last executing test programs: 11m17.355114509s ago: executing program 32 (id=1197): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r0, 0x50) syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) 10m30.06730189s ago: executing program 33 (id=2445): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 9m35.767225387s ago: executing program 34 (id=3638): fsopen(&(0x7f0000000340)='configfs\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000003c0)) 9m12.486264466s ago: executing program 35 (id=4007): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x4, 0xfffffffe}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 9m7.290290447s ago: executing program 36 (id=4297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x7000, 0x0, 0x3) 9m5.540422271s ago: executing program 37 (id=4111): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x8}}, {@nogrpid}, {@quota}]}, 0xfc, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 7m17.086713441s ago: executing program 38 (id=6881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x6, 0xf, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x10000, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m51.561372359s ago: executing program 39 (id=7508): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 6m27.527377762s ago: executing program 40 (id=7726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 5m52.706140497s ago: executing program 41 (id=8753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4m34.614739139s ago: executing program 42 (id=10227): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create(0x7d95) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002028}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r0, 0x7866) shutdown(r0, 0x0) 3m36.571955377s ago: executing program 43 (id=10937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x2}) 3m20.693402746s ago: executing program 44 (id=11133): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="4c83", 0x2, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 2m48.248569776s ago: executing program 45 (id=11440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 2m4.189023743s ago: executing program 46 (id=12024): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0x4004030}, 0x24040084) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 1m52.446143835s ago: executing program 47 (id=12345): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) socket(0x200000000000011, 0x2, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 1m46.155479819s ago: executing program 48 (id=12441): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m14.690300268s ago: executing program 49 (id=12900): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) fadvise64(0xffffffffffffffff, 0x4a7, 0x80, 0x0) chroot(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x2}, 0x1112, 0x2, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x2) 44.411027341s ago: executing program 7 (id=13341): getpid() socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 44.014020684s ago: executing program 7 (id=13348): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 44.007576574s ago: executing program 7 (id=13350): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 43.967414765s ago: executing program 7 (id=13351): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 43.661022655s ago: executing program 7 (id=13354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x4000, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 43.125678671s ago: executing program 7 (id=13370): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 43.093764652s ago: executing program 50 (id=13370): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 41.53809117s ago: executing program 2 (id=13379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x150d, 0x103) 41.450210983s ago: executing program 2 (id=13381): move_pages(0x0, 0x200000000000003d, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 39.052863877s ago: executing program 5 (id=13406): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2000000006, 0x0, 0xc9b, 0x1000000dd43, 0x10000000004, 0x3c, 0x27, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 38.972356799s ago: executing program 5 (id=13407): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000713000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff78}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000e"], 0x50) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) 38.888443462s ago: executing program 5 (id=13408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 38.861714253s ago: executing program 5 (id=13409): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 38.835876773s