last executing test programs: 2m2.507077001s ago: executing program 32 (id=58): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x101) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x1080) close_range(r0, 0xffffffffffffffff, 0x0) 1m52.744980821s ago: executing program 33 (id=206): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1m51.482813887s ago: executing program 34 (id=228): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x1) 1m47.502864048s ago: executing program 35 (id=272): unshare(0x64000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1m47.159551725s ago: executing program 36 (id=280): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e04, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m37.400737295s ago: executing program 37 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x884) 1m27.85912587s ago: executing program 38 (id=526): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m9.292481521s ago: executing program 3 (id=810): socket$inet_tcp(0x2, 0x1, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m9.152737214s ago: executing program 3 (id=812): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0x9360, 0x0) 1m8.769679032s ago: executing program 3 (id=825): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) 1m8.669784663s ago: executing program 3 (id=817): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m8.641643764s ago: executing program 3 (id=818): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38fc, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 1m8.604661915s ago: executing program 7 (id=820): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x7, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20022, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x302, 0xb91, 0xe0, 0x0, 0x0}) 1m8.531062716s ago: executing program 7 (id=824): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @multicast1}, {0x2, 0x0, @loopback}, 0x2a0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x2000000}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1m8.453066798s ago: executing program 3 (id=826): exit(0x100000000000035) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x50000000}) 1m8.452971428s ago: executing program 39 (id=826): exit(0x100000000000035) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x50000000}) 1m8.097089575s ago: executing program 7 (id=841): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)='Zn', 0x2}], 0x1, 0x8000, 0x0, 0x0) 1m7.928995309s ago: executing program 7 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) write(r0, &(0x7f00000006c0)="2a756205b976743a", 0x8) 1m7.806539981s ago: executing program 7 (id=837): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x2010, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x140) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m7.38096854s ago: executing program 7 (id=845): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x10c020, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0xffff, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000240)=0x1, 0x4) 1m7.3806851s ago: executing program 40 (id=845): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x10c020, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0xffff, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000240)=0x1, 0x4) 1m0.018333921s ago: executing program 2 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2', 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 59.709115047s ago: executing program 2 (id=939): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) lstat(0x0, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) openat$dir(0xffffffffffffff9c, 0x0, 0x20402, 0xb6) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0/file2'}, 0x11) 59.494430332s ago: executing program 2 (id=947): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040051) getdents(0xffffffffffffffff, &(0x7f0000000500)=""/62, 0x3e) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 59.379566024s ago: executing program 2 (id=950): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800700, &(0x7f0000000000), 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) getcwd(0x0, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 59.104830289s ago: executing program 2 (id=953): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000060085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 58.863904075s ago: executing program 2 (id=954): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 58.803110746s ago: executing program 41 (id=954): syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 53.652150971s ago: executing program 5 (id=1022): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @sack_perm, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 52.698149531s ago: executing program 5 (id=1027): pipe(&(0x7f00000002c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) 52.520063514s ago: executing program 5 (id=1030): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4bfa, &(0x7f0000002f80)=""/54) ftruncate(r0, 0x4a8e) 52.193895691s ago: executing program 5 (id=1036): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000), 0x8) 51.23348958s ago: executing program 5 (id=1046): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x206002, 0x0) 51.101897893s ago: executing program 5 (id=1049): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28fc2feebe82f3f849328c0800000031bd2a0cb9878d881590f656d01482831f4b036a", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 36.052589142s ago: executing program 42 (id=1049): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28fc2feebe82f3f849328c0800000031bd2a0cb9878d881590f656d01482831f4b036a", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 23.572153437s ago: executing program 4 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3fffff, 0x3, 0x8fafea8c2d89f73e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 22.617523057s ago: executing program 4 (id=1406): signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 22.548753048s ago: executing program 4 (id=1408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) 22.46323376s ago: executing program 4 (id=1409): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.558669099s ago: executing program 4 (id=1422): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x206002, 0x0) 21.508176s ago: executing program 4 (id=1423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6.36786719s ago: executing program 43 (id=1423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.211464575s ago: executing program 8 (id=1453): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000280)={[{@resgid}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7b1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2a, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.656671176s ago: executing program 1 (id=1469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.528544389s ago: executing program 1 (id=1470): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x4bf, &(0x7f0000000a40)="$eJzs3c1rHOcZAPBndy1ZkuX6o6XYLtQGF9wPrNUHxVLbS09tD4ZSQy8tuKq0Vl2ttEK7ci3hg9zefOghJCSQ5JB7/oJc4lNMIOSc3EMOwSFxFEhCAhtmdtfWx668JPJu4vn9YKx35h3t875enlez78zsBJBZ55J/chGjEfF2RBxrrO7c4Vzjx9aDW3PJkot6/cpHuXS/ZL21a+v3jkTEZkQMRcRf/hDxz9zeuNX1jcXZcrm02lwv1pZWitX1jYvXl2YXSgul5YnpSzMz0+NTkzMH1tc7///3ncuv/Wnw1c/+d//eM2+8njRrtFm3vR8HqdH1gTixbduhiPjdkwjWB4Vmf4b73RC+keT9+2FEnE/z/1gU0ncTyIJ6vV7/qn64U/VmfY/N5m8B33f59Bg4lx+LiEY5nx8baxzD/yhG8uVKtfara5W15ZeOpgPC8RjIX7teLo03Pyscj4Fcsj6Rlh+tT+5an4pIj4GfLQyn62NzlfJ8Lwc6YI8ju/L/00Ij/4GM8JEfskv+Q3Y18t8pHMgif/8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D5n058uXk6Xeuv99/sb62mLlxsX5UnVxbGltbmyusroytlCpLKT37Cw97vXKlcrKxK9j7WaxVqrWitX1jatLlbXl2tX0vv6rpYGe9Aroxomzd9/NRcTmb4bTJTHYrJOr8HSr13Pu5oeMKvR7AAL6xtQfZJfP+ECbr+jdYahTxcrBtwXojXy/GwD0zYXTzv9BVpn/h+wy/w/Z5RgfMP8P2WP+H7JrtMPzv45ue3bXeET8ICLeKQwcbj3rC3ga5D/INY//Lxz72eju2sHc5+kpgsGI+M+LV56/OVurrU4k2z9+uL32QnP7ZD/aDzxO65x+K09beQwAZNfWg1tzraWXcT/8feMihL3xDzXnJofSc5QjW7kd1yrkDujahc3bEXGqXfxcOjdyvHnmY2SrsCf+yebPXOMl0vYeSp+b3pv4p7fF/+m2+Ge+9f8KZMPdZPwZb5d/+TSn42H+7Rx/Rg/o2olk/Cu0HX/zD8e/Qofx72yXMf718n/f7xj/dsSZtuNvK95QGmt3/KRtF7qMf//vf/1xp7r6K43XaRe/JSkVa0srxer6xsX0e+QWSssT05dmZqbHpyZniukcdbE1U73Xb0+9dW+//o90iL9f/5Ntv+iy/1/85M2/ndsn/s/Pt3//T+4Tfzgiftll/E8m3/tHp7ok/nyH/uf3iZ9sm+oyfvW5Px7uclcAoAeq6xuLs+VyaVWhfeHL+neiGQoKvS30e2QCnrRHSd/vlgAAAAAAAAAAAADd6sXlxP3uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0+DrAAAA//+mX9Qt") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) lsm_get_self_attr(0x69, &(0x7f00000008c0)={0x0, 0x0, 0x25, 0x5, ""/5}, &(0x7f00000009c0)=0x25, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) 1.525671418s ago: executing program 0 (id=1480): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000280)={[{@resgid}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7b1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2a, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.522704819s ago: executing program 8 (id=1481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x1, {0x0, 0x3dfbb5cf02ba6bb8, 0x1}, {}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.366345782s ago: executing program 8 (id=1472): wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, 0x0, 0xc404) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x5) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x80, 0x12, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x92}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x20050800) 1.357397052s ago: executing program 1 (id=1473): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x210408, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.159529926s ago: executing program 8 (id=1476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x7, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x201) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xff) 1.131723977s ago: executing program 6 (id=1477): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.065469238s ago: executing program 8 (id=1478): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x2a020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2002219, 0x7721, 0x16, 0x0, 0x0) 1.056936588s ago: executing program 0 (id=1483): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x34}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) mlockall(0x2) brk(0x689d80000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.00400612s ago: executing program 6 (id=1484): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x200408c1}, 0x0) 818.309693ms ago: executing program 6 (id=1487): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x7e}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b769", 0x0) 769.461885ms ago: executing program 9 (id=1488): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[], 0x1c}}, 0x20000844) 769.300494ms ago: executing program 0 (id=1489): wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, 0x0, 0xc404) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x5) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x80, 0x12, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x92}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x20050800) 769.125205ms ago: executing program 9 (id=1490): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x119}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 672.125307ms ago: executing program 9 (id=1491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @empty, @loopback}}}}}}, 0x2a) 668.919127ms ago: executing program 6 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x60048058) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "baac6c0b0f05a1e2", "34a3d9f0e95f96b8f6892a34257396dc", "d30d4e9e", "170cd569e7d750e2"}, 0x28) 599.710368ms ago: executing program 6 (id=1493): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0) 557.019458ms ago: executing program 8 (id=1503): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r1, 0x7e}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b769", 0x0) 556.719749ms ago: executing program 6 (id=1494): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000280)={[{@resgid}, {@journal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7b1}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2a, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 556.312599ms ago: executing program 0 (id=1504): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x2a020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2002219, 0x7721, 0x16, 0x0, 0x0) 388.373272ms ago: executing program 1 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a20c00", "9e8ecc7cb535247672a2eff75b30ff2bb17b550800", "0002d900", "a1014200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x2}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0df4891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 317.143354ms ago: executing program 9 (id=1496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280)=r0, 0x4) r2 = getpid() recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1}, 0x40000100) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000000)="633c8750", 0x4}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}], 0x20, 0x2400c000}, 0x90) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) 144.419437ms ago: executing program 1 (id=1497): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvfrom$inet6(r1, &(0x7f0000000040)=""/62, 0x3e, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 111.161388ms ago: executing program 0 (id=1498): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 75.015088ms ago: executing program 9 (id=1499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) 607.69µs ago: executing program 1 (id=1500): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 381.11µs ago: executing program 9 (id=1501): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x300}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x48}}, 0x0) 0s ago: executing program 0 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='2', 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 593][ T5885] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 71.490623][ T5885] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 71.490652][ T5885] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 71.490688][ T5885] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 