last executing test programs: 3m36.36659041s ago: executing program 32 (id=182): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m28.133534726s ago: executing program 33 (id=91): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_clone(0xa0002011, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0xf, &(0x7f00000000c0)={0x28, 0x7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2m51.222290645s ago: executing program 34 (id=818): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa8, 0x0, &(0x7f00000001c0)="bcd96e5d1b72c538f50f2831451adee0fa3899d6a1c9b98b4217605be0f00e5b7d2ce81631cec43ba6c54ab6e660675038782749da34d0ca4f16084d45182b54e404e85d5a4866624fd2fcb7bf3722912bb960546892b60512fe983ccf7da912c169fc1e92212a181d12b5a0b117f284811486f52d77a22c944e1651320e964a7bd58f023961f4e67f418e1c1b79272a1344c6e0bc096253976507253236798ab4f9be8014b32dd3", 0x0, 0xc, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m46.676311576s ago: executing program 35 (id=889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x41) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m27.27892659s ago: executing program 36 (id=1201): syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000002380)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001080)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'nL\xe4N\x88\xde\xf4E#$\x10\x16\a=7\x0f\xac'}}, {@permit_directio}, {@seclabel}, {@uid_eq}, {@context={'context', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'cgroup.procs\x00'}}, {@subj_type}, {@obj_type}, {@dont_hash}]}, 0x1, 0x400, &(0x7f0000003380)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r1, &(0x7f0000001140), 0x9) 2m25.424647068s ago: executing program 0 (id=1229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) shutdown(r0, 0x0) 2m25.331524341s ago: executing program 0 (id=1231): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 2m24.469865918s ago: executing program 0 (id=1237): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x20, 0x1}, {0x0, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m24.207451676s ago: executing program 0 (id=1238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 2m24.142717818s ago: executing program 0 (id=1239): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 2m23.311498114s ago: executing program 0 (id=1256): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0xe80, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2m23.311341864s ago: executing program 37 (id=1256): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000580)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0xe80, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1m47.272605526s ago: executing program 9 (id=1819): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x6}, 0xc18, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x7f) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m47.168812749s ago: executing program 9 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x6, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x2, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m46.884282368s ago: executing program 9 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1m46.542212259s ago: executing program 9 (id=1838): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800801, &(0x7f0000000080), 0x3, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x2000000, &(0x7f0000000280)={[{@numtail}, {@fat=@showexec}, {@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@rodir}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x1, 0x368, &(0x7f0000000600)="$eJzs3U9om2UYAPAn+9KmHWztQRgKwqc3Qcv+4EFPHaODYS4qYepBDK5TaeqgwWB3WFYv4lHwqCcv4kEPHnYWQRFvHrw6QabiQXcbOHwlyZcmadKuE7JZ/P0O4cn7Ps/3vm/2rfn6tXn7ynKsXZiJizdv3oi5uVKUl88sx61SLEYWfVdj3OyENgDgYLiVUvyZevZZUprylACAKeu+/792ZPv5XLzz9V75ybs/ABx4xff/83vlzO3WcWkqUwIApmzs/v+jI92zoz/qLw/9VgAAcFA9/+JLz5yuRjyX53MR6++2aq1aPD3oP30x3ohGrMbxWIjbEb0Lhc5Dqft49lx15Xie5+34ZTFqnYpWLWK93ar1rhROZ936SpyIhVgs6ourjZRSdvaL6sqJvCsirra748d6qVWbicPF+D8ejtU4GXk8MFYfca66cjIvDlBb79e3I7YG9y0681+Khfj+1bgUjbgwfz5S6l/WVFeunMjzM6k6Ut+qVeLC9quw6x0QAAAAAAAAAAAAAAAAAAAAAAD4V5a2iiDPF7f3v0mD/XuWlvK+xdH9cXplxf5AW739gVIlRUp/vP1E7b0sRvYH2rk/T6tWjkP3b9kAAAAAAAAAAAAAAAAAAADwn9LcnI16o7G60dy8vDYctDeam4ciotPy5reffTUf4zl3CMrFGENdedF0ea2esn5yykZyiiDrDN5v+fTa9oyHcyrbq5g4jcruXY3GkUd+/nDQ8nDWP/Lfg5wsJi8w2zGN4WD9aG9Kd/NCXT5VBCfvkHw9pbTbca68PF4VpYjy3f/D7R2kTvDNjdcfPNU89mS35cvU89jjC+evf/Dxb2v1RmfkjsYnsxvN22mtXjyffLLtHmRD508pekFp+Ewo71W+NdpSz374/YWH3v9uf6On4Za3JuRkveV8vtHcLBX/U7pds72g07ajar5xLovYcZyZCSf/FIJjHy3Xr1356dd9JZcirg6+SNioAwAAAAAAAAAAAAAAAAAA7omhz4oXig/7zuxV9dSz058ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw7g7//PxRsjbXsJ/irHeNdldWNZsTR+71MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+5/4JAAD//5bCao8=") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 1m46.277372257s ago: executing program 9 (id=1843): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) write(r2, &(0x7f0000000000)="a4", 0x1) splice(r1, 0x0, r0, 0x0, 0x100020000003, 0x0) 1m45.698294365s ago: executing program 9 (id=1848): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x4) 1m45.684162055s ago: executing program 38 (id=1848): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x4) 1m42.856627463s ago: executing program 6 (id=1879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 1m42.722528568s ago: executing program 6 (id=1883): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000b008"], 0x80}, 0x1, 0x0, 0x0, 0x408d4}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m42.64160301s ago: executing program 6 (id=1886): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m42.433681987s ago: executing program 6 (id=1890): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m42.420482877s ago: executing program 6 (id=1892): syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x44c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x438, 0x1, [@m_police={0x434, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0xd, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x1, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x365, 0x7, 0x20, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x8, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x7, 0x5, 0xc56, 0xe, 0x9f31, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xf]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) 1m42.128812606s ago: executing program 6 (id=1894): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 1m42.128663526s ago: executing program 39 (id=1894): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 1m33.497295765s ago: executing program 1 (id=1978): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r3, r3) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 1m33.443595727s ago: executing program 1 (id=1979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)=ANY=[], 0xffc9) 1m33.404450277s ago: executing program 1 (id=1982): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1) 1m33.376338378s ago: executing program 1 (id=1983): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.028882019s ago: executing program 1 (id=1986): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m32.658973931s ago: executing program 1 (id=1990): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 1m17.539199172s ago: executing program 40 (id=1990): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 49.363266998s ago: executing program 2 (id=2471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) close(r0) 49.31626607s ago: executing program 2 (id=2473): membarrier(0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24048890) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 48.855428784s ago: executing program 2 (id=2478): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKNOD(r0, &(0x7f0000000180)={0x14, 0x13, 0x1, {0x2, 0x1, 0x7}}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 48.443661137s ago: executing program 2 (id=2480): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 48.412850258s ago: executing program 2 (id=2481): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0xfff}, @period={0x5d, 0x7, 0xa, 0x3, 0x774, {0xfff, 0xfffd, 0x3e, 0x1}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 48.3525353s ago: executing program 2 (id=2482): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 48.35242426s ago: executing program 41 (id=2482): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.754326341s ago: executing program 5 (id=3224): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r0, 0x0, 0x0) 3.708093284s ago: executing program 5 (id=3232): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006c0000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000054b000/0x4000)=nil, &(0x7f00006bf000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000004) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x771f, 0x5e, 0x0, 0xfffffffffffffe16) 3.639893886s ago: executing program 4 (id=3234): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x24, 0x107, 0xfffffffe, 0x0, {0x7, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400cc}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.588678828s ago: executing program 5 (id=3235): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000000)={0x80, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 3.580885278s ago: executing program 3 (id=3236): socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x3, 0x5) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.325395276s ago: executing program 3 (id=3237): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, &(0x7f0000001dc0)={0x4, 0xf5, 0x100000}, 0x20) unshare(0x2c020400) 3.251896019s ago: executing program 4 (id=3238): unshare(0x20020400) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.251496919s ago: executing program 3 (id=3239): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) close_range(r0, 0xffffffffffffffff, 0x0) 2.299650118s ago: executing program 4 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x800002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@orlov}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpid}, {@nogrpid}, {@noauto_da_alloc}, {}]}, 0x3, 0x592, &(0x7f0000001340)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) 2.195270031s ago: executing program 7 (id=3248): r0 = epoll_create(0x7) r1 = epoll_create1(0x80000) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x9}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)={0x1008}) 2.146614653s ago: executing program 7 (id=3250): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x208, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x230}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) 1.979049298s ago: executing program 7 (id=3252): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x2, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.052170357s ago: executing program 7 (id=3254): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x100000000}, 0x0, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lremovexattr(0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x4, 0xacd, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102}, 0x10) 1.052044317s ago: executing program 3 (id=3255): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.032077657s ago: executing program 4 (id=3256): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x5, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x8900, 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmmsg(r2, 0x0, 0x0, 0x80) 923.059021ms ago: executing program 3 (id=3258): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 857.195613ms ago: executing program 3 (id=3260): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffe3e) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="1d", 0x1}], 0x1}}], 0x1, 0x40003) 819.038165ms ago: executing program 7 (id=3262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 773.401986ms ago: executing program 7 (id=3263): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1) 759.061186ms ago: executing program 8 (id=3264): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x8094) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0xa200, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) 647.34802ms ago: executing program 8 (id=3265): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x344) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) 606.609971ms ago: executing program 8 (id=3266): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/190, 0xbe}], 0x1}, 0x1}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) 564.389952ms ago: executing program 5 (id=3267): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 289.906371ms ago: executing program 8 (id=3268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 288.967831ms ago: executing program 4 (id=3269): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 201.790644ms ago: executing program 4 (id=3270): shutdown(0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lstat(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100e81cbcde000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0) 171.602824ms ago: executing program 8 (id=3271): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40040c0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x112600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, &(0x7f0000000140)={r0}) 116.325837ms ago: executing program 8 (id=3272): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x100000000}, 0x0, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lremovexattr(0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x4, 0xacd, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102}, 0x10) 107.403326ms ago: executing program 5 (id=3273): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 0s ago: executing program 5 (id=3274): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ost filesystem error report for type 5 error -117 [ 178.703985][T10208] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.2031: Invalid inode table block 0 in block_group 0 [ 178.742750][T10208] loop2: lost filesystem error report for type 5 error -117 [ 178.744312][T10208] EXT4-fs (loop2): 1 truncate cleaned up [ 178.768739][T10208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.825789][T10208] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.2031: Invalid inode table block 0 in block_group 0 [ 178.879221][ T28] audit: type=1400 audit(1781954241.692:953): avc: denied { setopt } for pid=10226 comm="syz.7.