last executing test programs: 4m19.746709863s ago: executing program 32 (id=70): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x24008010) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 3m34.668672955s ago: executing program 33 (id=687): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0xee}]}) 3m31.026094446s ago: executing program 34 (id=748): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {@resgid}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@inlinecrypt}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") creat(&(0x7f0000000340)='./file0\x00', 0x28) syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 3m17.581814288s ago: executing program 35 (id=722): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x3c}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c7}, 0x80014) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) 3m10.791629491s ago: executing program 36 (id=814): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x20ce, r2}, 0x38) 2m17.125109146s ago: executing program 37 (id=2119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0), 0x3, 0x50600) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1m36.220511234s ago: executing program 1 (id=2932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x1260, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1230, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_CGROUP_EMATCHES={0x10c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1068, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x21c}, {0x0, 0x3}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x1}, "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"}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0xa5, 0x0, 0x3}, "f57a5737e97eb7e647ffe7e0d00c842d698d5021dea02584fad6ced510ae6889093396d38ce117b22038d8f56a4fbddd1869ad4f52f0dce0ad"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0xbd}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd3e8}}, @TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_ACT={0x154, 0x1, [@m_simple={0xd0, 0x11, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'cgroup\x00'}, @TCA_DEF_DATA={0x7, 0x3, ')/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9fa, 0x40, 0x20000000, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x1, 0x4, 0x1, 0xd5}}]}, {0x5d, 0x6, "f75e3010200b441710f8554ae4dc1d079c7aac366a83f3342ada329a97e153c186851dd647bf5a915f89807cb59d451a38815b292b26275396d829b795e2e8c5df43a63a62c1c9f818bdd22d05a59a01c339ded7bf098f19b2"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x80, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x33, 0x6, "03b8803e719dce1bcf4b378fc34be4611278bb5b77ab4f2b9618cd4298447f2aa970496508a10d26de5bd47cdf4e66"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1260}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m36.114514046s ago: executing program 1 (id=2933): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000001c0)=r2}, 0x20) 1m36.060903707s ago: executing program 1 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x181842) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 1m35.898813111s ago: executing program 1 (id=2937): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80800c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX], 0x0, 0x254, &(0x7f0000000480)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m35.770938984s ago: executing program 1 (id=2939): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m35.582520818s ago: executing program 1 (id=2945): socket$unix(0x1, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 1m35.54001347s ago: executing program 38 (id=2945): socket$unix(0x1, 0x5, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 1m19.107841438s ago: executing program 2 (id=3255): socket$packet(0x11, 0x2, 0x300) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) unshare(0x2c020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m19.071983209s ago: executing program 2 (id=3257): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 1m19.02793559s ago: executing program 2 (id=3258): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.877600113s ago: executing program 2 (id=3264): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 1m18.61456143s ago: executing program 2 (id=3266): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000880), 0xf504, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x3, r0}, 0x38) 1m18.326772566s ago: executing program 2 (id=3275): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0xa1) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m18.326574396s ago: executing program 39 (id=3275): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0xa1) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 40.97966778s ago: executing program 6 (id=4182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.814591563s ago: executing program 6 (id=4185): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d2", 0x9}], 0x1}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 40.761527035s ago: executing program 6 (id=4186): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'geneve1\x00', @random='\x00\x00\x00\x00\x00 '}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 40.761149615s ago: executing program 6 (id=4187): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f881, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 40.713437625s ago: executing program 6 (id=4188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x40050) close_range(r0, r0, 0x0) 40.164524998s ago: executing program 6 (id=4207): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x800000, 0x0) 40.164376488s ago: executing program 40 (id=4207): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x800000, 0x0) 25.597327501s ago: executing program 9 (id=4493): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), &(0x7f0000000040)=0x4) 25.529604952s ago: executing program 9 (id=4496): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x2, 0x3, 0x1, 0x1000004}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 25.442967295s ago: executing program 9 (id=4503): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semctl$GETALL(0x0, 0x0, 0xd, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="0100000000000020ab070471d64c600000000b0000000d000100f102dc"], 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 25.291004708s ago: executing program 9 (id=4510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f881, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 24.503836395s ago: executing program 9 (id=4513): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x14, 0xb, 0xfd}, {0x16, 0x0, 0x0, 0x7ffffdbd}]}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x5000000, 0x0) readv(r1, &(0x7f00000012c0)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x90}}, './file0\x00'}) 24.319448169s ago: executing program 9 (id=4520): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x8c, 0x40000}, 0x20) 24.319030199s ago: executing program 41 (id=4520): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x8c, 0x40000}, 0x20) 9.526606708s ago: executing program 0 (id=4791): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 8.560130089s ago: executing program 0 (id=4810): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 8.456815242s ago: executing program 0 (id=4813): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x134) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 8.397395153s ago: executing program 0 (id=4815): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 8.356939854s ago: executing program 0 (id=4816): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 8.162514538s ago: executing program 0 (id=4819): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21001e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@noblock_validity}]}, 0x3, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) 8.144729339s ago: executing program 42 (id=4819): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21001e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@noblock_validity}]}, 0x3, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) 3.56680289s ago: executing program 7 (id=4884): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143943, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000002800)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x1}], {}, [], {0x10, 0x2}}, 0x34, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.347178185s ago: executing program 7 (id=4887): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000002d000/0x3000)=nil, 0x3000, 0x17) 2.733738439s ago: executing program 8 (id=4893): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 2.177152721s ago: executing program 8 (id=4905): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b340995167014fca3820d2c1c2ee3a6d7683cd6fb314e60735b74a6e6c15cf27387fccbe9664c88493c1f0a27ee9e7cd5782f8f29436742dafb068124e843d1752d207a28bc9"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.844475819s ago: executing program 8 (id=4909): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.79660494s ago: executing program 8 (id=4910): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 1.562895025s ago: executing program 8 (id=4911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x7b, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14000000220035", 0x7}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 1.237407142s ago: executing program 7 (id=4915): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000070500010007000000c070135d278a3f0c506dcffcfaca5e5d96b7fb3fcc2083730d4225467e411863b21aa2514edc98fc05aef236f2dfce1bd1fe0566ff5f8e9b182e5748ce24885c490666624fe10470788ba46334c4d851e6566a89e05a0700000081205b326175328b4d99002df4071dc2a93ec5"], 0x1c}, 0x1, 0x0, 0x0, 0x20008100}, 0x4800) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) futex_waitv(&(0x7f0000000400)=[{0x2eb, 0x0, 0x86}], 0x1, 0x0, 0x0, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 1.237277582s ago: executing program 8 (id=4916): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001e3ffffffffffffff000000000a20000000000a01080000000000000000070000000900010073797a300000ca87e6fe0000090a01040000000000000000070006b41410ed75d6c2b27a24bd8257000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140011800c0001"], 0x98}}, 0x0) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7105"], 0x115) 1.137902794s ago: executing program 4 (id=4922): write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 1.119325544s ago: executing program 4 (id=4923): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.112324395s ago: executing program 7 (id=4924): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x8020, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xf099, 0x1}, 0x2, 0x100, 0x820000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 1.095181485s ago: executing program 5 (id=4926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.077325705s ago: executing program 5 (id=4927): socket$inet6(0xa, 0x3, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000030c00024000000000000000010900010073797a30000000002c000000030a01020008000000000000000000000900010073797a30000000000900030073797a320000000014000000020a0300000000000000000002"], 0x94}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) 1.063414806s ago: executing program 4 (id=4928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.044896486s ago: executing program 4 (id=4929): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 1.026652917s ago: executing program 5 (id=4931): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 961.141618ms ago: executing program 4 (id=4933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r1, &(0x7f0000000200)={0x2}, 0x8, 0x800) 955.616348ms ago: executing program 5 (id=4934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x25, &(0x7f00000002c0)=0x0) r2 = eventfd2(0xb, 0x80800) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) close(r2) shutdown(r0, 0x0) 920.310789ms ago: executing program 4 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 878.00798ms ago: executing program 5 (id=4937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 830.595221ms ago: executing program 5 (id=4939): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000e280)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000880)="e8", 0x1}], 0x1}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x1, 0x0) 690.823394ms ago: executing program 3 (id=4942): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048800}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0xbb5, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./file1\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440), 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x80, 0x3a, 'init_itable', 0x3a, 'ext4\x00', 0x3a, './file0/file0'}, 0x3d) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) 602.806876ms ago: executing program 3 (id=4943): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x2b, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 602.621596ms ago: executing program 3 (id=4944): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 590.800516ms ago: executing program 3 (id=4945): ioprio_set$pid(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x46, 0x1ff}, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 570.681567ms ago: executing program 3 (id=4946): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 218.603655ms ago: executing program 7 (id=4947): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x7a680000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 218.532365ms ago: executing program 3 (id=4948): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=4949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) kernel console output (not intermixed with test programs): 1400 audit(1784809913.496:1059): avc: denied { write } for pid=13825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.459064][ T49] veth1_macvtap: left promiscuous mode [ 222.465296][ T49] veth0_macvtap: left promiscuous mode [ 222.471039][ T49] veth1_vlan: left