71.528853][ T3953] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 72.188357][ T5885] ACPI: PM: Preparing to enter system sleep state S3 [ 72.188592][ T5885] ACPI: PM: Saving platform NVS memory [ 72.188759][ T5885] Disabling non-boot CPUs ... [ 72.193910][ T5885] smpboot: CPU 1 is now offline [ 72.201906][ T5885] ACPI: PM: Low-level resume complete [ 72.201972][ T5885] ACPI: PM: Restoring platform NVS memory [ 72.217719][ T5885] Enabling non-boot CPUs ... [ 72.217926][ T5885] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 72.222399][ T5885] CPU1 is up [ 72.222598][ T5885] ACPI: PM: Waking up from system sleep state S3 [ 72.246879][ T3953] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 72.396252][ T5885] OOM killer enabled. [ 72.396270][ T5885] Restarting tasks: Starting [ 72.400396][ T5885] Restarting tasks: Done [ 72.400452][ T5885] random: crng reseeded on system resumption [ 72.421593][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 72.421622][ T29] audit: type=1400 audit(1787883012.230:1055): avc: denied { write } for pid=5915 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.449672][ T5885] PM: suspend exit [ 72.524365][ T29] audit: type=1400 audit(1787883012.330:1056): avc: denied { read } for pid=5921 comm="syz.9.520" name="set_event" dev="tracefs" ino=2212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.587719][ T29] audit: type=1400 audit(1787883012.400:1057): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.587766][ T29] audit: type=1400 audit(1787883012.400:1058): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.587825][ T29] audit: type=1400 audit(1787883012.400:1059): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.587987][ T29] audit: type=1400 audit(1787883012.400:1060): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.588083][ T29] audit: type=1400 audit(1787883012.400:1061): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.588208][ T29] audit: type=1400 audit(1787883012.400:1062): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.588345][ T29] audit: type=1400 audit(1787883012.400:1063): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.588430][ T29] audit: type=1400 audit(1787883012.400:1064): avc: denied { write } for pid=4728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.724695][ T5936] l2tp_ppp: sess 2/0: no socket in recv [ 72.896271][ T3974] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.963837][ T3974] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.022683][ T3974] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.123728][ T3974] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.275539][ T3974] bridge_slave_1: left allmulticast mode [ 73.276289][ T3974] bridge_slave_1: left promiscuous mode [ 73.276407][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.280478][ T3974] bridge_slave_0: left allmulticast mode [ 73.280508][ T3974] bridge_slave_0: left promiscuous mode [ 73.280672][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.415490][ T3974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.421582][ T3974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.425886][ T3974] bond0 (unregistering): Released all slaves [ 73.480027][ T3974] hsr_slave_0: left promiscuous mode [ 73.482733][ T3974] hsr_slave_1: left promiscuous mode [ 73.483262][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.483371][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.488774][ T3974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.488793][ T3974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.500293][ T3974] veth1_macvtap: left promiscuous mode [ 73.500408][ T3974] veth0_macvtap: left promiscuous mode [ 73.500465][ T3974] veth1_vlan: left promiscuous mode [ 73.500519][ T3974] veth0_vlan: left promiscuous mode [ 73.621280][ T3974] team0 (unregistering): Port device team_slave_1 removed [ 73.627378][ T3974] team0 (unregistering): Port device team_slave_0 removed [ 73.701952][ T5961] loop6: detected capacity change from 0 to 1024 [ 73.775237][ T5961] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.779548][ T5961] EXT4-fs: Ignoring removed oldalloc option [ 73.849268][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.849316][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.849396][ T5972] bridge_slave_0: entered allmulticast mode [ 73.850144][ T5972] bridge_slave_0: entered promiscuous mode [ 73.860567][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.860609][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.860780][ T5972] bridge_slave_1: entered allmulticast mode [ 73.862262][ T5972] bridge_slave_1: entered promiscuous mode [ 73.869232][ T6035] ip_tables: iptables: counters copy to user failed while replacing table [ 73.882430][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.884467][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.903926][ T5972] team0: Port device team_slave_0 added [ 73.905288][ T5972] team0: Port device team_slave_1 added [ 73.929933][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.929957][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.930033][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.930997][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.931050][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.932274][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.959462][ T5961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.960755][ T5961] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.981406][ T5972] hsr_slave_0: entered promiscuous mode [ 73.982003][ T5972] hsr_slave_1: entered promiscuous mode [ 73.982362][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 73.982380][ T5972] Cannot create hsr debugfs directory [ 74.015241][ T4288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.753437][ T6110] loop6: detected capacity change from 0 to 512 [ 74.781688][ T6110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.781768][ T6110] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.793666][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.809427][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.812621][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.829006][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.829714][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.837324][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.842211][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.847487][ T5972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.853564][ T6110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.969157][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.983315][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.988575][ T4073] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.988612][ T4073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.996894][ T4073] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.997003][ T4073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.302771][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.508878][ T5972] veth0_vlan: entered promiscuous mode [ 75.516452][ T5972] veth1_vlan: entered promiscuous mode [ 75.532782][ T5972] veth0_macvtap: entered promiscuous mode [ 75.535732][ T5972] veth1_macvtap: entered promiscuous mode [ 75.548155][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.566821][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.604426][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.551'. [ 75.607969][ T4073] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608023][ T4073] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608080][ T4073] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.625830][ T4058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.979143][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.8.561'. [ 76.067859][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.160736][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.566'. [ 76.521337][ T6290] syzkaller0: entered allmulticast mode [ 76.523634][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.618628][ T6306] loop7: detected capacity change from 0 to 512 [ 76.704465][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.715655][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.967110][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 76.978355][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 76.978939][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 77.040260][ T3974] IPVS: starting estimator thread 0... [ 77.041718][ T6338] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 77.126312][ T6341] IPVS: using max 2208 ests per chain, 110400 per kthread [ 77.263640][ T6356] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 77.566576][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 77.566605][ T29] audit: type=1400 audit(1787883017.370:1245): avc: denied { write } for pid=6371 comm="syz.7.586" name="usb_gadget" dev="configfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.566641][ T29] audit: type=1400 audit(1787883017.370:1246): avc: denied { add_name } for pid=6371 comm="syz.7.586" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.566718][ T29] audit: type=1400 audit(1787883017.370:1247): avc: denied { create } for pid=6371 comm="syz.7.586" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 77.567044][ T29] audit: type=1400 audit(1787883017.380:1248): avc: denied { write } for pid=6371 comm="syz.7.586" name="functions" dev="configfs" ino=15636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.571250][ T29] audit: type=1400 audit(1787883017.380:1249): avc: denied { write } for pid=6371 comm="syz.7.586" name="p_chmask" dev="configfs" ino=15002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 77.571375][ T29] audit: type=1400 audit(1787883017.380:1250): avc: denied { open } for pid=6371 comm="syz.7.586" path="/84/config/usb_gadget/g1/functions/uac1.usb0/p_chmask" dev="configfs" ino=15002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 77.580359][ T29] audit: type=1400 audit(1787883017.390:1251): avc: denied { write } for pid=6371 comm="syz.7.586" name="configs" dev="configfs" ino=15637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.582958][ T29] audit: type=1400 audit(1787883017.390:1252): avc: denied { write } for pid=6371 comm="syz.7.586" name="c.1" dev="configfs" ino=15004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.583117][ T29] audit: type=1400 audit(1787883017.390:1253): avc: denied { create } for pid=6371 comm="syz.7.586" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 77.583216][ T29] audit: type=1400 audit(1787883017.390:1254): avc: denied { write } for pid=6371 comm="syz.7.586" name="c.1" dev="configfs" ino=15004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.028356][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.591'. [ 78.228757][ T6437] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 78.512715][ T6462] loop5: detected capacity change from 0 to 8192 [ 78.558131][ T6462] loop5: p1 p2 p4 < > [ 78.558151][ T6462] loop5: partition table partially beyond EOD, truncated [ 78.558475][ T6462] loop5: p1 start 100663296 is beyond EOD, truncated [ 78.558629][ T6462] loop5: p2 size 590592 extends beyond EOD, truncated [ 78.565690][ T6462] loop5: p4 start 117440516 is beyond EOD, truncated [ 78.847342][ T6508] netlink: 'syz.5.609': attribute type 1 has an invalid length. [ 78.852937][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.609'. [ 79.646777][ T6592] loop5: detected capacity change from 0 to 128 [ 79.649041][ T6592] FAT-fs (loop5): Directory bread(block 1048) failed [ 79.649077][ T6592] FAT-fs (loop5): Directory bread(block 1049) failed [ 79.649102][ T6592] FAT-fs (loop5): Directory bread(block 1050) failed [ 79.649145][ T6592] FAT-fs (loop5): Directory bread(block 1051) failed [ 79.649185][ T6592] FAT-fs (loop5): Directory bread(block 1052) failed [ 79.649210][ T6592] FAT-fs (loop5): Directory bread(block 1053) failed [ 79.649229][ T6592] FAT-fs (loop5): Directory bread(block 1054) failed [ 79.649248][ T6592] FAT-fs (loop5): Directory bread(block 1055) failed [ 79.681333][ T6592] syz.5.618: attempt to access beyond end of device [ 79.681333][ T6592] loop5: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 79.763901][ T6598] loop8: detected capacity change from 0 to 512 [ 79.788809][ T6598] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.790696][ T6598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee029, mo2=0002] [ 79.790793][ T6598] System zones: 1-12 [ 79.793528][ T6598] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.620: bad orphan inode 15 [ 79.793566][ T6598] loop8: lost filesystem error report for type 5 error -117 [ 79.793784][ T6598] EXT4-fs (loop8): Remounting filesystem read-only [ 79.793804][ T6598] ext4_test_bit(bit=14, block=4) = 1 [ 79.793823][ T6598] is_bad_inode(inode)=0 [ 79.793834][ T6598] NEXT_ORPHAN(inode)=0 [ 79.793844][ T6598] max_ino=32 [ 79.793855][ T6598] i_nlink=4 [ 79.794769][ T6598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.042520][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.201989][ T6656] loop3: detected capacity change from 0 to 256 [ 80.216915][ T6656] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.241804][ T6656] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 80.241917][ T6656] FAT-fs (loop3): Filesystem has been set read-only [ 80.243135][ T6656] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 80.514279][ T3417] kernel read not supported for file /rfkill (pid: 3417 comm: kworker/1:6) [ 80.532947][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 80.956235][ T3982] rpcbind: server 127.0.0.1 not responding, timed out [ 81.043162][ T6742] process 'syz.6.635' launched './file1' with NULL argv: empty string added [ 81.292554][ T6777] loop3: detected capacity change from 0 to 128 [ 81.542335][ T6803] netlink: 'syz.5.649': attribute type 1 has an invalid length. [ 81.814002][ T6830] netlink: 36 bytes leftover after parsing attributes in process `syz.5.655'. [ 82.184659][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.662'. [ 82.248125][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 82.305095][ T6870] loop3: detected capacity change from 0 to 2048 [ 82.324428][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.338698][ T6870] raw_sendmsg: syz.3.664 forgot to set AF_INET. Fix it! [ 82.365158][ T5342] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.544517][ T6885] syzkaller0: entered promiscuous mode [ 82.544547][ T6885] syzkaller0: entered allmulticast mode [ 82.550443][ T6892] netlink: 52 bytes leftover after parsing attributes in process `syz.8.669'. [ 82.998878][ T6928] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 83.358333][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 83.358363][ T29] audit: type=1400 audit(1787883023.170:1302): avc: denied { read } for pid=6950 comm="syz.3.689" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.368944][ T6951] program syz.3.689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.447613][ T29] audit: type=1400 audit(1787883023.260:1303): avc: denied { read write } for pid=6957 comm="syz.5.691" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.447661][ T29] audit: type=1400 audit(1787883023.260:1304): avc: denied { open } for pid=6957 comm="syz.5.691" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.555734][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 83.745148][ T6981] smpboot: CPU 1 is now offline [ 83.751733][ T6981] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 84.072337][ T6990] uprobe: syz.3.700:6990 failed to unregister, leaking uprobe [ 84.390296][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.704'. [ 84.540853][ T29] audit: type=1400 audit(1787883024.350:1305): avc: denied { setopt } for pid=7012 comm="syz.5.