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.948699][ T9449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.123948][T10240] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2044'. [ 179.262139][T10238] loop4: detected capacity change from 0 to 164 [ 179.613881][T10238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 179.725649][T10261] loop2: detected capacity change from 0 to 4096 [ 179.736435][T10261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.756328][ T28] audit: type=1400 audit(1781954242.572:954): avc: denied { write } for pid=10260 comm="syz.2.2053" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.165400][ T28] audit: type=1400 audit(1781954242.602:955): avc: denied { write } for pid=10260 comm="syz.2.2053" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.271749][ T9449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.307423][ T28] audit: type=1400 audit(1781954243.122:956): avc: denied { write } for pid=10273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.314243][T10283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.365140][T10238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.398940][ T28] audit: type=1400 audit(1781954243.172:957): avc: denied { write } for pid=10286 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.452791][T10283] rock: directory entry would overflow storage [ 180.462673][T10283] rock: sig=0x4f50, size=4, remaining=3 [ 180.498488][T10283] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.543525][T10238] rock: directory entry would overflow storage [ 180.571750][T10238] rock: sig=0x4f50, size=4, remaining=3 [ 180.608743][T10238] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.643427][ T28] audit: type=1400 audit(1781954243.462:958): avc: denied { write } for pid=10294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.720101][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 180.729368][ T28] audit: type=1400 audit(1781954243.532:959): avc: denied { write } for pid=10310 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.775104][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 180.785790][ T28] audit: type=1400 audit(1781954243.602:960): avc: denied { bind } for pid=10317 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.806643][ T28] audit: type=1400 audit(1781954243.602:961): avc: denied { listen } for pid=10317 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.837925][ T28] audit: type=1400 audit(1781954243.602:962): avc: denied { accept } for pid=10317 comm="syz.7.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.899942][T10326] loop4: detected capacity change from 0 to 512 [ 180.923285][T10326] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2067: inode has both inline data and extents flags [ 180.937999][T10326] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.941237][T10326] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2067: couldn't read orphan inode 15 (err -117) [ 180.948492][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.950492][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 180.950509][ C0] EXT4-fs (loop4): initial error at time 1781954243: ext4_orphan_get:1399: inode 15 [ 180.986906][ C0] EXT4-fs (loop4): last error at time 1781954243: ext4_orphan_get:1399: inode 15 [ 180.996604][T10326] loop4: lost filesystem error report for type 5 error -117 [ 180.996834][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.013084][T10326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.066058][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.276076][ T3382] IPVS: starting estimator thread 0... [ 181.392786][T10356] IPVS: using max 2448 ests per chain, 122400 per kthread [ 182.149165][ T5077] IPVS: stop unused estimator thread 0... [ 182.214300][T10376] loop8: detected capacity change from 0 to 2048 [ 182.234700][T10376] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.262616][T10376] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.428761][T10367] loop7: detected capacity change from 0 to 256 [ 182.449916][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2076'. [ 182.910896][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2076'. [ 183.503544][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 183.513420][ T5075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.522769][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 183.537995][ T289] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.558133][ T289] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.602142][ T5075] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.055770][ T5085] bridge_slave_1: left allmulticast mode [ 185.069147][ T5085] bridge_slave_1: left promiscuous mode [ 185.083643][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.100458][ T5085] bridge_slave_0: left allmulticast mode [ 185.117469][ T5085] bridge_slave_0: left promiscuous mode [ 185.123634][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.189043][ T5085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.209746][ T5085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.225619][ T5085] bond0 (unregistering): Released all slaves [ 185.280044][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 185.280061][ T28] audit: type=1400 audit(1781954248.096:971): avc: denied { write } for pid=10440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.321910][ T5085] hsr_slave_0: left promiscuous mode [ 185.342562][ T5085] hsr_slave_1: left promiscuous mode [ 185.342723][ T28] audit: type=1400 audit(1781954248.156:972): avc: denied { write } for pid=10452 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.359894][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.391241][ T5085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.489872][ T3016] 8021q: adding VLAN 0 to HW filter on device eth6 [ 185.685386][ T28] audit: type=1400 audit(1781954248.506:973): avc: denied { mounton } for pid=10463 comm="syz.7.2104" path="/249/file0" dev="proc" ino=32681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 185.728276][ T28] audit: type=1400 audit(1781954248.546:974): avc: denied { unmount } for pid=6305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.805120][ T28] audit: type=1400 audit(1781954248.626:975): avc: denied { write } for pid=10455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.885510][ T28] audit: type=1400 audit(1781954248.706:976): avc: denied { write } for pid=10476 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.063047][ T3016] 8021q: adding VLAN 0 to HW filter on device eth7 [ 186.181673][ T35] kernel read not supported for file /vcs (pid: 35 comm: kworker/1:1) [ 186.282600][ T28] audit: type=1400 audit(1781954249.066:977): avc: denied { write } for pid=10488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.331158][ T28] audit: type=1400 audit(1781954249.136:978): avc: denied { write } for pid=10501 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.376763][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 186.728697][ T28] audit: type=1400 audit(1781954249.546:979): avc: denied { write } for pid=10505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.866884][ T28] audit: type=1400 audit(1781954249.686:980): avc: denied { write } for pid=10516 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.974009][ T3016] 8021q: adding VLAN 0 to HW filter on device eth8 [ 187.563972][T10533] loop7: detected capacity change from 0 to 128 [ 187.783632][T10533] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.820438][T10524] loop8: detected capacity change from 0 to 512 [ 188.218040][T10551] loop4: detected capacity change from 0 to 512 [ 188.242612][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 188.269950][T10551] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.2123: bit already cleared for inode 11 [ 188.281163][T10551] loop4: lost filesystem error report for type 5 error -117 [ 188.282596][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 188.283133][T10551] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 188.289943][ C1] EXT4-fs (loop4): initial error at time 1781954251: ext4_free_inode:356 [ 188.313386][ C1] EXT4-fs (loop4): last error at time 1781954251: ext4_free_inode:356 [ 188.331180][T10556] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 188.331974][T10551] loop4: lost filesystem error report for type 5 error -117 [ 188.340033][T10551] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 188.383594][T10551] loop4: lost filesystem error report for type 5 error -117 [ 188.383776][T10551] EXT4-fs (loop4): 1 orphan inode deleted [ 188.436167][T10551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.454935][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2125'. [ 188.464883][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.507253][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.541990][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.014953][T10597] loop4: detected capacity change from 0 to 512 [ 189.039239][T10597] EXT4-fs: inline encryption not supported [ 189.061555][T10597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.072945][T10597] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.114862][T10597] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2142: Failed to acquire dquot type 1 [ 189.166131][T10597] loop4: lost filesystem error report for type 5 error -5 [ 189.166449][T10597] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 189.173758][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 189.173784][ C1] EXT4-fs (loop4): initial error at time 1781954251: ext4_acquire_dquot:7041 [ 189.173810][ C1] EXT4-fs (loop4): last error at time 1781954251: ext4_acquire_dquot:7041 [ 189.206244][T10597] block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 189.217929][T10597] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.2142: corrupted inode contents [ 189.233713][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.234383][T10597] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #12: comm syz.4.2142: mark_inode_dirty error [ 189.255369][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.256042][T10597] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.2142: corrupted inode contents [ 189.277557][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.277766][T10597] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.2142: mark_inode_dirty error [ 189.298670][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.313631][T10597] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.2142: corrupted inode contents [ 189.337285][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.337515][T10597] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 189.357309][T10597] loop4: lost filesystem error report for type 5 error -117 [ 189.358052][T10597] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.2142: corrupted inode contents [ 189.380313][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.382844][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.404039][T10597] EXT4-fs error (device loop4): ext4_truncate:4691: inode #12: comm syz.4.2142: mark_inode_dirty error [ 189.415380][T10597] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.416481][T10597] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 189.428421][T10630] netlink: 'syz.7.2138': attribute type 1 has an invalid length. [ 189.434953][T10597] loop4: lost filesystem error report for type 5 error -117 [ 189.446920][T10597] EXT4-fs (loop4): 1 truncate cleaned up [ 189.461213][T10597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.503110][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.515832][T10615] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.524230][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.531815][T10615] bridge_slave_0: entered allmulticast mode [ 189.541212][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2139'. [ 189.551025][T10615] bridge_slave_0: entered promiscuous mode [ 189.560682][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.577105][T10615] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.584277][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.591543][T10615] bridge_slave_1: entered allmulticast mode [ 189.598879][T10615] bridge_slave_1: entered promiscuous mode [ 189.616494][T10615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.629058][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.642025][T10615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.668869][T10615] team0: Port device team_slave_0 added [ 189.704648][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.731654][T10615] team0: Port device team_slave_1 added [ 189.771287][T10615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.778375][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.805639][T10615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.817213][T10615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.824455][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.850454][T10615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.900012][T10615] hsr_slave_0: entered promiscuous mode [ 189.906205][T10615] hsr_slave_1: entered promiscuous mode [ 189.912155][T10615] debugfs: 'hsr0' already exists in 'hsr' [ 189.918098][T10615] Cannot create hsr debugfs directory [ 189.946763][ T49] bridge_slave_1: left allmulticast mode [ 189.955078][ T49] bridge_slave_1: left promiscuous mode [ 189.960976][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.969307][ T49] bridge_slave_0: left allmulticast mode [ 189.975365][ T49] bridge_slave_0: left promiscuous mode [ 189.981230][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.192052][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.216111][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.239339][ T49] bond0 (unregistering): Released all slaves [ 190.264731][ T3016] 8021q: adding VLAN 0 to HW filter on device eth9 [ 190.276948][T10667] loop8: detected capacity change from 0 to 164 [ 190.309609][ T49] hsr_slave_0: left promiscuous mode [ 190.324063][T10683] loop2: detected capacity change from 0 to 512 [ 190.331022][ T49] hsr_slave_1: left promiscuous mode [ 190.337068][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.345475][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.353320][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.361064][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.382612][T10685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.385960][T10667] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.395373][T10685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.413394][T10683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.428743][ T49] veth1_macvtap: left promiscuous mode [ 190.434522][ T49] veth0_macvtap: left promiscuous mode [ 190.440409][ T49] veth1_vlan: left promiscuous mode [ 190.441315][T10683] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.456459][ T49] veth0_vlan: left promiscuous mode [ 190.479542][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 190.479561][ T28] audit: type=1400 audit(1781954253.296:988): avc: denied { write } for pid=10681 comm="syz.2.2159" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.599151][T10667] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.618593][ T49] team0 (unregistering): Port device team_slave_1 removed [ 190.641951][ T823] IPVS: starting estimator thread 0... [ 190.649522][T10693] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.673087][ T49] team0 (unregistering): Port device team_slave_0 removed [ 190.695626][T10693] rock: directory entry would overflow storage [ 190.698421][T10667] rock: directory entry would overflow storage [ 190.702273][ T9449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.702976][T10693] rock: sig=0x4f50, size=4, remaining=3 [ 190.702996][T10693] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 190.743461][T10667] rock: sig=0x4f50, size=4, remaining=3 [ 190.752826][T10692] IPVS: using max 2496 ests per chain, 124800 per kthread [ 190.774117][T10667] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 190.981307][ T28] audit: type=1400 audit(1781954253.796:989): avc: denied { write } for pid=10700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.030129][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2158'. [ 191.051982][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2158'. [ 191.060306][ T28] audit: type=1400 audit(1781954253.876:990): avc: denied { write } for pid=10722 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.102564][ T5103] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.126140][ T3016] 8021q: adding VLAN 0 to HW filter on device eth10 [ 191.139056][ T5103] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.153923][ T5103] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.192767][ T5103] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.293502][ T28] audit: type=1400 audit(1781954254.116:991): avc: denied { write } for pid=10733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.339643][ T28] audit: type=1400 audit(1781954254.156:992): avc: denied { write } for pid=10747 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.416964][ T3016] 8021q: adding VLAN 0 to HW filter on device eth11 [ 191.559822][ T28] audit: type=1400 audit(1781954254.376:993): avc: denied { write } for pid=10754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.649092][ T28] audit: type=1400 audit(1781954254.466:994): avc: denied { write } for pid=10783 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.739743][ T3016] 8021q: adding VLAN 0 to HW filter on device eth12 [ 191.820303][T10615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.841928][T10615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.872300][T10793] loop7: detected capacity change from 0 to 512 [ 191.873636][T10615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.927812][T10793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.952289][T10615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.971779][T10793] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.973173][T10615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.992005][T10615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.002145][T10615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.026802][T10615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.057618][ T6305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.083973][T10786] loop4: detected capacity change from 0 to 32768 [ 192.131912][T10615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.139202][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.150020][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.160597][T10786] loop4: p1 p3 < > [ 192.189087][ T28] audit: type=1400 audit(1781954255.006:995): avc: denied { write } for pid=10805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.216893][T10615] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.244483][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 192.255514][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 192.265572][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.272677][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.311876][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.317851][ T28] audit: type=1400 audit(1781954255.126:996): avc: denied { write } for pid=10826 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.319019][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.641556][T10615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.649591][ T28] audit: type=1400 audit(1781954255.466:997): avc: denied { write } for pid=10836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.812287][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'. [ 192.829435][T10615] veth0_vlan: entered promiscuous mode [ 192.852352][T10615] veth1_vlan: entered promiscuous mode [ 192.926944][T10615] veth0_macvtap: entered promiscuous mode [ 192.949538][T10615] veth1_macvtap: entered promiscuous mode [ 192.994093][T10615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.019186][T10615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.054892][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.069619][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 193.073080][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.123141][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.141315][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.151186][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2190'. [ 193.184887][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2190'. [ 194.321596][T10953] loop3: detected capacity change from 0 to 164 [ 194.590962][T10953] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.718028][T10953] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.769690][T10996] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.781753][T10996] rock: directory entry would overflow storage [ 194.788057][T10996] rock: sig=0x4f50, size=4, remaining=3 [ 194.798510][T10996] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 194.802366][T10953] rock: directory entry would overflow storage [ 194.864544][T10953] rock: sig=0x4f50, size=4, remaining=3 [ 194.875850][T10953] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 195.097997][T11006] loop8: detected capacity change from 0 to 4096 [ 195.271165][ T9] IPVS: starting estimator thread 0... [ 195.282838][T11018] loop8: detected capacity change from 0 to 1024 [ 195.322460][T11018] xt_hashlimit: size too large, truncated to 1048576 [ 195.373880][T11017] IPVS: using max 2640 ests per chain, 132000 per kthread [ 195.420834][ T5077] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.689374][T10918] loop4: detected capacity change from 0 to 1764 [ 196.435682][T11038] loop2: detected capacity change from 0 to 164 [ 196.508507][T11053] syzkaller0: entered promiscuous mode [ 196.518755][T11053] syzkaller0: entered allmulticast mode [ 196.714312][T11038] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.813261][T11069] xt_hashlimit: size too large, truncated to 1048576 [ 196.905327][T11038] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.943000][T11074] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.943477][T11074] rock: directory entry would overflow storage [ 196.943570][T11074] rock: sig=0x4f50, size=4, remaining=3 [ 196.943585][T11074] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.006058][T11038] rock: directory entry would overflow storage [ 197.017243][T11038] rock: sig=0x4f50, size=4, remaining=3 [ 197.024228][T11038] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.071470][T11078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11078 comm=syz.3.2228 [ 197.095412][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2228'. [ 197.472617][ T9434] Bluetooth: hci0: command 0x1003 tx timeout [ 197.473115][ T3666] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.517141][T11102] loop4: detected capacity change from 0 to 128 [ 197.548092][T11102] EXT4-fs: Ignoring removed nobh option [ 197.588957][T11102] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.622165][T11102] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.638240][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 197.638270][ T28] audit: type=1400 audit(1781954260.456:1011): avc: denied { write } for pid=11101 comm="syz.4.2239" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.777500][ T7616] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.397576][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2248'. [ 198.553163][ T28] audit: type=1326 audit(1781954261.366:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.595990][ T28] audit: type=1326 audit(1781954261.366:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.625085][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'. [ 198.636572][ T28] audit: type=1326 audit(1781954261.366:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.655121][T11111] loop7: detected capacity change from 0 to 164 [ 198.670574][ T28] audit: type=1326 audit(1781954261.366:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.670609][ T28] audit: type=1326 audit(1781954261.366:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.670636][ T28] audit: type=1326 audit(1781954261.366:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.670665][ T28] audit: type=1326 audit(1781954261.366:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.670768][ T28] audit: type=1326 audit(1781954261.366:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 198.670797][ T28] audit: type=1326 audit(1781954261.366:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.2251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec77cce59 code=0x7ffc0000 [ 199.129948][T11157] loop3: detected capacity change from 0 to 512 [ 199.163051][T11111] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 199.185690][T11157] FAT-fs (loop3): Directory bread(block 199916) failed [ 199.185718][T11157] FAT-fs (loop3): Directory bread(block 199917) failed [ 199.185774][T11157] FAT-fs (loop3): Directory bread(block 199918) failed [ 199.185794][T11157] FAT-fs (loop3): Directory bread(block 199919) failed [ 199.185814][T11157] FAT-fs (loop3): Directory bread(block 199920) failed [ 199.185833][T11157] FAT-fs (loop3): Directory bread(block 199921) failed [ 199.185911][T11157] FAT-fs (loop3): Directory bread(block 199922) failed [ 199.185931][T11157] FAT-fs (loop3): Directory bread(block 199923) failed [ 199.224013][T11146] FAT-fs (loop3): Directory bread(block 199916) failed [ 199.286277][T11146] FAT-fs (loop3): Directory bread(block 199917) failed [ 199.356287][T11111] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 199.422842][T11164] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 199.513827][T11111] rock: directory entry would overflow storage [ 199.548412][T11164] rock: directory entry would overflow storage [ 199.566009][T11164] rock: sig=0x4f50, size=4, remaining=3 [ 199.572400][T11111] rock: sig=0x4f50, size=4, remaining=3 [ 199.627584][T11164] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 199.666635][T11111] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.347386][T11208] loop3: detected capacity change from 0 to 164 [ 201.556651][T11208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.743290][T11208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.776500][T11262] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.797534][T11262] rock: directory entry would overflow storage [ 201.805751][T11208] rock: directory entry would overflow storage [ 201.825109][T11264] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2302'. [ 201.837412][T11262] rock: sig=0x4f50, size=4, remaining=3 [ 201.843757][T11208] rock: sig=0x4f50, size=4, remaining=3 [ 201.852646][T11262] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.866627][T11208] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 202.015847][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2306'. [ 202.029915][T11279] loop8: detected capacity change from 0 to 512 [ 202.071729][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 202.671368][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2318'. [ 203.368987][T11303] loop3: detected capacity change from 0 to 256 [ 203.469723][T11329] loop4: detected capacity change from 0 to 128 [ 203.545700][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 203.545718][ T28] audit: type=1400 audit(1781954266.366:1030): avc: denied { write } for pid=11324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.631380][ T28] audit: type=1400 audit(1781954266.446:1031): avc: denied { write } for pid=11337 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.828542][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 203.867459][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2326'. [ 204.436549][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 204.488134][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 204.859594][T11358] loop7: detected capacity change from 0 to 512 [ 204.986204][ T28] audit: type=1400 audit(1781954267.806:1032): avc: denied { write } for pid=11386 comm="syz.8.