last executing test programs: 1m22.215550008s ago: executing program 2 (id=114): syz_ublk_setup_io_uring(0x11ad, &(0x7f0000000100)={0x0, 0x196e, 0x40, 0x2, 0x164}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, 0x0, 0x0, 0x5af1, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) capset(&(0x7f0000000040)={0x19980330}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x104) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.905637849s ago: executing program 2 (id=121): socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.655784977s ago: executing program 1 (id=126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x20001003, 0x4, 0xfffefffe, 0x400c, 0x9, "4698ddc1220200cf0000002c0100", 0xfffffffe, 0xdc2}) read(r0, &(0x7f00000005c0)=""/227, 0x25) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x51) 1m21.56865972s ago: executing program 1 (id=127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x82, &(0x7f0000000240)={0x0, 0x1}, 0x8) 1m21.53706067s ago: executing program 1 (id=128): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x800000000000fe5, 0xfffffffffffffffc}) 1m21.019198827s ago: executing program 2 (id=140): r0 = msgget$private(0x0, 0x14) msgsnd(r0, 0x0, 0x39, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={0x6, 0xb}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m20.974512379s ago: executing program 2 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m20.91279611s ago: executing program 2 (id=143): unshare(0x6020400) sendmsg$key(0xffffffffffffffff, 0x0, 0x400c014) socket$inet_smc(0x2b, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 1m20.644873919s ago: executing program 2 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x99) 1m20.644666359s ago: executing program 32 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x99) 1m20.531686212s ago: executing program 1 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x800000000000000) 1m20.507851583s ago: executing program 1 (id=153): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 1m20.252037961s ago: executing program 1 (id=159): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 1m20.204096663s ago: executing program 33 (id=159): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 1m9.6017942s ago: executing program 6 (id=310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b1080004400000002205000200"], 0x108}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 1m9.503999012s ago: executing program 6 (id=312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x8000002e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m9.359640557s ago: executing program 6 (id=316): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000001000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x80, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x3, 0x1, 0x3, 0x100000000010000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x52, 0x0, 0x0) 1m9.068606676s ago: executing program 6 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x8f881, 0x0) unshare(0x22020600) unshare(0x22020400) 1m8.32372857s ago: executing program 6 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) 1m8.088473768s ago: executing program 6 (id=334): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.053750358s ago: executing program 34 (id=334): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 19.111934703s ago: executing program 7 (id=1086): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) 18.953523188s ago: executing program 7 (id=1092): r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 17.920177071s ago: executing program 7 (id=1102): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x3e, r2}, 0x5) 17.802779594s ago: executing program 7 (id=1104): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 17.640760419s ago: executing program 7 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20044000, &(0x7f0000000b00)="00000000000071b05c39d87e895893", 0xf, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 17.083045517s ago: executing program 7 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.069446457s ago: executing program 35 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.374690457s ago: executing program 5 (id=1253): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) fsopen(0x0, 0x0) 5.084852498s ago: executing program 5 (id=1268): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x115040, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff4b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.981427535s ago: executing program 5 (id=1274): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) tkill(r0, 0x20) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 2.876624389s ago: executing program 5 (id=1280): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6a3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x1}}) 2.599005947s ago: executing program 5 (id=1283): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.781956083s ago: executing program 4 (id=1291): socket(0x2, 0x3, 0xff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$kcm(0x29, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.680302196s ago: executing program 0 (id=1293): getpid() prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = eventfd2(0x0, 0x80001) read(r2, &(0x7f0000000040)=""/16, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.618855939s ago: executing program 4 (id=1295): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close(0x3) 1.56151183s ago: executing program 5 (id=1296): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.333760537s ago: executing program 4 (id=1298): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x1f, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 1.308096878s ago: executing program 3 (id=1299): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltclass={0x24, 0x29, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0x3, 0x1}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80"], 0x44}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.133956694s ago: executing program 4 (id=1301): syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x2001, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "61eb426d5b5205f95faf5d036b2f12be5a0f33621d38fc74", "48a2ae1e253bc83bc0cbaf9cb8225a1c88c5f71af4878389e4038b8be7b8db01"}}}}}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x2200) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0x3, 0x6, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16, 0x0, 0x0, 0x2}]}) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, [0x363, 0x625, 0xe35, 0xe17]}) 1.108603254s ago: executing program 8 (id=1302): syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c1}, 0x400c801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x80000007, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x8000, 0x2}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 971.096359ms ago: executing program 4 (id=1303): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 951.37513ms ago: executing program 8 (id=1304): pipe(&(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4001, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 934.00538ms ago: executing program 3 (id=1305): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "47c5e82b010100", "f83fdc9671181d91b7de77cafea0bef969521fb4b68d8b00", "ef00", "982e9d8697d9899a"}, 0x38) 899.341461ms ago: executing program 8 (id=1306): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x1, 0xfffb, 0x0, 0x180, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in=@remote, {0x0, 0x1, 0x2, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x0, 0xff}, {}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x5, 0x5}}, 0xf8}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) syz_io_uring_setup(0x4ce4, &(0x7f00000000c0)={0x0, 0x7c98, 0x40, 0x2, 0x243}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 778.243165ms ago: executing program 8 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 683.431888ms ago: executing program 0 (id=1308): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_PROTECT={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xf946}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 630.38272ms ago: executing program 8 (id=1309): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close(0x3) 574.231072ms ago: executing program 0 (id=1310): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0xfffffffffffffddc}], 0x1}}], 0x1, 0x2400c090) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 529.517953ms ago: executing program 8 (id=1311): ioperm(0x0, 0x6, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 518.105833ms ago: executing program 0 (id=1312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6a3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x1}}) 403.669407ms ago: executing program 3 (id=1313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x6, @mcast1}}}, &(0x7f0000000040)=0x84) 315.05735ms ago: executing program 0 (id=1314): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 314.80339ms ago: executing program 3 (id=1315): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000908000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000a69000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 53.292578ms ago: executing program 3 (id=1316): socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x38, 0x0, &(0x7f0000000240), 0x0, 0x0) link(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) 52.875038ms ago: executing program 4 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r2, r2, 0x0, 0xe3aa6ea) fallocate(r1, 0x0, 0x1, 0x8ffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 294.07µs ago: executing program 0 (id=1318): socketpair$unix(0x1, 0x2, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e22}, 0x6e, 0x0}}], 0x1, 0x40008004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) rt_sigqueueinfo(0x0, 0x41, &(0x7f0000000040)={0x27, 0x8, 0xfff00000}) 0s ago: executing program 3 (id=1319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x236) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) kernel console output (not intermixed with test programs): e [ 45.095467][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.106796][ T3784] bond0 (unregistering): Released all slaves [ 45.145561][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.159659][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.209404][ T3977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.233293][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.256154][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.311267][ T3977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.342272][ T3784] hsr_slave_0: left promiscuous mode [ 45.348636][ T3784] hsr_slave_1: left promiscuous mode [ 45.366243][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.378100][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.388386][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.402671][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.415897][ T3784] veth1_macvtap: left promiscuous mode [ 45.430404][ T3784] veth0_macvtap: left promiscuous mode [ 45.442542][ T3784] veth1_vlan: left promiscuous mode [ 45.450274][ T3784] veth0_vlan: left promiscuous mode [ 45.537330][ T4102] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 45.567182][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 45.578952][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 45.606214][ T4110] netlink: 'syz.3.177': attribute type 2 has an invalid length. [ 45.630505][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.667386][ T3977] hsr_slave_0: entered promiscuous mode [ 45.673564][ T3977] hsr_slave_1: entered promiscuous mode [ 45.679826][ T3977] debugfs: 'hsr0' already exists in 'hsr' [ 45.685595][ T3977] Cannot create hsr debugfs directory [ 46.014217][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.046877][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.070635][ T4016] bridge_slave_0: entered allmulticast mode [ 46.080550][ T4016] bridge_slave_0: entered promiscuous mode [ 46.116922][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.137836][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.152530][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.179387][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.187725][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.198536][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.209094][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.220624][ T4190] loop4: detected capacity change from 0 to 128 [ 46.223672][ T4172] veth1_vlan: left promiscuous mode [ 46.232498][ T4190] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 46.234315][ T4172] veth0_vlan: left promiscuous mode [ 46.248555][ T4172] veth0_vlan: entered promiscuous mode [ 46.253808][ T3288] udevd[3288]: incorrect ext4 checksum on /dev/loop4 [ 46.261858][ T4172] veth1_vlan: entered promiscuous mode [ 46.270504][ T4172] veth1_macvtap: left promiscuous mode [ 46.276635][ T4172] veth0_macvtap: left promiscuous mode [ 46.282786][ T4172] veth0_macvtap: entered promiscuous mode [ 46.290145][ T4172] veth1_macvtap: entered promiscuous mode [ 46.299057][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.307508][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.316666][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.325418][ T4172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.335943][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.359451][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.375267][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.394584][ T4016] bridge_slave_1: entered allmulticast mode [ 46.404644][ T4016] bridge_slave_1: entered