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.596495][ T29] audit: type=1400 audit(1787883024.410:1306): avc: denied { read } for pid=7012 comm="syz.5.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.690799][ T29] audit: type=1400 audit(1787883024.500:1307): avc: denied { setopt } for pid=7019 comm="syz.5.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.835789][ T7020] FAULT_INJECTION: forcing a failure. [ 84.835789][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.835857][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.5.716 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.835891][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.835913][ T7020] Call Trace: [ 84.835920][ T7020] [ 84.835930][ T7020] __dump_stack+0x1d/0x30 [ 84.835965][ T7020] dump_stack_lvl+0x95/0xd0 [ 84.835988][ T7020] dump_stack+0x15/0x1b [ 84.836033][ T7020] should_fail_ex+0x262/0x280 [ 84.836070][ T7020] should_fail+0xb/0x20 [ 84.836093][ T7020] should_fail_usercopy+0x1a/0x20 [ 84.836124][ T7020] _copy_from_user+0x1c/0xb0 [ 84.836157][ T7020] restore_altstack+0x4b/0x300 [ 84.836204][ T7020] ? __set_current_blocked+0x284/0x2e0 [ 84.836228][ T7020] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 84.836259][ T7020] ? arch_do_signal_or_restart+0x2f3/0x480 [ 84.836302][ T7020] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 84.836381][ T7020] ? fput_close_sync+0xad/0x190 [ 84.836418][ T7020] x64_sys_call+0x1532/0x2550 [ 84.836452][ T7020] do_syscall_64+0x112/0x360 [ 84.836482][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.836562][ T7020] RIP: 0033:0x7f6db27cf459 [ 84.836588][ T7020] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 84.836644][ T7020] RSP: 002b:00007f6db1286a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 84.836666][ T7020] RAX: ffffffffffffffda RBX: 00007f6db2ab5fa0 RCX: 00007f6db27cf459 [ 84.836684][ T7020] RDX: 00007f6db1286a80 RSI: 00007f6db1286bb0 RDI: 0000000000000011 [ 84.836735][ T7020] RBP: 00007f6db28c5024 R08: 0000000000000000 R09: 0000000000000000 [ 84.836753][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.836769][ T7020] R13: 00007f6db2ab6038 R14: 00007f6db2ab5fa0 R15: 00007ffcd1d6d598 [ 84.836791][ T7020] [ 85.357168][ T29] audit: type=1400 audit(1787883025.170:1308): avc: denied { listen } for pid=7046 comm="syz.7.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.643539][ T3985] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.709350][ T3985] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.749842][ T3985] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.795181][ T3985] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.813654][ T7054] sl0: compressed packet ignored [ 85.921065][ T3985] bridge_slave_1: left allmulticast mode [ 85.921096][ T3985] bridge_slave_1: left promiscuous mode [ 85.921290][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.925816][ T3985] bridge_slave_0: left allmulticast mode [ 85.925886][ T3985] bridge_slave_0: left promiscuous mode [ 85.926014][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.018692][ T3985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.021749][ T3985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.025080][ T3985] bond0 (unregistering): Released all slaves [ 86.028158][ T3985] bond1 (unregistering): Released all slaves [ 86.064094][ T7066] netlink: 88 bytes leftover after parsing attributes in process `syz.5.734'. [ 86.102401][ T3985] hsr_slave_0: left promiscuous mode [ 86.103612][ T3985] hsr_slave_1: left promiscuous mode [ 86.104110][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.104125][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.104702][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.104721][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.123119][ T3985] veth1_macvtap: left promiscuous mode [ 86.123166][ T3985] veth0_macvtap: left promiscuous mode [ 86.123226][ T3985] veth1_vlan: left promiscuous mode [ 86.123351][ T3985] veth0_vlan: left promiscuous mode [ 86.304038][ T29] audit: type=1400 audit(1787883026.110:1309): avc: denied { write } for pid=7074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.338029][ T29] audit: type=1400 audit(1787883026.150:1310): avc: denied { write } for pid=7090 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.499302][ T3985] team0 (unregistering): Port device team_slave_1 removed [ 86.508219][ T3985] team0 (unregistering): Port device team_slave_0 removed [ 86.548025][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 86.670438][ T29] audit: type=1400 audit(1787883026.480:1311): avc: denied { write } for pid=7096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.732156][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 86.840443][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.840490][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.840558][ T7057] bridge_slave_0: entered allmulticast mode [ 86.862027][ T7057] bridge_slave_0: entered promiscuous mode [ 86.869102][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.869149][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.869280][ T7057] bridge_slave_1: entered allmulticast mode [ 86.890184][ T7057] bridge_slave_1: entered promiscuous mode [ 86.915384][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.925780][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.946181][ T7057] team0: Port device team_slave_0 added [ 86.952735][ T7057] team0: Port device team_slave_1 added [ 86.977417][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.977441][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.977498][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.023254][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.023279][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.023384][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.098821][ T7057] hsr_slave_0: entered promiscuous mode [ 87.099368][ T7057] hsr_slave_1: entered promiscuous mode [ 87.099674][ T7057] debugfs: 'hsr0' already exists in 'hsr' [ 87.099693][ T7057] Cannot create hsr debugfs directory [ 87.165229][ T7141] netlink: 60 bytes leftover after parsing attributes in process `syz.5.742'. [ 87.196281][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 87.517201][ T7057] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.527910][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.528913][ T7057] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.548568][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.551711][ T7057] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.560848][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.566058][ T7057] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 87.577814][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.699015][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.714727][ T7057] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.721469][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.721582][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.730707][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.730831][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.996255][ T7234] loop3: detected capacity change from 0 to 164 [ 88.008280][ T7234] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.008301][ T7057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.023023][ T7237] ip_tables: iptables: counters copy to user failed while replacing table [ 88.412546][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 88.412576][ T29] audit: type=1400 audit(1787883028.220:1326): avc: denied { map } for pid=7277 comm="syz.8.768" path="socket:[17154]" dev="sockfs" ino=17154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.467447][ T7283] loop3: detected capacity change from 0 to 256 [ 88.483672][ T7057] veth0_vlan: entered promiscuous mode [ 88.494353][ T7283] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.517405][ T7057] veth1_vlan: entered promiscuous mode [ 88.534779][ T29] audit: type=1400 audit(1787883028.340:1327): avc: denied { write } for pid=7260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.541478][ T7283] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 88.541561][ T7283] FAT-fs (loop3): Filesystem has been set read-only [ 88.602624][ T7057] veth0_macvtap: entered promiscuous mode [ 88.617488][ T7057] veth1_macvtap: entered promiscuous mode [ 88.640289][ T29] audit: type=1400 audit(1787883028.450:1328): avc: denied { watch watch_reads } for pid=7286 comm="syz.8.769" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 88.658894][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.671964][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.695852][ T364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.695906][ T364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.696031][ T364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.696075][ T364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.770847][ T29] audit: type=1400 audit(1787883028.580:1329): avc: denied { write } for pid=7288 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.814247][ T29] audit: type=1400 audit(1787883028.620:1330): avc: denied { mount } for pid=7057 comm="syz-executor" name="/" dev="gadgetfs" ino=4962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 88.926922][ T29] audit: type=1400 audit(1787883028.740:1331): avc: denied { append } for pid=7304 comm="syz.7.772" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.966828][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.8.773'. [ 88.995508][ T7311] xt_hashlimit: size too large, truncated to 1048576 [ 89.087920][ T29] audit: type=1400 audit(1787883028.900:1332): avc: denied { write } for pid=7301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.156290][ T29] audit: type=1400 audit(1787883028.970:1333): avc: denied { write } for pid=7324 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.333700][ T29] audit: type=1400 audit(1787883029.140:1334): avc: denied { write } for pid=7330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.368980][ T29] audit: type=1400 audit(1787883029.180:1335): avc: denied { map } for pid=7345 comm="syz.6.780" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.622475][ T7372] syzkaller0: entered promiscuous mode [ 89.622506][ T7372] syzkaller0: entered allmulticast mode [ 90.645478][ T7410] 9p: Bad value for 'rfdno' [ 90.968798][ T7413] bond2: entered promiscuous mode [ 90.969153][ T7413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.016740][ T7416] loop5: detected capacity change from 0 to 128 [ 91.049370][ T7416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.061938][ T7416] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.184554][ T5972] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.303010][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.801'. [ 91.498731][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.501744][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.684464][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.822'. [ 91.701462][ T7462] netlink: 'syz.7.822': attribute type 10 has an invalid length. [ 91.701484][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.7.822'. [ 91.701585][ T7462] dummy0: entered promiscuous mode [ 92.338179][ T4091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.380213][ T4091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.416512][ T4091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.478812][ T4091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.595894][ T4091] bridge_slave_1: left allmulticast mode [ 92.595927][ T4091] bridge_slave_1: left promiscuous mode [ 92.596104][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.602616][ T4091] bridge_slave_0: left allmulticast mode [ 92.602687][ T4091] bridge_slave_0: left promiscuous mode [ 92.602958][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.752778][ T3417] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 92.755056][ T3417] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.802798][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.804405][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.824089][ T4091] bond0 (unregistering): Released all slaves [ 92.874427][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 92.915020][ T4091] hsr_slave_0: left promiscuous mode [ 92.922335][ T4091] hsr_slave_1: left promiscuous mode [ 92.922921][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.923000][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.944316][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.944342][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.979859][ T4091] veth1_macvtap: left promiscuous mode [ 