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.043943][ T28] audit: type=1400 audit(1781954267.836:1033): avc: denied { setopt } for pid=11386 comm="syz.8.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.065050][T11358] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 205.084824][T11358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 205.087673][ T28] audit: type=1400 audit(1781954267.856:1034): avc: denied { write } for pid=11374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.103875][ T28] audit: type=1400 audit(1781954267.926:1035): avc: denied { write } for pid=11394 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.148461][T11358] System zones: 0-1, 15-15, 18-18, 34-34 [ 205.185067][T11358] EXT4-fs (loop7): orphan cleanup on readonly fs [ 205.200279][T11358] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 205.223222][T11358] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.261313][T11358] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 205.307644][T11358] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2331: bad orphan inode 16 [ 205.337163][T11358] loop7: lost filesystem error report for type 5 error -117 [ 205.341472][T11358] ext4_test_bit(bit=15, block=18) = 1 [ 205.343089][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 205.343139][ C1] EXT4-fs (loop7): initial error at time 1781954268: ext4_orphan_get:1425 [ 205.343238][ C1] EXT4-fs (loop7): last error at time 1781954268: ext4_orphan_get:1425 [ 205.349905][ T28] audit: type=1400 audit(1781954268.166:1036): avc: denied { write } for pid=11399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.353797][T11358] is_bad_inode(inode)=0 [ 205.384594][ T28] audit: type=1400 audit(1781954268.206:1037): avc: denied { write } for pid=11412 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.395205][T11358] NEXT_ORPHAN(inode)=0 [ 205.454669][T11358] max_ino=32 [ 205.460690][T11358] i_nlink=2 [ 205.496862][T11358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.595167][ T28] audit: type=1400 audit(1781954268.416:1038): avc: denied { write } for pid=11415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.780816][ T6305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.913371][ T3382] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 207.947743][ T3382] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.991379][T11451] fido_id[11451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.158992][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2357'. [ 208.299058][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2362'. [ 208.483861][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 208.708581][T11478] loop4: detected capacity change from 0 to 164 [ 208.853820][T11478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 208.967410][T11478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.018757][T11485] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.039242][T11478] rock: directory entry would overflow storage [ 209.040322][T11485] rock: directory entry would overflow storage [ 209.065725][T11478] rock: sig=0x4f50, size=4, remaining=3 [ 209.067471][T11485] rock: sig=0x4f50, size=4, remaining=3 [ 209.067490][T11485] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 209.123170][T11478] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 209.416473][T11504] loop4: detected capacity change from 0 to 128 [ 209.437262][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2374'. [ 209.449312][T11504] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 209.468669][T11507] netlink: 'syz.8.2374': attribute type 7 has an invalid length. [ 209.479845][T11507] netlink: 'syz.8.2374': attribute type 8 has an invalid length. [ 209.508482][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2374'. [ 209.533879][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2374'. [ 209.561900][ T3422] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 209.578576][T11510] netlink: 'syz.8.2374': attribute type 7 has an invalid length. [ 209.608641][T11507] erspan0: entered promiscuous mode [ 209.627947][T11510] netlink: 'syz.8.2374': attribute type 8 has an invalid length. [ 209.650528][T11507] gretap0: entered promiscuous mode [ 209.666208][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2374'. [ 210.010696][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 210.010713][ T28] audit: type=1400 audit(1781954272.826:1041): avc: denied { setopt } for pid=11514 comm="syz.2.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.454337][T11507] erspan0: left promiscuous mode [ 210.462730][T11507] gretap0: left promiscuous mode [ 210.486742][T11510] erspan0: entered promiscuous mode [ 210.494100][T11510] gretap0: entered promiscuous mode [ 210.500950][T11510] erspan0: left promiscuous mode [ 210.506886][T11510] gretap0: left promiscuous mode [ 210.516828][T11524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2381'. [ 210.547891][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.555113][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.593925][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.615027][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.659816][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.683945][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.700825][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.715454][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.858011][T11546] netlink: 'syz.3.2389': attribute type 11 has an invalid length. [ 210.877068][T11546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2389'. [ 210.967009][T11555] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2393'. [ 211.896121][ T28] audit: type=1400 audit(1781954274.716:1042): avc: denied { setopt } for pid=11579 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.934748][ T28] audit: type=1400 audit(1781954274.746:1043): avc: denied { read } for pid=11579 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.021575][ T28] audit: type=1326 audit(1781954274.836:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.050329][T11595] netlink: 'syz.4.2410': attribute type 11 has an invalid length. [ 212.094897][ T28] audit: type=1326 audit(1781954274.836:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.135395][ T28] audit: type=1326 audit(1781954274.836:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.163020][ T28] audit: type=1326 audit(1781954274.836:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.191993][ T28] audit: type=1326 audit(1781954274.836:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.223027][ T28] audit: type=1326 audit(1781954274.836:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.251172][ T28] audit: type=1326 audit(1781954274.836:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.7.2407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 212.335511][T11616] loop3: detected capacity change from 0 to 128 [ 212.863811][T11631] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.878481][T11631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.886000][T11631] IPv6: NLM_F_CREATE should be set when creating new route [ 212.905483][T11631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.912918][T11631] IPv6: NLM_F_CREATE should be set when creating new route [ 213.276001][T11635] __nla_validate_parse: 7 callbacks suppressed [ 213.276032][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.305634][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.315482][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.334685][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.344793][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.380307][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.389947][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.426493][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.436091][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.525615][T11637] loop3: detected capacity change from 0 to 512 [ 213.567104][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 213.718537][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.726799][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.826295][T11637] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 213.841712][T11637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 213.853333][T11637] System zones: 0-1, 15-15, 18-18, 34-34 [ 213.872020][T11637] EXT4-fs (loop3): orphan cleanup on readonly fs [ 213.895081][T11637] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 213.915942][T11637] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 213.939912][T11637] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2427: bad orphan inode 16 [ 213.948852][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.953903][T11637] loop3: lost filesystem error report for type 5 error -117 [ 213.960380][ T9434] Bluetooth: hci0: command 0x1003 tx timeout [ 213.965851][ T3666] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.968386][T11637] ext4_test_bit(bit=15, block=18) = 1 [ 213.973738][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 213.973760][ C0] EXT4-fs (loop3): initial error at time 1781954276: ext4_orphan_get:1425 [ 213.973804][ C0] EXT4-fs (loop3): last error at time 1781954276: ext4_orphan_get:1425 [ 213.982989][T11635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.984947][T11637] is_bad_inode(inode)=0 [ 214.092058][T11637] NEXT_ORPHAN(inode)=0 [ 214.100118][T11637] max_ino=32 [ 214.114980][T11637] i_nlink=2 [ 214.184915][ T5075] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.200719][ T5075] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.219671][ T5075] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.238593][ T5075] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.246380][T11637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.270832][ T5075] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.288383][ T5075] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.540894][T10615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.260555][T11682] loop2: detected capacity change from 0 to 512 [ 215.313366][T11682] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.363054][T11682] EXT4-fs (loop2): 1 truncate cleaned up [ 215.390490][T11682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.455762][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 215.455781][ T28] audit: type=1400 audit(1781954278.266:1067): avc: denied { write } for pid=11681 comm="syz.2.2445" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.596978][T11701] loop7: detected capacity change from 0 to 512 [ 215.650807][ T9449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.694021][T11701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 215.729609][T11701] ext4 filesystem being mounted at /324/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.746615][T11701] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 215.772287][T11701] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 215.833822][T11701] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2452: Failed to acquire dquot type 0 [ 216.044723][T11713] program syz.8.2456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.055411][T11711] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.505545][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.524987][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.538737][T11778] bridge_slave_0: entered allmulticast mode [ 218.567208][T11778] bridge_slave_0: entered promiscuous mode [ 218.588542][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.615138][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.624148][T11778] bridge_slave_1: entered allmulticast mode [ 218.633664][T11778] bridge_slave_1: entered promiscuous mode [ 218.710009][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.721849][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.743066][T11778] team0: Port device team_slave_0 added [ 218.750231][T11778] team0: Port device team_slave_1 added [ 218.767471][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.774590][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.801055][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.812705][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.819685][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.884298][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.930152][T11778] hsr_slave_0: entered promiscuous mode [ 218.947209][T11778] hsr_slave_1: entered promiscuous mode [ 218.956351][T11778] debugfs: 'hsr0' already exists in 'hsr' [ 218.974172][T11778] Cannot create hsr debugfs directory [ 219.089996][T11778] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.146455][T11829] bridge1: entered promiscuous mode [ 219.168430][T11778] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.244189][T11836] loop3: detected capacity change from 0 to 512 [ 219.262965][T11778] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.294129][T11836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.307177][T11836] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.327659][T11836] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 219.338725][T11836] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 219.348902][T11836] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2501: Failed to acquire dquot type 0 [ 219.374751][T11778] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.374949][T11836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 219.428468][T11732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.490916][T11778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.503086][T11845] loop4: detected capacity change from 0 to 512 [ 219.504813][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.531130][T11845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.543581][T11778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.570200][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.583629][T11778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.597588][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.607242][T11845] EXT4-fs (loop4): 1 truncate cleaned up [ 219.608599][T11778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.613414][T11845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.641515][T11778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.679537][ T28] audit: type=1400 audit(1781954282.496:1068): avc: denied { write } for pid=11844 comm="syz.4.2504" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.783909][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.795562][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.806389][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.813541][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.834352][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.841456][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.852934][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.155024][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.204603][T11889] __nla_validate_parse: 153 callbacks suppressed [ 220.204685][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2515'. [ 220.353464][T11778] veth0_vlan: entered promiscuous mode [ 220.367254][T11778] veth1_vlan: entered promiscuous mode [ 220.379848][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 220.398491][T11778] veth0_macvtap: entered promiscuous mode [ 220.410641][T11778] veth1_macvtap: entered promiscuous mode [ 220.438218][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.449877][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.472013][ T3422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.484209][ T3422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.500322][ T3422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.509209][ T3422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.564379][T11927] loop8: detected capacity change from 0 to 512 [ 220.575454][T11927] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 220.599274][T11927] EXT4-fs: error: could not find journal device path [ 220.781860][ T28] audit: type=1400 audit(1781954283.596:1069): avc: denied { create } for pid=11933 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.252405][T11972] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 222.862935][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 222.954303][ T28] audit: type=1400 audit(1781954285.776:1070): avc: denied { ioctl } for pid=12025 comm="syz.5.2566" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 223.187235][T12041] loop8: detected capacity change from 0 to 128 [ 223.284202][T12043] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 223.347728][T12045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 223.651544][T12053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12053 comm=syz.3.2576 [ 223.671877][T12053] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.2576'. [ 223.803943][T12061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.826478][T12061] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.860365][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.955371][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.989802][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.040777][T12061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.055604][T12061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.106867][T12061] veth1_vlan: left promiscuous mode [ 224.133211][T12061] veth0_vlan: left promiscuous mode [ 224.157815][T12061] veth0_vlan: entered promiscuous mode [ 224.191715][T12061] veth1_vlan: entered promiscuous mode [ 224.218880][T12061] veth1_macvtap: left promiscuous mode [ 224.225919][T12061] veth0_macvtap: left promiscuous mode [ 224.236097][T12061] veth0_macvtap: entered promiscuous mode [ 224.249996][T12061] veth1_macvtap: entered promiscuous mode [ 224.278750][T12061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.291164][T12061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.305886][T12061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.327012][T12061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.375007][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.382134][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.403281][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.420494][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.427788][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.582024][ T5077] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.592237][ T5077] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.613048][ T5077] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.622198][ T5077] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.632527][ T3422] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.641954][ T5077] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.642937][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 224.662014][ T5077] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.672432][ T5077] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.685411][ T5077] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.763201][ T3396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.795385][ T5075] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.876952][T12112] loop8: detected capacity change from 0 to 1024 [ 224.895140][T12112] EXT4-fs: Ignoring removed oldalloc option [ 224.912794][T12112] EXT4-fs: Ignoring removed oldalloc option [ 225.170815][T12132] netlink: 'syz.8.2607': attribute type 1 has an invalid length. [ 225.183451][T12132] netlink: 'syz.8.2607': attribute type 4 has an invalid length. [ 225.191375][T12132] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2607'. [ 225.305312][T12139] xt_hashlimit: size too large, truncated to 1048576 [ 225.660526][T12159] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2619'. [ 225.759819][ T28] audit: type=1400 audit(1781954288.576:1071): avc: denied { write } for pid=12167 comm="syz.3.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 225.885652][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.915337][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.142732][ T3382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.453889][T12193] loop8: detected capacity change from 0 to 1024 [ 226.460812][T12193] EXT4-fs: Ignoring removed bh option [ 226.565473][T12191] syzkaller0: entered promiscuous mode [ 226.575776][T12191] syzkaller0: entered allmulticast mode [ 226.699878][T12197] loop8: detected capacity change from 0 to 128 [ 226.725038][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.750876][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.764657][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.786208][T12201] netlink: 'syz.5.2637': attribute type 10 has an invalid length. [ 226.796245][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.814177][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.824856][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.835270][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.845463][T12202] loop8: detected capacity change from 0 to 128 [ 226.884384][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.897242][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2635'. [ 226.921223][T12201] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.929865][T12201] bond0: (slave team0): Enslaving as an active interface with an up link [ 226.976487][T12208] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 226.977701][ T28] audit: type=1400 audit(1781954289.796:1072): avc: denied { mac_admin } for pid=12207 comm="syz.7.2639" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.019073][ T28] audit: type=1400 audit(1781954289.826:1073): avc: denied { relabelto } for pid=12207 comm="syz.7.2639" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 227.103249][ T28] audit: type=1400 audit(1781954289.826:1074): avc: denied { associate } for pid=12207 comm="syz.7.2639" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1920 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 227.153024][ T28] audit: type=1400 audit(1781954289.906:1075): avc: denied { remount } for pid=12211 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.173860][ T28] audit: type=1400 audit(1781954289.906:1076): avc: denied { read } for pid=12207 comm="syz.7.2639" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 227.239564][ T28] audit: type=1400 audit(1781954289.906:1077): avc: denied { open } for pid=12207 comm="syz.7.2639" path="/368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 227.290671][ T28] audit: type=1400 audit(1781954289.926:1078): avc: denied { unlink } for pid=6305 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 227.376750][T12229] RDS: rds_bind could not find a transport for 8775:7300:0:0:e00::, load rds_tcp or rds_rdma? [ 227.423991][T12233] syz_tun: entered allmulticast mode [ 227.445764][T12232] syz_tun: left allmulticast mode [ 227.578172][ T5075] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.674003][ T5075] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.747314][ T5075] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.871366][ T5075] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.020706][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.029504][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.038535][T12246] bridge_slave_0: entered allmulticast mode [ 228.045684][T12246] bridge_slave_0: entered promiscuous mode [ 228.053038][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.060152][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.068036][T12246] bridge_slave_1: entered allmulticast mode [ 228.074899][T12246] bridge_slave_1: entered promiscuous mode [ 228.110416][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.122494][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.173328][T12246] team0: Port device team_slave_0 added [ 228.189519][T12246] team0: Port device team_slave_1 added [ 228.338794][ T5075] bridge_slave_1: left allmulticast mode [ 228.344639][ T5075] bridge_slave_1: left promiscuous mode [ 228.350458][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.364315][ T5075] bridge_slave_0: left allmulticast mode [ 228.370311][ T5075] bridge_slave_0: left promiscuous mode [ 228.376617][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.455737][ T5075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.475543][ T5075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.490691][ T5075] bond0 (unregistering): (slave team0): Releasing backup interface [ 228.678124][ T5075] bond0 (unregistering): Released all slaves [ 228.704571][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.737462][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.789460][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.825545][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.832805][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.846630][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.873018][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.896185][ T5075] hsr_slave_0: left promiscuous mode [ 228.902276][ T5075] hsr_slave_1: left promiscuous mode [ 228.908197][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.916682][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.924814][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.932781][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.953117][ T5075] veth1_macvtap: left promiscuous mode [ 228.959015][ T5075] veth0_macvtap: left promiscuous mode [ 228.965137][ T5075] veth1_vlan: left promiscuous mode [ 228.970701][ T5075] veth0_vlan: left promiscuous mode [ 229.126226][ T5075] team0 (unregistering): Port device team_slave_1 removed [ 229.137607][ T5075] team0 (unregistering): Port device team_slave_0 removed [ 229.244087][T12246] hsr_slave_0: entered promiscuous mode [ 229.256858][ T28] audit: type=1400 audit(1781954292.066:1079): avc: denied { remount } for pid=12331 comm="syz.7.2689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 229.286992][T12246] hsr_slave_1: entered promiscuous mode [ 229.311497][T12246] debugfs: 