promiscuous mode [ 222.476405][ T49] veth0_vlan: left promiscuous mode [ 222.578122][ T49] team0 (unregistering): Port device team_slave_1 removed [ 222.588970][ T49] team0 (unregistering): Port device team_slave_0 removed [ 222.633461][T13835] macvtap1: entered promiscuous mode [ 222.638880][T13835] erspan0: entered promiscuous mode [ 222.644747][T13835] macvtap1: entered allmulticast mode [ 222.650218][T13835] erspan0: entered allmulticast mode [ 222.658561][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 222.914047][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.932888][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.945823][T13792] bridge_slave_0: entered allmulticast mode [ 222.957476][T13792] bridge_slave_0: entered promiscuous mode [ 222.966535][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.967915][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 222.967953][ T28] audit: type=1400 audit(1784809914.026:1061): avc: denied { write } for pid=13857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.973785][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.010357][T13792] bridge_slave_1: entered allmulticast mode [ 223.025930][T13792] bridge_slave_1: entered promiscuous mode [ 223.050038][ T28] audit: type=1400 audit(1784809914.106:1062): avc: denied { write } for pid=13887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.098607][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 223.112996][T13792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.126209][T13792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.178737][T13792] team0: Port device team_slave_0 added [ 223.186443][T13792] team0: Port device team_slave_1 added [ 223.243479][T13792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.251517][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.310935][T13792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.326925][ T28] audit: type=1400 audit(1784809914.386:1063): avc: denied { write } for pid=13900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.342718][T13792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.367929][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.378597][ T28] audit: type=1400 audit(1784809914.426:1064): avc: denied { ioctl } for pid=13921 comm="syz.4.3315" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 223.418566][T13792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.440592][ T28] audit: type=1400 audit(1784809914.466:1065): avc: denied { write } for pid=13923 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.552588][T13792] hsr_slave_0: entered promiscuous mode [ 223.559047][T13792] hsr_slave_1: entered promiscuous mode [ 223.636666][ T28] audit: type=1400 audit(1784809914.696:1066): avc: denied { write } for pid=13928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.723246][ T28] audit: type=1400 audit(1784809914.786:1067): avc: denied { write } for pid=13960 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.861837][ T28] audit: type=1400 audit(1784809914.926:1068): avc: denied { write } for pid=13969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.900542][ T28] audit: type=1400 audit(1784809914.956:1069): avc: denied { write } for pid=13984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.024721][ T28] audit: type=1400 audit(1784809915.086:1070): avc: denied { ioctl } for pid=13999 comm="syz.4.3331" path="socket:[35703]" dev="sockfs" ino=35703 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.086047][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 224.202172][T13792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.211035][T13792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.218982][T13792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.229300][T13792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.238416][T13792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.247520][T13792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.255716][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 224.272820][T13792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.292312][T13792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.356966][T14035] loop4: detected capacity change from 0 to 1024 [ 224.394041][T13792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.421144][T13792] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.426060][T14035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.443031][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.450140][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.482506][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.489674][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.502753][T14053] xt_hashlimit: size too large, truncated to 1048576 [ 224.652808][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.760972][T13792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.796282][T14078] loop4: detected capacity change from 0 to 8192 [ 224.814287][T14078] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.032428][T14116] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 225.077625][T14116] bond3: entered promiscuous mode [ 225.094993][T14116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.137094][T14123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.156559][T14123] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 225.167313][T14123] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 225.185688][T14123] bond3: (slave ip6gre1): making interface the new active one [ 225.193663][T14123] ip6gre1: entered promiscuous mode [ 225.201303][T14123] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 225.219869][T13792] veth0_vlan: entered promiscuous mode [ 225.228677][T13792] veth1_vlan: entered promiscuous mode [ 225.247271][T13792] veth0_macvtap: entered promiscuous mode [ 225.286637][T13792] veth1_macvtap: entered promiscuous mode [ 225.297876][T13792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.310184][T13792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.322784][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.352961][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.371452][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.380659][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.593319][T14182] __nla_validate_parse: 8 callbacks suppressed [ 225.593357][T14182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3357'. [ 225.615146][T14182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3357'. [ 225.625164][T14182] netlink: 'syz.4.3357': attribute type 32 has an invalid length. [ 225.640252][T14182] netlink: 424 bytes leftover after parsing attributes in process `syz.4.3357'. [ 225.912411][T14230] loop4: detected capacity change from 0 to 128 [ 225.921395][T14230] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.946018][T14230] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.000432][ T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.246066][T14266] loop5: detected capacity change from 0 to 512 [ 226.299092][T14266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.316007][T14266] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.362352][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.398066][T14292] netlink: 'syz.3.3382': attribute type 3 has an invalid length. [ 226.415985][T14292] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3382'. [ 226.590941][T14318] loop5: detected capacity change from 0 to 128 [ 226.652441][T14318] syz.5.3386: attempt to access beyond end of device [ 226.652441][T14318] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 226.697191][T14318] syz.5.3386: attempt to access beyond end of device [ 226.697191][T14318] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 226.739825][T14318] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 226.761292][T14318] syz.5.3386: attempt to access beyond end of device [ 226.761292][T14318] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 226.796038][T14318] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 226.838322][T14318] syz.5.3386: attempt to access beyond end of device [ 226.838322][T14318] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 226.869698][T14318] syz.5.3386: attempt to access beyond end of device [ 226.869698][T14318] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 226.887075][T14318] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 226.900078][T14318] syz.5.3386: attempt to access beyond end of device [ 226.900078][T14318] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 226.930689][T14318] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 226.958955][T14318] syz.5.3386: attempt to access beyond end of device [ 226.958955][T14318] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 227.002168][T14353] loop6: detected capacity change from 0 to 128 [ 227.002848][T14318] syz.5.3386: attempt to access beyond end of device [ 227.002848][T14318] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 227.022550][T14353] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.022750][T14353] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.079844][T14318] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 227.112201][T14318] syz.5.3386: attempt to access beyond end of device [ 227.112201][T14318] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 227.154227][T14318] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 227.168392][T14318] syz.5.3386: attempt to access beyond end of device [ 227.168392][T14318] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 227.185371][T14318] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 227.194858][T14318] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 227.208884][T14318] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 227.219374][T14318] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 227.241345][ T5850] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.822107][ T35] IPVS: starting estimator thread 0... [ 227.867835][T14432] loop5: detected capacity change from 0 to 1024 [ 227.904124][T14432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.940518][T14425] IPVS: using max 2256 ests per chain, 112800 per kthread [ 227.955257][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.986066][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'. [ 228.004500][T14445] loop4: detected capacity change from 0 to 512 [ 228.014714][T14445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 228.025468][ T4169] IPVS: stop unused estimator thread 0... [ 228.032784][T14445] EXT4-fs (loop4): 1 truncate cleaned up [ 228.040189][T14445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.054045][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 228.054062][ T28] audit: type=1400 audit(1784809919.116:1113): avc: denied { write } for pid=14444 comm="syz.4.3424" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.099652][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.846329][ T28] audit: type=1400 audit(1784809919.906:1114): avc: denied { remount } for pid=14481 comm="syz.9.3440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 229.131516][T14501] loop5: detected capacity change from 0 to 1024 [ 229.142526][T14501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.151409][T14501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.158244][T14501] EXT4-fs: inline encryption not supported [ 229.165511][T14501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.197853][T14501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.210517][T14501] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.238004][ T28] audit: type=1400 audit(1784809920.296:1115): avc: denied { write } for pid=14500 comm="syz.5.3445" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.241279][T14501] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3445: bg 0: block 112: padding at end of block bitmap is not set [ 229.278410][T14501] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 229.293244][T14501] EXT4-fs (loop5): This should not happen!! Data will be lost [ 229.293244][T14501] [ 229.307426][T14501] EXT4-fs (loop5): Total free blocks count 0 [ 229.314364][T14501] EXT4-fs (loop5): Free/Dirty block details [ 229.320513][T14501] EXT4-fs (loop5): free_blocks=0 [ 229.325644][T14501] EXT4-fs (loop5): dirty_blocks=16 [ 229.331852][T14501] EXT4-fs (loop5): Block reservation details [ 229.338835][T14501] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 229.353676][T14504] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.3445: lblock 0 mapped to illegal pblock 0 (length 1) [ 229.449362][T13792] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 229.487959][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.750709][T14521] syzkaller0: entered promiscuous mode [ 229.756501][T14521] syzkaller0: entered allmulticast mode [ 229.834657][T14529] bridge1: entered promiscuous mode [ 229.840502][T14529] bridge1: entered allmulticast mode [ 230.008557][ T28] audit: type=1400 audit(1784809921.066:1116): avc: denied { map } for pid=14544 comm="syz.9.3465" path="socket:[37644]" dev="sockfs" ino=37644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 230.228890][T14569] loop6: detected capacity change from 0 to 2048 [ 230.256123][T14573] loop4: detected capacity change from 0 to 512 [ 230.281443][T14569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.297807][T14573] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3478: iget: bad i_size value: 38620345925642 [ 230.314048][T14573] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.314242][T14573] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3478: couldn't read orphan inode 15 (err -117) [ 230.323468][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 230.323485][ C0] EXT4-fs (loop4): initial error at time 1784809921: ext4_orphan_get:1399: inode 15 [ 230.323542][ C0] EXT4-fs (loop4): last error at time 1784809921: ext4_orphan_get:1399: inode 15 [ 230.360870][T14573] loop4: lost filesystem error report for type 5 error -117 [ 230.363171][T14573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.382697][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.395957][ T28] audit: type=1400 audit(1784809921.446:1117): avc: denied { write } for pid=14572 comm="syz.4.3478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.424443][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.876782][T14587] loop4: detected capacity change from 0 to 32768 [ 231.108558][T14587] loop4: p1 p3 < > [ 231.298097][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 231.309348][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.365637][ T28] audit: type=1326 audit(1784809922.426:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.3.