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 107.233942][ T7626] System zones: 1-12 [ 107.240656][ T7626] EXT4-fs (loop6): 1 truncate cleaned up [ 107.243736][ T7634] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 107.247293][ T7626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.346925][ T7634] bond1: (slave gretap1): making interface the new active one [ 107.376080][ T7634] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.580416][ T6973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.897236][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 107.969340][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 108.406970][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.426794][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.440337][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 108.440367][ T28] audit: type=1400 audit(1781049363.226:566): avc: denied { create } for pid=7678 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 108.504328][ T28] audit: type=1400 audit(1781049363.256:567): avc: denied { write } for pid=7678 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 108.701278][ T7653] loop6: detected capacity change from 0 to 512 [ 108.829259][ T7653] EXT4-fs: Mount option(s) incompatible with ext3 [ 109.094091][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 109.393164][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 109.568616][ T3457] bridge_slave_1: left allmulticast mode [ 109.574640][ T3457] bridge_slave_1: left promiscuous mode [ 109.580350][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.588341][ T3457] bridge_slave_0: left allmulticast mode [ 109.595504][ T3457] bridge_slave_0: left promiscuous mode [ 109.602712][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.673934][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.683758][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.692917][ T3457] bond0 (unregistering): Released all slaves [ 109.735906][ T3457] hsr_slave_0: left promiscuous mode [ 109.741615][ T3457] hsr_slave_1: left promiscuous mode [ 109.778938][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 109.790643][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 109.808251][ T28] audit: type=1400 audit(1781049364.596:568): avc: denied { write } for pid=7727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.851456][ T28] audit: type=1400 audit(1781049364.636:569): avc: denied { write } for pid=7739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.890708][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 109.904129][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.911457][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.918618][ T7712] bridge_slave_0: entered allmulticast mode [ 109.925217][ T7712] bridge_slave_0: entered promiscuous mode [ 109.932062][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.939240][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.946487][ T7712] bridge_slave_1: entered allmulticast mode [ 109.953195][ T7712] bridge_slave_1: entered promiscuous mode [ 109.970778][ T7712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.982102][ T7712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.003772][ T7712] team0: Port device team_slave_0 added [ 110.010625][ T7712] team0: Port device team_slave_1 added [ 110.028254][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.035286][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.061238][ T7712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.072861][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.079833][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.107118][ T28] audit: type=1400 audit(1781049364.866:570): avc: denied { write } for pid=7745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.130491][ T7712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.137385][ T28] audit: type=1400 audit(1781049364.896:571): avc: denied { write } for pid=7756 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.157661][ T7712] hsr_slave_0: entered promiscuous mode [ 110.169527][ T7712] hsr_slave_1: entered promiscuous mode [ 110.175818][ T7712] debugfs: 'hsr0' already exists in 'hsr' [ 110.181635][ T7712] Cannot create hsr debugfs directory [ 110.187645][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 110.280240][ T7712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.289346][ T7712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.297873][ T7712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.304921][ T28] audit: type=1400 audit(1781049365.086:572): avc: denied { write } for pid=7760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.331818][ T7712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.333726][ T28] audit: type=1400 audit(1781049365.106:573): avc: denied { write } for pid=7771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.339887][ T7712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.370114][ T7712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.378436][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 110.385638][ T7712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.394520][ T7712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.412682][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.420091][ T7712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.427430][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.434572][ T7712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.452348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.460403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.483225][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.496172][ T7712] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.506818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.514301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.525447][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.531411][ T28] audit: type=1400 audit(1781049365.316:574): avc: denied { write } for pid=7780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.532603][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.575706][ T7712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.586431][ T28] audit: type=1400 audit(1781049365.366:575): avc: denied { write } for pid=7791 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.590348][ T7712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.620599][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 110.729530][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.833855][ T7712] veth0_vlan: entered promiscuous mode [ 110.842405][ T7712] veth1_vlan: entered promiscuous mode [ 110.857835][ T7712] veth0_macvtap: entered promiscuous mode [ 110.865303][ T7712] veth1_macvtap: entered promiscuous mode [ 