'hsr0' already exists in 'hsr' [ 229.337807][T12246] Cannot create hsr debugfs directory [ 229.413049][ T28] audit: type=1400 audit(1781954292.236:1080): avc: denied { write } for pid=12337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.513727][ T28] audit: type=1400 audit(1781954292.336:1081): avc: denied { write } for pid=12359 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.573584][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 229.728699][T12367] loop8: detected capacity change from 0 to 1024 [ 229.737206][T12373] netlink: 'syz.4.2697': attribute type 83 has an invalid length. [ 229.991676][T12246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.011852][T12246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.026563][T12246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.037012][T12246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.050421][T12246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.073402][T12246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.082667][T12246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.092836][T12246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.262745][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.273279][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.293705][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.321388][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.328567][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.370802][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.377946][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.679478][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.705522][T12454] xt_hashlimit: size too large, truncated to 1048576 [ 230.872325][T12246] veth0_vlan: entered promiscuous mode [ 230.888695][T12246] veth1_vlan: entered promiscuous mode [ 230.937168][T12246] veth0_macvtap: entered promiscuous mode [ 230.954485][T12246] veth1_macvtap: entered promiscuous mode [ 230.989031][T12480] __nla_validate_parse: 166 callbacks suppressed [ 230.989051][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2713'. [ 231.017261][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.026232][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.065660][ T5103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.074997][ T5103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.093293][ T5103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.103802][ T5103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.150406][ T5075] bridge_slave_1: left allmulticast mode [ 231.157391][ T5075] bridge_slave_1: left promiscuous mode [ 231.163361][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.175362][ T5075] bridge_slave_0: left allmulticast mode [ 231.183884][ T5075] bridge_slave_0: left promiscuous mode [ 231.189949][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.210637][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 231.247632][ T5075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.257195][ T5075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.266383][ T5075] bond0 (unregistering): Released all slaves [ 231.345094][ T5075] hsr_slave_0: left promiscuous mode [ 231.362103][ T5075] hsr_slave_1: left promiscuous mode [ 231.368995][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.376819][ T5075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.497043][ T5075] team0 (unregistering): Port device team_slave_1 removed [ 231.521854][ T5075] team0 (unregistering): Port device team_slave_0 removed [ 231.651459][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 231.871509][T12473] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.889466][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.896933][T12473] bridge_slave_0: entered allmulticast mode [ 231.908751][T12473] bridge_slave_0: entered promiscuous mode [ 231.923815][T12473] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.932728][T12473] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.940371][T12473] bridge_slave_1: entered allmulticast mode [ 231.953710][T12473] bridge_slave_1: entered promiscuous mode [ 231.984419][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 231.984437][ T28] audit: type=1400 audit(1781954294.806:1092): avc: denied { write } for pid=12573 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.985332][T12473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.024780][T12473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.063317][T12473] team0: Port device team_slave_0 added [ 232.071028][T12473] team0: Port device team_slave_1 added [ 232.077655][ T3016] 8021q: adding VLAN 0 to HW filter on device eth6 [ 232.123457][T12473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.135342][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.167119][T12473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.181069][ T5075] IPVS: stop unused estimator thread 0... [ 232.190743][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'. [ 232.226505][T12473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.238119][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.264610][T12473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.298124][T12473] hsr_slave_0: entered promiscuous mode [ 232.304731][T12473] hsr_slave_1: entered promiscuous mode [ 232.310944][T12473] debugfs: 'hsr0' already exists in 'hsr' [ 232.317144][T12473] Cannot create hsr debugfs directory [ 232.347915][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'. [ 232.559802][ T28] audit: type=1400 audit(1781954295.366:1093): avc: denied { write } for pid=12599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.566313][T12594] netlink: 'syz.5.2740': attribute type 3 has an invalid length. [ 232.633229][ T28] audit: type=1400 audit(1781954295.446:1094): avc: denied { write } for pid=12613 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.637460][T12594] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2740'. [ 232.694996][ T3016] 8021q: adding VLAN 0 to HW filter on device eth7 [ 232.962468][ T28] audit: type=1400 audit(1781954295.776:1095): avc: denied { write } for pid=12616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.003721][T12635] : renamed from bond0 [ 233.033533][ T28] audit: type=1400 audit(1781954295.856:1096): avc: denied { write } for pid=12636 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.049459][T12473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 233.081639][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.136803][T12473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 233.159441][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.178437][T12473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 233.250325][ T28] audit: type=1326 audit(1781954296.066:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1b99ce59 code=0x7ffc0000 [ 233.339728][ T28] audit: type=1326 audit(1781954296.066:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1b99ce59 code=0x7ffc0000 [ 233.394520][ T28] audit: type=1326 audit(1781954296.066:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1b99ce59 code=0x7ffc0000 [ 233.444043][ T28] audit: type=1326 audit(1781954296.066:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9e1b99ce59 code=0x7ffc0000 [ 233.480655][ T28] audit: type=1326 audit(1781954296.126:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9e1b95d68e code=0x7ffc0000 [ 233.611450][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.620565][T12473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 233.668136][T12473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.739888][T12473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.805502][T12473] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.833132][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.840350][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.879511][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.886657][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.158296][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2772'. [ 234.172801][T12473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.397108][T12473] veth0_vlan: entered promiscuous mode [ 234.412405][T12473] veth1_vlan: entered promiscuous mode [ 234.435964][T12473] veth0_macvtap: entered promiscuous mode [ 234.447009][T12473] veth1_macvtap: entered promiscuous mode [ 234.460226][T12473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.495818][T12473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.531705][ T5103] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.547788][ T5103] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.580630][ T5103] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.599473][ T5103] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642369][T12773] netlink: 'syz.4.2781': attribute type 2 has an invalid length. [ 234.745037][T12786] netlink: 'syz.4.2781': attribute type 2 has an invalid length. [ 234.767140][T12789] loop8: detected capacity change from 0 to 512 [ 235.987524][T12920] syz_tun: entered allmulticast mode [ 236.014917][T12919] syz_tun: left allmulticast mode [ 236.152297][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2808'. [ 236.262074][T12939] loop4: detected capacity change from 0 to 512 [ 236.296523][T12939] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.325752][T12939] EXT4-fs (loop4): 1 truncate cleaned up [ 236.338347][T12939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.547612][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 236.581420][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.743329][T12970] SELinux: failed to load policy [ 237.166953][T12988] netlink: 1057 bytes leftover after parsing attributes in process `syz.8.2831'. [ 237.322735][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.487128][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2842'. [ 237.528398][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2842'. [ 237.540149][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2842'. [ 237.580862][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 237.580893][ T28] audit: type=1326 audit(1781954300.396:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 237.664073][ T28] audit: type=1326 audit(1781954300.396:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 237.728489][ T28] audit: type=1326 audit(1781954300.436:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 237.798806][ T28] audit: type=1326 audit(1781954300.436:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 237.868802][ T28] audit: type=1326 audit(1781954300.436:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 237.938445][ T28] audit: type=1326 audit(1781954300.436:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 238.011204][ T28] audit: type=1326 audit(1781954300.436:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 238.100839][ T28] audit: type=1326 audit(1781954300.436:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 238.172649][ T28] audit: type=1326 audit(1781954300.436:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 238.225042][ T28] audit: type=1326 audit(1781954300.436:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13018 comm="syz.7.2844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251360ce59 code=0x7ffc0000 [ 238.993205][T13086] loop4: detected capacity change from 0 to 512 [ 239.085435][T13091] loop8: detected capacity change from 0 to 128 [ 239.284634][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.411453][T13086] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2873: inode has both inline data and extents flags [ 239.437049][T13086] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.437207][T13086] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2873: couldn't read orphan inode 15 (err -117) [ 239.446394][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 239.446414][ C1] EXT4-fs (loop4): initial error at time 1781954302: ext4_orphan_get:1399: inode 15 [ 239.446444][ C1] EXT4-fs (loop4): last error at time 1781954302: ext4_orphan_get:1399: inode 15 [ 239.496049][T13088] loop5: detected capacity change from 0 to 512 [ 239.526902][T13088] EXT4-fs: Ignoring removed orlov option [ 239.537488][T13088] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.543629][T13086] loop4: lost filesystem error report for type 5 error -117 [ 239.550023][T13086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.713545][T13088] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2872: corrupted in-inode xattr: e_value size too large [ 239.747948][T13088] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.773314][T13088] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2872: couldn't read orphan inode 15 (err -117) [ 239.785795][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 239.785874][ C0] EXT4-fs (loop5): initial error at time 1781954302: ext4_iget_extra_inode:5180: inode 15 [ 239.786199][ C0] EXT4-fs (loop5): last error at time 1781954302: ext4_iget_extra_inode:5180: inode 15 [ 240.007324][T13088] loop5: lost filesystem error report for type 5 error -117 [ 240.008309][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.263623][T13088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.432028][T13088] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2872'. [ 240.659803][T12246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.110335][T13141] loop8: detected capacity change from 0 to 512 [ 241.390427][T13139] loop4: detected capacity change from 0 to 128 [ 241.821877][T13139] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.848443][T13164] loop5: detected capacity change from 0 to 512 [ 241.865654][T13164] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 