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 231.420307][ T28] audit: type=1326 audit(1784809922.426:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.3.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 231.463421][ T28] audit: type=1326 audit(1784809922.426:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.3.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 231.512571][ T28] audit: type=1326 audit(1784809922.426:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.3.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 231.565260][ T28] audit: type=1326 audit(1784809922.476:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.3.3495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d67d4e6ce code=0x7ffc0000 [ 231.818654][T14647] netlink: 'syz.3.3503': attribute type 39 has an invalid length. [ 231.948364][T14664] bond0: (slave syz_tun): Releasing backup interface [ 231.965705][T14664] team0: Port device syz_tun added [ 231.999484][T14649] loop9: detected capacity change from 0 to 128 [ 232.029139][T14670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3512'. [ 232.030253][T14649] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.067478][T14649] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.236188][T14693] team0: Port device syz_tun added [ 232.292119][T14699] loop5: detected capacity change from 0 to 512 [ 232.309762][T14699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.495331][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.540000][T14711] loop9: detected capacity change from 0 to 4096 [ 232.571183][T14713] loop5: detected capacity change from 0 to 8192 [ 232.581715][T14711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.595481][T14713] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.667148][ T7047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.196669][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3550'. [ 233.228813][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3550'. [ 233.243872][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3550'. [ 233.269539][T14756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3550'. [ 233.385208][T14777] loop4: detected capacity change from 0 to 512 [ 233.404871][T14777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.429580][T14777] ext4 filesystem being mounted at /725/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.461205][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.518104][T14793] loop4: detected capacity change from 0 to 256 [ 233.567609][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 233.567627][ T28] audit: type=1400 audit(1784809924.626:1129): avc: denied { watch watch_reads } for pid=14791 comm="syz.4.3562" path="/726/file1" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 233.779648][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3573'. [ 233.796225][T14813] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3572'. [ 234.058439][T14830] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3580'. [ 234.099307][T14830] xfrm1: entered allmulticast mode [ 234.129453][T14830] ip6gretap1: entered promiscuous mode [ 234.228892][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'. [ 234.260952][T14859] erspan0: entered promiscuous mode [ 234.279403][T14859] macvtap1: entered promiscuous mode [ 234.287759][T14859] macvtap1: entered allmulticast mode [ 234.295866][T14859] erspan0: entered allmulticast mode [ 234.302165][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 234.355272][T14870] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 234.403794][T14870] bond4: (slave geneve4): making interface the new active one [ 234.412135][T14870] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 234.421271][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 234.431537][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 234.440712][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 234.469585][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 234.540976][T14885] loop5: detected capacity change from 0 to 1764 [ 234.856900][T14911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.903216][T14911] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3614: invalid indirect mapped block 32768 (level 2) [ 234.921345][T14911] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.921687][T14911] EXT4-fs (loop4): Remounting filesystem read-only [ 234.937929][T14911] EXT4-fs (loop4): 1 orphan inode deleted [ 234.943703][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 234.943719][ C1] EXT4-fs (loop4): initial error at time 1784809925: ext4_free_branches:1023: inode 16 [ 234.943744][ C1] EXT4-fs (loop4): last error at time 1784809925: ext4_free_branches:1023: inode 16 [ 234.971422][T14911] EXT4-fs (loop4): 1 truncate cleaned up [ 234.977522][T14911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.167176][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.260914][T14924] netlink: 'syz.4.3619': attribute type 2 has an invalid length. [ 235.272703][T14924] .d: entered promiscuous mode [ 235.698868][T14953] set_capacity_and_notify: 2 callbacks suppressed [ 235.698888][T14953] loop4: detected capacity change from 0 to 512 [ 235.713266][T14953] EXT4-fs: Ignoring removed nobh option [ 235.726410][T14953] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.738981][T14953] EXT4-fs (loop4): 1 truncate cleaned up [ 235.745611][T14953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.803871][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.065106][ T28] audit: type=1400 audit(1784809927.126:1130): avc: denied { write } for pid=14969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.094777][T14983] loop6: detected capacity change from 0 to 128 [ 236.142538][ T28] audit: type=1400 audit(1784809927.206:1131): avc: denied { write } for pid=14991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.367345][T15014] loop5: detected capacity change from 0 to 512 [ 236.385402][T15014] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.418387][T15014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 236.429512][T15014] System zones: 1-12 [ 236.458307][T15014] EXT4-fs (loop5): 1 truncate cleaned up [ 236.477873][T15014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.561728][ T28] audit: type=1400 audit(1784809927.616:1132): avc: denied { write } for pid=15013 comm="syz.5.3652" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.597296][T15014] EXT4-fs warning (device loop5): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 236.618024][ T28] audit: type=1400 audit(1784809927.626:1133): avc: denied { write } for pid=15013 comm="syz.5.3652" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.646282][T15014] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 236.721652][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.762796][ T28] audit: type=1400 audit(1784809927.826:1134): avc: denied { write } for pid=15023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.763896][T15043] loop6: detected capacity change from 0 to 128 [ 236.837553][T15043] vfat: Unknown parameter '' [ 236.879262][ T28] audit: type=1400 audit(1784809927.936:1135): avc: denied { write } for pid=15052 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.042817][ T28] audit: type=1400 audit(1784809928.106:1136): avc: denied { remount } for pid=15067 comm="syz.6.3667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 237.115524][ T28] audit: type=1326 audit(1784809928.176:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.5.3668" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 237.174794][ T28] audit: type=1326 audit(1784809928.176:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.5.3668" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 237.273116][T15086] loop4: detected capacity change from 0 to 512 [ 237.294700][T15086] EXT4-fs: Ignoring removed i_version option [ 237.319836][T15089] loop6: detected capacity change from 0 to 512 [ 237.346387][T15086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.368645][T15089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.386474][T15086] ext4 filesystem being mounted at /753/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.411948][T15089] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.501261][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.690159][T15117] syzkaller1: entered promiscuous mode [ 237.718458][T15117] syzkaller1: entered allmulticast mode [ 237.872555][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.003011][T15140] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 238.072287][T15140] gretap1: entered allmulticast mode [ 238.116569][T15140] bond4: (slave gretap1): making interface the new active one [ 238.124723][T15140] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 239.762742][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 239.762762][ T28] audit: type=1400 audit(1784809930.826:1177): avc: denied { write } for pid=15222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.878660][ T28] audit: type=1400 audit(1784809930.936:1178): avc: denied { write } for pid=15249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.143599][T15279] netlink: 'syz.9.3747': attribute type 1 has an invalid length. [ 240.187986][T15279] bond2: (slave geneve2): making interface the new active one [ 240.207157][T15279] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 240.226517][ T4169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.256969][ T4169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.278741][ T4169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.291721][ T4169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.329839][ T28] audit: type=1400 audit(1784809931.386:1179): avc: denied { lock } for pid=15282 comm="syz.9.3748" path="socket:[40933]" dev="sockfs" ino=40933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 240.384901][T15287] netlink: 'syz.3.3750': attribute type 4 has an invalid length. [ 240.415515][T15289] loop9: detected capacity change from 0 to 512 [ 240.433668][T15289] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3751: invalid indirect mapped block 256 (level 2) [ 240.435038][T15287] netlink: 'syz.3.3750': attribute type 4 has an invalid length. [ 240.447663][T15289] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.455378][T15289] EXT4-fs (loop9): 2 truncates cleaned up [ 240.464665][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 240.464681][ C1] EXT4-fs (loop9): initial error at time 1784809931: ext4_free_branches:1023: inode 11 [ 240.464716][ C1] EXT4-fs (loop9): last error at time 1784809931: ext4_free_branches:1023: inode 11 [ 240.500849][T15289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.519030][ T28] audit: type=1400 audit(1784809931.576:1180): avc: denied { write } for pid=15288 comm="syz.9.3751" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.576757][T15297] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3751: bg 0: block 5: invalid block bitmap [ 240.592812][T15297] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 240.610412][T15297] EXT4-fs (loop9): This should not happen!! Data will be lost [ 240.610412][T15297] [ 240.630288][T15297] EXT4-fs (loop9): Total free blocks count 0 [ 240.636387][T15297] EXT4-fs (loop9): Free/Dirty block details [ 240.642371][T15297] EXT4-fs (loop9): free_blocks=0 [ 240.647411][T15297] EXT4-fs (loop9): dirty_blocks=1008 [ 240.660335][T15297] EXT4-fs (loop9): Block reservation details [ 240.670315][T15297] EXT4-fs (loop9): i_reserved_data_blocks=1008 [ 240.806135][ T68] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1004 with error 28 [ 240.837018][ T7047] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 240.924769][ T28] audit: type=1400 audit(1784809931.986:1181): avc: denied { read } for pid=15304 comm="syz.9.3754" path="socket:[41989]" dev="sockfs" ino=41989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 240.936114][T15303] __nla_validate_parse: 6 callbacks suppressed [ 240.936170][T15303] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3757'. [ 241.259033][T15323] loop6: detected capacity change from 0 to 512 [ 241.300570][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3766'. [ 241.514099][T15333] loop5: detected capacity change from 0 to 512 [ 241.590878][ T28] audit: type=1400 audit(1784809932.656:1182): avc: denied { search } for pid=15340 comm="syz.3.3773" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 241.623037][T15343] loop5: detected capacity change from 0 to 512 [ 241.645173][T15345] netlink: 'syz.4.3774': attribute type 6 has an invalid length. [ 241.650537][ T28] audit: type=1400 audit(1784809932.696:1183): avc: denied { search } for pid=15340 comm="syz.3.3773" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 241.713912][T15343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.726603][T15343] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.740033][ T28] audit: type=1400 audit(1784809932.796:1184): avc: denied { write } for pid=15342 comm="syz.5.3772" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.803236][ T28] audit: type=1400 audit(1784809932.866:1185): avc: denied { write } for pid=15342 comm="syz.5.3772" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.844488][ T28] audit: type=1400 audit(1784809932.906:1186): avc: denied { connect } for pid=15357 