promiscuous mode [ 46.423495][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.430608][ T3780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.439970][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.447082][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.519300][ T3786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.528862][ T3775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.554129][ T3775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.556994][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.568658][ T3775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.589334][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.606417][ T3784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.638115][ T3977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.653395][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.709559][ T3977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.722226][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 46.722246][ T28] audit: type=1400 audit(1781284226.328:319): avc: denied { write } for pid=4214 comm="syz.4.187" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.766153][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.795974][ T4016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.823213][ T4016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.842512][ T4224] loop3: detected capacity change from 0 to 2048 [ 46.852115][ T3784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.864639][ T28] audit: type=1400 audit(1781284226.468:320): avc: denied { write } for pid=4208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.890979][ T4224] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.897603][ T4224] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.904309][ T3977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.915169][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.924284][ T28] audit: type=1400 audit(1781284226.528:321): avc: denied { write } for pid=4229 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.946889][ T3977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.956702][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.963849][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.978275][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 46.986696][ T28] audit: type=1400 audit(1781284226.588:322): avc: denied { write } for pid=4223 comm="syz.3.189" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.008578][ T28] audit: type=1400 audit(1781284226.598:323): avc: denied { read append } for pid=4223 comm="syz.3.189" path="/51/file1/cpuset.memory_pressure" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.034322][ T3784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.034526][ T28] audit: type=1400 audit(1781284226.608:324): avc: denied { read append } for pid=4223 comm="syz.3.189" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.068763][ T28] audit: type=1400 audit(1781284226.608:325): avc: denied { open } for pid=4223 comm="syz.3.189" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.095823][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.120144][ T4016] team0: Port device team_slave_0 added [ 47.158737][ T4016] team0: Port device team_slave_1 added [ 47.173919][ T4242] syz.3.191 (4242) used obsolete PPPIOCDETACH ioctl [ 47.197419][ T3784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.223183][ T4016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.239709][ T4016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.291204][ T4016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.304561][ T4016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.309954][ T28] audit: type=1400 audit(1781284226.918:326): avc: denied { write } for pid=4246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.323495][ T4016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.373168][ T4016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.416074][ T28] audit: type=1400 audit(1781284227.018:327): avc: denied { write } for pid=4260 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.461631][ T4265] netlink: 'syz.3.195': attribute type 13 has an invalid length. [ 47.465299][ T4016] hsr_slave_0: entered promiscuous mode [ 47.475889][ T4016] hsr_slave_1: entered promiscuous mode [ 47.483145][ T4016] debugfs: 'hsr0' already exists in 'hsr' [ 47.489083][ T4016] Cannot create hsr debugfs directory [ 47.495157][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 47.625580][ T3784] bridge_slave_1: left allmulticast mode [ 47.631738][ T3784] bridge_slave_1: left promiscuous mode [ 47.637815][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.646341][ T3784] bridge_slave_0: left allmulticast mode [ 47.652576][ T3784] bridge_slave_0: left promiscuous mode [ 47.658767][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.764095][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.785759][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.803161][ T3784] bond0 (unregistering): Released all slaves [ 47.868534][ T3977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.893267][ T3784] hsr_slave_0: left promiscuous mode [ 47.903514][ T3784] hsr_slave_1: left promiscuous mode [ 47.915174][ T4281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 47.921847][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.945453][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.957167][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.964989][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.975700][ T3784] veth1_macvtap: left promiscuous mode [ 47.981437][ T3784] veth0_macvtap: left promiscuous mode [ 47.987283][ T3784] veth1_vlan: left promiscuous mode [ 47.992624][ T3784] veth0_vlan: left promiscuous mode [ 48.088241][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 48.098487][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 48.161083][ T4285] syzkaller1: entered promiscuous mode [ 48.181906][ T4285] syzkaller1: entered allmulticast mode [ 48.208843][ T3977] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.239198][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.246313][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.270723][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.277942][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.339859][ T3977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.403238][ T4016] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.433010][ T4016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.447139][ T4016] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.474800][ T28] audit: type=1400 audit(1781284228.078:328): avc: denied { write } for pid=4293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.519827][ T4016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.553915][ T4016] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.595758][ T4016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.618917][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.635501][ T4016] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.648840][ T4016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.719682][ T3977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.744714][ T4016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.776461][ T4016] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.803324][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.810465][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.833178][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.840330][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.014832][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.083278][ T4016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.093760][ T3977] veth0_vlan: entered promiscuous mode [ 49.103093][ T3977] veth1_vlan: entered promiscuous mode [ 49.133214][ T3977] veth0_macvtap: entered promiscuous mode [ 49.160119][ T3977] veth1_macvtap: entered promiscuous mode [ 49.217091][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.239469][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.265236][ T3775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.276234][ T3775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.289477][ T3775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.298626][ T3775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.378418][ T4016] veth0_vlan: entered promiscuous mode [ 49.411392][ T4016] veth1_vlan: entered promiscuous mode [ 49.469965][ T4016] veth0_macvtap: entered promiscuous mode [ 49.493351][ T4016] veth1_macvtap: entered promiscuous mode [ 49.501191][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.524386][ T4016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.538662][ T4016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.563954][ T54] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.573087][ T54] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.603612][ T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.617131][ T54] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.773070][ T4431] loop6: detected capacity change from 0 to 1024 [ 49.811697][ T4431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.850422][ T4337] Set syz1 is full, maxelem 65536 reached [ 49.865018][ T4431] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 49.907463][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 49.943958][ T4431] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.967962][ T4431] EXT4-fs (loop6): This should not happen!! Data will be lost [ 49.967962][ T4431] [ 49.978190][ T4431] EXT4-fs (loop6): Total free blocks count 0 [ 50.002047][ T4431] EXT4-fs (loop6): Free/Dirty block details [ 50.033954][ T4431] EXT4-fs (loop6): free_blocks=20480 [ 50.051813][ T4431] EXT4-fs (loop6): dirty_blocks=16 [ 50.063242][ T4431] EXT4-fs (loop6): Block reservation details [ 50.075411][ T4431] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 50.135386][ T4455] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 50.173859][ T4456] loop4: detected capacity change from 0 to 1024 [ 50.189389][ T4431] syz.6.215 (4431) used greatest stack depth: 9120 bytes left [ 50.198601][ T4455] team0: Port device dummy0 added [ 50.209299][ T4456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.225961][ T4016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.268229][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.699729][ T4484] netlink: 'syz.5.229': attribute type 13 has an invalid length. [ 50.968875][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.037004][ T4489] loop6: detected capacity change from 0 to 512 [ 51.064921][ T4489] EXT4-fs: Ignoring removed nobh option [ 51.084255][ T4489] EXT4-fs: Ignoring removed orlov option [ 51.151588][ T4489] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 1: comm syz.6.232: invalid block [ 51.173122][ T4489] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.188178][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 51.209017][ C0] EXT4-fs (loop6): initial error at time 1781284230: __ext4_iget:5481: inode 11: block 1 [ 51.220423][ C0] EXT4-fs (loop6): last error at time 1781284230: __ext4_iget:5481: inode 11: block 1 [ 51.262422][ T4510] loop4: detected capacity change from 0 to 1024 [ 51.285180][ T4510] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 51.313642][ T4489] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.232: couldn't read orphan inode 11 (err -117) [ 51.339877][ T4510] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.240: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.339952][ T4510] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.340308][ T4510] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.240: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.340447][ T4510] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.343758][ T4510] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.240: Failed to acquire dquot type 0 [ 51.343818][ T4510] loop4: lost filesystem error report for type 5 error -117 [ 51.347929][ C0] EXT4-fs (loop4): error count since last fsck: 3 [ 51.347952][ C0] EXT4-fs (loop4): initial error at time 1781284230: ext4_map_blocks:791: inode 3: block 2 [ 51.348019][ C0] EXT4-fs (loop4): last error at time 1781284230: ext4_acquire_dquot:7034 [ 51.349672][ T4510] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 51.349711][ T4510] loop4: lost filesystem error report for type 5 error -117 [ 51.349955][ T4510] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.240: mark_inode_dirty error [ 51.350000][ T4510] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.350265][ T4510] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 51.350434][ T4510] EXT4-fs (loop4): 1 orphan inode deleted [ 51.356188][ T4510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.367257][ T4489] loop6: lost filesystem error report for type 5 error -117 [ 51.380690][ T54] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.594773][ T4510] EXT4-fs: Ignoring removed bh option [ 51.598604][ T4489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.612717][ T54] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 51.630935][ T4510] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 51.661401][ T4527] loop3: detected capacity change from 0 to 256 [ 51.711983][ T4510] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.240: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.745769][ T4510] __quota_error: 34 callbacks suppressed [ 51.745818][ T4510] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 51.783755][ T4489] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.833171][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.842362][ T28] audit: type=1400 audit(1781284231.448:360): avc: denied { ioctl } for pid=4534 comm="syz.0.248" path="socket:[7922]" dev="sockfs" ino=7922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.883578][ T28] audit: type=1400 audit(1781284231.478:361): avc: denied { bind } for pid=4534 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.939964][ T4016] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.049158][ T28] audit: type=1400 audit(1781284231.648:362): avc: denied { read } for pid=4544 comm="syz.4.253" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.120202][ T28] audit: type=1400 audit(1781284231.648:363): avc: denied { open } for pid=4544 comm="syz.4.253" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.198138][ T28] audit: type=1400 audit(1781284231.658:364): avc: denied { ioctl } for pid=4544 comm="syz.4.253" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.273339][ T28] audit: type=1400 audit(1781284231.768:365): avc: denied { create } for pid=4550 comm="syz.6.