110.876117][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.887494][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.899510][ T4131] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.908762][ T4131] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.918427][ T4131] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.927806][ T4131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.434450][ T3457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.489971][ T3457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.537103][ T7841] loop7: detected capacity change from 0 to 512 [ 111.545834][ T7841] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 111.558373][ T3457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.569685][ T7841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 111.578255][ T7841] System zones: 1-12 [ 111.583620][ T7841] EXT4-fs (loop7): 1 truncate cleaned up [ 111.591820][ T7841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.617056][ T3457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.687908][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.814990][ T3457] bridge_slave_1: left allmulticast mode [ 111.820807][ T3457] bridge_slave_1: left promiscuous mode [ 111.841458][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.863410][ T3457] bridge_slave_0: left allmulticast mode [ 111.869253][ T3457] bridge_slave_0: left promiscuous mode [ 111.877195][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.991591][ T3457] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 112.044166][ T7899] loop7: detected capacity change from 0 to 512 [ 112.062800][ T7899] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.074359][ T7899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 112.082670][ T7899] System zones: 1-12 [ 112.087820][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.099390][ T7899] EXT4-fs (loop7): 1 truncate cleaned up [ 112.106437][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.112230][ T7899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.129229][ T3457] bond0 (unregistering): Released all slaves [ 112.138549][ T3457] bond1 (unregistering): Released all slaves [ 112.179996][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 112.212856][ T3457] hsr_slave_0: left promiscuous mode [ 112.223064][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.240811][ T3457] hsr_slave_1: left promiscuous mode [ 112.246694][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.260639][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.269704][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.280146][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.295676][ T3457] veth1_macvtap: left promiscuous mode [ 112.301571][ T3457] veth0_macvtap: left promiscuous mode [ 112.307210][ T3457] veth1_vlan: left promiscuous mode [ 112.313378][ T3457] veth0_vlan: left promiscuous mode [ 112.449479][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 112.471765][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 112.704788][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.716495][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.735169][ T7842] bridge_slave_0: entered allmulticast mode [ 112.747283][ T7842] bridge_slave_0: entered promiscuous mode [ 112.754501][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.761799][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.769213][ T7842] bridge_slave_1: entered allmulticast mode [ 112.777086][ T7842] bridge_slave_1: entered promiscuous mode [ 112.831700][ T7842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.850031][ T7842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.894746][ T7842] team0: Port device team_slave_0 added [ 112.905251][ T7842] team0: Port device team_slave_1 added [ 112.933258][ T7937] loop7: detected capacity change from 0 to 512 [ 112.941727][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.966788][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.005728][ T7842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.018660][ T7937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.031830][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 113.042137][ T7842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.051020][ T7937] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.061836][ T7842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.096343][ T7842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.147157][ T7842] hsr_slave_0: entered promiscuous mode [ 113.153410][ T7842] hsr_slave_1: entered promiscuous mode [ 113.169084][ T7842] debugfs: 'hsr0' already exists in 'hsr' [ 113.174946][ T7842] Cannot create hsr debugfs directory [ 113.359989][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.375164][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 113.597632][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 113.597650][ T28] audit: type=1400 audit(1781049368.386:583): avc: denied { write } for pid=7979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.601836][ T7842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.651082][ T28] audit: type=1400 audit(1781049368.436:584): avc: denied { write } for pid=7999 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.676977][ T7842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.685057][ T7842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.694376][ T7842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.702872][ T7842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.713394][ T7842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.722616][ T7842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.762141][ T7842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.772397][ T28] audit: type=1400 audit(1781049368.556:585): avc: denied { mount } for pid=8009 comm="syz.2.1302" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.902140][ T28] audit: type=1400 audit(1781049368.696:586): avc: denied { write } for pid=8001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.932297][ T7842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.956580][ T7842] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.979551][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.986690][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.995604][ T28] audit: type=1400 audit(1781049368.766:587): avc: denied { write } for pid=8035 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.029033][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.036169][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.281044][ T28] audit: type=1400 audit(1781049369.066:588): avc: denied { write } for pid=8038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.374429][ T28] audit: type=1400 audit(1781049369.166:589): avc: denied { write } for pid=8068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.481513][ T7842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.635620][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 114.679307][ T7842] veth0_vlan: entered promiscuous mode [ 114.713905][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.735295][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.754165][ T8050] bridge_slave_0: entered allmulticast mode [ 114.768777][ T8050] bridge_slave_0: entered promiscuous mode [ 114.780098][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.789732][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.797314][ T8050] bridge_slave_1: entered allmulticast mode [ 114.804296][ T8050] bridge_slave_1: entered promiscuous mode [ 114.818227][ T7842] veth1_vlan: entered promiscuous mode [ 114.831415][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.845027][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.864550][ T7842] veth0_macvtap: entered promiscuous mode [ 114.882540][ T8050] team0: Port device team_slave_0 added [ 114.889518][ T8050] team0: Port device team_slave_1 added [ 114.895842][ T7842] veth1_macvtap: entered promiscuous mode [ 114.915099][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.922387][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.949066][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.961627][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.968586][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.994636][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.023774][ T8050] hsr_slave_0: entered promiscuous mode [ 115.029964][ T8050] hsr_slave_1: entered promiscuous mode [ 115.035979][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 115.041732][ T8050] Cannot create hsr debugfs directory [ 115.055075][ T7842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.077625][ T7842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.098815][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.115751][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.124639][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.140026][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.280417][ T28] audit: type=1400 audit(1781049370.066:590): avc: denied { connect } for pid=8103 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.320964][ T28] audit: type=1400 audit(1781049370.106:591): avc: denied { ioctl } for pid=8112 comm="syz.2.1318" path="socket:[21268]" dev="sockfs" ino=21268 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.479276][ T8050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.503919][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.519607][ T8050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.530418][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.539368][ T8050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.552434][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.560913][ T8050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.579765][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.702705][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.738874][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.758602][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.765772][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.809264][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.816579][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.058109][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 116.140477][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.382223][ T8050] veth0_vlan: entered promiscuous mode [ 116.408998][ T8050] veth1_vlan: entered promiscuous mode [ 116.447575][ T8050] veth0_macvtap: entered promiscuous mode [ 116.467112][ T8050] veth1_macvtap: entered promiscuous mode [ 116.483514][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.501080][ T8050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.539388][ T3457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.548699][ T3457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.568268][ T3457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.586622][ T3457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.859993][ T28] audit: type=1400 audit(1781049371.646:592): avc: denied { write } for pid=8199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.144770][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.152271][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.159473][ T8211] bridge_slave_0: entered allmulticast mode [ 117.166577][ T8211] bridge_slave_0: entered promiscuous mode [ 117.174917][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.182576][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.209411][ T8211] bridge_slave_1: entered allmulticast mode [ 117.218023][ T8211] bridge_slave_1: entered promiscuous mode [ 117.243514][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.267580][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.295842][ T8211] team0: Port device team_slave_0 added [ 117.305844][ T8211] team0: Port device team_slave_1 added [ 117.354017][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.361422][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.389036][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.402908][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.410192][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.438609][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.474161][ T8211] hsr_slave_0: entered promiscuous mode [ 117.480334][ T8211] hsr_slave_1: entered promiscuous mode [ 117.486993][ T8211] debugfs: 'hsr0' already exists in 'hsr' [ 117.493834][ T8211] Cannot create hsr debugfs directory [ 117.609488][ T8211] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.679025][ T8211] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.744578][ T8211] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.796106][ T8211] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.875846][ T8211] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.891042][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.892597][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 117.917887][ T8211] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.937225][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.943317][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 117.948270][ T8211] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.976103][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.001050][ T8211] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.019009][ T8211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.155174][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.187917][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.235031][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.242151][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.258251][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.265375][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.629212][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 118.629230][ T28] audit: type=1400 audit(1781049373.416:598): avc: denied { shutdown } for pid=8315 comm="syz.4.1364" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.695916][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.702663][ T28] audit: type=1400 audit(1781049373.446:599): avc: denied { read } for pid=8315 comm="syz.4.1364" path="socket:[22843]" dev="sockfs" ino=22843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.755754][ T8329] syz_tun: entered allmulticast mode [ 118.788772][ T28] audit: type=1400 audit(1781049373.536:600): avc: denied { write } for pid=8302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.840786][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 118.859210][ T28] audit: type=1400 audit(1781049373.636:601): avc: denied { write } for pid=8335 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.894705][ T8343] bridge0: port 3(team0) entered blocking state [ 118.908387][ T8343] bridge0: port 3(team0) entered disabled state [ 118.942151][ T8343] team0: entered allmulticast mode [ 118.949561][ T8343] team_slave_0: entered allmulticast mode [ 118.964049][ T8343] team_slave_1: entered allmulticast mode [ 118.994525][ T8343] team0: entered promiscuous mode [ 119.011714][ T8343] team_slave_0: entered promiscuous mode [ 119.026581][ T8343] team_slave_1: entered promiscuous mode [ 119.035328][ T8343] bridge0: port 3(team0) entered blocking state [ 119.041654][ T8343] bridge0: port 3(team0) entered forwarding state [ 119.150188][ T8359] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 119.176594][ T8359] 8021q: VLANs not supported on nlmon0 [ 119.269134][ T28] audit: type=1400 audit(1781049374.056:602): avc: denied { write } for pid=8349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.304144][ T8211] veth0_vlan: entered promiscuous mode [ 119.330828][ T8211] veth1_vlan: entered promiscuous mode [ 119.350214][ T28] audit: type=1400 audit(1781049374.136:603): avc: denied { write } for pid=8374 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.382412][ T8211] veth0_macvtap: entered promiscuous mode [ 119.406952][ T8211] veth1_macvtap: entered promiscuous mode [ 119.451137][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.488695][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.524539][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.533578][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.560215][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.574142][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.829168][ T28] audit: type=1400 audit(1781049374.616:604): avc: denied { wake_alarm } for pid=8402 comm="syz.1.1383" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.908898][ T28] audit: type=1400 audit(1781049630.693:605): avc: denied { create } for pid=8405 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.936203][ T8406] Unsupported ieee802154 address type: 0 [ 119.979524][ T28] audit: type=1400 audit(1781049630.723:606): avc: denied { bind } for pid=8405 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.038638][ T28] audit: type=1326 audit(1781049630.733:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8405 comm="syz.1.1384" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6df2ce59 code=0x7ffc0000 [ 120.114577][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 120.148354][ T8416] team1: entered promiscuous mode [ 120.162787][ T8416] team1: entered allmulticast mode [ 120.172317][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 120.172947][ T8416] 8021q: adding VLAN 0 to HW filter on device team1 [ 120.255318][ T8420] team2: entered promiscuous mode [ 120.271235][ T8420] team2: entered allmulticast mode [ 120.289860][ T8420] 8021q: adding VLAN 0 to HW filter on device team2 [ 121.102617][ T8455] loop7: detected capacity change from 0 to 128 [ 122.502991][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 122.526859][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 122.549032][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 122.640366][ T8525] io-wq is not configured for unbound workers [ 122.918785][ T3457] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.004447][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 123.011620][ T3384] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 60 sec [ 123.416469][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.424463][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.431769][ T8561] bridge_slave_0: entered allmulticast mode [ 123.438420][ T8561] bridge_slave_0: entered promiscuous mode [ 123.445862][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.454731][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.462542][ T8561] bridge_slave_1: entered allmulticast mode [ 123.469240][ T8561] bridge_slave_1: entered promiscuous mode [ 123.488835][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.504186][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.524736][ T8561] team0: Port device team_slave_0 added [ 123.531479][ T8561] team0: Port device team_slave_1 added [ 123.547133][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.554219][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.580698][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.591975][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.599023][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.625195][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.652037][ T8561] hsr_slave_0: entered promiscuous mode [ 123.658270][ T8561] hsr_slave_1: entered promiscuous mode [ 123.664300][ T8561] debugfs: 'hsr0' already exists in 'hsr' [ 123.670030][ T8561] Cannot create hsr debugfs directory [ 124.265438][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 124.265469][ T28] audit: type=1400 audit(1781049635.053:638): avc: denied { mounton } for pid=8601 comm="syz.2.1439" path="/file0" dev="ramfs" ino=27048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 124.931319][ T3769] Bluetooth: hci0: command 0x1003 tx timeout [ 124.931629][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.932818][ T8549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.942124][ T8561] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 125.951511][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.959178][ T8561] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 125.967929][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.975874][ T8561] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 