comm="syz.9.3779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.868971][T15364] loop4: detected capacity change from 0 to 512 [ 241.892236][T15364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.909972][T15364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 241.930300][T15364] System zones: 1-12 [ 241.938967][T15364] EXT4-fs (loop4): 1 truncate cleaned up [ 241.947337][T15364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.975992][T15364] EXT4-fs warning (device loop4): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 241.992017][T15364] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 242.004341][T13792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.144600][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.633719][T15401] xt_hashlimit: size too large, truncated to 1048576 [ 243.064280][T15421] loop6: detected capacity change from 0 to 512 [ 243.082359][T15421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.353640][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.469872][T15457] syzkaller1: entered promiscuous mode [ 243.490613][T15457] syzkaller1: entered allmulticast mode [ 243.868026][T15481] loop6: detected capacity change from 0 to 256 [ 244.074234][T15485] netlink: 'syz.4.3831': attribute type 10 has an invalid length. [ 244.084553][T15485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.094309][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 244.761357][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3850'. [ 244.804134][T15527] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 244.815358][T15527] bond1: (slave ipip0): Error -95 calling set_mac_address [ 245.129971][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 245.129989][ T28] audit: type=1326 audit(1784809936.186:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.162119][ T28] audit: type=1326 audit(1784809936.186:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.211819][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3856'. [ 245.226566][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3856'. [ 245.237837][ T28] audit: type=1326 audit(1784809936.186:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.263875][ T28] audit: type=1326 audit(1784809936.186:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.293785][ T28] audit: type=1326 audit(1784809936.186:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.320015][ T28] audit: type=1326 audit(1784809936.186:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.368718][ T28] audit: type=1326 audit(1784809936.186:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.395221][ T28] audit: type=1326 audit(1784809936.186:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.424638][ T28] audit: type=1326 audit(1784809936.406:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.9.3855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b6e27de99 code=0x7ffc0000 [ 245.597297][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3869'. [ 245.621827][T15570] xfrm1: entered allmulticast mode [ 245.653018][T15570] ip6gretap1: entered promiscuous mode [ 245.676208][T15579] netlink: 'syz.4.3872': attribute type 4 has an invalid length. [ 245.691493][T15579] netlink: 'syz.4.3872': attribute type 4 has an invalid length. [ 245.824994][T15593] loop6: detected capacity change from 0 to 512 [ 245.832170][T15592] loop4: detected capacity change from 0 to 512 [ 245.857849][T15592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 245.867149][T15592] System zones: 1-12 [ 245.874453][T15592] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3878: error while reading EA inode 32 err=-116 [ 245.888578][T15592] loop4: lost filesystem error report for type 5 error -117 [ 245.889930][T15592] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3878: error while reading EA inode 32 err=-116 [ 245.897339][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 245.897362][ C1] EXT4-fs (loop4): initial error at time 1784809936: ext4_xattr_inode_iget:446 [ 245.897396][ C1] EXT4-fs (loop4): last error at time 1784809936: ext4_xattr_inode_iget:446 [ 245.934078][T15592] loop4: lost filesystem error report for type 5 error -117 [ 245.936868][T15592] EXT4-fs (loop4): 1 orphan inode deleted [ 245.952038][T15592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.967416][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3878'. [ 245.971290][T15593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.006236][T15593] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.036848][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.056186][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.304134][T15629] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3888'. [ 246.330779][T15631] netlink: 'syz.3.3889': attribute type 9 has an invalid length. [ 246.347017][T15631] netlink: 'syz.3.3889': attribute type 7 has an invalid length. [ 246.366544][T15631] netlink: 'syz.3.3889': attribute type 8 has an invalid length. [ 246.992467][ T28] audit: type=1400 audit(1784809938.056:1200): avc: denied { map } for pid=15691 comm="syz.4.3928" path="socket:[42620]" dev="sockfs" ino=42620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.097128][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 249.107506][T15607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.116565][T15661] netlink: 'syz.9.3906': attribute type 1 has an invalid length. [ 249.126151][T15661] netlink: 101600 bytes leftover after parsing attributes in process `syz.9.3906'. [ 249.338056][T15749] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3942'. [ 249.561852][ T68] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 249.667996][T15769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.908732][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3959'. [ 250.000238][T15804] gretap2: entered promiscuous mode [ 250.030799][T15806] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3965'. [ 250.051607][T15806] ip6gre2: entered promiscuous mode [ 250.058496][T15806] ip6gre2: entered allmulticast mode [ 250.065971][T15806] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3965'. [ 250.106351][T15810] syzkaller1: entered promiscuous mode [ 250.118827][T15810] syzkaller1: entered allmulticast mode [ 250.152707][T15814] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.279008][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 250.279028][ T28] audit: type=1400 audit(1784809941.336:1280): avc: denied { read } for pid=15825 comm="syz.6.3975" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.351789][ T28] audit: type=1400 audit(1784809941.336:1281): avc: denied { open } for pid=15825 comm="syz.6.3975" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.656900][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 250.679440][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3992'. [ 250.825300][T15856] loop6: detected capacity change from 0 to 1024 [ 250.879184][T15856] EXT4-fs: Ignoring removed bh option [ 250.911658][T15856] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 250.996585][T15856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.077947][ T28] audit: type=1400 audit(1784809942.126:1282): avc: denied { write } for pid=15854 comm="syz.6.3988" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.170576][T15887] __nla_validate_parse: 2 callbacks suppressed [ 251.170595][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4001'. [ 251.209623][ T28] audit: type=1400 audit(1784809942.266:1283): avc: denied { create } for pid=15888 comm="syz.5.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.317552][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.221784][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4030'. [ 252.239927][T15955] loop6: detected capacity change from 0 to 1024 [ 252.255260][T15955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.262426][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4030'. [ 252.267770][ T4169] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.271498][T15955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.287061][T15955] EXT4-fs: inline encryption not supported [ 252.302217][ T4169] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.308801][T15955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.322290][ T4169] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.342022][ T4185] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.365318][T15961] syzkaller1: entered promiscuous mode [ 252.371232][T15961] syzkaller1: entered allmulticast mode [ 252.375304][T15955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.389983][T15955] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.421056][ T28] audit: type=1400 audit(1784809943.486:1284): avc: denied { write } for pid=15954 comm="syz.6.4031" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.447443][T15955] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4031: bg 0: block 112: padding at end of block bitmap is not set [ 252.489542][T15955] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 252.502362][T15955] EXT4-fs (loop6): This should not happen!! Data will be lost [ 252.502362][T15955] [ 252.512347][T15955] EXT4-fs (loop6): Total free blocks count 0 [ 252.518412][T15955] EXT4-fs (loop6): Free/Dirty block details [ 252.524581][T15955] EXT4-fs (loop6): free_blocks=0 [ 252.529710][T15955] EXT4-fs (loop6): dirty_blocks=16 [ 252.535248][T15955] EXT4-fs (loop6): Block reservation details [ 252.541564][T15955] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 252.579935][T15976] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4039'. [ 252.597883][T15955] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.4031: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.653311][ T5850] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 252.668432][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.006252][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 253.016301][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 253.641245][T16045] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4069'. [ 253.877867][T16061] loop4: detected capacity change from 0 to 1024 [ 253.897886][T16061] EXT4-fs: Ignoring removed bh option [ 253.908941][T16061] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 253.950035][T16061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.985420][ T28] audit: type=1400 audit(1784809945.046:1285): avc: denied { write } for pid=16060 comm="syz.4.4076" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.157305][ T28] audit: type=1326 audit(1784809945.216:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16069 comm="syz.3.4080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 254.269434][ T28] audit: type=1326 audit(1784809945.216:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16069 comm="syz.3.4080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 254.378118][ T28] audit: type=1326 audit(1784809945.216:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16069 comm="syz.3.4080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 254.423092][ T28] audit: type=1326 audit(1784809945.246:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16069 comm="syz.3.4080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d67d8de99 code=0x7ffc0000 [ 254.488873][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4085'. [ 254.517504][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4085'. [ 254.568400][ T4185] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.568569][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4085'. [ 254.643691][ T4185] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.655931][ T4185] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.664894][ T4185] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.734057][T16088] netlink: 'syz.5.4088': attribute type 4 has an invalid length. [ 254.742369][T16088] netlink: 'syz.5.4088': attribute type 4 has an invalid length. [ 254.785659][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.787625][T16092] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 255.541244][T16175] loop6: detected capacity change from 0 to 1024 [ 255.557465][T16175] EXT4-fs: Ignoring removed bh option [ 255.574321][T16175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.623028][T16182] netlink: 'syz.9.4107': attribute type 9 has an invalid length. [ 255.626256][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 255.626297][ T28] audit: type=1400 audit(1784809946.686:1313): avc: denied { write } for pid=16173 comm="syz.6.4106" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.650785][T16182] netlink: 'syz.9.4107': attribute type 7 has an invalid length. [ 255.659590][ T28] audit: type=1400 audit(1784809946.706:1314): avc: denied { write } for pid=16173 comm="syz.6.4106" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.659643][ T28] audit: type=1400 audit(1784809946.706:1315): avc: denied { create } for pid=16173 comm="syz.6.4106" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 255.730096][T16182] netlink: 'syz.9.4107': attribute type 8 has an invalid length. [ 255.850843][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.869064][T16214] netlink: 'syz.3.4112': attribute type 1 has an invalid length. [ 255.897866][T16214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.952799][T16223] bond5: entered promiscuous mode [ 255.975651][T16223] bond5: entered allmulticast mode [ 256.086753][T16233] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 256.477566][ T28] audit: type=1400 audit(1784809947.536:1316): avc: denied { write } for pid=16255 comm="syz.5.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.531341][ T28] audit: type=1400 audit(1784809947.586:1317): avc: denied { connect } for pid=16257 comm="syz.9.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.552767][ T28] audit: type=1400 audit(1784809947.596:1318): avc: denied { bind } for pid=16257 comm="syz.9.