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.322650][ T28] audit: type=1400 audit(1781284231.838:366): avc: denied { connect } for pid=4550 comm="syz.6.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.365934][ T4558] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 52.399789][ T4560] batadv_slave_1: entered promiscuous mode [ 52.429171][ T4559] batadv_slave_1: left promiscuous mode [ 52.467736][ T4565] loop4: detected capacity change from 0 to 128 [ 52.496512][ T4565] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 52.500231][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.260'. [ 52.548137][ T4565] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.595660][ T28] audit: type=1400 audit(1781284232.198:367): avc: denied { write } for pid=4563 comm="syz.4.261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.628004][ T28] audit: type=1400 audit(1781284232.198:368): avc: denied { add_name } for pid=4563 comm="syz.4.261" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.730658][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.787276][ T4576] xt_hashlimit: size too large, truncated to 1048576 [ 52.798051][ T4573] GUP no longer grows the stack in syz.3.266 (4573): 200000004000-20000000a000 (200000002000) [ 52.843203][ T4573] CPU: 1 UID: 0 PID: 4573 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.843240][ T4573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.843257][ T4573] Call Trace: [ 52.843270][ T4573] [ 52.843281][ T4573] __dump_stack+0x1d/0x30 [ 52.843314][ T4573] dump_stack_lvl+0x95/0xd0 [ 52.843361][ T4573] dump_stack+0x15/0x1b [ 52.843386][ T4573] __get_user_pages+0x1b27/0x1f10 [ 52.843433][ T4573] ? __rcu_read_unlock+0x4e/0x70 [ 52.843464][ T4573] get_user_pages_remote+0x1d5/0x6b0 [ 52.843591][ T4573] __access_remote_vm+0x156/0x4d0 [ 52.843663][ T4573] access_remote_vm+0x32/0x40 [ 52.843703][ T4573] proc_pid_cmdline_read+0x32b/0x6b0 [ 52.843741][ T4573] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 52.843780][ T4573] vfs_readv+0x417/0x6d0 [ 52.843844][ T4573] __x64_sys_preadv+0xfd/0x1c0 [ 52.843881][ T4573] x64_sys_call+0x2915/0x3020 [ 52.843978][ T4573] do_syscall_64+0x136/0x3c0 [ 52.844044][ T4573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.844069][ T4573] RIP: 0033:0x7f8f5a60ce59 [ 52.844122][ T4573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.844145][ T4573] RSP: 002b:00007f8f5905f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.844169][ T4573] RAX: ffffffffffffffda RBX: 00007f8f5a885fa0 RCX: 00007f8f5a60ce59 [ 52.844186][ T4573] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 52.844204][ T4573] RBP: 00007f8f5a6a2d6f R08: 00000000fffffff9 R09: 0000000000000000 [ 52.844235][ T4573] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 52.844252][ T4573] R13: 00007f8f5a886038 R14: 00007f8f5a885fa0 R15: 00007ffee59d2fd8 [ 52.844279][ T4573] [ 53.204822][ T4590] process 'syz.0.272' launched './file0' with NULL argv: empty string added [ 53.217704][ T4591] loop3: detected capacity change from 0 to 512 [ 53.244888][ T4591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.258232][ T4591] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.309297][ T4591] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.271: Failed to acquire dquot type 0 [ 53.386193][ T4591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.343683][ T4037] IPVS: starting estimator thread 0... [ 54.449141][ T4649] IPVS: using max 2304 ests per chain, 115200 per kthread [ 54.714359][ T4666] loop4: detected capacity change from 0 to 128 [ 55.140718][ T4683] syz.6.310 uses obsolete (PF_INET,SOCK_PACKET) [ 55.159953][ T4684] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 55.170309][ T4684] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 55.286275][ T3357] IPVS: starting estimator thread 0... [ 55.378414][ T4692] IPVS: using max 2304 ests per chain, 115200 per kthread [ 55.518710][ T54] bio_check_eod: 69 callbacks suppressed [ 55.518731][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.518731][ T54] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 55.560606][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.560606][ T54] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 55.591172][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.591172][ T54] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 55.612284][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.612284][ T54] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 55.648086][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.648086][ T54] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 55.701551][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.701551][ T54] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 55.716547][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.716547][ T54] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 55.741673][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.741673][ T54] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 55.767559][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.767559][ T54] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 55.782060][ T54] kworker/u8:4: attempt to access beyond end of device [ 55.782060][ T54] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 56.594715][ T4752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.872967][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 56.872986][ T28] audit: type=1400 audit(1781284236.478:417): avc: denied { read write } for pid=4781 comm="syz.5.342" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.926217][ T28] audit: type=1400 audit(1781284236.478:418): avc: denied { open } for pid=4781 comm="syz.5.342" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 57.076326][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.083720][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.091117][ T4766] bridge_slave_0: entered allmulticast mode [ 57.097819][ T4766] bridge_slave_0: entered promiscuous mode [ 57.105078][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.112430][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.120531][ T4766] bridge_slave_1: entered allmulticast mode [ 57.127326][ T4766] bridge_slave_1: entered promiscuous mode [ 57.172322][ T3775] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.190446][ T4766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.201337][ T4766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.223293][ T28] audit: type=1400 audit(1781284236.828:419): avc: denied { execute } for pid=4798 comm="syz.0.346" name="file0" dev="ramfs" ino=8906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 57.259580][ T4766] team0: Port device team_slave_0 added [ 57.266557][ T4766] team0: Port device team_slave_1 added [ 57.272289][ T28] audit: type=1400 audit(1781284236.828:420): avc: denied { execute_no_trans } for pid=4798 comm="syz.0.346" path="/file0" dev="ramfs" ino=8906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 57.299385][ T4803] netlink: 168 bytes leftover after parsing attributes in process `syz.0.348'. [ 57.310086][ T3775] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.326464][ T28] audit: type=1400 audit(1781284236.928:421): avc: denied { create } for pid=4804 comm="syz.5.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.348534][ T4805] netlink: 28 bytes leftover after parsing attributes in process `syz.5.349'. [ 57.357697][ T28] audit: type=1400 audit(1781284236.958:422): avc: denied { accept } for pid=4804 comm="syz.5.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.388752][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.395762][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.422270][ T4766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.434222][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.441347][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.467380][ T4766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.491150][ T4809] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 57.499406][ T28] audit: type=1400 audit(1781284237.098:423): avc: denied { ioctl } for pid=4808 comm="syz.0.351" path="socket:[9422]" dev="sockfs" ino=9422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.533304][ T3775] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.544017][ T4812] netlink: 'syz.0.351': attribute type 4 has an invalid length. [ 57.562294][ T4766] hsr_slave_0: entered promiscuous mode [ 57.570578][ T4766] hsr_slave_1: entered promiscuous mode [ 57.609398][ T3775] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.742860][ T28] audit: type=1400 audit(1781284237.348:424): avc: denied { create } for pid=4824 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.796195][ T28] audit: type=1400 audit(1781284237.348:425): avc: denied { ioctl } for pid=4824 comm="syz.0.357" path="socket:[8967]" dev="sockfs" ino=8967 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.860669][ T28] audit: type=1400 audit(1781284237.348:426): avc: denied { write } for pid=4824 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.034236][ T3775] bridge_slave_1: left allmulticast mode [ 58.058718][ T3775] bridge_slave_1: left promiscuous mode [ 58.078843][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.108883][ T3775] bridge_slave_0: left allmulticast mode [ 58.123244][ T3775] bridge_slave_0: left promiscuous mode [ 58.140110][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.264269][ T4862] netlink: 'syz.0.367': attribute type 39 has an invalid length. [ 58.449687][ T3775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.473991][ T3775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.495050][ T3775] bond0 (unregistering): Released all slaves [ 58.518498][ T4766] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 58.534530][ T4766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.556566][ T4845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.578704][ T4845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.607183][ T4845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.616282][ T4845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.645383][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 58.660901][ T4766] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 58.670063][ T4766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.678808][ T4766] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 58.693304][ T4766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.713843][ T4766] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 58.724132][ T4766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.763725][ T3775] hsr_slave_0: left promiscuous mode [ 58.787198][ T3775] hsr_slave_1: left promiscuous mode [ 58.796038][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.816175][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.839779][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.855103][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.888656][ T3775] veth1_macvtap: left promiscuous mode [ 58.894460][ T3775] veth0_macvtap: left promiscuous mode [ 58.900178][ T3775] veth1_vlan: left promiscuous mode [ 58.905553][ T3775] veth0_vlan: left promiscuous mode [ 59.096509][ T3775] team0 (unregistering): Port device team_slave_1 removed [ 59.127253][ T3775] team0 (unregistering): Port device team_slave_0 removed [ 59.364971][ T4766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.412792][ T4766] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.440977][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.448386][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.483602][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.490747][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.608451][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 59.819129][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.984051][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 60.016390][ T4963] loop5: detected capacity change from 0 to 128 [ 60.120549][ T4766] veth0_vlan: entered promiscuous mode [ 60.148829][ T4766] veth1_vlan: entered promiscuous mode [ 60.190403][ T4766] veth0_macvtap: entered promiscuous mode [ 60.216317][ T4766] veth1_macvtap: entered promiscuous mode [ 60.232962][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.251822][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.281394][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.302305][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331507][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.355483][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.375298][ T4983] loop4: detected capacity change from 0 to 128 [ 60.379239][ T4986] Cannot find add_set index 0 as target [ 60.533677][ T4942] bio_check_eod: 780 callbacks suppressed [ 60.533692][ T4942] syz.5.384: attempt to access beyond end of device [ 60.533692][ T4942] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 60.562712][ T4942] syz.5.384: attempt to access beyond end of device [ 60.562712][ T4942] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 60.662687][ T5015] loop7: detected capacity change from 0 to 256 [ 60.671302][ T4942] syz.5.384: attempt to access beyond end of device [ 60.671302][ T4942] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 60.753350][ T5015] FAT-fs (loop7): codepage cp857 not found [ 60.810808][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 60.855899][ T5026] loop7: detected capacity change from 0 to 1024 [ 60.908677][ T5026] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 60.942058][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.398'. [ 60.974145][ T5026] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.397: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.998343][ T5043] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5043 comm=syz.0.400 [ 61.012808][ T5026] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.013134][ T5026] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.397: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.022261][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 61.022283][ C1] EXT4-fs (loop7): initial error at time 1781284240: ext4_map_blocks:791: inode 3: block 2 [ 61.022331][ C1] EXT4-fs (loop7): last error at time 1781284240: ext4_map_blocks:791: inode 3: block 2 [ 61.097823][ T5026] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.098904][ T5026] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.397: Failed to acquire dquot type 0 [ 61.159956][ T5026] loop7: lost filesystem error report for type 5 error -117 [ 61.160085][ T5026] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 61.198977][ T5026] loop7: lost filesystem error report for type 5 error -117 [ 61.199181][ T5026] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.397: mark_inode_dirty error [ 61.228032][ T5053] xt_hashlimit: size too large, truncated to 1048576 [ 61.245377][ T5026] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.245531][ T5026] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 61.287058][ T5026] EXT4-fs (loop7): 1 orphan inode deleted [ 61.308276][ T3775] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.312274][ T5026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.356693][ T3775] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.357593][ T3775] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 61.525154][ T4766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.534423][ T3775] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.566622][ T3775] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.569588][ T3775] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 61.604647][ T3775] loop7: lost filesystem error report for type 5 error -117 [ 61.604964][ T4766] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 61.636124][ T4766] loop7: lost filesystem error report for type 5 error -117 [ 61.637468][ T4766] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 61.679387][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.699386][ T4766] loop7: lost filesystem error report for type 5 error -117 [ 61.699638][ T4766] EXT4-fs error (device loop7): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 61.745175][ T4766] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.775065][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.882827][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.945386][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 61.945401][ T28] audit: type=1400 audit(1781284241.548:458): avc: denied { write } for pid=5083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.028216][ T5081] Zero length message leads to an empty skb [ 62.041371][ T28] audit: type=1400 audit(1781284241.648:459): avc: denied { write } for pid=5099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.071447][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.234142][ T28] audit: type=1400 audit(1781284241.838:460): avc: denied { listen } for pid=5109 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.285308][ T30] bridge_slave_1: left allmulticast mode [ 62.295845][ T30] bridge_slave_1: left promiscuous mode [ 62.303547][ T28] audit: type=1400 audit(1781284241.838:461): avc: denied { accept } for pid=5109 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.313474][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.356518][ T30] bridge_slave_0: left allmulticast mode [ 62.373215][ T30] bridge_slave_0: left promiscuous mode [ 62.384992][ T28] audit: type=1400 audit(1781284241.888:462): avc: denied { write } for pid=5115 comm="syz.5.410" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.392274][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.449999][ T28] audit: type=1400 audit(1781284241.958:463): avc: denied { write } for pid=5105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.473289][ T28] audit: type=1400 audit(1781284242.028:464): avc: denied { write } for pid=5125 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.590599][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.600680][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.610772][ T30] bond0 (unregistering): Released all slaves [ 62.623843][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.641258][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.652488][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.668570][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.678088][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.704323][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.715294][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.732924][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.742227][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.755616][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.768743][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.781247][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.411'. [ 62.837041][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.844920][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.986620][ T5129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.005035][ T5129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.132830][ T30] hsr_slave_0: left promiscuous mode [ 63.138678][ T30] hsr_slave_1: left promiscuous mode [ 63.144362][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.152005][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.163114][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.177267][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.202873][ T30] veth1_vlan: left promiscuous mode [ 63.208443][ T30] veth0_vlan: left promiscuous mode [ 63.327075][ T30] team0 (unregistering): Port device team_slave_1 removed [ 63.352061][ T28] audit: type=1400 audit(1781284242.958:465): avc: denied { write } for pid=5131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.380453][ T30] team0 (unregistering): Port device team_slave_0 removed [ 63.444333][ T28] audit: type=1400 audit(1781284243.048:466): avc: denied { write } for pid=5152 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.521247][ T352] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.542430][ T352] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.591228][ T352] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.617772][ T352] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.766413][ T28] audit: type=1400 audit(1781284243.368:467): avc: denied { write } for pid=5162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.945607][ T5181] netlink: 'syz.5.419': attribute type 21 has an invalid length. [ 64.597164][ T5198] xt_hashlimit: size too large, truncated to 1048576 [ 64.885504][ T5206] @0Ù: renamed from bond_slave_1 (while UP) [ 64.952855][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.960678][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.967973][ T5068] bridge_slave_0: entered allmulticast mode [ 64.976346][ T5068] bridge_slave_0: entered promiscuous mode [ 64.988319][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.995540][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.002897][ T5068] bridge_slave_1: entered allmulticast mode [ 65.010528][ T5068] bridge_slave_1: entered promiscuous mode [ 65.046818][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.060351][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.130054][ T5068] team0: Port device team_slave_0 added [ 65.146679][ T5068] team0: Port device team_slave_1 added [ 65.176504][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.209379][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.289766][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.312201][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.330298][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.358424][ T5249] netlink: 'syz.3.437': attribute type 21 has an invalid length. [ 65.497589][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.656055][ T5068] hsr_slave_0: entered promiscuous mode [ 65.677961][ T5068] hsr_slave_1: entered promiscuous mode [ 65.693335][ T5068] debugfs: 'hsr0' already exists in 'hsr' [ 65.709980][ T5068] Cannot create hsr debugfs directory [ 65.732973][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 66.334433][ T5310] team0: Port device team_slave_0 removed [ 66.370948][ T5068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.380144][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.388735][ T5068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.399568][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.414867][ T5068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.434892][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.451956][ T5068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.486999][ T5068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.495078][ T5325] RDS: rds_bind could not find a transport for 8775:7300::, load rds_tcp or rds_rdma? [ 66.517618][ T5323] netlink: 'syz.7.452': attribute type 21 has an invalid length. [ 66.521592][ T5330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5330 comm=syz.0.455 [ 66.689668][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.737015][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.786835][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.793990][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.821455][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.828637][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.980509][ T5384] loop5: detected capacity change from 0 to 4096 [ 66.996434][ T5384] EXT4-fs: inline encryption not supported [ 67.022921][ T5384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 67.031431][ T5384] System zones: 0-5 [ 67.034445][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.044021][ T5384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.060763][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 67.060782][ T28] audit: type=1400 audit(1781284246.668:512): avc: denied { write } for pid=5382 comm="syz.5.465" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.190012][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.247922][ T5068] veth0_vlan: entered promiscuous mode [ 67.256761][ T5068] veth1_vlan: entered promiscuous mode [ 67.272680][ T28] audit: type=1400 audit(1781284246.878:513): avc: denied { create } for pid=5406 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.280083][ T5068] veth0_macvtap: entered promiscuous mode [ 67.302013][ T28] audit: type=1400 audit(1781284246.908:514): avc: denied { listen } for pid=5406 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.322582][ T5068] veth1_macvtap: entered promiscuous mode [ 67.338053][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.349896][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.377305][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.392340][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.401257][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.417591][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.602335][ T28] audit: type=1400 audit(1781284247.208:515): avc: denied { bind } for pid=5421 comm="syz.7.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.658730][ T28] audit: type=1400 audit(1781284247.238:516): avc: denied { write } for pid=5423 comm="syz.0.472" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.915389][ T28] audit: type=1400 audit(1781284247.518:517): avc: denied { create } for pid=5433 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.953410][ T5439] loop4: detected capacity change from 0 to 256 [ 68.146043][ T5447] __nla_validate_parse: 136 callbacks suppressed [ 68.146076][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 68.343110][ T5455] netlink: 'syz.5.493': attribute type 10 has an invalid length. [ 68.343290][ T5455] syz_tun: entered promiscuous mode [ 68.371686][ T5455] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.595025][ T28] audit: type=1400 audit(1781284248.198:518): avc: denied { name_bind } for pid=5468 comm="syz.7.489" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 68.596974][ T5470] loop4: detected capacity change from 0 to 128 [ 68.656650][ T28] audit: type=1400 audit(1781284248.238:519): avc: denied { ioctl } for pid=5466 comm="syz.5.488" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.748411][ T5476] loop5: detected capacity change from 0 to 512 [ 68.759109][ T5461] syz.4.484: attempt to access beyond end of device [ 68.759109][ T5461] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 68.789925][ T5476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.802795][ T5476] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.822322][ T28] audit: type=1400 audit(1781284248.418:520): avc: denied { setopt } for pid=5479 comm="syz.7.