92.979895][ T4091] veth0_macvtap: left promiscuous mode [ 92.980016][ T4091] veth1_vlan: left promiscuous mode [ 92.980055][ T4091] veth0_vlan: left promiscuous mode [ 92.991690][ T7561] netlink: 2 bytes leftover after parsing attributes in process `syz.5.835'. [ 93.188930][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 93.200044][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 93.387739][ T7598] capability: warning: `syz.6.844' uses deprecated v2 capabilities in a way that may be insecure [ 93.453068][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.453110][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.453200][ T7517] bridge_slave_0: entered allmulticast mode [ 93.476047][ T7517] bridge_slave_0: entered promiscuous mode [ 93.482877][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.482919][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.497702][ T7517] bridge_slave_1: entered allmulticast mode [ 93.504781][ T7517] bridge_slave_1: entered promiscuous mode [ 93.530736][ T7517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.542696][ T7517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.596185][ T7517] team0: Port device team_slave_0 added [ 93.597120][ T7517] team0: Port device team_slave_1 added [ 93.602393][ T4091] IPVS: stop unused estimator thread 0... [ 93.627499][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.627527][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.627559][ T7517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.686111][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.686136][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.686169][ T7517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.751632][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 93.751662][ T29] audit: type=1400 audit(1787883033.560:1492): avc: denied { bind } for pid=7622 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.751738][ T29] audit: type=1400 audit(1787883033.560:1493): avc: denied { name_bind } for pid=7622 comm="syz.6.850" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.751773][ T29] audit: type=1400 audit(1787883033.560:1494): avc: denied { node_bind } for pid=7622 comm="syz.6.850" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.811284][ T7517] hsr_slave_0: entered promiscuous mode [ 93.812307][ T7517] hsr_slave_1: entered promiscuous mode [ 93.814217][ T7517] debugfs: 'hsr0' already exists in 'hsr' [ 93.814265][ T7517] Cannot create hsr debugfs directory [ 93.816979][ T29] audit: type=1400 audit(1787883033.620:1495): avc: denied { listen } for pid=7622 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.834691][ T4091] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.890665][ T4091] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.933865][ T29] audit: type=1400 audit(1787883033.740:1496): avc: denied { write } for pid=7609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.010921][ T4091] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.038202][ T29] audit: type=1400 audit(1787883033.850:1497): avc: denied { write } for pid=7637 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.082747][ T4091] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.112187][ T29] audit: type=1400 audit(1787883033.920:1498): avc: denied { create } for pid=7639 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.127484][ T29] audit: type=1400 audit(1787883033.930:1499): avc: denied { write } for pid=7639 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.260362][ T7648] FAULT_INJECTION: forcing a failure. [ 94.260362][ T7648] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.260407][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz.5.853 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.260443][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.260462][ T7648] Call Trace: [ 94.260470][ T7648] [ 94.260481][ T7648] __dump_stack+0x1d/0x30 [ 94.260591][ T7648] dump_stack_lvl+0x95/0xd0 [ 94.260625][ T7648] dump_stack+0x15/0x1b [ 94.260714][ T7648] should_fail_ex+0x262/0x280 [ 94.260745][ T7648] should_fail+0xb/0x20 [ 94.260770][ T7648] get_futex_key+0x12d/0xb10 [ 94.260859][ T7648] ? __css_rstat_updated+0xbb/0x280 [ 94.260921][ T7648] futex_wait_setup+0x49/0x3e0 [ 94.260983][ T7648] ? __rb_insert_augmented+0x76/0x2c0 [ 94.261020][ T7648] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 94.261069][ T7648] ? hrtimer_active+0xe4/0x110 [ 94.261098][ T7648] __futex_wait+0xa9/0x260 [ 94.261149][ T7648] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.261257][ T7648] futex_wait+0x98/0x1c0 [ 94.261289][ T7648] do_futex+0x391/0x460 [ 94.261331][ T7648] __se_sys_futex+0x2f6/0x370 [ 94.261391][ T7648] __x64_sys_futex+0x78/0x90 [ 94.261452][ T7648] x64_sys_call+0x22e2/0x2550 [ 94.261546][ T7648] do_syscall_64+0x112/0x360 [ 94.261584][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.261616][ T7648] RIP: 0033:0x7f6db282e0d9 [ 94.261638][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.261726][ T7648] RSP: 002b:00007f6db12870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.261836][ T7648] RAX: ffffffffffffffda RBX: 00007f6db2ab5fa8 RCX: 00007f6db282e0d9 [ 94.261917][ T7648] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6db2ab5fa8 [ 94.261960][ T7648] RBP: 00007f6db2ab5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 94.262002][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.262051][ T7648] R13: 00007f6db2ab6038 R14: 00007ffcd1d6d4b0 R15: 00007ffcd1d6d598 [ 94.262117][ T7648] [ 94.362253][ T29] audit: type=1400 audit(1787883034.170:1500): avc: denied { write } for pid=7650 comm="syz.6.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.517306][ T4091] bridge_slave_1: left allmulticast mode [ 94.517390][ T4091] bridge_slave_1: left promiscuous mode [ 94.517762][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.530794][ T4091] bridge_slave_0: left allmulticast mode [ 94.530867][ T4091] bridge_slave_0: left promiscuous mode [ 94.531138][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.612998][ T29] audit: type=1400 audit(1787883034.420:1501): avc: denied { write } for pid=7645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.681730][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.692898][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.703503][ T4091] bond0 (unregistering): Released all slaves [ 94.761644][ T4091] hsr_slave_0: left promiscuous mode [ 94.767592][ T4091] hsr_slave_1: left promiscuous mode [ 94.768033][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.768049][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.768701][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.768714][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.806405][ T4091] veth1_macvtap: left promiscuous mode [ 94.806435][ T4091] veth0_macvtap: left promiscuous mode [ 94.806486][ T4091] veth1_vlan: left promiscuous mode [ 94.806521][ T4091] veth0_vlan: left promiscuous mode [ 94.897929][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 94.908219][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 94.963598][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.866'. [ 95.044978][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.045027][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.045113][ T7610] bridge_slave_0: entered allmulticast mode [ 95.067865][ T7610] bridge_slave_0: entered promiscuous mode [ 95.074349][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.074412][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.074492][ T7610] bridge_slave_1: entered allmulticast mode [ 95.082115][ T7610] bridge_slave_1: entered promiscuous mode [ 95.116498][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.122153][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.141310][ T7610] team0: Port device team_slave_0 added [ 95.143037][ T7610] team0: Port device team_slave_1 added [ 95.161576][ T7693] 9p: Bad value for 'rfdno' [ 95.183805][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.183829][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.183926][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.229378][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.229403][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.229508][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.305174][ T7610] hsr_slave_0: entered promiscuous mode [ 95.312792][ T7610] hsr_slave_1: entered promiscuous mode [ 95.313023][ T7610] debugfs: 'hsr0' already exists in 'hsr' [ 95.313060][ T7610] Cannot create hsr debugfs directory [ 95.481805][ T4091] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.723659][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 95.848692][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 95.903388][ T7517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.911062][ T7517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.914982][ T7517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.924071][ T7517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.926735][ T7517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.942292][ T7517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.954907][ T7517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.964375][ T7517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.993651][ T7610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.003020][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.015833][ T7610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.024970][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.028940][ T7610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.043426][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.047056][ T7610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.066277][ T7610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.118731][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.134375][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 96.145261][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.154182][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.154246][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.173159][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.173208][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.219550][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.239459][ T7610] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.246607][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.246697][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.266871][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.266916][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.535300][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.558052][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586374][ T3023] 8021q: adding VLAN 0 to HW filter on device eth25 [ 96.727142][ T7610] veth0_vlan: entered promiscuous mode [ 96.735964][ T7610] veth1_vlan: entered promiscuous mode [ 96.771116][ T7610] veth0_macvtap: entered promiscuous mode [ 96.788994][ T7610] veth1_macvtap: entered promiscuous mode [ 96.802162][ T7517] veth0_vlan: entered promiscuous mode [ 96.816188][ T7517] veth1_vlan: entered promiscuous mode [ 96.823382][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.841006][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.876315][ T4091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.876500][ T4091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.876646][ T4091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.877002][ T4091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.943974][ T7517] veth0_macvtap: entered promiscuous mode [ 96.964240][ T7517] veth1_macvtap: entered promiscuous mode [ 96.996668][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.007017][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.036894][ T4060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.041142][ T3985] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.057330][ T3985] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.060344][ T4091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.270885][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 97.517451][ T3688] Bluetooth: hci0: command 0x1003 tx timeout [ 97.518201][ T3797] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.806764][ T3023] 8021q: adding VLAN 0 to HW filter on device eth26 [ 98.119346][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.137541][ T3378] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 98.140271][ T3378] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.492742][ T3023] 8021q: adding VLAN 0 to HW filter on device eth27 [ 98.892041][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 98.892069][ T29] audit: type=1326 audit(1787883038.700:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.905" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x0 [ 98.991824][ T29] audit: type=1400 audit(1787883038.800:1535): avc: denied { write } for pid=8024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.079163][ T29] audit: type=1400 audit(1787883038.890:1536): avc: denied { write } for pid=8044 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.104773][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.909'. [ 99.104818][ T8046] netlink: 'syz.6.909': attribute type 7 has an invalid length. [ 99.104871][ T8046] netlink: 'syz.6.909': attribute type 8 has an invalid length. [ 99.104884][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 99.193762][ T8004] loop1: detected capacity change from 0 to 1024 [ 99.270505][ T8004] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.271114][ T8004] EXT4-fs: Ignoring removed oldalloc option [ 99.358706][ T8004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.360453][ T8004] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.389046][ T29] audit: type=1400 audit(1787883039.200:1537): avc: denied { write } for pid=8050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.412197][ T29] audit: type=1400 audit(1787883039.210:1538): avc: denied { write } for pid=8003 comm="syz.1.901" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.412235][ T29] audit: type=1400 audit(1787883039.220:1539): avc: denied { read write } for pid=8003 comm="syz.1.901" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.426615][ T29] audit: type=1400 audit(1787883039.220:1540): avc: denied { open } for pid=8003 comm="syz.1.901" path="/3/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.492056][ T29] audit: type=1400 audit(1787883039.300:1541): avc: denied { write } for pid=8072 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.631509][ T7517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.666307][ T29] audit: type=1400 audit(1787883039.480:1542): avc: denied { write } for pid=8074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.765113][ T29] audit: type=1400 audit(1787883039.570:1543): avc: denied { write } for pid=8087 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.931035][ T8108] loop8: detected capacity change from 0 to 512 [ 99.980107][ T8108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.980196][ T8108] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.003975][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.922'. [ 100.068221][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.922'. [ 100.068311][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.922'. [ 100.097518][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.238867][ T8127] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 100.298492][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.5.925'. [ 100.360421][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.927'. [ 100.360457][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.927'. [ 100.407700][ T8143] vxlan0: entered promiscuous mode [ 100.417196][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.927'. [ 100.417226][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.927'. [ 100.436147][ T3985] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.437022][ T3985] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.437069][ T3985] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.437109][ T3985] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.830690][ T8179] FAULT_INJECTION: forcing a failure. [ 100.830690][ T8179] name failslab, interval 1, probability 0, space 0, times 0 [ 100.830745][ T8179] CPU: 1 UID: 0 PID: 8179 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.830778][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.830797][ T8179] Call Trace: [ 100.830806][ T8179] [ 100.830824][ T8179] __dump_stack+0x1d/0x30 [ 100.830915][ T8179] dump_stack_lvl+0x95/0xd0 [ 100.830946][ T8179] dump_stack+0x15/0x1b [ 100.831050][ T8179] should_fail_ex+0x262/0x280 [ 100.831079][ T8179] ? do_getname+0x2e/0x1c0 [ 100.831244][ T8179] should_failslab+0x8c/0xb0 [ 100.831282][ T8179] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 100.831336][ T8179] ? do_getname+0x2e/0x1c0 [ 100.831398][ T8179] do_getname+0x2e/0x1c0 [ 100.831441][ T8179] user_path_at+0x28/0x100 [ 100.831473][ T8179] __se_sys_mount+0x25b/0x2e0 [ 100.831565][ T8179] __x64_sys_mount+0x67/0x80 [ 100.831619][ T8179] x64_sys_call+0xc3b/0x2550 [ 100.831651][ T8179] do_syscall_64+0x112/0x360 [ 100.831715][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.831743][ T8179] RIP: 0033:0x7f0c506be0d9 [ 100.831763][ T8179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.831860][ T8179] RSP: 002b:00007f0c4f117028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.831892][ T8179] RAX: ffffffffffffffda RBX: 00007f0c50945fa0 RCX: 00007f0c506be0d9 [ 100.831910][ T8179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.831927][ T8179] RBP: 00007f0c50755024 R08: 0000000000000000 R09: 0000000000000000 [ 100.831945][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.831962][ T8179] R13: 00007f0c50946038 R14: 00007f0c50945fa0 R15: 00007ffec0ad8308 [ 100.832009][ T8179] [ 100.934397][ T8182] netlink: 'syz.8.936': attribute type 30 has an invalid length. [ 100.934964][ T8182] netlink: 'syz.8.936': attribute type 30 has an invalid length. [ 101.098113][ T8192] loop2: detected capacity change from 0 to 256 [ 101.113844][ T8192] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.126861][ T364] rpcbind: server 127.0.0.1 not responding, timed out [ 101.138355][ T8192] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 101.138437][ T8192] FAT-fs (loop2): Filesystem has been set read-only [ 101.153615][ T8192] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 101.217884][ T8197] loop8: detected capacity change from 0 to 512 [ 101.234922][ T8197] EXT4-fs (loop8): 1 truncate cleaned up [ 101.235414][ T8197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.396351][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.474508][ T8231] loop2: detected capacity change from 0 to 512 [ 101.492112][ T8231] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.950: corrupted in-inode xattr: invalid ea_ino [ 101.492161][ T8231] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.492531][ T8231] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.950: couldn't read orphan inode 15 (err -117) [ 101.492570][ T8231] loop2: lost filesystem error report for type 5 error -117 [ 101.493300][ T8231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.645932][ T8231] loop2: detected capacity change from 512 to 0 [ 101.649500][ T8246] EXT4-fs error (device loop2): ext4_get_inode_loc:5054: inode #12: block 7: comm syz.2.950: unable to read itable block [ 101.649650][ T8246] buffer_io_error: 8 callbacks suppressed [ 101.649683][ T8246] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 101.649702][ T8246] EXT4-fs (loop2): I/O error while writing superblock [ 101.650323][ C0] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 101.716703][ T7610] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 101.937706][ T7610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.939174][ T7610] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 101.939239][ T7610] EXT4-fs (loop2): I/O error while writing superblock [ 101.989079][ T8264] ./dev/sda1: Can't lookup blockdev [ 102.627050][ T8316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.648537][ T8316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.668226][ T8316] bond0 (unregistering): Released all slaves [ 102.738314][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.738361][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.738613][ T8272] bridge_slave_0: entered allmulticast mode [ 102.751712][ T8272] bridge_slave_0: entered promiscuous mode [ 102.766393][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.766440][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.766906][ T8272] bridge_slave_1: entered allmulticast mode [ 102.775399][ T8272] bridge_slave_1: entered promiscuous mode [ 102.848714][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.919643][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.974979][ T8272] team0: Port device team_slave_0 added [ 102.981686][ T8272] team0: Port device team_slave_1 added [ 103.010740][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.010773][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.010870][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.011626][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.011644][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.011682][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.115119][ T8272] hsr_slave_0: entered promiscuous mode [ 103.115521][ T8272] hsr_slave_1: entered promiscuous mode [ 103.127452][ T8272] debugfs: 'hsr0' already exists in 'hsr' [ 103.127472][ T8272] Cannot create hsr debugfs directory [ 103.447723][ T8272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.457313][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.458962][ T8272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.470517][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.479236][ T8272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.488328][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.496331][ T8272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.505297][ T8272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.550916][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.567247][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.580379][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.580428][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.584721][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.584868][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.742824][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.831021][ T8272] veth0_vlan: entered promiscuous mode [ 103.836988][ T8272] veth1_vlan: entered promiscuous mode [ 103.855176][ T8272] veth0_macvtap: entered promiscuous mode [ 103.859249][ T8272] veth1_macvtap: entered promiscuous mode [ 103.869778][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.878411][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.906697][ T4091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.906955][ T4091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.907191][ T4091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.907579][ T4091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.987506][ T8452] loop0: detected capacity change from 0 to 1024 [ 103.991579][ T3985] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 104.000183][ T8452] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.000276][ T8452] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 104.000687][ T8452] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.956: inode #1: comm syz.0.956: iget: illegal inode # [ 104.000769][ T8452] loop0: lost filesystem error report for type 5 error -117 [ 104.001150][ T8452] EXT4-fs (loop0): no journal found [ 104.001225][ T8452] EXT4-fs (loop0): can't get journal size [ 104.005619][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 104.005672][ C0] EXT4-fs (loop0): initial error at time 1787883043: ext4_get_journal_inode:5927 [ 104.005745][ C0] EXT4-fs (loop0): last error at time 1787883043: ext4_get_journal_inode:5927 [ 104.012299][ T8452] EXT4-fs (loop0): failed to initialize system zone (-22) [ 104.012401][ T8452] EXT4-fs (loop0): mount failed [ 104.058016][ T8453] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 104.117500][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 104.117528][ T29] audit: type=1400 audit(1787883043.930:1576): avc: denied { write } for pid=8440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.172877][ T29] audit: type=1400 audit(1787883043.980:1577): avc: denied { write } for pid=8464 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.197634][ T29] audit: type=1326 audit(1787883044.010:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.197992][ T29] audit: type=1326 audit(1787883044.010:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.204689][ T29] audit: type=1326 audit(1787883044.010:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.204999][ T29] audit: type=1326 audit(1787883044.010:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.216456][ T29] audit: type=1326 audit(1787883044.010:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.216580][ T29] audit: type=1326 audit(1787883044.010:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.216724][ T29] audit: type=1326 audit(1787883044.010:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.223518][ T29] audit: type=1326 audit(1787883044.040:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.6.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9681dde0d9 code=0x7ffc0000 [ 104.613313][ T8494] hsr0: entered promiscuous mode [ 104.613347][ T8494] hsr0: entered allmulticast mode [ 104.613382][ T8494] hsr_slave_0: entered allmulticast mode [ 104.613456][ T8494] hsr_slave_1: entered allmulticast mode [ 105.720540][ T8587] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.723099][ T8587] team0 (unregistering): Port device team_slave_0 removed [ 105.735081][ T8587] team0 (unregistering): Failed to send options change via netlink (err -105) [ 105.735211][ T8587] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 105.737032][ T8587] team0 (unregistering): Port device team_slave_1 removed [ 106.637779][ T8688] loop0: detected capacity change from 0 to 256 [ 107.441326][ T4060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.489825][ T4060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.539214][ T4060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.579259][ T4060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.655756][ T4060] bridge_slave_1: left allmulticast mode [ 107.655818][ T4060] bridge_slave_1: left promiscuous mode [ 107.656130][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.667413][ T4060] bridge_slave_0: left allmulticast mode [ 107.667495][ T4060] bridge_slave_0: left promiscuous mode [ 107.667798][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.736994][ T4060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.746899][ T4060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.757961][ T4060] bond0 (unregistering): Released all slaves [ 107.811994][ T4060] hsr_slave_0: left promiscuous mode [ 107.817440][ T4060] hsr_slave_1: left promiscuous mode [ 107.818237][ T4060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.818287][ T4060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.824384][ T4060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.824433][ T4060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.856385][ T4060] veth1_macvtap: left promiscuous mode [ 107.856430][ T4060] veth0_macvtap: left promiscuous mode [ 107.856546][ T4060] veth1_vlan: left promiscuous mode [ 107.856596][ T4060] veth0_vlan: left promiscuous mode [ 107.939558][ T8790] netlink: 'syz.6.1024': attribute type 1 has an invalid length. [ 107.987037][ T4060] team0 (unregistering): Port device team_slave_1 removed [ 107.999743][ T4060] team0 (unregistering): Port device team_slave_0 removed [ 108.059960][ T8798] __nla_validate_parse: 5 callbacks suppressed [ 108.059993][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1024'. [ 108.155768][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 108.276538][ T8795] bond3: (slave veth0_to_bond): making interface the new active one [ 108.277110][ T8795] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 108.307435][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 108.308522][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1028'. [ 