125.984494][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.992521][ T8561] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 126.001131][ T8561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.047837][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.062179][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.073062][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.080132][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.092388][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.099616][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.216682][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.325715][ T8561] veth0_vlan: entered promiscuous mode [ 126.334346][ T8561] veth1_vlan: entered promiscuous mode [ 126.353914][ T8561] veth0_macvtap: entered promiscuous mode [ 126.362293][ T8561] veth1_macvtap: entered promiscuous mode [ 126.374881][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.387702][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.400363][ T3457] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.409835][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.419250][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.429409][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.587259][ T28] audit: type=1400 audit(1781049637.373:639): avc: denied { mount } for pid=8652 comm="syz.0.1454" name="/" dev="hugetlbfs" ino=26346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 126.636268][ T28] audit: type=1400 audit(1781049637.423:640): avc: denied { cpu } for pid=8654 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.740207][ T8659] netlink: 212 bytes leftover after parsing attributes in process `syz.8.1444'. [ 126.875122][ T28] audit: type=1400 audit(1781049637.663:641): avc: denied { create } for pid=8672 comm="syz.7.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.904832][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1455'. [ 126.933808][ T8673] futex_wake_op: syz.7.1455 tries to shift op by 144; fix this program [ 126.945490][ T28] audit: type=1400 audit(1781049637.693:642): avc: denied { write } for pid=8672 comm="syz.7.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.082322][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 127.102433][ T28] audit: type=1400 audit(1781049637.893:643): avc: denied { getopt } for pid=8688 comm="syz.4.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.373044][ T8717] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 127.475199][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 127.494651][ T8720] tipc: Started in network mode [ 127.500334][ T8720] tipc: Node identity 5aa9c68722cf, cluster identity 4711 [ 127.508083][ T8720] tipc: Enabled bearer , priority 0 [ 127.605076][ T8720] tipc: Resetting bearer [ 127.686569][ T8738] tipc: Started in network mode [ 127.695990][ T8738] tipc: Node identity 0ef4fccfa299, cluster identity 4711 [ 127.711580][ T8738] tipc: Enabled bearer , priority 0 [ 127.722795][ T8719] tipc: Resetting bearer [ 127.740229][ T8719] tipc: Disabling bearer [ 127.791533][ T8738] tipc: Resetting bearer [ 127.849641][ T8737] tipc: Resetting bearer [ 127.872522][ T8737] tipc: Disabling bearer [ 128.164902][ T28] audit: type=1400 audit(1781049894.954:644): avc: denied { name_bind } for pid=8763 comm="syz.8.1490" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 128.357252][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 128.368876][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 128.628747][ T28] audit: type=1400 audit(1781049895.414:645): avc: denied { name_bind } for pid=8781 comm="syz.2.1499" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 128.928207][ T8809] netlink: 'syz.7.1512': attribute type 298 has an invalid length. [ 129.190495][ T8821] ipvlan2: entered promiscuous mode [ 129.216001][ T8821] team0: Device ipvlan2 failed to register rx_handler [ 129.466619][ T8829] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1519'. [ 129.481665][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.488968][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.512794][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1519'. [ 129.536116][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.543257][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.550571][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.557639][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.574143][ T8829] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1519'. [ 129.592857][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.600334][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.627601][ T28] audit: type=1400 audit(1781049896.414:646): avc: denied { read } for pid=8830 comm="syz.4.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 129.729181][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1522'. [ 129.799512][ T8839] bridge1: entered allmulticast mode [ 130.060739][ T28] audit: type=1400 audit(1781049896.844:647): avc: denied { setopt } for pid=8858 comm="syz.8.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.271104][ T8826] loop7: detected capacity change from 0 to 764 [ 131.164307][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.230726][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.884439][ T8924] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 131.963651][ T8926] bridge_slave_1: left allmulticast mode [ 131.969476][ T8926] bridge_slave_1: left promiscuous mode [ 132.006549][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.024766][ T8928] loop8: detected capacity change from 0 to 1024 [ 132.039145][ T8926] bridge_slave_0: left allmulticast mode [ 132.045093][ T8926] bridge_slave_0: left promiscuous mode [ 132.059604][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.069352][ T28] audit: type=1400 audit(1781049898.854:648): avc: denied { mounton } for pid=8929 comm="syz.2.1560" path="/289/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 132.092231][ T8928] EXT4-fs: inline encryption not supported [ 132.126874][ T28] audit: type=1400 audit(1781049898.854:649): avc: denied { unmount } for pid=8929 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.150584][ T8928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.178566][ T28] audit: type=1400 audit(1781049898.964:650): avc: denied { write } for pid=8927 comm="syz.8.1559" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.279243][ T28] audit: type=1400 audit(1781049899.064:651): avc: denied { open } for pid=8936 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.384136][ T28] audit: type=1400 audit(1781049899.064:652): avc: denied { kernel } for pid=8936 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.405016][ T8561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.573664][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.585143][ T28] audit: type=1400 audit(1781049899.364:653): avc: denied { tracepoint } for pid=8947 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.622805][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.845740][ T28] audit: type=1400 audit(1781049899.634:654): avc: denied { write } for pid=8955 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.455264][ T8972] __nla_validate_parse: 3 callbacks suppressed [ 133.455283][ T8972] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1576'. [ 133.489104][ T8972] syzkaller1: entered promiscuous mode [ 133.499011][ T8972] syzkaller1: entered allmulticast mode [ 133.661070][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 133.683672][ T3384] dummy0: entered promiscuous mode [ 133.741757][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 133.762681][ T8987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.795273][ T8987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.814913][ T8987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.832791][ T8987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.172014][ T28] audit: type=1400 audit(1781049901.964:655): avc: denied { ioctl } for pid=9050 comm="syz.0.1608" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 135.335145][ T28] audit: type=1400 audit(1781049902.124:656): avc: denied { setopt } for pid=9072 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.377119][ T28] audit: type=1400 audit(1781049902.144:657): avc: denied { write } for pid=9072 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.009744][ T9046] Set syz1 is full, maxelem 65536 reached [ 136.512093][ T9115] syzkaller0: entered promiscuous mode [ 136.517633][ T9115] syzkaller0: entered allmulticast mode [ 136.781751][ T9122] loop7: detected capacity change from 0 to 8192 [ 136.952270][ T9113] batman_adv: batadv0: Adding interface: dummy0 [ 136.964498][ T9113] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.998626][ T9113] batman_adv: batadv0: Interface activated: dummy0 [ 137.025728][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 137.056861][ T9122] syz.7.1628: attempt to access beyond end of device [ 137.056861][ T9122] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 137.056908][ T9122] Buffer I/O error on dev loop7, logical block 57847, async page read [ 137.093302][ T28] audit: type=1400 audit(1781049903.844:658): avc: denied { module_load } for pid=9121 comm="syz.7.1628" path="/53/file2/file2" dev="loop7" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 137.128190][ T9122] syz.7.1628: attempt to access beyond end of device [ 137.128190][ T9122] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 137.149656][ T9122] Buffer I/O error on dev loop7, logical block 57847, async page read [ 137.167188][ T28] audit: type=1400 audit(1781049903.954:659): avc: denied { read } for pid=9135 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.200174][ T9122] syz.7.1628: attempt to access beyond end of device [ 137.200174][ T9122] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 137.216287][ T9122] Buffer I/O error on dev loop7, logical block 57847, async page read [ 137.283499][ T28] audit: type=1400 audit(1781049904.074:660): avc: denied { connect } for pid=9142 comm="syz.7.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.316896][ T9143] tipc: Enabled bearer , priority 10 [ 137.391053][ T7842] syz_tun (unregistering): left allmulticast mode [ 137.501487][ T9168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1651'. [ 137.504449][ T9163] syzkaller0: entered promiscuous mode [ 137.516442][ T9163] syzkaller0: entered allmulticast mode [ 137.593330][ T9059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.604943][ T28] audit: type=1326 audit(1781049904.384:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.2.1652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d503ce59 code=0x0 [ 137.671270][ T9176] loop9: detected capacity change from 0 to 7 [ 137.689754][ T28] audit: type=1326 audit(1781049904.474:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.2.1652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d503ce59 code=0x7ffc0000 [ 137.732546][ T9059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.835487][ T9059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.847256][ T28] audit: type=1326 audit(1781049904.474:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.2.1652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d503ce59 code=0x7ffc0000 [ 137.874953][ T28] audit: type=1326 audit(1781049904.474:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9170 comm="syz.2.1652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d503ce59 code=0x7ffc0000 [ 137.875082][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1657'. [ 137.962397][ T9059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.077397][ T9185] Invalid logical block size (1050184017) [ 138.093413][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 138.103686][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 138.124957][ T9059] bridge_slave_1: left allmulticast mode [ 138.130804][ T9059] bridge_slave_1: left promiscuous mode [ 138.152100][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.173723][ T9059] bridge_slave_0: left allmulticast mode [ 138.179539][ T9059] bridge_slave_0: left promiscuous mode [ 138.187313][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.354281][ T9059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.364872][ T9059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.375375][ T9059] bond0 (unregistering): Released all slaves [ 138.391866][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 138.422221][ T9059] hsr_slave_0: left promiscuous mode [ 138.428380][ T9059] hsr_slave_1: left promiscuous mode [ 138.438169][ T9059] veth1_macvtap: left promiscuous mode [ 138.444272][ T9059] veth0_macvtap: left promiscuous mode [ 138.449945][ T9059] veth1_vlan: left promiscuous mode [ 138.456191][ T9059] veth0_vlan: left promiscuous mode [ 138.539202][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 138.549503][ T9059] team0 (unregistering): Port device team_slave_0 removed [ 138.588475][ T9] tipc: Node number set to 2020001415 [ 138.793361][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 138.801018][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.810274][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.817848][ T9183] bridge_slave_0: entered allmulticast mode [ 138.825470][ T9183] bridge_slave_0: entered promiscuous mode [ 138.848896][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.878576][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.886191][ T9183] bridge_slave_1: entered allmulticast mode [ 138.892958][ T9183] bridge_slave_1: entered promiscuous