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.859126][ T5461] syz.4.484: attempt to access beyond end of device [ 68.859126][ T5461] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 68.865249][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.491: bg 0: bad block bitmap checksum [ 68.883328][ T28] audit: type=1400 audit(1781284248.428:521): avc: denied { write } for pid=5481 comm="syz.5.491" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.906549][ T5481] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.491: bg 0: bad block bitmap checksum [ 68.923670][ T5461] syz.4.484: attempt to access beyond end of device [ 68.923670][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 68.964159][ T5461] syz.4.484: attempt to access beyond end of device [ 68.964159][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 68.977473][ T5461] syz.4.484: attempt to access beyond end of device [ 68.977473][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 68.990736][ T5461] syz.4.484: attempt to access beyond end of device [ 68.990736][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.004346][ T5461] syz.4.484: attempt to access beyond end of device [ 69.004346][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.019474][ T5461] syz.4.484: attempt to access beyond end of device [ 69.019474][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.034055][ T5461] syz.4.484: attempt to access beyond end of device [ 69.034055][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.036836][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.070294][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.494'. [ 69.073563][ T5461] syz.4.484: attempt to access beyond end of device [ 69.073563][ T5461] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 69.128675][ T5486] team0: Port device team_slave_0 removed [ 69.177009][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.226363][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.249793][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.312972][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.331801][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.385477][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.409695][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.586006][ T5491] netlink: 36 bytes leftover after parsing attributes in process `syz.5.497'. [ 69.689635][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.697429][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.870823][ T5502] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 70.871199][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.901094][ T5502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 70.909978][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.936799][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.950294][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.913012][ T5612] IPVS: sed: FWM 3 0x00000003 - no destination available [ 72.466201][ T28] kauditd_printk_skb: 331 callbacks suppressed [ 72.466215][ T28] audit: type=1326 audit(1781284252.068:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.7.510" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcbd053ce59 code=0x7ffc0000 [ 72.716023][ T5652] loop4: detected capacity change from 0 to 2048 [ 72.758413][ T5652] loop4: p1 p4 [ 72.783900][ T5652] loop4: p4 size 589824 extends beyond EOD, truncated [ 73.162809][ T352] nci: nci_ntf_packet: unknown ntf opcode 0x921 [ 73.190539][ T28] audit: type=1400 audit(1781284252.788:854): avc: denied { getopt } for pid=5651 comm="syz.4.557" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.381741][ T28] audit: type=1400 audit(1781284252.988:855): avc: denied { write } for pid=5692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.412515][ T5716] __nla_validate_parse: 127 callbacks suppressed [ 73.412535][ T5716] netlink: 264 bytes leftover after parsing attributes in process `syz.3.577'. [ 73.436505][ T28] audit: type=1400 audit(1781284253.038:856): avc: denied { write } for pid=5717 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.436826][ T5716] netlink: 264 bytes leftover after parsing attributes in process `syz.3.577'. [ 73.718014][ T28] audit: type=1400 audit(1781284253.318:857): avc: denied { shutdown } for pid=5735 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.783610][ T28] audit: type=1400 audit(1781284253.388:858): avc: denied { sqpoll } for pid=5743 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.815932][ T28] audit: type=1400 audit(1781284253.418:859): avc: denied { setopt } for pid=5746 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.989554][ T5753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. [ 74.195217][ T5768] bridge_slave_0 (unregistering): left allmulticast mode [ 74.202474][ T5768] bridge_slave_0 (unregistering): left promiscuous mode [ 74.209875][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.234329][ T5771] loop7: detected capacity change from 0 to 512 [ 74.245482][ T5771] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 74.256155][ T5771] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.598: bad orphan inode 131083 [ 74.266584][ T5771] loop7: lost filesystem error report for type 5 error -117 [ 74.267385][ T5771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.290225][ T28] audit: type=1400 audit(1781284253.898:860): avc: denied { write } for pid=5770 comm="syz.7.598" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.331471][ T4766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.413926][ T28] audit: type=1400 audit(1781284254.018:861): avc: denied { write } for pid=5779 comm="syz.7.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.481103][ T28] audit: type=1400 audit(1781284254.088:862): avc: denied { connect } for pid=5783 comm="syz.7.603" lport=49692 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.527143][ T5786] loop7: detected capacity change from 0 to 128 [ 74.537340][ T5786] bio_check_eod: 2504 callbacks suppressed [ 74.537354][ T5786] syz.7.604: attempt to access beyond end of device [ 74.537354][ T5786] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 74.556934][ T5786] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 74.565610][ T5786] syz.7.604: attempt to access beyond end of device [ 74.565610][ T5786] loop7: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 74.579683][ T5786] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 74.589286][ T5786] syz.7.604: attempt to access beyond end of device [ 74.589286][ T5786] loop7: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 74.603068][ T5786] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 74.615280][ T5786] syz.7.604: attempt to access beyond end of device [ 74.615280][ T5786] loop7: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 74.630937][ T5786] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 74.651347][ T5787] syz.7.604: attempt to access beyond end of device [ 74.651347][ T5787] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 74.664778][ T5787] Buffer I/O error on dev loop7, logical block 69, lost async page write [ 74.673501][ T5787] syz.7.604: attempt to access beyond end of device [ 74.673501][ T5787] loop7: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 74.687209][ T5787] Buffer I/O error on dev loop7, logical block 70, lost async page write [ 74.699876][ T5787] syz.7.604: attempt to access beyond end of device [ 74.699876][ T5787] loop7: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 74.715421][ T5787] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 74.890689][ T5793] loop7: detected capacity change from 0 to 1764 [ 76.093458][ T5682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.208339][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 78.032567][ T5812] netlink: 'syz.7.612': attribute type 4 has an invalid length. [ 78.060308][ T5814] hsr0: entered promiscuous mode [ 78.065924][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 78.084084][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.094398][ T5809] netlink: 'syz.7.612': attribute type 4 has an invalid length. [ 78.118101][ T5814] hsr_slave_0: left promiscuous mode [ 78.133294][ T5814] hsr_slave_1: left promiscuous mode [ 78.176438][ T5814] hsr0 (unregistering): left promiscuous mode [ 78.235887][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 78.235948][ T28] audit: type=1400 audit(1781284257.838:864): avc: denied { write } for pid=5815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.298101][ T28] audit: type=1400 audit(1781284257.878:865): avc: denied { write } for pid=5838 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.374942][ T5836] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.619'. [ 78.410146][ T5836] netlink: 24 bytes leftover after parsing attributes in process `syz.7.619'. [ 78.452638][ T28] audit: type=1400 audit(1781284258.058:866): avc: denied { write } for pid=5841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.526303][ T28] audit: type=1400 audit(1781284258.118:867): avc: denied { write } for pid=5863 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.551278][ T28] audit: type=1400 audit(1781284258.128:868): avc: denied { bind } for pid=5862 comm="syz.5.625" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.582352][ T28] audit: type=1400 audit(1781284258.128:869): avc: denied { connect } for pid=5862 comm="syz.5.625" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.614939][ T28] audit: type=1400 audit(1781284258.188:870): avc: denied { mounton } for pid=5866 comm="syz.4.626" path="/file0" dev="ramfs" ino=16335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 78.737891][ T28] audit: type=1400 audit(1781284258.338:871): avc: denied { create } for pid=5883 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.758675][ T28] audit: type=1400 audit(1781284258.368:872): avc: denied { setopt } for pid=5883 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.778656][ T28] audit: type=1400 audit(1781284258.368:873): avc: denied { write } for pid=5883 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.822108][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 79.660560][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 80.127613][ T5917] netlink: 292 bytes leftover after parsing attributes in process `syz.7.645'. [ 80.153459][ T5917] netlink: 292 bytes leftover after parsing attributes in process `syz.7.645'. [ 80.362319][ T5926] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 80.392881][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.450219][ T5926] bond1: (slave geneve2): making interface the new active one [ 80.489137][ T5926] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 81.897935][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.011142][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 82.043740][ T6014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.061736][ T6014] ipvlan0: entered allmulticast mode [ 82.067183][ T6014] bond2: entered allmulticast mode [ 82.077764][ T6014] bond2: (slave ipip0): refused to change device type [ 83.073829][ T6004] Set syz1 is full, maxelem 65536 reached [ 83.632533][ T6081] IPv6: sit1: Disabled Multicast RS [ 83.692297][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 83.870183][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 83.870201][ T28] audit: type=1400 audit(1781284263.478:884): avc: denied { mount } for pid=6098 comm="syz.5.714" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.066011][ T6107] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 84.171353][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 84.225138][ T6116] ip6gre1: entered promiscuous mode [ 84.264365][ T6116] ip6gre1: entered allmulticast mode [ 84.288266][ T6126] netlink: 'syz.3.721': attribute type 6 has an invalid length. [ 84.297772][ T6126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.721'. [ 84.433694][ T6134] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 84.546871][ T28] audit: type=1400 audit(1781284264.148:885): avc: denied { execute } for pid=6145 comm="syz.3.733" path="/187/file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.736839][ T28] audit: type=1400 audit(1781284264.338:886): avc: denied { bind } for pid=6155 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.779163][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.737'. [ 84.794454][ T28] audit: type=1400 audit(1781284264.378:887): avc: denied { setopt } for pid=6155 comm="syz.7.