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.635098][ T28] audit: type=1400 audit(1784809947.696:1319): avc: denied { setattr } for pid=16265 comm="syz.5.4131" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.774639][T16271] __nla_validate_parse: 1 callbacks suppressed [ 256.774656][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4132'. [ 256.813571][T16271] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 256.824487][T16271] bond3: (slave ipip0): Error -95 calling set_mac_address [ 256.848209][T16277] netlink: 'syz.5.4134': attribute type 9 has an invalid length. [ 256.857240][T16277] netlink: 'syz.5.4134': attribute type 7 has an invalid length. [ 256.866069][T16277] netlink: 'syz.5.4134': attribute type 8 has an invalid length. [ 256.936065][ T28] audit: type=1326 audit(1784809947.996:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.4.4139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb78de99 code=0x7ffc0000 [ 256.963048][ T28] audit: type=1326 audit(1784809948.026:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.4.4139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb78de99 code=0x7ffc0000 [ 256.991500][ T28] audit: type=1326 audit(1784809948.026:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.4.4139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56fb78de99 code=0x7ffc0000 [ 257.226676][T16292] 9p: Bad value for 'source' [ 257.405632][T16310] netlink: 'syz.4.4149': attribute type 9 has an invalid length. [ 257.517941][T16315] xt_hashlimit: size too large, truncated to 1048576 [ 257.849497][T16327] loop4: detected capacity change from 0 to 1024 [ 257.865659][T16327] EXT4-fs: Ignoring removed bh option [ 257.898975][T16327] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 257.950220][T16327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.025024][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.675510][T16350] loop6: detected capacity change from 0 to 256 [ 258.762484][T16361] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.775122][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4172'. [ 258.784934][T16361] bridge_slave_1: left allmulticast mode [ 258.790866][T16361] bridge_slave_1: left promiscuous mode [ 258.796790][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.817057][T16361] bridge_slave_0: left allmulticast mode [ 258.825805][T16361] bridge_slave_0: left promiscuous mode [ 258.832965][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.071113][T16383] hub 5-0:1.0: USB hub found [ 259.087358][T16383] hub 5-0:1.0: 8 ports detected [ 259.864159][T13301] team0: Port device syz_tun removed [ 260.005943][T16439] syzkaller1: entered promiscuous mode [ 260.011858][T16439] syzkaller1: entered allmulticast mode [ 260.093539][T16448] xt_hashlimit: size too large, truncated to 1048576 [ 260.415405][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.422785][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.430126][T16444] bridge_slave_0: entered allmulticast mode [ 260.436712][T16444] bridge_slave_0: entered promiscuous mode [ 260.443656][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.450789][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.458020][T16444] bridge_slave_1: entered allmulticast mode [ 260.464786][T16444] bridge_slave_1: entered promiscuous mode [ 260.482233][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.492906][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.511976][T16444] team0: Port device team_slave_0 added [ 260.518487][T16444] team0: Port device team_slave_1 added [ 260.533281][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.540400][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.566567][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.577908][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.584927][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.610983][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.637002][T16444] hsr_slave_0: entered promiscuous mode [ 260.643051][T16444] hsr_slave_1: entered promiscuous mode [ 260.648992][T16444] debugfs: 'hsr0' already exists in 'hsr' [ 260.654755][T16444] Cannot create hsr debugfs directory [ 260.760463][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 260.760544][ T28] audit: type=1400 audit(1784809951.826:1399): avc: denied { write } for pid=16464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.798031][ T28] audit: type=1400 audit(1784809951.856:1400): avc: denied { write } for pid=16475 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.887219][ T28] audit: type=1400 audit(1784809951.946:1401): avc: denied { write } for pid=16477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.920753][ T28] audit: type=1400 audit(1784809951.986:1402): avc: denied { write } for pid=16488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.981941][T16444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.991103][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.999179][T16444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.008358][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.016540][T16444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.027261][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.035283][ T28] audit: type=1400 audit(1784809952.096:1403): avc: denied { write } for pid=16490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.059188][T16444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.068130][T16444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.076892][ T28] audit: type=1400 audit(1784809952.136:1404): avc: denied { write } for pid=16501 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.133683][T16444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.146463][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.156369][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.163484][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.176479][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.183589][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.208293][ T28] audit: type=1400 audit(1784809952.266:1405): avc: denied { write } for pid=16509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.253729][ T28] audit: type=1400 audit(1784809952.316:1406): avc: denied { write } for pid=16522 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.348948][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.357004][ T28] audit: type=1400 audit(1784809952.416:1407): avc: denied { write } for pid=16526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.390005][ T28] audit: type=1400 audit(1784809952.446:1408): avc: denied { write } for pid=16543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.472505][T16444] veth0_vlan: entered promiscuous mode [ 261.480937][T16444] veth1_vlan: entered promiscuous mode [ 261.498059][T16444] veth0_macvtap: entered promiscuous mode [ 261.506955][T16444] veth1_macvtap: entered promiscuous mode [ 261.518715][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.532416][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.545389][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.554795][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.564838][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.574255][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.711587][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4228'. [ 261.731809][T16595] validate_nla: 8 callbacks suppressed [ 261.731832][T16595] netlink: 'syz.0.4214': attribute type 9 has an invalid length. [ 261.752332][T16595] netlink: 'syz.0.4214': attribute type 7 has an invalid length. [ 261.762311][T16595] netlink: 'syz.0.4214': attribute type 8 has an invalid length. [ 261.792400][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4217'. [ 261.810682][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4228'. [ 261.843763][T16600] macvtap2: entered promiscuous mode [ 261.854643][T16600] macvtap2: entered allmulticast mode [ 261.875722][T16608] macvtap2: left promiscuous mode [ 261.915597][T16608] macvtap2: left allmulticast mode [ 262.094066][T16637] netlink: 'syz.9.4232': attribute type 4 has an invalid length. [ 262.266587][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 262.686791][T16711] loop9: detected capacity change from 0 to 512 [ 262.740155][T16711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.775007][T16711] ext4 filesystem being mounted at /625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.858062][T16729] smc: net device lo applied user defined pnetid SYZ2 [ 262.876293][T16729] smc: net device lo erased user defined pnetid SYZ2 [ 262.945498][T16742] macvlan1: entered promiscuous mode [ 262.969113][T16742] macvlan1: left promiscuous mode [ 263.015853][ T7047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.207340][T16787] netlink: 'syz.4.4269': attribute type 1 has an invalid length. [ 263.224580][T16787] bond5: entered promiscuous mode [ 263.241552][T16787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.278369][T16787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.293493][T16787] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 263.306285][T16787] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 263.319309][T16787] bond5: (slave ip6gre3): making interface the new active one [ 263.329638][T16787] ip6gre3: entered promiscuous mode [ 263.337344][T16787] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 263.351627][T16800] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4272'. [ 263.598883][T16832] SELinux: invalid class [ 263.611029][T16832] SELinux: failed to load policy [ 263.647857][T16836] loop4: detected capacity change from 0 to 512 [ 263.664243][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4289'. [ 263.667683][T16836] EXT4-fs (loop4): 1 truncate cleaned up [ 263.679918][T16836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.695306][T16836] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4290: bg 0: block 465: padding at end of block bitmap is not set [ 263.711904][T16836] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 263.724461][T16836] EXT4-fs (loop4): This should not happen!! Data will be lost [ 263.724461][T16836] [ 263.740941][T16836] EXT4-fs (loop4): Total free blocks count 0 [ 263.755267][T16836] EXT4-fs (loop4): Free/Dirty block details [ 263.772817][T16836] EXT4-fs (loop4): free_blocks=0 [ 263.777847][T16836] EXT4-fs (loop4): dirty_blocks=9 [ 263.783274][T16836] EXT4-fs (loop4): Block reservation details [ 263.789312][T16836] EXT4-fs (loop4): i_reserved_data_blocks=9 [ 263.975638][T16771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.779710][ T3303] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 264.809489][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.922984][T16886] netlink: 71 bytes leftover after parsing attributes in process `syz.9.4309'. [ 265.116580][T16903] xt_hashlimit: size too large, truncated to 1048576 [ 265.256977][T16915] loop4: detected capacity change from 0 to 512 [ 265.266028][T16915] EXT4-fs: Ignoring removed orlov option [ 265.284009][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.4319: corrupted inode contents [ 265.296028][T16915] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 265.297069][T16915] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #3: comm syz.4.4319: mark_inode_dirty error [ 265.306160][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 265.306175][ C1] EXT4-fs (loop4): initial error at time 1784809956: ext4_do_update_inode:5742: inode 3 [ 265.306210][ C1] EXT4-fs (loop4): last error at time 1784809956: ext4_do_update_inode:5742: inode 3 [ 265.343714][T16915] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 265.344254][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.4319: corrupted inode contents [ 265.366353][T16915] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 265.366521][T16915] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.4319: mark_inode_dirty error [ 265.388025][T16915] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 265.388537][T16915] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4319: Failed to acquire dquot type 0 [ 265.408988][T16915] loop4: lost filesystem error report for type 5 error -117 [ 265.409885][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.4319: corrupted inode contents [ 265.435177][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.435349][T16915] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.4319: mark_inode_dirty error [ 265.456573][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.458536][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.4319: corrupted inode contents [ 265.479625][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.479788][T16915] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.4319: mark_inode_dirty error [ 265.502217][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.502371][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.4319: corrupted inode contents [ 265.546045][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.546199][T16915] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 265.564112][T16915] loop4: lost filesystem error report for type 5 error -117 [ 265.564310][T16915] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.4319: corrupted inode contents [ 265.584119][T16915] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 265.584349][T16915] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.4319: mark_inode_dirty error [ 265.604970][T16915] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 265.615730][T16915] loop4: lost filesystem error report for type 5 error -117 [ 265.616076][T16915] EXT4-fs (loop4): 1 truncate cleaned up [ 265.629636][T16915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.642306][T16915] ext4 filesystem being mounted at /895/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.687594][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.733792][T16937] loop4: detected capacity change from 0 to 128 [ 265.756305][T16937] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.770236][T16937] ext4 filesystem being mounted at /896/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.785035][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 