108.324964][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.332968][ T8816] loop5: detected capacity change from 0 to 512 [ 108.696315][ T8842] loop8: detected capacity change from 0 to 512 [ 108.709856][ T8844] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1037'. [ 108.721936][ T8844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.733929][ T8842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.734288][ T8842] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.877321][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.980964][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 109.235183][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 109.235271][ T29] audit: type=1400 audit(1787883049.040:1651): avc: denied { write } for pid=8871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.315244][ T29] audit: type=1400 audit(1787883049.120:1652): avc: denied { write } for pid=8883 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.361854][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.511399][ T29] audit: type=1400 audit(1787883049.280:1653): avc: denied { create } for pid=8890 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.628678][ T29] audit: type=1400 audit(1787883049.440:1654): avc: denied { write } for pid=8886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.738460][ T29] audit: type=1400 audit(1787883049.550:1655): avc: denied { write } for pid=8909 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.073511][ T29] audit: type=1400 audit(1787883049.880:1656): avc: denied { watch watch_reads } for pid=8927 comm="syz.1.1052" path="/27/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 110.107273][ T29] audit: type=1400 audit(1787883049.920:1657): avc: denied { write } for pid=8918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.209920][ T29] audit: type=1400 audit(1787883050.020:1658): avc: denied { write } for pid=8934 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.264211][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 111.300663][ T8967] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 111.939735][ T8993] loop1: detected capacity change from 0 to 512 [ 111.980553][ T8993] EXT4-fs: Invalid want_extra_isize 1969 [ 112.446349][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.451986][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.724462][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1082'. [ 112.744281][ T9024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 112.744316][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.744365][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 112.768245][ T9024] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 112.768347][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.768380][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 112.773614][ T29] audit: type=1400 audit(1787883052.580:1659): avc: denied { bind } for pid=9023 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.779715][ T29] audit: type=1400 audit(1787883052.580:1660): avc: denied { listen } for pid=9023 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.836821][ T9025] vhci_hcd: connection closed [ 112.837143][ T3985] vhci_hcd vhci_hcd.1: stop threads [ 112.837170][ T3985] vhci_hcd vhci_hcd.1: release socket [ 112.837195][ T3985] vhci_hcd vhci_hcd.1: disconnect device [ 112.837298][ T9027] vhci_hcd: connection closed [ 112.837574][ T3985] vhci_hcd vhci_hcd.1: stop threads [ 112.837595][ T3985] vhci_hcd vhci_hcd.1: release socket [ 112.837615][ T3985] vhci_hcd vhci_hcd.1: disconnect device [ 114.339060][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 114.339159][ T29] audit: type=1326 audit(1787883054.150:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 114.339202][ T29] audit: type=1326 audit(1787883054.150:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 114.340403][ T29] audit: type=1326 audit(1787883054.150:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 114.340461][ T29] audit: type=1326 audit(1787883054.150:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 114.401587][ T29] audit: type=1326 audit(1787883054.220:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 114.401751][ T29] audit: type=1326 audit(1787883054.220:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf15d8de42 code=0x7ffc0000 [ 114.401862][ T29] audit: type=1326 audit(1787883054.220:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf15d8ded7 code=0x7ffc0000 [ 114.401900][ T29] audit: type=1326 audit(1787883054.220:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf15d4add1 code=0x7ffc0000 [ 114.402033][ T29] audit: type=1326 audit(1787883054.220:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcf15d8eec9 code=0x7ffc0000 [ 114.402293][ T29] audit: type=1326 audit(1787883054.220:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9056 comm="syz.1.1092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcf15d4ae3b code=0x7ffc0000 [ 114.674597][ T9064] loop8: detected capacity change from 0 to 512 [ 114.692358][ T9064] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.692401][ T9064] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.697255][ T9064] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 114.697469][ T9064] EXT4-fs (loop8): orphan cleanup on readonly fs [ 114.701248][ T9064] EXT4-fs (loop8): 1 truncate cleaned up [ 114.702171][ T9064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.864445][ T9074] syzkaller1: entered promiscuous mode [ 114.864469][ T9074] syzkaller1: entered allmulticast mode [ 115.047758][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.235050][ T9090] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1106'. [ 115.722524][ T9102] loop1: detected capacity change from 0 to 1024 [ 115.731396][ T9102] EXT4-fs: Ignoring removed nobh option [ 115.731498][ T9102] EXT4-fs: Ignoring removed bh option [ 115.746548][ T9102] EXT4-fs: Ignoring removed nobh option [ 115.748164][ T9082] bond1: entered promiscuous mode [ 115.749408][ T9082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.769771][ T9102] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 115.794805][ T9102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.094579][ T9116] loop0: detected capacity change from 0 to 1024 [ 116.102814][ T9116] EXT4-fs: inline encryption not supported [ 116.116758][ T9116] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.130182][ T9116] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1113: Invalid inode bitmap blk 0 in block_group 0 [ 116.130224][ T9116] loop0: lost filesystem error report for type 5 error -117 [ 116.130583][ T9116] EXT4-fs (loop0): Remounting filesystem read-only [ 116.130629][ T9116] EXT4-fs (loop0): 1 orphan inode deleted [ 116.131659][ T9116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.133274][ T9116] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.134618][ T3985] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 116.134703][ T3985] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 116.134799][ T3985] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 116.712382][ T7517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.046115][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 117.051234][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.051580][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.068940][ T9137] dummy0: left promiscuous mode [ 117.336239][ T9137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.371857][ T9137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.559301][ T9148] loop1: detected capacity change from 0 to 8192 [ 117.687531][ T9137] syzkaller0: left promiscuous mode [ 117.687622][ T9137] syzkaller0: left allmulticast mode [ 117.705692][ T3982] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.705759][ T3982] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.705821][ T3982] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.705995][ T3982] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.914164][ T9139] loop8: detected capacity change from 0 to 32768 [ 119.362031][ T9237] loop0: detected capacity change from 0 to 512 [ 119.363108][ T9237] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.368787][ T9237] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 119.384034][ T9237] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.384257][ T9237] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.385102][ T9237] __quota_error: 81 callbacks suppressed [ 119.385153][ T9237] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 119.385239][ T9237] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 119.385298][ T9237] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1138: Failed to acquire dquot type 1 [ 119.385413][ T9237] loop0: lost filesystem error report for type 5 error -5 [ 119.385612][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 119.385628][ C0] EXT4-fs (loop0): last error at time 1787883059: ext4_acquire_dquot:7069 [ 119.389154][ T9237] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 119.389298][ T9237] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 119.389364][ T9237] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1138: Failed to acquire dquot type 1 [ 119.389436][ T9237] loop0: lost filesystem error report for type 5 error -5 [ 119.389950][ T9237] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.1138: Invalid block bitmap block 0 in block_group 0 [ 119.390039][ T9237] loop0: lost filesystem error report for type 5 error -117 [ 119.390280][ T9237] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 119.390354][ T9237] loop0: lost filesystem error report for type 5 error -117 [ 119.390805][ T9237] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 119.390857][ T9237] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 119.390940][ T9237] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1138: Failed to acquire dquot type 1 [ 119.390997][ T9237] loop0: lost filesystem error report for type 5 error -5 [ 119.391410][ T9237] EXT4-fs (loop0): 1 orphan inode deleted [ 119.392704][ T9237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.646226][ T8272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.920724][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1152'. [ 119.926550][ T9] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 120.132893][ T9278] sd 0:0:1:0: PR command failed: 1026 [ 120.133160][ T9278] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 120.147269][ T9278] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 120.711365][ T29] audit: type=1400 audit(1787883060.520:1748): avc: denied { write } for pid=9299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.782784][ T29] audit: type=1400 audit(1787883060.590:1749): avc: denied { write } for pid=9319 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.271917][ T29] audit: type=1400 audit(1787883061.080:1750): avc: denied { name_bind } for pid=9329 comm="syz.6.1171" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 121.515339][ T29] audit: type=1326 audit(1787883061.320:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9337 comm="syz.8.1175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc94ce0d9 code=0x7ffc0000 [ 121.686967][ T9346] xt_hashlimit: size too large, truncated to 1048576 [ 122.634723][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1183'. [ 122.665741][ T9415] loop8: detected capacity change from 0 to 512 [ 122.696230][ T9415] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.710959][ T9415] EXT4-fs (loop8): 1 truncate cleaned up [ 122.711428][ T9415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.805717][ T4686] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.825291][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'. [ 124.591290][ T9510] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 124.599425][ T9511] netlink: 'syz.8.1206': attribute type 4 has an invalid length. [ 124.738003][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 124.738035][ T29] audit: type=1400 audit(1787883064.550:1807): avc: denied { sqpoll } for pid=9514 comm="syz.0.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.010516][ T4091] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.069386][ T4091] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.101177][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 125.142062][ T4091] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.188539][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.188577][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.188641][ T9529] bridge_slave_0: entered allmulticast mode [ 125.189186][ T9529] bridge_slave_0: entered promiscuous mode [ 125.216993][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.217046][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.217215][ T9529] bridge_slave_1: entered allmulticast mode [ 125.239038][ T9529] bridge_slave_1: entered promiscuous mode [ 125.265206][ T4091] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.278709][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.289929][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.314428][ T9529] team0: Port device team_slave_0 added [ 125.322012][ T9529] team0: Port device team_slave_1 added [ 125.353792][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.353826][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.353898][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.354570][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.354637][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.354699][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.472333][ T4091] bridge_slave_1: left allmulticast mode [ 125.472364][ T4091] bridge_slave_1: left promiscuous mode [ 125.472640][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.479389][ T4091] bridge_slave_0: left allmulticast mode [ 125.479460][ T4091] bridge_slave_0: left promiscuous mode [ 125.479845][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.639530][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.649624][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.649773][ T29] audit: type=1400 audit(1787883065.470:1808): avc: denied { write } for pid=9554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.661212][ T4091] bond0 (unregistering): Released all slaves [ 125.713395][ T29] audit: type=1400 audit(1787883065.520:1809): avc: denied { write } for pid=9565 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.743588][ T4091] hsr_slave_0: left promiscuous mode [ 125.743943][ T4091] hsr_slave_1: left promiscuous mode [ 125.744363][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.744416][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.747126][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.747171][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.820575][ T4091] veth1_macvtap: left promiscuous mode [ 125.820656][ T4091] veth0_macvtap: left promiscuous mode [ 125.820714][ T4091] veth1_vlan: left promiscuous mode [ 125.820782][ T4091] veth0_vlan: left promiscuous mode [ 125.843887][ T29] audit: type=1400 audit(1787883065.660:1810): avc: denied { associate } for pid=9569 comm="syz.0.1217" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.076324][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 126.090488][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 126.153830][ T29] audit: type=1400 audit(1787883065.960:1811): avc: denied { getattr } for pid=9582 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.186226][ T9529] hsr_slave_0: entered promiscuous mode [ 126.187405][ T9529] hsr_slave_1: entered promiscuous mode [ 126.192526][ T9529] debugfs: 'hsr0' already exists in 'hsr' [ 126.192570][ T9529] Cannot create hsr debugfs directory [ 126.194009][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 126.379219][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 126.508384][ T29] audit: type=1400 audit(1787883066.320:1812): avc: denied { write } for pid=9588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.572631][ T29] audit: type=1400 audit(1787883066.380:1813): avc: denied { write } for pid=9606 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.632360][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 126.872915][ T29] audit: type=1400 audit(1787883066.680:1814): avc: denied { write } for pid=9613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.954107][ T29] audit: type=1400 audit(1787883066.760:1815): avc: denied { write } for pid=9639 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.001073][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 127.021519][ T29] audit: type=1326 audit(1787883066.830:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.8.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafc94ce0d9 code=0x0 [ 127.114947][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 127.115059][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 127.139975][ T9646] vxlan0: entered promiscuous mode [ 127.142923][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 127.143054][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 127.196926][ T4061] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.197296][ T4061] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.197968][ T4061] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.198208][ T4061] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.292014][ T9529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.301107][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.302812][ T9529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.312046][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.316600][ T9529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.334926][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.340846][ T9529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.348277][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.448445][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 127.487463][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.519449][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.537428][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.537475][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.544391][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.544505][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.712280][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 127.712321][ T9702] netlink: 'syz.0.1253': attribute type 7 has an invalid length. [ 127.712339][ T9702] netlink: 'syz.0.1253': attribute type 8 has an invalid length. [ 127.712357][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 127.971295][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.299604][ T9529] veth0_vlan: entered promiscuous mode [ 128.306858][ T9529] veth1_vlan: entered promiscuous mode [ 128.343275][ T9529] veth0_macvtap: entered promiscuous mode [ 128.354186][ T9529] veth1_macvtap: entered promiscuous mode [ 128.374613][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.389979][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.437908][ T3985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.437987][ T3985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.438040][ T3985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.438117][ T3985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.543007][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 129.717677][ T9909] sd 0:0:1:0: PR command failed: 1026 [ 129.718556][ T9909] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 129.721347][ T9909] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 129.759604][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 129.759706][ T29] audit: type=1326 audit(1787883069.570:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.759830][ T29] audit: type=1326 audit(1787883069.570:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.819885][ T29] audit: type=1326 audit(1787883069.630:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.819937][ T29] audit: type=1326 audit(1787883069.630:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.819981][ T29] audit: type=1326 audit(1787883069.630:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.879682][ T29] audit: type=1326 audit(1787883069.690:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc777e0d9 code=0x7ffc0000 [ 129.879788][ T29] audit: type=1326 audit(1787883069.690:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbc777de42 code=0x7ffc0000 [ 129.879948][ T29] audit: type=1326 audit(1787883069.690:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcbc777ded7 code=0x7ffc0000 [ 129.880059][ T29] audit: type=1326 audit(1787883069.690:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcbc773add1 code=0x7ffc0000 [ 129.880152][ T29] audit: type=1326 audit(1787883069.690:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9930 comm="syz.0.1264" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcbc777eec9 code=0x7ffc0000 [ 130.312463][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 130.430229][ T9968] netlink: 'syz.1.1278': attribute type 3 has an invalid length. [ 130.430273][ T9968] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 130.430312][ T9968] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1278'. [ 130.526212][ T9973] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1280'. [ 130.630488][ T9973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.688971][ T9973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.705402][ T9973] bond0 (unregistering): Released all slaves [ 131.442950][T10005] syzkaller0: entered promiscuous mode [ 131.442984][T10005] syzkaller0: entered allmulticast mode [ 131.483043][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'. [ 131.483131][T10007] netlink: 'syz.6.1302': attribute type 30 has an invalid length. [ 131.483155][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1302'. [ 131.483333][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1302'. [ 131.483356][T10007] netlink: 'syz.6.1302': attribute type 30 has an invalid length. [ 131.483373][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1302'. [ 131.768151][ T9997] loop0: detected capacity change from 0 to 1024 [ 131.834123][ T9997] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.840246][ T9997] EXT4-fs: Ignoring removed oldalloc option [ 131.950305][ T9997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.951835][ T9997] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.130815][ T8272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.327246][T10041] loop1: detected capacity change from 0 to 512 [ 133.357136][T10041] EXT4-fs (loop1): 1 truncate cleaned up [ 133.357658][T10041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.408630][T10046] sd 0:0:1:0: PR command failed: 1026 [ 133.411577][T10046] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 133.412139][T10046] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 133.578734][ T7517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.675807][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 133.877779][T10070] xt_hashlimit: size too large, truncated to 1048576 [ 134.461104][ T3982] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.471967][T10105] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.778696][T10119] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 134.778885][T10119] team0 (unregistering): Port device team_slave_0 removed [ 134.781347][T10119] team0 (unregistering): Failed to send options change via netlink (err -105) [ 134.781442][T10119] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 134.781875][T10119] team0 (unregistering): Port device team_slave_1 removed [ 134.825077][T10126] loop4: detected capacity change from 0 to 1024 [ 134.872402][T10126] EXT4-fs: Ignoring removed nobh option [ 134.872499][T10126] EXT4-fs: Ignoring removed bh option [ 134.872566][T10126] EXT4-fs: Ignoring removed nobh option [ 134.902832][T10126] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 134.930963][T10126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.945584][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 134.945609][ T29] audit: type=1400 audit(1787883074.750:1912): avc: denied { write } for pid=10124 comm="syz.4.1337" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.947761][T10125] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.967770][T10131] loop0: detected capacity change from 0 to 1024 [ 134.992745][T10131] EXT4-fs (loop0): inodes count not valid: 1 vs 32 [ 135.048874][ T9529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.310680][T10159] xt_LOG: level 115 >= 8 [ 135.694025][ T29] audit: type=1400 audit(1787883075.500:1913): avc: denied { create } for pid=10179 comm="syz.8.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 135.740166][T10186] loop4: detected capacity change from 0 to 256 [ 135.978777][T10197] uprobe: syz.0.1365:10197 failed to unregister, leaking uprobe [ 136.217068][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 136.217110][T10216] netlink: 'syz.0.1373': attribute type 30 has an invalid length. [ 136.217130][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 136.217333][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 136.217357][T10216] netlink: 'syz.0.1373': attribute type 30 has an invalid length. [ 136.217374][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 136.510367][ T29] audit: type=1326 audit(1787883076.320:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.1.1383" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf15d8e0d9 code=0x0 [ 136.643070][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1386'. [ 136.671607][ T29] audit: type=1400 audit(1787883076.480:1915): avc: denied { unmount } for pid=8272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.806784][T10254] syzkaller0: entered promiscuous mode [ 136.806811][T10254] syzkaller0: entered allmulticast mode [ 136.809791][ T29] audit: type=1400 audit(1787883076.620:1916): avc: denied { ioctl } for pid=10253 comm="syz.4.1389" path="socket:[25406]" dev="sockfs" ino=25406 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.824094][T10254] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 136.989772][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1392'. [ 137.044203][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1393'. [ 137.558242][ T4091] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 137.696773][T10284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.881193][T10303] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1404'. [ 137.882371][T10303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.982479][T10305] loop1: detected capacity change from 0 to 128 [ 137.998404][T10305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 137.998465][T10305] System zones: 1-3, 19-19, 35-36 [ 138.012117][T10305] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.020948][T10305] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.060260][ T29] audit: type=1326 audit(1787883077.870:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 138.060305][ T29] audit: type=1326 audit(1787883077.870:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 138.066614][ T29] audit: type=1326 audit(1787883077.880:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 138.066792][ T29] audit: type=1326 audit(1787883077.880:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 138.067751][ T29] audit: type=1326 audit(1787883077.880:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.1.1405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf15d8e0d9 code=0x7ffc0000 [ 138.237562][T10314] loop0: detected capacity change from 0 to 128 [ 138.251440][T10314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 138.251488][T10314] System zones: 1-3, 19-19, 35-36 [ 138.252099][T10314] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.260187][T10314] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.388426][ T8272] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.398068][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 138.760410][ T7517] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.931092][T10351] loop0: detected capacity change from 0 to 512 [ 138.949622][T10351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.949692][T10351] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.004094][ T8272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.636845][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 140.636874][ T29] audit: type=1400 audit(1787883080.450:1975): avc: denied { write } for pid=10394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.686443][ T29] audit: type=1400 audit(1787883080.500:1976): avc: denied { write } for pid=10405 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.801417][ T29] audit: type=1400 audit(1787883080.610:1977): avc: denied { write } for pid=10408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.837486][ T29] audit: type=1400 audit(1787883080.650:1978): avc: denied { write } for pid=10419 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.953707][ T29] audit: type=1400 audit(1787883080.760:1979): avc: denied { write } for pid=10423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.989371][ T29] audit: type=1400 audit(1787883080.800:1980): avc: denied { write } for pid=10434 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.475637][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.484426][T10445] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 154.518453][T10445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.646922][T10445] bond2: (slave veth3): Enslaving as an active interface with a down link [ 154.659824][T10452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.675711][T10452] bond2: (slave batadv1): making interface the new active one [ 154.684669][T10452] batadv1: entered promiscuous mode [ 154.690545][T10452] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 154.853156][ T4006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.903295][ T4006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.925334][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.925397][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.926011][T10449] bridge_slave_0: entered allmulticast mode [ 154.927164][T10449] bridge_slave_0: entered promiscuous mode [ 154.929343][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.929439][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.929723][T10449] bridge_slave_1: entered allmulticast mode [ 154.931036][T10449] bridge_slave_1: entered promiscuous mode [ 154.953326][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.955752][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.977036][T10449] team0: Port device team_slave_0 added [ 154.978957][T10449] team0: Port device team_slave_1 added [ 155.002862][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.002912][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.003000][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.004246][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.004258][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.004323][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.047077][T10449] hsr_slave_0: entered promiscuous mode [ 155.047984][T10449] hsr_slave_1: entered promiscuous mode [ 155.048590][T10449] debugfs: 'hsr0' already exists in 'hsr' [ 155.048640][T10449] Cannot create hsr debugfs directory [ 155.108886][ T4006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.178798][ T4006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.244718][ T29] audit: type=1400 audit(1787883095.050:1981): avc: denied { write } for pid=10470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.289817][ T29] audit: type=1400 audit(1787883095.100:1982): avc: denied { write } for pid=10481 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.323292][ T4006] bridge_slave_1: left allmulticast mode [ 155.323339][ T4006] bridge_slave_1: left promiscuous mode [ 155.323472][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.336736][ T4006] bridge_slave_0: left allmulticast mode [ 155.336801][ T4006] bridge_slave_0: left promiscuous mode [ 155.337124][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.403441][ T4006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.412725][ T4006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.422184][ T4006] bond0 (unregistering): Released all slaves [ 155.450894][ T4006] hsr_slave_0: left promiscuous mode [ 155.456867][ T4006] hsr_slave_1: left promiscuous mode [ 155.457317][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.457341][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.478064][ T4006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.478091][ T4006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.498321][ T4006] veth1_macvtap: left promiscuous mode [ 155.498384][ T4006] veth0_macvtap: left promiscuous mode [ 155.498517][ T4006] veth1_vlan: left promiscuous mode [ 155.498571][ T4006] veth0_vlan: left promiscuous mode [ 155.557726][ T29] audit: type=1400 audit(1787883095.370:1983): avc: denied { write } for pid=10483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.603042][ T29] audit: type=1400 audit(1787883095.410:1984): avc: denied { write } for pid=10494 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.633005][ T4006] team0 (unregistering): Port device team_slave_1 removed [ 155.645223][ T4006] team0 (unregistering): Port device team_slave_0 removed [ 155.709862][ T29] audit: type=1400 audit(1787883095.520:1985): avc: denied { write } for pid=10496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.742096][ T29] audit: type=1400 audit(1787883095.550:1986): avc: denied { write } for pid=10507 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.833301][ T29] audit: type=1400 audit(1787883095.640:1987): avc: denied { write } for pid=10509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.866729][ T29] audit: type=1400 audit(1787883095.680:1988): avc: denied { write } for pid=10520 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.952862][ T29] audit: type=1400 audit(1787883095.760:1989): avc: denied { write } for pid=10522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.988201][ T29] audit: type=1400 audit(1787883095.800:1990): avc: denied { write } for pid=10533 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.296165][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 156.408089][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 156.516999][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 156.634552][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 156.717994][T10449] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 156.726781][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.734758][T10449] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 156.743454][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.751780][T10449] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 156.760903][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.768736][T10449] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 156.777863][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.820658][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.833518][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.843729][ T4091] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.843777][ T4091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.862635][ T4091] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.862682][ T4091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.004523][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.141028][T10449] veth0_vlan: entered promiscuous mode [ 157.150539][T10449] veth1_vlan: entered promiscuous mode [ 157.167607][T10449] veth0_macvtap: entered promiscuous mode [ 157.174996][T10449] veth1_macvtap: entered promiscuous mode [ 157.185989][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.199021][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.237000][ T4091] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.237058][ T4091] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.237186][ T4091] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.237233][ T4091] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.684185][T10713] loop9: detected capacity change from 0 to 1024 [ 157.688321][T10713] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.688411][T10713] EXT4-fs: Ignoring removed oldalloc option [ 157.713836][T10713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.714556][T10713] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.746425][T10449] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.834519][T10756] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 158.061268][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1458'. [ 158.061307][T10778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1458'. [ 158.061333][T10778] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1458'. [ 158.091083][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1456'. [ 158.304918][T10791] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.1460'. [ 159.119279][T10831] loop0: detected capacity change from 0 to 2048 [ 159.158807][T10831] loop0: p1 p2 p3 [ 159.158889][T10831] loop0: p1 size 16777216 extends beyond EOD, truncated [ 159.182494][T10831] loop0: p2 size 458752 extends beyond EOD, truncated [ 159.192362][T10831] loop0: p3 start 3036741376 is beyond EOD, truncated [ 159.290113][T10839] loop1: detected capacity change from 0 to 512 [ 159.342378][T10839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.342610][T10839] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.369572][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1481'. [ 159.460403][ T7517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.564642][T10842] loop0: detected capacity change from 0 to 512 [ 159.584935][T10842] EXT4-fs: Invalid want_extra_isize 1969 [ 160.190108][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1491'. [ 160.790522][ T2984] ================================================================== [ 160.790572][ T2984] BUG: KCSAN: data-race in d_delete / lookup_fast [ 160.790610][ T2984] [ 160.790616][ T2984] read-write to 0xffff888105fd9480 of 4 bytes by task 10819 on cpu 0: [ 160.790635][ T2984] d_delete+0x15a/0x180 [ 160.790661][ T2984] d_delete_notify+0x32/0x100 [ 160.790689][ T2984] vfs_unlink+0x287/0x490 [ 160.790716][ T2984] filename_unlinkat+0x1dc/0x410 [ 160.790754][ T2984] __se_sys_unlink+0x2b/0xe0 [ 160.790789][ T2984] __x64_sys_unlink+0x1f/0x30 [ 160.790819][ T2984] x64_sys_call+0x18ee/0x2550 [ 160.790853][ T2984] do_syscall_64+0x112/0x360 [ 160.790886][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.790915][ T2984] [ 160.790922][ T2984] read to 0xffff888105fd9480 of 4 bytes by task 2984 on cpu 1: [ 160.790943][ T2984] lookup_fast+0xf1/0x320 [ 160.790966][ T2984] path_lookupat+0x120/0x4c0 [ 160.790988][ T2984] filename_lookup+0x18f/0x390 [ 160.791010][ T2984] do_readlinkat+0x74/0x2f0 [ 160.791035][ T2984] __x64_sys_readlink+0x47/0x60 [ 160.791054][ T2984] x64_sys_call+0x1d41/0x2550 [ 160.791079][ T2984] do_syscall_64+0x112/0x360 [ 160.791112][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.791139][ T2984] [ 160.791144][ T2984] value changed: 0x00300180 -> 0x00004080 [ 160.791159][ T2984] [ 160.791165][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 160.791197][ T2984] CPU: 1 UID: 0 PID: 2984 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 160.791222][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.791235][ T2984] ================================================================== [ 160.870553][T10935] FAULT_INJECTION: forcing a failure. [ 160.870553][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 160.870645][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.0.1502 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.870729][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.870801][T10935] Call Trace: [ 160.870842][T10935] [ 160.870872][T10935] __dump_stack+0x1d/0x30 [ 160.870952][T10935] dump_stack_lvl+0x95/0xd0 [ 160.871069][T10935] dump_stack+0x15/0x1b [ 160.871132][T10935] should_fail_ex+0x262/0x280 [ 160.871222][T10935] ? __se_sys_mount+0xef/0x2e0 [ 160.871333][T10935] should_failslab+0x8c/0xb0 [ 160.871476][T10935] __kmalloc_cache_noprof+0x7a/0x400 [ 160.871585][T10935] ? __se_sys_mount+0xef/0x2e0 [ 160.871732][T10935] __se_sys_mount+0xef/0x2e0 [ 160.871856][T10935] ? restore_fpregs_from_fpstate+0x61/0x110 [ 160.871942][T10935] __x64_sys_mount+0x67/0x80 [ 160.872060][T10935] x64_sys_call+0xc3b/0x2550 [ 160.872206][T10935] do_syscall_64+0x112/0x360 [ 160.872275][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.872311][T10935] RIP: 0033:0x7fcbc777e0d9 [ 160.872333][T10935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.872358][T10935] RSP: 002b:00007fcbc61d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.872447][T10935] RAX: ffffffffffffffda RBX: 00007fcbc7a05fa0 RCX: 00007fcbc777e0d9 [ 160.872516][T10935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.872541][T10935] RBP: 00007fcbc7815024 R08: 0000200000000100 R09: 0000000000000000 [ 160.872579][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.872629][T10935] R13: 00007fcbc7a06038 R14: 00007fcbc7a05fa0 R15: 00007ffe0fcb8798 [ 160.872702][T10935] [ 161.845673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.675694][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 165.846271][ T3982] batadv1: left promiscuous mode [ 168.126966][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 168.127026][ T29] audit: type=1400 audit(1787883107.940:2019): avc: denied { write } for pid=10941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.164747][ T29] audit: type=1400 audit(1787883107.970:2020): avc: denied { write } for pid=10952 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.291874][ T29] audit: type=1400 audit(1787883108.100:2021): avc: denied { write } for pid=10955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.327645][ T29] audit: type=1400 audit(1787883108.140:2022): avc: denied { write } for pid=10966 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.425118][ T29] audit: type=1400 audit(1787883108.230:2023): avc: denied { write } for pid=10969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.464797][ T29] audit: type=1400 audit(1787883108.270:2024): avc: denied { write } for pid=10980 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.758678][ T29] audit: type=1400 audit(1787883109.570:2025): avc: denied { write } for pid=10983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.799689][ T29] audit: type=1400 audit(1787883109.610:2026): avc: denied { write } for pid=10994 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1