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.964368][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.747'. [ 86.112020][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.119440][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.278664][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.302823][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.427096][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.436099][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.464463][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.499239][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.803406][ T6169] Set syz1 is full, maxelem 65536 reached [ 86.866841][ T6210] loop5: detected capacity change from 0 to 512 [ 86.897254][ T6210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.944957][ T6210] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.983235][ T6210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.001110][ T6216] io-wq is not configured for unbound workers [ 87.064113][ T28] audit: type=1400 audit(1781284266.668:888): avc: denied { watch watch_reads } for pid=6218 comm="syz.7.757" path="/77/file1" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.414337][ T6234] loop5: detected capacity change from 0 to 128 [ 87.458690][ T6234] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.532291][ T6234] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.666422][ T3977] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.723472][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 88.042137][ T6256] netlink: 'syz.0.771': attribute type 4 has an invalid length. [ 88.081739][ T6256] netlink: 'syz.0.771': attribute type 4 has an invalid length. [ 88.337792][ T6277] loop5: detected capacity change from 0 to 1024 [ 88.365812][ T6277] EXT4-fs: Ignoring removed bh option [ 88.383318][ T6277] EXT4-fs: Ignoring removed oldalloc option [ 88.404513][ T6277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.463911][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.680567][ T6297] netlink: 'syz.7.788': attribute type 4 has an invalid length. [ 88.689826][ T6297] netlink: 'syz.7.788': attribute type 4 has an invalid length. [ 88.852003][ T6308] netlink: 212 bytes leftover after parsing attributes in process `syz.0.792'. [ 88.916058][ T6318] loop4: detected capacity change from 0 to 512 [ 88.940325][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.957112][ T28] audit: type=1400 audit(1781284268.558:889): avc: denied { write } for pid=6317 comm="syz.4.795" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.016788][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.040694][ T28] audit: type=1400 audit(1781284268.648:890): avc: denied { read } for pid=6323 comm="syz.5.799" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.067106][ T28] audit: type=1400 audit(1781284268.648:891): avc: denied { open } for pid=6323 comm="syz.5.799" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.091917][ T6323] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.100177][ T28] audit: type=1400 audit(1781284268.668:892): avc: denied { ioctl } for pid=6323 comm="syz.5.799" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.101687][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.796'. [ 89.179379][ T28] audit: type=1400 audit(1781284268.788:893): avc: denied { mount } for pid=6332 comm="syz.4.803" name="/" dev="hugetlbfs" ino=17165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.218383][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.796'. [ 89.346855][ T6191] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.355114][ T6191] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.366196][ T6191] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.375173][ T6191] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.383093][ T6191] rtc rtc0: __rtc_set_alarm: err=-22 [ 89.447836][ T6353] loop7: detected capacity change from 0 to 4096 [ 89.454719][ T6353] EXT4-fs: test_dummy_encryption option not supported [ 89.488222][ T28] audit: type=1400 audit(1781284269.088:894): avc: denied { ioctl } for pid=6354 comm="syz.7.812" path="socket:[17201]" dev="sockfs" ino=17201 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.556411][ T6357] tipc: Started in network mode [ 89.561540][ T6357] tipc: Node identity 2a7ca28cee35, cluster identity 4711 [ 89.568960][ T6357] tipc: Enabled bearer , priority 0 [ 89.594282][ T6357] syzkaller0: entered promiscuous mode [ 89.599837][ T6357] syzkaller0: entered allmulticast mode [ 89.605947][ T6357] tipc: Resetting bearer [ 89.625037][ T6356] tipc: Resetting bearer [ 89.640594][ T6356] tipc: Disabling bearer [ 90.048002][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.303316][ T6385] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 90.502605][ T6393] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.542872][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 90.554857][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 90.653662][ T6401] loop4: detected capacity change from 0 to 128 [ 90.663232][ T6401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.678758][ T6401] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.718910][ T6401] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.763460][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 90.802670][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 91.668550][ T28] audit: type=1400 audit(1781284271.268:895): avc: denied { getopt } for pid=6418 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.711054][ T6423] netlink: 76 bytes leftover after parsing attributes in process `syz.7.842'. [ 91.733106][ T28] audit: type=1400 audit(1781284271.338:896): avc: denied { append } for pid=6426 comm="syz.4.854" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.757484][ T6454] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 92.819184][ T6457] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 92.833719][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.877344][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.852'. [ 92.908015][ T6457] bond1: (slave ip6erspan0): making interface the new active one [ 92.917144][ T6457] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 93.038052][ T6479] netlink: 'syz.7.860': attribute type 298 has an invalid length. [ 93.174750][ T6489] loop7: detected capacity change from 0 to 128 [ 93.197516][ T6489] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.233993][ T6489] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.355777][ T4766] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.365466][ T6498] netlink: 830 bytes leftover after parsing attributes in process `syz.4.868'. [ 93.488990][ T28] audit: type=1400 audit(1781284273.098:897): avc: denied { setopt } for pid=6510 comm="syz.7.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.538099][ T6514] syzkaller0: entered promiscuous mode [ 93.543764][ T6514] syzkaller0: entered allmulticast mode [ 93.607439][ T6522] netlink: 876 bytes leftover after parsing attributes in process `syz.3.877'. [ 94.006041][ T6541] loop5: detected capacity change from 0 to 512 [ 94.021649][ T6541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.035672][ T6541] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.047173][ T6541] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.885: corrupted xattr block 6: invalid header [ 94.060839][ T6541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 94.069923][ T6541] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.885: corrupted xattr block 6: invalid header [ 94.083136][ T6541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 94.092429][ T28] audit: type=1400 audit(1781284273.708:898): avc: denied { setattr } for pid=6540 comm="syz.5.885" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.092508][ T6541] EXT4-fs error (device loop5): ext4_xattr_block_find:1881: inode #12: comm syz.5.885: corrupted xattr block 6: invalid header [ 94.157737][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.307488][ T28] audit: type=1400 audit(1781284273.908:899): avc: denied { ioctl } for pid=6553 comm="syz.0.890" path="socket:[20485]" dev="sockfs" ino=20485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.333732][ T28] audit: type=1400 audit(1781284273.918:900): avc: denied { map } for pid=6553 comm="syz.0.890" path="socket:[20150]" dev="sockfs" ino=20150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.357252][ T28] audit: type=1400 audit(1781284273.918:901): avc: denied { read } for pid=6553 comm="syz.0.890" path="socket:[20150]" dev="sockfs" ino=20150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.622628][ T5512] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.640138][ T5512] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.788270][ T28] audit: type=1400 audit(1781284274.398:902): avc: denied { listen } for pid=6581 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.807815][ T28] audit: type=1400 audit(1781284274.398:903): avc: denied { accept } for pid=6581 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.475245][ T28] audit: type=1400 audit(1781284275.078:904): avc: denied { accept } for pid=6606 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.546951][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.7.912'. [ 95.565056][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.7.912'. [ 95.689584][ T28] audit: type=1400 audit(1781284275.298:905): avc: denied { wake_alarm } for pid=6624 comm="syz.5.916" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.969181][ T6654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 95.989372][ T6654] batman_adv: batadv0: Adding interface: gretap1 [ 95.995818][ T6654] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.028102][ T6654] batman_adv: batadv0: Interface activated: gretap1 [ 96.041851][ T6658] loop4: detected capacity change from 0 to 512 [ 96.057026][ T6658] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.117085][ T3771] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.313688][ T6668] loop4: detected capacity change from 0 to 256 [ 96.332265][ T6668] FAT-fs (loop4): Directory bread(block 64) failed [ 96.339112][ T6668] FAT-fs (loop4): Directory bread(block 65) failed [ 96.345724][ T6668] FAT-fs (loop4): Directory bread(block 66) failed [ 96.352636][ T6668] FAT-fs (loop4): Directory bread(block 67) failed [ 96.359553][ T6668] FAT-fs (loop4): Directory bread(block 68) failed [ 96.366144][ T6668] FAT-fs (loop4): Directory bread(block 69) failed [ 96.373276][ T6668] FAT-fs (loop4): Directory bread(block 70) failed [ 96.381678][ T6668] FAT-fs (loop4): Directory bread(block 71) failed [ 96.388842][ T6668] FAT-fs (loop4): Directory bread(block 72) failed [ 96.395421][ T6668] FAT-fs (loop4): Directory bread(block 73) failed [ 96.416543][ T6668] syz.4.936: attempt to access beyond end of device [ 96.416543][ T6668] loop4: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 96.430131][ T28] audit: type=1400 audit(1781284276.018:906): avc: denied { module_load } for pid=6667 comm="syz.4.936" path="/93/file1/bus" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 96.476138][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 96.485192][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 96.501838][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 96.510904][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 96.568214][ T6675] cgroup: fork rejected by pids controller in /syz5 [ 96.973153][ T28] audit: type=1400 audit(1781284276.578:907): avc: denied { accept } for pid=6695 comm="syz.4.946" path="socket:[20668]" dev="sockfs" ino=20668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.019339][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.947'. [ 97.028830][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.035959][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.047830][ T6699] netlink: 76 bytes leftover after parsing attributes in process `syz.4.947'. [ 97.057045][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.064159][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.071596][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.078674][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.087556][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.947'. [ 97.097239][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.104398][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.548910][ T3977] bond0: (slave syz_tun): Releasing backup interface [ 97.746043][ T6716] netlink: 76 bytes leftover after parsing attributes in process `syz.4.956'. [ 97.970681][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.977860][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.985315][ T6717] bridge_slave_0: entered allmulticast mode [ 97.992028][ T6717] bridge_slave_0: entered promiscuous mode [ 97.999210][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.006357][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.021704][ T6717] bridge_slave_1: entered allmulticast mode [ 98.035578][ T6717] bridge_slave_1: entered promiscuous mode [ 98.067076][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.078295][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.098742][ T6717] team0: Port device team_slave_0 added [ 98.117719][ T6717] team0: Port device team_slave_1 added [ 98.141302][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.148297][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.174259][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.185458][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.192488][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.218446][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.251159][ T6717] hsr_slave_0: entered promiscuous mode [ 98.257535][ T6717] hsr_slave_1: entered promiscuous mode [ 98.263610][ T6717] debugfs: 'hsr0' already exists in 'hsr' [ 98.269420][ T6717] Cannot create hsr debugfs directory [ 98.638055][ T6620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.649712][ T6717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.666061][ T6717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.679024][ T6717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.716957][ T6757] loop4: detected capacity change from 0 to 512 [ 98.723406][ T6717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.730202][ T6717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.749882][ T6717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.767067][ T6717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.785470][ T6757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.801433][ T6757] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.817770][ T6717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.878817][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.942691][ T6717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.962128][ T6777] loop7: detected capacity change from 0 to 1024 [ 98.992580][ T6717] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.005321][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.012561][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.042651][ T6777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.066018][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.073169][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.099352][ T28] audit: type=1400 audit(1781284278.708:908): avc: denied { bind } for pid=6776 comm="syz.7.