265.785104][ T28] audit: type=1400 audit(1784809956.846:1457): avc: denied { write } for pid=16936 comm="syz.4.4326" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.824403][ T28] audit: type=1400 audit(1784809956.846:1458): avc: denied { write } for pid=16936 comm="syz.4.4326" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.862416][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.887911][ T28] audit: type=1400 audit(1784809956.846:1459): avc: denied { create } for pid=16936 comm="syz.4.4326" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 265.935623][ T28] audit: type=1400 audit(1784809956.856:1460): avc: denied { setattr } for pid=16936 comm="syz.4.4326" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 265.958600][ T28] audit: type=1400 audit(1784809956.856:1461): avc: denied { write } for pid=16936 comm="syz.4.4326" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.982498][ T28] audit: type=1400 audit(1784809956.916:1462): avc: denied { unmount } for pid=16444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 266.607644][ T28] audit: type=1326 audit(1784809957.666:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16992 comm="syz.5.4350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 266.663155][ T28] audit: type=1326 audit(1784809957.666:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16992 comm="syz.5.4350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 266.695494][T16997] syz_tun: entered allmulticast mode [ 266.708116][T16996] syz_tun: left allmulticast mode [ 266.729160][ T28] audit: type=1326 audit(1784809957.666:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16992 comm="syz.5.4350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 266.785320][ T28] audit: type=1326 audit(1784809957.666:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16992 comm="syz.5.4350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f958fedde99 code=0x7ffc0000 [ 268.349297][T17058] loop4: detected capacity change from 0 to 128 [ 268.379361][T17060] netlink: 'syz.5.4378': attribute type 1 has an invalid length. [ 268.422027][T17058] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 268.444219][T17066] netlink: 'syz.3.4379': attribute type 39 has an invalid length. [ 268.457297][T17060] bond2: entered promiscuous mode [ 268.468688][T17060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.512104][T17067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.520696][T17058] ext4 filesystem being mounted at /903/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.541161][T17067] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 268.582154][T17067] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 268.595108][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.605763][T17067] bond2: (slave vti0): making interface the new active one [ 268.642412][T17067] vti0: entered promiscuous mode [ 268.648337][T17077] netlink: 'syz.3.4384': attribute type 1 has an invalid length. [ 268.660764][T17067] bond2: (slave vti0): Enslaving as an active interface with an up link [ 268.661209][T17077] netlink: 'syz.3.4384': attribute type 4 has an invalid length. [ 268.676869][T17071] macvlan2: entered promiscuous mode [ 268.676908][T17071] bridge0: entered promiscuous mode [ 268.689770][T17076] loop4: detected capacity change from 0 to 512 [ 268.703814][T17077] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4384'. [ 268.716903][T17076] EXT4-fs: Ignoring removed bh option [ 268.732462][T17080] netlink: 'syz.3.4384': attribute type 1 has an invalid length. [ 268.745499][T17080] netlink: 'syz.3.4384': attribute type 4 has an invalid length. [ 268.755229][T17076] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 268.765427][T17080] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4384'. [ 268.790431][T17076] EXT4-fs (loop4): 1 truncate cleaned up [ 268.812209][T17076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.343958][T16976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.768392][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.027632][T17155] loop4: detected capacity change from 0 to 512 [ 270.046998][T17155] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.068326][T17155] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 270.100337][T17155] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4415: Corrupt directory, running e2fsck is recommended [ 270.114318][T17155] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 270.129287][T17155] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4415: corrupted in-inode xattr: invalid ea_ino [ 270.155599][T17155] EXT4-fs (loop4): Remounting filesystem read-only [ 270.162208][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 270.162234][ C1] EXT4-fs (loop4): initial error at time 1784809961: ext4_iget_extra_inode:5180: inode 15 [ 270.162286][ C1] EXT4-fs (loop4): last error at time 1784809961: ext4_iget_extra_inode:5180: inode 15 [ 270.193782][T17155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.218890][T17155] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.242587][T17155] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 270.259343][T17155] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4415: Corrupt directory, running e2fsck is recommended [ 270.274095][T17163] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.297298][T17163] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 270.323193][T17163] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4415: Corrupt directory, running e2fsck is recommended [ 270.359413][T17155] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.384771][T17155] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 270.405906][T17155] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4415: Corrupt directory, running e2fsck is recommended [ 270.420186][T17163] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.457918][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.597234][T17177] loop4: detected capacity change from 0 to 2048 [ 270.634932][T17181] netlink: 'syz.3.4425': attribute type 18 has an invalid length. [ 270.643139][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 270.661133][T17177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.690748][T17181] netlink: 'syz.3.4425': attribute type 18 has an invalid length. [ 270.698752][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 270.754443][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.815992][T17166] loop9: detected capacity change from 0 to 32768 [ 270.863331][T17166] loop9: p1 p3 < > [ 270.896649][T17193] netlink: 'syz.0.4428': attribute type 4 has an invalid length. [ 270.968696][T17193] netlink: 'syz.0.4428': attribute type 4 has an invalid length. [ 270.988638][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 270.999672][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 271.254424][T17211] loop4: detected capacity change from 0 to 512 [ 271.264692][T17211] FAT-fs (loop4): bogus number of FAT sectors [ 271.291980][T17211] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 271.315452][T17211] FAT-fs (loop4): Can't find a valid FAT filesystem [ 271.324965][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4440'. [ 271.609043][T17231] loop9: detected capacity change from 0 to 512 [ 271.641997][T17231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.764361][T17231] ext4 filesystem being mounted at /658/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.818486][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 271.818572][ T28] audit: type=1400 audit(1784809962.876:1492): avc: denied { write } for pid=17230 comm="syz.9.4446" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.901086][ T7047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.959308][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4452'. [ 272.031328][T17255] loop9: detected capacity change from 0 to 1024 [ 272.041123][T17255] EXT4-fs: Ignoring removed bh option [ 272.066547][T17255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.084616][ T28] audit: type=1400 audit(1784809963.146:1493): avc: denied { write } for pid=17254 comm="syz.9.4456" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.107811][ T28] audit: type=1400 audit(1784809963.146:1494): avc: denied { write } for pid=17254 comm="syz.9.4456" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.183988][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 272.213795][ T7047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.366249][T17292] loop9: detected capacity change from 0 to 512 [ 272.382619][T17292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.402470][ T28] audit: type=1400 audit(1784809963.466:1495): avc: denied { write } for pid=17291 comm="syz.9.4462" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.586426][ T7047] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.917710][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4466'. [ 274.158732][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 274.198384][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 274.852079][T17472] netlink: 180904 bytes leftover after parsing attributes in process `syz.3.4508'. [ 274.879164][T17472] netlink: zone id is out of range [ 275.749179][ T28] audit: type=1400 audit(1784809966.806:1496): avc: denied { map_create } for pid=17487 comm="syz.5.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.785711][ T28] audit: type=1400 audit(1784809966.806:1497): avc: denied { map_read map_write } for pid=17487 comm="syz.5.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.827812][ T28] audit: type=1400 audit(1784809966.826:1498): avc: denied { prog_load } for pid=17487 comm="syz.5.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.849214][ T4160] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.861766][ T28] audit: type=1400 audit(1784809966.826:1499): avc: denied { bpf } for pid=17487 comm="syz.5.4518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.872511][ T4160] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.898550][ T28] audit: type=1400 audit(1784809966.826:1500): avc: denied { perfmon } for pid=17487 comm="syz.5.4518" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.924094][ T28] audit: type=1400 audit(1784809966.836:1501): avc: denied { prog_run } for pid=17487 comm="syz.5.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.991587][ T4160] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.007542][ T4160] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 276.217179][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.224958][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.232204][T17501] bridge_slave_0: entered allmulticast mode [ 276.239181][T17501] bridge_slave_0: entered promiscuous mode [ 276.246056][T17501] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.253272][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.260807][T17501] bridge_slave_1: entered allmulticast mode [ 276.267656][T17501] bridge_slave_1: entered promiscuous mode [ 276.287806][T17501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.298720][T17501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.321372][T17501] team0: Port device team_slave_0 added [ 276.328278][T17501] team0: Port device team_slave_1 added [ 276.346443][T17501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.353574][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.379675][T17501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.391111][T17501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.398132][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.424241][T17501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.453760][T17501] hsr_slave_0: entered promiscuous mode [ 276.484775][T17501] hsr_slave_1: entered promiscuous mode [ 276.490787][T17501] debugfs: 'hsr0' already exists in 'hsr' [ 276.496628][T17501] Cannot create hsr debugfs directory [ 276.912105][ T4160] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.924700][ T4160] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 276.963660][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 276.963680][ T28] audit: type=1400 audit(1784809968.026:1529): avc: denied { search } for pid=17545 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.005961][ T4160] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.024792][ T4160] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 277.033571][ T28] audit: type=1400 audit(1784809968.026:1530): avc: denied { search } for pid=17545 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.087401][ T28] audit: type=1400 audit(1784809968.026:1531): avc: denied { search } for pid=17545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.148391][ T28] audit: type=1400 audit(1784809968.026:1532): avc: denied { search } for pid=17545 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.201634][ T28] audit: type=1400 audit(1784809968.026:1533): avc: denied { read } for pid=17547 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.254794][ T28] audit: type=1400 audit(1784809968.026:1534): avc: denied { read open } for pid=17547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.302931][ T28] audit: type=1400 audit(1784809968.026:1535): avc: denied { getattr } for pid=17547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.329155][ T4160] bridge_slave_1: left allmulticast mode [ 277.335854][ T4160] bridge_slave_1: left promiscuous mode [ 277.346867][ T4160] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.362828][ T28] audit: type=1400 audit(1784809968.026:1536): avc: denied { getattr } for pid=17547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.391248][ T28] audit: type=1400 audit(1784809968.066:1537): avc: denied { read } for pid=17549 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.413491][ T4160] bridge_slave_0: left allmulticast mode [ 277.419296][ T4160] bridge_slave_0: left promiscuous mode [ 277.427407][ T4160] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.440197][ T28] audit: type=1400 