241.879883][T13164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 241.901595][T13139] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.920380][T13164] EXT4-fs (loop5): orphan cleanup on readonly fs [ 241.947354][T13164] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.2901: iget: bad i_size value: 12154761577498 [ 241.960435][T13164] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 241.961657][T13164] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2901: couldn't read orphan inode 13 (err -117) [ 241.970876][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 241.970897][ C1] EXT4-fs (loop5): initial error at time 1781954304: ext4_orphan_get:1399: inode 13 [ 241.970926][ C1] EXT4-fs (loop5): last error at time 1781954304: ext4_orphan_get:1399: inode 13 [ 242.008014][T13164] loop5: lost filesystem error report for type 5 error -117 [ 242.010010][T13164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.079403][T13164] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2901: dx entry: limit 65535 != root limit 120 [ 242.129200][T13164] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2901: Corrupt directory, running e2fsck is recommended [ 242.229297][T12246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.259425][ T7616] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.323106][T13183] netlink: 'syz.4.2906': attribute type 27 has an invalid length. [ 242.352920][T13183] : (slave bond_slave_1): Releasing backup interface [ 242.459196][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2908'. [ 242.623250][T13190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13190 comm=syz.4.2909 [ 244.195458][T13221] loop8: detected capacity change from 0 to 512 [ 244.214888][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 244.584594][ T3422] bridge_slave_1: left allmulticast mode [ 244.605432][ T3422] bridge_slave_1: left promiscuous mode [ 244.626478][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.662749][ T3422] bridge_slave_0: left allmulticast mode [ 244.679041][ T3422] bridge_slave_0: left promiscuous mode [ 244.699977][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.867826][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.887413][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.913150][ T3422] bond0 (unregistering): Released all slaves [ 245.015114][ T3422] hsr_slave_0: left promiscuous mode [ 245.038292][ T3422] hsr_slave_1: left promiscuous mode [ 245.067276][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.107048][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.306730][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 245.317325][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 245.317342][ T28] audit: type=1400 audit(1781954308.136:1179): avc: denied { write } for pid=13251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.349389][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 245.378412][ T28] audit: type=1400 audit(1781954308.176:1180): avc: denied { write } for pid=13269 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.519927][ T3016] 8021q: adding VLAN 0 to HW filter on device eth6 [ 245.690653][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2938'. [ 245.741080][T13291] io-wq is not configured for unbound workers [ 245.809845][ T28] audit: type=1400 audit(1781954308.626:1181): avc: denied { write } for pid=13282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.901872][ T28] audit: type=1400 audit(1781954308.706:1182): avc: denied { write } for pid=13303 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.937564][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 246.066714][ T28] audit: type=1400 audit(1781954308.886:1183): avc: denied { write } for pid=13312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.114338][ T28] audit: type=1400 audit(1781954308.936:1184): avc: denied { write } for pid=13323 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.152703][ T3016] 8021q: adding VLAN 0 to HW filter on device eth7 [ 246.274725][ T28] audit: type=1400 audit(1781954309.096:1185): avc: denied { write } for pid=13327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.320560][ T28] audit: type=1400 audit(1781954309.136:1186): avc: denied { write } for pid=13338 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.359710][ T3016] 8021q: adding VLAN 0 to HW filter on device eth8 [ 246.860726][T13378] loop5: detected capacity change from 0 to 1024 [ 246.891488][ T28] audit: type=1326 audit(1781954309.706:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13381 comm="syz.4.2963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ccf9ce59 code=0x7ffc0000 [ 246.922359][T13378] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 246.942982][ T28] audit: type=1326 audit(1781954309.706:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13381 comm="syz.4.2963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ccf9ce59 code=0x7ffc0000 [ 246.971764][T13378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.029046][T12246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.084173][T13402] loop5: detected capacity change from 0 to 1024 [ 247.097188][T13402] EXT4-fs: Ignoring removed bh option [ 247.129323][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2972'. [ 247.129332][T13402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.161729][T13406] team0: Port device team_slave_0 removed [ 247.367036][T12246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.549053][T13428] loop5: detected capacity change from 0 to 512 [ 247.665382][T13435] ipip0: entered promiscuous mode [ 247.966487][T13413] loop8: detected capacity change from 0 to 128 [ 248.285413][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2997'. [ 248.350996][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3001'. [ 248.407942][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2997'. [ 248.419165][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'. [ 250.201324][T13548] loop5: detected capacity change from 0 to 128 [ 250.391560][T13554] syzkaller0: entered promiscuous mode [ 250.406649][T13554] syzkaller0: entered allmulticast mode [ 250.460979][T13564] netlink: 'syz.7.3037': attribute type 3 has an invalid length. [ 250.482920][T13564] netlink: 'syz.7.3037': attribute type 3 has an invalid length. [ 250.646323][T13568] netlink: 'syz.5.3039': attribute type 1 has an invalid length. [ 250.685126][T13568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.771896][T13568] bond1: (slave veth0_to_bond): making interface the new active one [ 250.809645][T13568] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 250.858643][T13573] bond1: entered promiscuous mode [ 250.884213][T13573] veth0_to_bond: entered promiscuous mode [ 250.900745][T13573] bond1: entered allmulticast mode [ 250.914826][T13573] veth0_to_bond: entered allmulticast mode [ 251.072403][T13545] loop8: detected capacity change from 0 to 1024 [ 251.145938][T13577] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 251.236119][T13585] netlink: 'syz.7.3044': attribute type 39 has an invalid length. [ 251.352319][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 251.352339][ T28] audit: type=1400 audit(1781954314.166:1284): avc: denied { execmod } for pid=13592 comm="syz.3.3049" path="/190/blkio.bfq.io_merged" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 251.574000][T13615] loop5: detected capacity change from 0 to 512 [ 251.643158][T13615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.681608][T13615] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.700268][ T28] audit: type=1400 audit(1781954314.516:1285): avc: denied { write } for pid=13610 comm="syz.5.3057" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.874625][T13634] loop4: detected capacity change from 0 to 1024 [ 251.885141][T13634] EXT4-fs: Ignoring removed bh option [ 251.891516][T13636] xt_hashlimit: size too large, truncated to 1048576 [ 251.919694][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3056'. [ 251.938507][T13634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.966926][ T28] audit: type=1400 audit(1781954314.786:1286): avc: denied { write } for pid=13633 comm="syz.4.3065" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.015398][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.263710][T13649] loop4: detected capacity change from 0 to 1024 [ 252.289748][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3072'. [ 252.306890][T13649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.310259][T13660] team1: entered promiscuous mode [ 252.321661][T13649] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.337770][T13660] team1: entered allmulticast mode [ 252.340866][ T28] audit: type=1400 audit(1781954315.156:1287): avc: denied { write } for pid=13648 comm="syz.4.3068" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.359149][T13660] 8021q: adding VLAN 0 to HW filter on device team1 [ 252.372955][T13649] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.3068: lblock 3 mapped to illegal pblock 3 (length 1) [ 252.393062][T12246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.406097][T13649] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 252.450825][T13649] EXT4-fs (loop4): This should not happen!! Data will be lost [ 252.450825][T13649] [ 252.552791][T13669] batman_adv: batadv0: Adding interface: dummy0 [ 252.559110][T13669] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.614885][ T28] audit: type=1400 audit(1781954315.426:1288): avc: denied { ioctl } for pid=13668 comm="syz.7.3076" path="socket:[48803]" dev="sockfs" ino=48803 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 252.640355][T13669] batman_adv: batadv0: Interface activated: dummy0 [ 252.655293][T13670] batadv0: mtu less than device minimum [ 252.661586][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.672663][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.683717][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.694811][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.705810][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.716550][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.727602][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.738734][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.749622][T13670] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.030810][ T7616] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 253.044064][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.124899][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3084'. [ 253.466191][T13723] netlink: 'syz.7.3098': attribute type 3 has an invalid length. [ 253.474219][T13723] netlink: 'syz.7.3098': attribute type 3 has an invalid length. [ 253.598347][T13734] loop8: detected capacity change from 0 to 128 [ 253.934227][ T28] audit: type=1400 audit(1781954316.756:1289): avc: denied { read } for pid=13737 comm="syz.8.3104" path="socket:[49745]" dev="sockfs" ino=49745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.344721][T13752] loop4: detected capacity change from 0 to 256 [ 254.371475][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 254.435203][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 254.456731][ T28] audit: type=1400 audit(1781954317.276:1290): avc: denied { read } for pid=13761 comm="syz.5.3113" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.503491][ T28] audit: type=1400 audit(1781954317.276:1291): avc: denied { open } for pid=13761 comm="syz.5.3113" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.596719][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.774741][T13770] loop8: detected capacity change from 0 to 512 [ 254.820233][ T28] audit: type=1400 audit(1781954317.636:1292): avc: denied { watch watch_reads } for pid=13777 comm="syz.8.3120" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 255.471686][T13780] 8021q: adding VLAN 0 to HW filter on device  [ 255.481780][T13780] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.504248][T13780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.577586][T13780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.625997][T13780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.667185][T13780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.693343][T13780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.744128][T13780] veth1_vlan: left promiscuous mode [ 255.808667][T13780] veth0_vlan: left promiscuous mode [ 255.814928][T13780] veth0_vlan: entered promiscuous mode [ 255.823834][T13780] veth1_vlan: entered promiscuous mode [ 255.832331][T13780] veth1_macvtap: left promiscuous mode [ 255.839040][T13780] veth0_macvtap: left promiscuous mode [ 255.845592][T13780] veth0_macvtap: entered promiscuous mode [ 255.852395][T13780] veth1_macvtap: entered promiscuous mode [ 255.862405][T13780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.871051][T13780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.878218][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.887771][T13780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.896790][T13780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.907219][T13780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.931776][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.938889][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.955891][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.963014][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.057722][T13804] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3128'. [ 256.070445][ T5075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.080191][ T5075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.096334][ T5075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.130112][ T5075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.169230][ T28] audit: type=1400 audit(1781954318.986:1293): avc: denied { name_bind } for pid=13815 comm="syz.5.3136" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 256.197669][T13820] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3137'. [ 256.469398][ T28] audit: type=1400 audit(1781954319.286:1294): avc: denied { watch } for pid=13825 comm="syz.5.3139" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 256.537564][T13834] loop5: detected capacity change from 0 to 256 [ 256.558393][T13834] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.665888][ T28] audit: type=1400 audit(1781954319.486:1295): avc: denied { write } for pid=13839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.692117][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 256.714047][T13851] FAT-fs (loop5): Filesystem has been set read-only [ 256.741043][ T28] audit: type=1400 audit(1781954319.556:1296): avc: denied { write } for pid=13858 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.766188][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.805584][ T28] audit: type=1400 audit(1781954319.556:1297): avc: denied { shutdown } for pid=13833 comm="syz.5.