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.152390][ T4766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.355988][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.399591][ T28] audit: type=1400 audit(1781284278.998:909): avc: denied { execute_no_trans } for pid=6819 comm="syz.3.979" path="/238/file1" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.710753][ T6717] veth0_vlan: entered promiscuous mode [ 99.736452][ T6717] veth1_vlan: entered promiscuous mode [ 99.775526][ T6717] veth0_macvtap: entered promiscuous mode [ 99.784705][ T6717] veth1_macvtap: entered promiscuous mode [ 99.795946][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.807729][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.821060][ T3771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.830933][ T3771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.846914][ T3771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.857254][ T3771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.884877][ T28] audit: type=1400 audit(1781284279.488:910): avc: denied { mounton } for pid=6717 comm="syz-executor" path="/root/syzkaller.RbuZPO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 99.925132][ T28] audit: type=1400 audit(1781284279.488:911): avc: denied { mount } for pid=6717 comm="syz-executor" name="/" dev="gadgetfs" ino=4760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.038835][ T28] audit: type=1400 audit(1781284279.638:912): avc: denied { map } for pid=6866 comm="syz.5.990" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.110212][ T28] audit: type=1400 audit(1781284279.688:913): avc: denied { shutdown } for pid=6870 comm="syz.3.992" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.138164][ T6874] loop5: detected capacity change from 0 to 256 [ 100.150948][ T28] audit: type=1400 audit(1781284279.698:914): avc: denied { read } for pid=6870 comm="syz.3.992" path="socket:[21735]" dev="sockfs" ino=21735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.257354][ T6880] 9p: Bad value for 'source' [ 100.380809][ T6888] netlink: 'syz.5.999': attribute type 1 has an invalid length. [ 100.405749][ T6888] gretap1: entered promiscuous mode [ 100.526162][ T6900] loop7: detected capacity change from 0 to 1024 [ 100.553039][ T6900] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 100.580744][ T28] audit: type=1400 audit(1781284280.188:915): avc: denied { create } for pid=6905 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.604858][ T6906] Unsupported ieee802154 address type: 0 [ 100.616341][ T6900] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.1004: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.636739][ T28] audit: type=1400 audit(1781284280.208:916): avc: denied { bind } for pid=6905 comm="syz.0.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.657021][ T6900] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.658889][ T6900] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 100.668005][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 100.668025][ C1] EXT4-fs (loop7): initial error at time 1781284280: ext4_map_blocks:791: inode 3: block 2 [ 100.668054][ C1] EXT4-fs (loop7): last error at time 1781284280: ext4_map_blocks:791: inode 3: block 2 [ 100.703210][ T6900] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.1004: lblock 0 mapped to illegal pblock 48 (length 1) [ 100.718242][ T6900] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.719257][ T6900] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1004: Failed to acquire dquot type 0 [ 100.739977][ T6900] loop7: lost filesystem error report for type 5 error -117 [ 100.741401][ T6900] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 100.766390][ T6900] loop7: lost filesystem error report for type 5 error -117 [ 100.775184][ T6900] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.1004: mark_inode_dirty error [ 100.797674][ T6900] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.800516][ T6919] syz_tun: entered allmulticast mode [ 100.814418][ T6900] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 100.827580][ T6914] __nla_validate_parse: 5 callbacks suppressed [ 100.834780][ T6914] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1012'. [ 100.872553][ T6900] EXT4-fs (loop7): 1 orphan inode deleted [ 100.887316][ T6900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.904039][ T352] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.920011][ T352] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.920152][ T352] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 100.957788][ T6900] EXT4-fs (loop7): shut down requested (1) [ 100.980309][ T4766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.121562][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.162955][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.397436][ T6950] loop4: detected capacity change from 0 to 128 [ 101.556790][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 102.599076][ T6984] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 102.626353][ T6984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.719898][ T6984] bond1: (slave geneve2): making interface the new active one [ 102.729716][ T6984] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 102.740927][ T352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.750976][ T352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.786092][ T352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.811944][ T352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.008247][ T5526] IPVS: starting estimator thread 0... [ 104.099432][ T7038] IPVS: using max 2064 ests per chain, 103200 per kthread [ 104.495317][ T6189] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.503144][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 104.503158][ T28] audit: type=1400 audit(1781284284.098:947): avc: denied { write } for pid=7058 comm="syz.7.1071" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.544001][ T6189] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.578584][ T28] audit: type=1400 audit(1781284284.118:948): avc: denied { prog_run } for pid=7048 comm="syz.5.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.628416][ T28] audit: type=1400 audit(1781284284.168:949): avc: denied { prog_load } for pid=7058 comm="syz.7.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.661007][ T7060] fido_id[7060]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.682537][ T28] audit: type=1400 audit(1781284284.168:950): avc: denied { bpf } for pid=7058 comm="syz.7.1071" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.719856][ T28] audit: type=1400 audit(1781284284.168:951): avc: denied { perfmon } for pid=7058 comm="syz.7.1071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.742538][ T28] audit: type=1400 audit(1781284284.168:952): avc: denied { open } for pid=7058 comm="syz.7.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.765776][ T28] audit: type=1400 audit(1781284284.168:953): avc: denied { kernel } for pid=7058 comm="syz.7.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.803109][ T28] audit: type=1400 audit(1781284284.168:954): avc: denied { write } for pid=7058 comm="syz.7.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.840135][ T28] audit: type=1400 audit(1781284284.178:955): avc: denied { read } for pid=7058 comm="syz.7.1071" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.904228][ T28] audit: type=1400 audit(1781284284.208:956): avc: denied { read write } for pid=5068 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.417938][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.471132][ T7079] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1078'. [ 105.634773][ T6200] IPVS: starting estimator thread 0... [ 105.728386][ T7097] IPVS: using max 2304 ests per chain, 115200 per kthread [ 106.152406][ T7123] IPv6: sit1: Disabled Multicast RS [ 106.296580][ T7125] loop5: detected capacity change from 0 to 1024 [ 106.311135][ T7125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.344349][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.773165][ T6717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.825912][ T7135] tipc: Started in network mode [ 106.854465][ T7135] tipc: Node identity 4, cluster identity 4711 [ 106.882624][ T7135] tipc: Node number set to 4 [ 107.165299][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 107.194965][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1111'. [ 107.550949][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 107.568467][ T3771] bridge_slave_1: left allmulticast mode [ 107.574584][ T3771] bridge_slave_1: left promiscuous mode [ 107.600640][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.615070][ T3771] bridge_slave_0: left allmulticast mode [ 107.620955][ T3771] bridge_slave_0: left promiscuous mode [ 107.626691][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.679628][ T7172] loop4: detected capacity change from 0 to 1024 [ 107.704807][ T7172] EXT4-fs: Ignoring removed bh option [ 107.738605][ T7172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.765576][ T7172] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.823071][ T3771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.835043][ T3771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.868390][ T3771] bond0 (unregistering): Released all slaves [ 107.925242][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.951156][ T3771] hsr_slave_0: left promiscuous mode [ 107.962389][ T3771] hsr_slave_1: left promiscuous mode [ 107.976298][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.009418][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.267024][ T7201] loop4: detected capacity change from 0 to 512 [ 108.295394][ T7201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.333022][ T7201] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.461021][ T3771] team0 (unregistering): Port device team_slave_1 removed [ 108.566876][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 108.877993][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 109.159507][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.287926][ T7242] IPv6: sit2: Disabled Multicast RS [ 109.313034][ T7259] loop4: detected capacity change from 0 to 512 [ 109.343944][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.354479][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.356678][ T7259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.374691][ T7175] bridge_slave_0: entered allmulticast mode [ 109.389534][ T7175] bridge_slave_0: entered promiscuous mode [ 109.400253][ T7259] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.413056][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.420287][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.427644][ T7175] bridge_slave_1: entered allmulticast mode [ 109.434330][ T7175] bridge_slave_1: entered promiscuous mode [ 109.441750][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 109.460402][ T7264] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 109.471339][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.539148][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 109.539165][ T28] audit: type=1400 audit(1781284289.148:1083): avc: denied { setopt } for pid=7271 comm="syz.5.1136" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.543648][ T7175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.584338][ T7273] syz_tun: entered allmulticast mode [ 109.590727][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'. [ 109.619927][ T7273] syz_tun (unregistering): left allmulticast mode [ 109.632574][ T7175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.709993][ T28] audit: type=1400 audit(1781284289.308:1084): avc: denied { create } for pid=7284 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.717028][ T7175] team0: Port device team_slave_0 added [ 109.752402][ T28] audit: type=1400 audit(1781284289.338:1085): avc: denied { bind } for pid=7284 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.764428][ T7175] team0: Port device team_slave_1 added [ 109.827659][ T28] audit: type=1400 audit(1781284289.428:1086): avc: denied { write } for pid=7277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.862332][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1140'. [ 109.875126][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.893232][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.906014][ T28] audit: type=1400 audit(1781284289.498:1087): avc: denied { getopt } for pid=7294 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.997385][ T28] audit: type=1400 audit(1781284289.508:1088): avc: denied { write } for pid=7296 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.002664][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.082564][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 110.096866][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.112426][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.115030][ T28] audit: type=1400 audit(1781284289.718:1089): avc: denied { setopt } for pid=7297 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.209351][ T5512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.218054][ T28] audit: type=1400 audit(1781284289.778:1090): avc: denied { write } for pid=7297 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.221632][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.326318][ T28] audit: type=1400 audit(1781284289.928:1091): avc: denied { listen } for pid=7307 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.361788][ T7175] hsr_slave_0: entered promiscuous mode [ 110.384925][ T7175] hsr_slave_1: entered promiscuous mode [ 110.396467][ T28] audit: type=1400 audit(1781284289.998:1092): avc: denied { bind } for pid=7310 comm="syz.3.