mode [ 138.930384][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.947013][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.976071][ T9183] team0: Port device team_slave_0 added [ 138.995353][ T9183] team0: Port device team_slave_1 added [ 139.014221][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.021269][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.050290][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.071590][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.078583][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.114623][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.131495][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 139.156999][ T9183] hsr_slave_0: entered promiscuous mode [ 139.163929][ T9183] hsr_slave_1: entered promiscuous mode [ 139.170581][ T9183] debugfs: 'hsr0' already exists in 'hsr' [ 139.178219][ T9183] Cannot create hsr debugfs directory [ 139.324025][ T9183] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 139.347080][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.359962][ T9183] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 139.370318][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.385062][ T9183] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 139.398346][ T9297] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1671'. [ 139.414173][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.421595][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1671'. [ 139.435574][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 139.443312][ T9183] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 139.452594][ T9183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.527815][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.550506][ T9183] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.561714][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.568964][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.582141][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.589245][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.722214][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.866838][ T9183] veth0_vlan: entered promiscuous mode [ 139.875734][ T9183] veth1_vlan: entered promiscuous mode [ 139.894320][ T9183] veth0_macvtap: entered promiscuous mode [ 139.902998][ T9183] veth1_macvtap: entered promiscuous mode [ 139.915131][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.928812][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.942905][ T4137] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.952937][ T4137] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.966173][ T4137] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.976265][ T4137] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.140573][ T9347] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1676'. [ 140.150663][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1676'. [ 141.139706][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 141.217523][ T28] kauditd_printk_skb: 262 callbacks suppressed [ 141.217542][ T28] audit: type=1400 audit(1781049908.004:927): avc: denied { cpu } for pid=9357 comm="syz.8.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 141.325789][ T28] audit: type=1400 audit(1781049908.114:928): avc: denied { ioctl } for pid=9384 comm="syz.9.1690" path="socket:[29601]" dev="sockfs" ino=29601 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.366620][ T28] audit: type=1404 audit(1781049908.154:929): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 141.423418][ T28] audit: type=1400 audit(1781049908.174:930): avc: denied { map_create } for pid=9388 comm="syz.8.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.477835][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1699'. [ 141.487305][ T28] audit: type=1400 audit(1781049908.174:931): avc: denied { prog_load } for pid=9388 comm="syz.8.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.510427][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 141.520024][ T9403] geneve2: entered promiscuous mode [ 141.529315][ T28] audit: type=1400 audit(1781049908.174:932): avc: denied { read } for pid=9388 comm="syz.8.1692" path="socket:[29787]" dev="sockfs" ino=29787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 141.566249][ T28] audit: type=1400 audit(1781049908.174:933): avc: denied { getopt } for pid=9388 comm="syz.8.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 141.586154][ T28] audit: type=1400 audit(1781049908.194:934): avc: denied { read write } for pid=8561 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.611248][ T28] audit: type=1400 audit(1781049908.204:935): avc: denied { open } for pid=9392 comm="syz.2.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 141.665143][ T28] audit: type=1400 audit(1781049908.214:936): avc: denied { block_suspend } for pid=9392 comm="syz.2.1695" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 141.978820][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1718'. [ 141.995390][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1718'. [ 143.825283][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1756'. [ 144.991349][ T9581] vlan0: entered promiscuous mode [ 145.001516][ T9581] vlan0: entered allmulticast mode [ 145.007096][ T9581] veth0_vlan: entered allmulticast mode [ 145.015178][ T9581] team0: Port device vlan0 added [ 145.651463][ T9623] vlan0: entered promiscuous mode [ 145.660240][ T9623] team0: Port device vlan0 added [ 146.023926][ T9635] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1795'. [ 146.228428][ T28] kauditd_printk_skb: 289 callbacks suppressed [ 146.228463][ T28] audit: type=1400 audit(1781050169.014:1226): avc: denied { create } for pid=9650 comm="syz.9.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 146.255467][ T28] audit: type=1400 audit(1781050169.024:1227): avc: denied { allowed } for pid=9652 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 146.302805][ T28] audit: type=1400 audit(1781050169.024:1228): avc: denied { create } for pid=9652 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 146.322795][ T28] audit: type=1400 audit(1781050169.024:1229): avc: denied { create } for pid=9650 comm="syz.9.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 146.343009][ T28] audit: type=1400 audit(1781050169.024:1230): avc: denied { create } for pid=9650 comm="syz.9.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 146.362880][ T28] audit: type=1400 audit(1781050169.044:1231): avc: denied { read write } for pid=9183 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.396280][ T28] audit: type=1400 audit(1781050169.064:1232): avc: denied { read write } for pid=9656 comm="syz.9.1806" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 146.428509][ T28] audit: type=1400 audit(1781050169.064:1233): avc: denied { open } for pid=9656 comm="syz.9.