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.829511][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.838512][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.846975][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.857983][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.866420][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.874692][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.893532][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.922686][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.931260][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.941534][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.951879][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.967364][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.975756][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.983927][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.991906][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 256.999969][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.008115][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.016459][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.024591][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.033102][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.041217][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.056680][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.059923][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3150'. [ 257.065164][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.082957][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.090910][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.103276][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.112042][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.120968][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.131030][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.140034][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.148511][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.160306][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.170392][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.178518][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.186591][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.194920][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.203060][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.211521][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.219917][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.228019][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.236249][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.244484][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.252551][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.260535][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.268520][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.276638][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.284695][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.292710][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.300612][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.308600][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.316701][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.325125][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.333194][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.341510][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.349522][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.357505][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.365482][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.373514][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.381448][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.391409][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.404199][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.412374][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.420797][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.429183][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.437682][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.459508][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.468657][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.485274][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.496011][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.500911][T13883] loop4: detected capacity change from 0 to 512 [ 257.521127][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.530630][T13883] EXT4-fs: Ignoring removed i_version option [ 257.538442][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.550248][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.559012][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.566060][T13883] EXT4-fs: Ignoring removed nobh option [ 257.577498][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.595720][ T28] audit: type=1400 audit(1781954320.416:1298): avc: denied { write } for pid=13872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.596576][T13883] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.643490][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.656486][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.674044][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.677908][ T28] audit: type=1400 audit(1781954320.496:1299): avc: denied { write } for pid=13893 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.684548][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.728160][T13883] EXT4-fs (loop4): 1 truncate cleaned up [ 257.735325][T13883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.754026][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.768390][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.776767][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.786077][T13901] loop8: detected capacity change from 0 to 128 [ 257.794360][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.802413][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.810795][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.818984][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.827546][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.835748][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.844026][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.851978][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.856012][ T28] audit: type=1400 audit(1781954320.676:1300): avc: denied { write } for pid=13882 comm="syz.4.3155" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.860344][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.890421][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.898737][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.909900][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.937502][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.960276][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 257.971712][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3159'. [ 257.988568][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.005525][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.019243][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.027674][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.038716][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.055055][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.064764][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.084574][ T28] audit: type=1400 audit(1781954320.906:1301): avc: denied { write } for pid=13906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.107902][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.123434][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.133501][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.138126][ T28] audit: type=1400 audit(1781954320.906:1302): avc: denied { write } for pid=13918 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.142188][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.174773][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.183104][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.191269][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.199652][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.207847][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.216010][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.218060][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.224093][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.241671][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.250297][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.309407][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.322687][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.360564][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.386481][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.403018][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.425483][ T28] audit: type=1400 audit(1781954321.236:1303): avc: denied { write } for pid=13923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.452742][T13851] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 258.872306][T13984] loop4: detected capacity change from 0 to 4096 [ 258.903003][T13984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.659466][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.786875][T14013] loop4: detected capacity change from 0 to 128 [ 259.810801][T14013] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.845027][T14013] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.894786][ T7616] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.974045][ T5085] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.032770][ T3666] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.776663][T14114] netlink: 'syz.7.3228': attribute type 1 has an invalid length. [ 262.835285][T14114] bond1: (slave gretap1): making interface the new active one [ 262.843539][T14114] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 262.958563][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 264.499123][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3250'. [ 264.547367][T14167] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3251'. [ 264.583450][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3250'. [ 264.792655][T14156] loop4: detected capacity change from 0 to 1024 [ 264.855231][T14156] EXT4-fs: Ignoring removed orlov option [ 265.114621][T14156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.186125][T14156] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3245: bg 0: block 481: padding at end of block bitmap is not set [ 265.620144][ T7616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.738914][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3259'. [ 266.642788][ T2977] ================================================================== [ 266.650932][ T2977] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 266.659046][ T2977] [ 266.661486][ T2977] write to 0xffff888100406f30 of 8 bytes by task 3286 on cpu 0: [ 266.669146][ T2977] dentry_unlink_inode+0x65/0x260 [ 266.674212][ T2977] d_delete+0x164/0x180 [ 266.678492][ T2977] d_delete_notify+0x32/0x100 [ 266.683213][ T2977] vfs_unlink+0x287/0x490 [ 266.687660][ T2977] filename_unlinkat+0x1dc/0x410 [ 266.692632][ T2977] __se_sys_unlink+0x2b/0xe0 [ 266.697239][ T2977] __x64_sys_unlink+0x1f/0x30 [ 266.701940][ T2977] x64_sys_call+0x2eb6/0x3020 [ 266.706647][ T2977] do_syscall_64+0x136/0x3c0 [ 266.711303][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.717226][ T2977] [ 266.719559][ T2977] read to 0xffff888100406f30 of 8 bytes by task 2977 on cpu 1: [ 266.727117][ T2977] step_into_slowpath+0x12c/0x4c0 [ 266.732186][ T2977] path_lookupat+0x2eb/0x4c0 [ 266.736853][ T2977] filename_lookup+0x18f/0x390 [ 266.741777][ T2977] do_readlinkat+0x74/0x2f0 [ 266.746311][ T2977] __x64_sys_readlink+0x47/0x60 [ 266.751282][ T2977] x64_sys_call+0x2b51/0x3020 [ 266.755987][ T2977] do_syscall_64+0x136/0x3c0 [ 266.760606][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.766525][ T2977] [ 266.768868][ T2977] value changed: 0xffff88811af13998 -> 0x0000000000000000 [ 266.776010][ T2977] [ 266.778347][ T2977] Reported by Kernel Concurrency Sanitizer on: [ 266.784514][ T2977] CPU: 1 UID: 0 PID: 2977 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 266.794943][ T2977] Tainted: [W]=WARN [ 266.798751][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.808935][ T2977] ==================================================================