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.650995][ T7175] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.667300][ T7175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.693009][ T7175] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.711545][ T7175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.729031][ T7175] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.745181][ T7175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.753296][ T7175] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.770996][ T7175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.842549][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.868644][ T7175] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.886689][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.893806][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.947105][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.954284][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.975086][ T7338] syz_tun: entered allmulticast mode [ 111.000713][ T7338] syz_tun: left allmulticast mode [ 111.234708][ T7175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.484762][ T7175] veth0_vlan: entered promiscuous mode [ 111.501147][ T7175] veth1_vlan: entered promiscuous mode [ 111.538204][ T7175] veth0_macvtap: entered promiscuous mode [ 111.550173][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 111.565326][ T7175] veth1_macvtap: entered promiscuous mode [ 111.585727][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'. [ 111.595728][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.608245][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.636962][ T3771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.658476][ T3771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.682639][ T3771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.693504][ T3771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.785801][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 111.842586][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 111.867398][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1119'. [ 112.708375][ T7431] loop8: detected capacity change from 0 to 512 [ 112.746634][ T7431] EXT4-fs (loop8): invalid journal inode [ 112.762433][ T7431] EXT4-fs (loop8): can't get journal size [ 112.782089][ T7431] EXT4-fs (loop8): 1 truncate cleaned up [ 112.788286][ T7431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.950036][ T7175] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.418768][ T7475] loop5: detected capacity change from 0 to 2048 [ 113.441749][ T7475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.455862][ T7475] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.467591][ T7479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.481289][ T7475] EXT4-fs (loop5): shut down requested (1) [ 113.490489][ T7475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.499678][ T7479] bond3: (slave ip6erspan0): making interface the new active one [ 113.508829][ T7479] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 114.726868][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1213'. [ 115.170619][ T7519] loop4: detected capacity change from 0 to 128 [ 115.189750][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 115.189765][ T28] audit: type=1400 audit(1781284550.798:1145): avc: denied { execute } for pid=7521 comm="syz.5.1216" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=24291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 115.229019][ T28] audit: type=1400 audit(1781284550.838:1146): avc: denied { mount } for pid=7517 comm="syz.4.1214" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 115.321681][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.321681][ T7527] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 115.349033][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1218'. [ 115.358093][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.358093][ T7527] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 115.384496][ T28] audit: type=1400 audit(1781284550.988:1147): avc: denied { bind } for pid=7525 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.408580][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 115.410412][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.410412][ T7527] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 115.436267][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.436267][ T7527] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 115.444062][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 115.454043][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.454043][ T7527] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 115.474094][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.474094][ T7527] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 115.488766][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.488766][ T7527] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 115.502896][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.502896][ T7527] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 115.517099][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.517099][ T7527] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 115.537651][ T7527] syz.4.1214: attempt to access beyond end of device [ 115.537651][ T7527] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 115.553370][ T28] audit: type=1400 audit(1781284551.158:1148): avc: denied { ioctl } for pid=7530 comm="syz.0.1219" path="socket:[23430]" dev="sockfs" ino=23430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.561460][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 115.619391][ T28] audit: type=1400 audit(1781284551.158:1149): avc: denied { bind } for pid=7530 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.667724][ T28] audit: type=1400 audit(1781284551.158:1150): avc: denied { setopt } for pid=7530 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.707186][ T28] audit: type=1400 audit(1781284551.258:1151): avc: denied { unmount } for pid=5068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 115.765810][ T28] audit: type=1400 audit(1781284551.298:1152): avc: denied { create } for pid=7535 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.781107][ T7537] IPv6: sit1: Disabled Multicast RS [ 115.886023][ T28] audit: type=1400 audit(1781284551.298:1153): avc: denied { name_connect } for pid=7535 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 116.012608][ T7545] loop4: detected capacity change from 0 to 1024 [ 116.235420][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 116.762275][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 116.773449][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 116.900369][ T28] audit: type=1326 audit(1781284552.508:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.1233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f5a60ce59 code=0x0 [ 117.323774][ T7575] loop8: detected capacity change from 0 to 512 [ 117.337591][ T7575] EXT4-fs: Ignoring removed orlov option [ 117.353221][ T7575] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.373792][ T7575] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.1235: corrupted in-inode xattr: e_value size too large [ 117.406284][ T7575] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.406679][ T7575] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1235: couldn't read orphan inode 15 (err -117) [ 117.416407][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 117.416427][ C0] EXT4-fs (loop8): initial error at time 1781284553: ext4_iget_extra_inode:5128: inode 15 [ 117.416477][ C0] EXT4-fs (loop8): last error at time 1781284553: ext4_iget_extra_inode:5128: inode 15 [ 117.518320][ T7575] loop8: lost filesystem error report for type 5 error -117 [ 117.519117][ T7575] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.594402][ T7575] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.1235: Logical block already allocated [ 117.629422][ T7175] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.972764][ T7568] kexec: Could not allocate control_code_buffer [ 118.054196][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 118.069076][ T7607] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1246'. [ 118.971148][ T7608] kexec: Could not allocate control_code_buffer [ 120.441720][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 120.441736][ T28] audit: type=1400 audit(1781284556.048:1174): avc: denied { write } for pid=7660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.514325][ T28] audit: type=1400 audit(1781284556.118:1175): avc: denied { write } for pid=7671 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.702901][ T7684] syz.8.1273 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.718623][ T7684] loop8: detected capacity change from 0 to 7 [ 121.775554][ T28] audit: type=1400 audit(1781284557.368:1176): avc: denied { wake_alarm } for pid=7689 comm="syz.0.1276" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.268830][ T28] audit: type=1400 audit(1781284813.871:1177): avc: denied { write } for pid=7707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.347380][ T28] audit: type=1400 audit(1781284813.951:1178): avc: denied { create } for pid=7722 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.431131][ T28] audit: type=1400 audit(1781284813.951:1179): avc: denied { write } for pid=7722 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.486728][ T28] audit: type=1400 audit(1781284813.951:1180): avc: denied { setopt } for pid=7722 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.557692][ T28] audit: type=1400 audit(1781284813.951:1181): avc: denied { connect } for pid=7722 comm="syz.0.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.608859][ T28] audit: type=1400 audit(1781284813.991:1182): avc: denied { write } for pid=7721 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.792610][ T28] audit: type=1400 audit(1781284814.401:1183): avc: denied { write } for pid=7729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.174379][ T7784] netlink: 'syz.4.1295': attribute type 4 has an invalid length. [ 123.440533][ T7791] __nla_validate_parse: 5 callbacks suppressed [ 123.440568][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1299'. [ 123.658275][ T7801] netlink: 'syz.8.1302': attribute type 11 has an invalid length. [ 123.666520][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1302'. [ 123.980155][ T7813] macvlan2: entered promiscuous mode [ 123.997407][ T7813] macvlan2: entered allmulticast mode [ 124.106844][ T7818] netlink: 'syz.8.1309': attribute type 4 has an invalid length. [ 124.685613][ T7835] loop4: detected capacity change from 0 to 1024 [ 124.705575][ T7835] EXT4-fs: Ignoring removed bh option [ 124.740736][ T7783] ================================================================== [ 124.748944][ T7783] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 124.755963][ T7783] [ 124.758340][ T7783] read-write to 0xffff888129e1d5a4 of 4 bytes by task 7792 on cpu 1: [ 124.766437][ T7783] fifo_open+0x179/0x5b0 [ 124.770746][ T7783] do_dentry_open+0x49f/0xa60 [ 124.775468][ T7783] vfs_open+0x37/0x1e0 [ 124.779577][ T7783] path_openat+0x1b51/0x2020 [ 124.784222][ T7783] do_file_open+0x16c/0x290 [ 124.788774][ T7783] do_sys_openat2+0x94/0x130 [ 124.793395][ T7783] __x64_sys_openat+0xf2/0x120 [ 124.798222][ T7783] x64_sys_call+0x1e39/0x3020 [ 124.802957][ T7783] do_syscall_64+0x136/0x3c0 [ 124.807598][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.813527][ T7783] [ 124.815880][ T7783] read to 0xffff888129e1d5a4 of 4 bytes by task 7783 on cpu 0: [ 124.823502][ T7783] wait_for_partner+0x109/0x1d0 [ 124.828433][ T7783] fifo_open+0x443/0x5b0 [ 124.832726][ T7783] do_dentry_open+0x49f/0xa60 [ 124.837443][ T7783] vfs_open+0x37/0x1e0 [ 124.841547][ T7783] path_openat+0x1b51/0x2020 [ 124.846213][ T7783] do_file_open+0x16c/0x290 [ 124.850756][ T7783] do_sys_openat2+0x94/0x130 [ 124.855395][ T7783] __se_sys_openat2+0x193/0x1f0 [ 124.860375][ T7783] __x64_sys_openat2+0x55/0x70 [ 124.865191][ T7783] x64_sys_call+0x2170/0x3020 [ 124.869916][ T7783] do_syscall_64+0x136/0x3c0 [ 124.874560][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.880488][ T7783] [ 124.882847][ T7783] value changed: 0x00000002 -> 0x00000001 [ 124.888593][ T7783] [ 124.890941][ T7783] Reported by Kernel Concurrency Sanitizer on: [ 124.897142][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.5.1296 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.906503][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.916603][ T7783] ================================================================== [ 124.936637][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.026980][ T5068] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.208067][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!