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 146.448095][ T28] audit: type=1400 audit(1781050169.064:1234): avc: denied { allowed } for pid=9654 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 146.467721][ T28] audit: type=1400 audit(1781050169.074:1235): avc: denied { prog_load } for pid=9654 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.777684][ T9672] netlink: 'syz.8.1811': attribute type 1 has an invalid length. [ 146.794807][ T9672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.824470][ T9672] bond1: (slave geneve3): making interface the new active one [ 146.835304][ T9672] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 147.132427][ T9685] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1817'. [ 147.176132][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1818'. [ 147.275771][ T9694] netlink: 'syz.8.1818': attribute type 2 has an invalid length. [ 147.410456][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 147.430671][ T9702] bridge0: port 1(team0) entered blocking state [ 147.437602][ T9702] bridge0: port 1(team0) entered disabled state [ 147.444259][ T9702] team0: entered allmulticast mode [ 147.449637][ T9702] team_slave_0: entered allmulticast mode [ 147.457224][ T9702] team_slave_1: entered allmulticast mode [ 147.467266][ T9702] team0: entered promiscuous mode [ 147.474198][ T9702] team_slave_0: entered promiscuous mode [ 147.483421][ T9702] team_slave_1: entered promiscuous mode [ 147.493221][ T9702] bridge0: port 1(team0) entered blocking state [ 147.499556][ T9702] bridge0: port 1(team0) entered forwarding state [ 147.735918][ T9726] netlink: 'syz.7.1835': attribute type 1 has an invalid length. [ 147.772024][ T9726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.897826][ T9726] bond1: (slave geneve2): making interface the new active one [ 147.938648][ T9726] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 147.976947][ T9733] bridge0: port 3(team0) entered blocking state [ 147.983695][ T9733] bridge0: port 3(team0) entered disabled state [ 148.007937][ T9733] team0: entered allmulticast mode [ 148.029048][ T9733] team_slave_0: entered allmulticast mode [ 148.051702][ T9733] team_slave_1: entered allmulticast mode [ 148.074815][ T9733] team0: entered promiscuous mode [ 148.090053][ T9733] team_slave_0: entered promiscuous mode [ 148.107704][ T9733] team_slave_1: entered promiscuous mode [ 148.502724][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 148.537145][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 149.509282][ T9828] IPv6: sit1: Disabled Multicast RS [ 149.639309][ T9832] netlink: 'syz.4.1883': attribute type 4 has an invalid length. [ 149.690508][ T9833] netlink: 'syz.4.1883': attribute type 4 has an invalid length. [ 151.400633][ T28] kauditd_printk_skb: 511 callbacks suppressed [ 151.400723][ T28] audit: type=1400 audit(1781050174.184:1747): avc: denied { create } for pid=9920 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 151.460395][ T28] audit: type=1400 audit(1781050174.214:1748): avc: denied { read write } for pid=8211 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.513536][ T28] audit: type=1400 audit(1781050174.234:1749): avc: denied { prog_load } for pid=9920 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.565220][ T28] audit: type=1400 audit(1781050174.234:1750): avc: denied { allowed } for pid=9920 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 151.590786][ T9933] futex_wake_op: syz.8.1915 tries to shift op by 144; fix this program [ 151.640383][ T28] audit: type=1400 audit(1781050174.234:1751): avc: denied { create } for pid=9923 comm="syz.7.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 151.667221][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 151.680849][ T9938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.703992][ T9938] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 151.715315][ T8561] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.718362][ T28] audit: type=1400 audit(1781050174.234:1752): avc: denied { create } for pid=9923 comm="syz.7.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 151.745493][ T9938] audit: backlog limit exceeded [ 151.875945][ T9952] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 151.915101][ T9952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.937427][ T9952] bond1: (slave ip6erspan0): making interface the new active one [ 151.947128][ T9952] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 152.142135][ T9059] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.984164][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1951'. [ 153.030939][T10017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.083033][T10019] ipvlan2: entered allmulticast mode [ 153.125758][T10019] bond2: entered allmulticast mode [ 153.152030][T10017] bond2: (slave ipip0): refused to change device type [ 153.667538][T10041] ================================================================== [ 153.675852][T10041] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 153.684487][T10041] [ 153.686835][T10041] write to 0xffff88811b78dd60 of 8 bytes by task 10039 on cpu 0: [ 153.695001][T10041] shmem_file_splice_read+0x40e/0x5a0 [ 153.700681][T10041] splice_direct_to_actor+0x26e/0x670 [ 153.706889][T10041] do_splice_direct+0x119/0x1a0 [ 153.711791][T10041] do_sendfile+0x382/0x650 [ 153.716623][T10041] __x64_sys_sendfile64+0x105/0x150 [ 153.721952][T10041] x64_sys_call+0x2dc4/0x3020 [ 153.726667][T10041] do_syscall_64+0x12c/0x3b0 [ 153.731296][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.737216][T10041] [ 153.739811][T10041] write to 0xffff88811b78dd60 of 8 bytes by task 10041 on cpu 1: [ 153.747894][T10041] shmem_file_splice_read+0x40e/0x5a0 [ 153.753398][T10041] splice_direct_to_actor+0x26e/0x670 [ 153.758806][T10041] do_splice_direct+0x119/0x1a0 [ 153.763697][T10041] do_sendfile+0x382/0x650 [ 153.768136][T10041] __x64_sys_sendfile64+0x105/0x150 [ 153.773361][T10041] x64_sys_call+0x2dc4/0x3020 [ 153.778061][T10041] do_syscall_64+0x12c/0x3b0 [ 153.782668][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.788579][T10041] [ 153.790906][T10041] value changed: 0x0000000000005cc1 -> 0x0000000000005cc2 [ 153.798396][T10041] [ 153.800811][T10041] Reported by Kernel Concurrency Sanitizer on: [ 153.806985][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.9.1957 Not tainted syzkaller #0 PREEMPT(lazy) [ 153.816661][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.827004][T10041] ================================================================== [ 154.211250][ T3769] Bluetooth: hci0: command 0x1003 tx timeout [ 154.211246][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110