audit(1784809968.066:1538): avc: denied { open } for pid=17549 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.531056][ T4160] erspan0 (unregistering): left allmulticast mode [ 277.537683][ T4160] erspan0 (unregistering): left promiscuous mode [ 277.574679][ T4160] bond1 (unregistering): (slave gretap1): Releasing active interface [ 277.602761][ T4160] bond2 (unregistering): (slave geneve2): Releasing active interface [ 277.637688][ T4160]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.655038][ T4160]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.666636][ T4160]  (unregistering): Released all slaves [ 277.683054][ T4160] bond1 (unregistering): Released all slaves [ 277.692056][ T4160] bond0 (unregistering): Released all slaves [ 277.703081][ T4160] bond2 (unregistering): Released all slaves [ 277.724451][T17594] ªªªªªª: renamed from vlan0 [ 277.919864][ T4160] team0 (unregistering): Port device team_slave_1 removed [ 278.538465][T17501] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.549964][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.560876][T17501] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 278.574195][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.584692][T17501] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.598898][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.608218][T17501] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.617812][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.692076][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.719008][T17501] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.738107][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.745241][ T4169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.765909][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.773162][ T4160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.981764][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 279.019370][T17501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.308644][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 279.368980][T17501] veth0_vlan: entered promiscuous mode [ 279.378423][T17782] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.4573'. [ 279.396921][T17501] veth1_vlan: entered promiscuous mode [ 279.445423][T17501] veth0_macvtap: entered promiscuous mode [ 279.473549][T17501] veth1_macvtap: entered promiscuous mode [ 279.518243][T17797] validate_nla: 1 callbacks suppressed [ 279.518264][T17797] netlink: 'syz.5.4576': attribute type 12 has an invalid length. [ 279.539737][T17793] xt_hashlimit: max too large, truncated to 1048576 [ 279.563218][T17501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.580831][T17501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.588331][T17802] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 279.606133][ T4175] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.615089][ T4175] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.644500][ T4175] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.677034][ T4175] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.706356][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 280.354861][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.378238][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.539357][T17870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.568150][T17870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.588288][T17870] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 280.612129][T17899] loop7: detected capacity change from 0 to 512 [ 280.633667][T17870] veth1_vlan: left promiscuous mode [ 280.663790][T17870] veth0_vlan: left promiscuous mode [ 280.664630][T17899] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 280.681930][T17870] veth0_vlan: entered promiscuous mode [ 280.692329][T17870] veth1_vlan: entered promiscuous mode [ 280.710226][T17870] veth1_macvtap: left promiscuous mode [ 280.717628][T17899] EXT4-fs (loop7): 1 truncate cleaned up [ 280.728184][T17870] veth0_macvtap: left promiscuous mode [ 280.734490][T17870] veth0_macvtap: entered promiscuous mode [ 280.755430][T17899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.757043][T17870] veth1_macvtap: entered promiscuous mode [ 280.789513][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.806488][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.831580][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.848128][T17870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.858542][T17501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.946510][T17870] veth0_to_team: entered promiscuous mode [ 280.974809][T17870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.986354][T17870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.011706][T17870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.149874][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 281.175162][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.197315][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.245028][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.268550][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.934149][T17990] netlink: zone id is out of range [ 281.956941][T17994] netlink: 'syz.7.4618': attribute type 1 has an invalid length. [ 281.991689][T17994] netlink: 16179 bytes leftover after parsing attributes in process `syz.7.4618'. [ 282.016543][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 282.016594][ T28] audit: type=1400 audit(1784809973.076:1636): avc: denied { write } for pid=17997 comm="syz.4.4619" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 282.115233][ T28] audit: type=1400 audit(1784809973.116:1637): avc: denied { mmap_zero } for pid=17997 comm="syz.4.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 282.183896][T18007] netlink: 'syz.5.4621': attribute type 3 has an invalid length. [ 282.195220][ T28] audit: type=1400 audit(1784809973.256:1638): avc: denied { write } for pid=17988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.210535][T18007] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.4621'. [ 282.276977][ T28] audit: type=1400 audit(1784809973.326:1639): avc: denied { ioctl } for pid=18013 comm="syz.3.4623" path="socket:[50637]" dev="sockfs" ino=50637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.378480][ T28] audit: type=1400 audit(1784809973.376:1640): avc: denied { write } for pid=18016 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.440014][ T28] audit: type=1400 audit(1784809973.376:1641): avc: denied { bind } for pid=18013 comm="syz.3.4623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.483136][ T28] audit: type=1400 audit(1784809973.376:1642): avc: denied { write } for pid=18013 comm="syz.3.4623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.595074][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4629'. [ 282.618682][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4629'. [ 282.650328][ T28] audit: type=1400 audit(1784809973.706:1643): avc: denied { mount } for pid=18037 comm="syz.3.4630" name="/" dev="autofs" ino=50658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 282.729217][ T28] audit: type=1400 audit(1784809973.746:1644): avc: denied { mount } for pid=18040 comm="syz.7.4631" name="/" dev="ramfs" ino=51349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 282.816266][ T28] audit: type=1400 audit(1784809973.866:1645): avc: denied { listen } for pid=18045 comm="syz.3.4633" lport=60207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 284.258579][T18126] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 284.325041][T18126] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 284.340175][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4663'. [ 284.350121][T18126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.354020][T18129] loop7: detected capacity change from 0 to 512 [ 284.437292][T18141] loop4: detected capacity change from 0 to 256 [ 284.514581][T18129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.565666][T18129] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.648180][T17501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.684837][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4676'. [ 284.701399][T18156] vlan2: entered promiscuous mode [ 284.718893][T18156] bond0: entered promiscuous mode [ 284.735499][T18156] bond_slave_0: entered promiscuous mode [ 284.743558][T18156] bond_slave_1: entered promiscuous mode [ 285.846263][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4691'. [ 286.008788][T18198] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.4692'. [ 286.413013][T18213] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4696'. [ 286.682658][T18228] sit0: entered allmulticast mode [ 286.717040][T18228] sit0: entered promiscuous mode [ 287.110081][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4707'. [ 287.432084][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 287.432101][ T28] audit: type=1400 audit(1784809978.496:1670): avc: denied { read } for pid=18245 comm="syz.4.4714" name="event3" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.433428][T18247] xt_hashlimit: max too large, truncated to 1048576 [ 287.438341][ T28] audit: type=1400 audit(1784809978.496:1671): avc: denied { open } for pid=18245 comm="syz.4.4714" path="/dev/input/event3" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.487303][T18250] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 287.628282][ T28] audit: type=1400 audit(1784809978.686:1672): avc: denied { connect } for pid=18255 comm="syz.0.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.688638][ T28] audit: type=1400 audit(1784809978.746:1673): avc: denied { setopt } for pid=18258 comm="syz.5.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.761689][ T28] audit: type=1400 audit(1784809978.746:1674): avc: denied { connect } for pid=18258 comm="syz.5.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.810332][T18264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4719'. [ 287.821437][T18266] syzkaller0: entered promiscuous mode [ 287.827055][T18266] syzkaller0: entered allmulticast mode [ 287.927079][T18270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4722'. [ 287.985778][ T28] audit: type=1400 audit(1784809979.046:1675): avc: denied { read } for pid=18274 comm="syz.5.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.038030][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 288.047147][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 288.066926][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 288.076250][ T4160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.085280][ T4160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.109440][ T4160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.144621][ T4160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.210088][T18291] netlink: 'syz.7.4729': attribute type 13 has an invalid length. [ 288.256829][ T28] audit: type=1400 audit(1784809979.306:1676): avc: denied { setopt } for pid=18287 comm="syz.5.4730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 288.518828][ T28] audit: type=1400 audit(1784809979.576:1677): avc: denied { create } for pid=18309 comm="syz.5.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.546911][T18310] lo: Caught tx_queue_len zero misconfig [ 288.667246][ T28] audit: type=1400 audit(1784809979.726:1678): avc: denied { create } for pid=18317 comm="syz.4.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 288.695188][ T28] audit: type=1400 audit(1784809979.756:1679): avc: denied { connect } for pid=18317 comm="syz.4.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 289.179097][T18389] netlink: 'syz.0.4755': attribute type 1 has an invalid length. [ 289.196600][T18389] bond1: entered promiscuous mode [ 289.202486][T18389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.230132][T18389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.237700][T18389] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 289.256407][T18389] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 289.281264][T18389] bond1: (slave ip6gre1): making interface the new active one [ 289.290388][T18389] ip6gre1: entered promiscuous mode [ 289.298067][T18389] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 289.739862][T18457] loop7: detected capacity change from 0 to 512 [ 289.812723][T18457] FAT-fs (loop7): bogus number of FAT sectors [ 289.819464][T18457] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 289.830825][T18457] FAT-fs (loop7): Can't find a valid FAT filesystem [ 289.842950][T18472] netlink: 'syz.5.4768': attribute type 1 has an invalid length. [ 289.882214][T18472] bond3: (slave geneve2): making interface the new active one [ 289.890150][T18472] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 289.899084][ T4157] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.909693][ T4157] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.920137][ T4157] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.929274][ T4157] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 289.970516][T18482] xt_socket: unknown flags 0x4c [ 290.464172][T18519] loop7: detected capacity change from 0 to 128 [ 290.480880][T18519] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 290.522327][T18519] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.600840][T17501] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.719635][T18532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18532 comm=syz.7.4794 [ 290.745033][T18532] netlink: 'syz.7.4794': attribute type 1 has an invalid length. [ 290.771575][T18532] bond1: (slave ip6erspan0): making interface the new active one [ 290.795127][T18532] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 290.931050][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811d7f8000: rx timeout, send abort [ 290.939668][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811d7f8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.357935][T18615] veth1_to_bond: entered allmulticast mode [ 292.392862][T18615] veth1_to_bond: entered promiscuous mode [ 292.415165][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.422568][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.432140][T18590] bridge_slave_0: entered allmulticast mode [ 292.446435][T18590] bridge_slave_0: entered promiscuous mode [ 292.462039][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.475953][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.507851][T18590] bridge_slave_1: entered allmulticast mode [ 292.509202][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 292.509240][ T28] audit: type=1400 audit(1784809983.566:1715): avc: denied { mounton } for pid=18623 comm="syz.5.4830" path="/321/file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.537583][T18590] bridge_slave_1: entered promiscuous mode [ 292.613882][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.924291][T18634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.976018][T18634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.016475][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.037215][T18638] __nla_validate_parse: 4 callbacks suppressed [ 293.037244][T18638] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4833'. [ 293.085454][T18590] team0: Port device team_slave_0 added [ 293.103149][T18590] team0: Port device team_slave_1 added [ 293.134084][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.150780][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.214025][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.244979][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.267309][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.319675][ T28] audit: type=1400 audit(1784809984.376:1716): avc: denied { write } for pid=18670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.353953][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.408196][ T28] audit: type=1400 audit(1784809984.466:1717): avc: denied { write } for pid=18696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.518723][T18590] hsr_slave_0: entered promiscuous mode [ 293.543926][T18590] hsr_slave_1: entered promiscuous mode [ 293.581611][T18590] debugfs: 'hsr0' already exists in 'hsr' [ 293.590608][T18590] Cannot create hsr debugfs directory [ 293.676217][ T28] audit: type=1326 audit(1784809984.736:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18733 comm="syz.5.4842" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f958fedde99 code=0x0 [ 293.797031][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4846'. [ 293.845242][ T28] audit: type=1400 audit(1784809984.906:1719): avc: denied { write } for pid=18742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.897088][ T28] audit: type=1400 audit(1784809984.956:1720): avc: denied { write } for pid=18758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.029617][ T28] audit: type=1400 audit(1784809985.086:1721): avc: denied { write } for pid=18765 comm="syz.7.4848" path="socket:[52944]" dev="sockfs" ino=52944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 294.070626][T18770] loop4: detected capacity change from 0 to 512 [ 294.080008][T18770] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 294.089629][T18770] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.4849: invalid block [ 294.107138][T18770] fserror_report: 2 callbacks suppressed [ 294.107152][T18770] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 294.116350][T18770] EXT4-fs (loop4): 1 truncate cleaned up [ 294.125593][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 294.125626][ C0] EXT4-fs (loop4): initial error at time 1784809985: ext4_get_branch:178: inode 13: block 1024 [ 294.125696][ C0] EXT4-fs (loop4): last error at time 1784809985: ext4_get_branch:178: inode 13: block 1024 [ 294.159483][T18770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.172932][T18774] loop7: detected capacity change from 0 to 128 [ 294.197202][ T28] audit: type=1400 audit(1784809985.256:1722): avc: denied { write } for pid=18761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.230094][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.272034][ T28] audit: type=1400 audit(1784809985.306:1723): avc: denied { write } for pid=18779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.325631][T18590] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 294.364284][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.385135][T18590] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 294.405218][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.426278][T18590] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 294.454516][ T28] audit: type=1400 audit(1784809985.506:1724): avc: denied { write } for pid=18787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.488070][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.500136][T18590] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 294.533497][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.674491][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.738697][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.765713][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.772852][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.795924][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.803150][ T4188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.216185][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.400174][T18590] veth0_vlan: entered promiscuous mode [ 295.408514][T18590] veth1_vlan: entered promiscuous mode [ 295.429397][T18590] veth0_macvtap: entered promiscuous mode [ 295.437424][T18590] veth1_macvtap: entered promiscuous mode [ 295.453066][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.465455][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.477433][ T407] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.486722][ T407] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.496395][ T407] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.506962][ T407] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.523672][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.568140][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.607342][T18981] loop4: detected capacity change from 0 to 512 [ 295.619706][T18982] loop7: detected capacity change from 0 to 512 [ 295.645901][T18982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.659375][T18981] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.4874: iget: bad extra_isize 90 (inode size 256) [ 295.683312][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.689944][T18981] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.696037][T18981] EXT4-fs (loop4): Remounting filesystem read-only [ 295.705254][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 295.705281][ C1] EXT4-fs (loop4): initial error at time 1784809986: ext4_xattr_inode_iget:441: inode 11 [ 295.705321][ C1] EXT4-fs (loop4): last error at time 1784809986: ext4_xattr_inode_iget:441: inode 11 [ 295.741386][T18981] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 295.753825][T18982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.768487][T18982] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.793356][T18981] EXT4-fs (loop4): 1 orphan inode deleted [ 295.800865][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.812799][T18981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.837112][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.846562][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.882643][T17501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.013630][ T68] bridge_slave_1: left allmulticast mode [ 296.024492][T19024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4868'. [ 296.026737][ T68] bridge_slave_1: left promiscuous mode [ 296.052915][T19024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4868'. [ 296.059012][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.137647][ T68] bridge_slave_0: left allmulticast mode [ 296.150584][ T68] bridge_slave_0: left promiscuous mode [ 296.156830][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.244360][ T68] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 296.252766][ T68] ip6gre1 (unregistering): left promiscuous mode [ 296.287663][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.298259][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.314058][ T68] bond0 (unregistering): Released all slaves [ 296.322523][ T68] bond1 (unregistering): Released all slaves [ 296.375992][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.487012][ T68] hsr_slave_0: left promiscuous mode [ 296.499317][ T68] hsr_slave_1: left promiscuous mode [ 296.515886][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.543579][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.574584][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.585542][T19062] loop7: detected capacity change from 0 to 128 [ 296.593763][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.613539][T19062] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.637490][ T68] veth1_macvtap: left promiscuous mode [ 296.645713][ T68] veth0_macvtap: left promiscuous mode [ 296.651676][T19062] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.662203][ T68] veth1_vlan: left promiscuous mode [ 296.668671][ T68] veth0_vlan: left promiscuous mode [ 296.780000][T17501] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.025128][ T68] team0 (unregistering): Port device team_slave_1 removed [ 297.063391][ T68] team0 (unregistering): Port device team_slave_0 removed [ 297.362311][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4891'. [ 297.554279][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 297.554306][ T28] audit: type=1400 audit(1784809988.616:1762): avc: denied { mount } for pid=19137 comm="syz.3.4908" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 297.620199][ T28] audit: type=1400 audit(1784809988.646:1763): avc: denied { write } for pid=19120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.694334][ T28] audit: type=1400 audit(1784809988.716:1764): avc: denied { write } for pid=19141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.883047][ T28] audit: type=1400 audit(1784809988.936:1765): avc: denied { write } for pid=19149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.990460][ T28] audit: type=1400 audit(1784809989.046:1766): avc: denied { write } for pid=19165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.174535][ T28] audit: type=1400 audit(1784809989.236:1767): avc: denied { write } for pid=19177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.246046][ T28] audit: type=1400 audit(1784809989.306:1768): avc: denied { write } for pid=19188 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.414621][ T28] audit: type=1400 audit(1784809989.476:1769): avc: denied { write } for pid=19196 comm="syz.8.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.464645][ T28] audit: type=1400 audit(1784809989.516:1770): avc: denied { write } for pid=19194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.501575][ T28] audit: type=1400 audit(1784809989.566:1771): avc: denied { write } for pid=19208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.567828][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 298.603502][T19211] netlink: 'syz.8.4911': attribute type 3 has an invalid length. [ 298.637497][T19211] netlink: 'syz.8.4911': attribute type 1 has an invalid length. [ 298.681386][T19211] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.4911'. [ 298.769390][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 298.964875][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 299.226234][T19297] uprobe: syz.3.4936:19297 failed to unregister, leaking uprobe [ 299.293147][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4940'. [ 299.485492][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 299.497706][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 299.915144][T19327] loop7: detected capacity change from 0 to 512 [ 299.923320][T19327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.944351][T19327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.957202][T19327] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.126186][T19326] ================================================================== [ 300.134356][T19326] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 300.143053][T19326] [ 300.145401][T19326] write to 0xffff88811cdb0e20 of 8 bytes by task 19331 on cpu 0: [ 300.153147][T19326] shmem_file_splice_read+0x401/0x590 [ 300.158604][T19326] splice_direct_to_actor+0x261/0x680 [ 300.164022][T19326] do_splice_direct+0x119/0x1a0 [ 300.168906][T19326] do_sendfile+0x37d/0x640 [ 300.173350][T19326] __x64_sys_sendfile64+0x105/0x150 [ 300.178578][T19326] x64_sys_call+0x2dc4/0x3020 [ 300.183288][T19326] do_syscall_64+0x136/0x3c0 [ 300.187903][T19326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.193819][T19326] [ 300.196162][T19326] write to 0xffff88811cdb0e20 of 8 bytes by task 19326 on cpu 1: [ 300.203908][T19326] shmem_file_splice_read+0x401/0x590 [ 300.209340][T19326] splice_direct_to_actor+0x261/0x680 [ 300.214730][T19326] do_splice_direct+0x119/0x1a0 [ 300.219594][T19326] do_sendfile+0x37d/0x640 [ 300.224038][T19326] __x64_sys_sendfile64+0x105/0x150 [ 300.229266][T19326] x64_sys_call+0x2dc4/0x3020 [ 300.233965][T19326] do_syscall_64+0x136/0x3c0 [ 300.238573][T19326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.244480][T19326] [ 300.246826][T19326] value changed: 0x0000000000003066 -> 0x000000000000306d [ 300.253939][T19326] [ 300.256298][T19326] Reported by Kernel Concurrency Sanitizer on: [ 300.262475][T19326] CPU: 1 UID: 0 PID: 19326 Comm: syz.3.4948 Not tainted syzkaller #0 PREEMPT(lazy) [ 300.271876][T19326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 300.281946][T19326] ================================================================== [ 300.319746][T17501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.909311][T19252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.029914][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16