ago: executing program 5 (id=13410): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 38.178367623s ago: executing program 5 (id=13420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) write$sndseq(r0, &(0x7f0000000200)=[{0x8, 0x3, 0x5, 0x9, @tick=0x7fff, {0x8, 0x3}, {0x0, 0x87}, @note={0x5, 0xb5, 0xff, 0xa4, 0x8}}], 0x1c) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 38.178227273s ago: executing program 51 (id=13420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) write$sndseq(r0, &(0x7f0000000200)=[{0x8, 0x3, 0x5, 0x9, @tick=0x7fff, {0x8, 0x3}, {0x0, 0x87}, @note={0x5, 0xb5, 0xff, 0xa4, 0x8}}], 0x1c) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 32.796757099s ago: executing program 2 (id=13486): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x28}}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 31.748321402s ago: executing program 2 (id=13495): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000300)={[{@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0xff, 0x49c, &(0x7f0000005fc0)="$eJzs3M9vFFUcAPDvTFt+QwsiCoJW0Uj80dKCysGDGk08aGKiBzzWtiCyUENrIqTRYgweDYl349HEv8CbF6MejIlXTTwaEqKNCcWLa2Z3hi7b3e0PWha6n0+y3ffmR9/77szbffPezgbQsfqzP0nEtoj4LSJ6q9mbN+ivPs3NTo9en50eTaJcfvOvpLLdtdnp0WLTYr+teeZQGpF+msQLycJyJ89fOD1SKo2fy/ODU2feH5w8f+HpU2dGTo6fHD87fOzY0SNDzz07/MyqxJnFdW3fRxP797769uXXR49ffufHb7Jq7TlQXV8bx6KuNwiogf7sVfu7XFG/7rFl1P1usL0mnXS3sSIsS1dEZIerp9L+e6Mr5g9eb7zySVsrB6yp7LNpY/PVM2VgHUui3TUA2qP4oM+uf4vHbep63BGuvhixIU/PzU6Pzt2IvzvSfHnPGpbfHxHHZ/79MnvEcschAABWoNK3eapR/y+NPZXn6lzHjnwOpS8idl6M2BUR90TE7oi4N6Ky7X0RcX9153LvEsvvr8sv7P+kVxrWeZVk/b/na/p+czXx5099XXlueyX+nuTEqdL44XzcPJPlh1qU8d3Lv37ebF1t/y97ZOUXfcG8Ale66wboxkamRlbrRbh6MWJfd6P4kxvxZWfA3ojY1/S/bG60cEeROPXE1/ub7bl4/C2swjxT+auIx6vHfybq4i8krecnBzdFafzwYHFWLPTTL5feaFb+LcW/CrLjv+Xm879ui95/kup8bU+USuPnJpdfxqXfP2t6TbPS839D8lZlzvrnd6vLPhyZmjo3FLEhea2SL67pKsuH5/ct8sX2WfyHDjZu/7vyfbL4H4iI7CQ+EBEPRsRDed0fjohHIuJgi/h/eOnR91rEn0QSbT3+Yw3f/26c/31J7Xz9ChJdp7//ttmM+aLHP/mvXN54NGYi4lC+qPL+t4ilVvBWXz8AAAC4G6QRsS2SdKCa7t8WaTowUP0O/+7YkpYmJqeePDHxwdmx6j0CfdGTFiNdvTXjoUPJTP4fq/nhfKy4WH8kInZGxBddmyv5gdGJ0libY4dOt/Xm9h9F+8/82dXu2gFrzv1a0Lnq23/apnoAt99SPv9dC8D61KD9N/xGH7D+uP6HztWo/X9cl9f/h/VpYfv/o8FP1gHrkf4/dC7tHzqX9g8d6Vbu62+R2BgRLbYpbhZYeRGblnyHf6ckil+8WMuyNsf8kkjbHvKyE+mdUY0VJLIWc3sLnf8NlQYMDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeN/wMAAP//tYzoGw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) 29.678284946s ago: executing program 2 (id=13517): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x35}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.346321276s ago: executing program 3 (id=13521): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000380)={0x100009, 0x3, 0x20000, {r0}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.346124136s ago: executing program 2 (id=13522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0xffa6}], 0x1}}], 0x2, 0x4000000) 29.287057428s ago: executing program 52 (id=13522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0xffa6}], 0x1}}], 0x2, 0x4000000) 29.278268878s ago: executing program 3 (id=13526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89, 0x48044}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 29.21908447s ago: executing program 3 (id=13527): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 29.110875833s ago: executing program 3 (id=13530): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 28.862262061s ago: executing program 3 (id=13533): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000001800)={0x6c2, 0x7d, 0x1, {{0x0, 0x69b, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x4100000, 0xd, 0x7, 0xa4, 0x2d5, '\x85u\xbak\x10\xf7x\xee\xdb\xd5\xa6\xd2\xe7\x00\xd5\xfb\x8a:Q\xc7\x8e\xb8\xdb\x06SYu|VY\x98\xa2M5MJ\xba\xfc\xef\x96\xe8J\xe5\xb1W\x18\xc2J/\xfd\tGg\x8d\xc7>,T\x8b\x15\r\xc3u\xe6\xed\xc06~C^a\x8b@\"\xb3\xff\xe9yvR\v\xf2\xdfZG\xce2\xfc\xe3\xd1j\xf6\xedR\f\r%gz#\xd96D\xaf$n\xc4\xe5\x16\x9f\xae/\xd0\xa8/t\x1b\x9bR\x88\x125rZG\xc9L\x17H\x981[\xe90\x1b(e\xbcdv\x86\x90\xf7\x15t\xac\x8e\xb0\xd3\x98\a2\x7f\xeb]\xaeD\x11\xb1\x96\xb1d\xe5\x87\x9c\x05\x9ab\xf4\x16\"\x95\'8\xc1\xa8\a\xceJ\xf5\x193\xa0\x05D\xec&j\xb6\xd9u\xf3lD\xfd(\x02\xd1Zx\xe8\x06Q\xf3R\x1a\xf1\v <\xff\xfa\xb4\x11J\xcd\xc4\xc7\xdc\xf2\x11\xa4\xbe\xbcn\xedK\xa0\xc3[p\xa8\xe3e7S\x01\x89\x18*\x1b\x1b\xbd\xa1+\x99\x911\xd3\x95 J\xf3\x93<\x9e\"\x86\xf2\xe9d\xf7\x95\xc1\xd0\xcc3\xbaF\xca\rd\xca\x8eCO\x13\x96L\r\xec1\x11\xb9j\x03\xad8\xfbciS\x15\xa0\x9d\n\x92\x92\xb2~\xcf\x1b\xed\x9f\xc6\xa4\xa1\xce\x85\xd7\x86\xf1S\xda\xd5A\xef\x9a\x95=\xb5\xfb\xba\xd6\xd6\xf4=\x8f\xcb\x13O\xbf\xa3\"\xdf\xd7\xbc\x0e_\x7fSf\x00\x1c\"\xbbM<\xcf\xe2Z\xb8d>\xf9\x055VXp\x91n\xaat\xbb\x06^\xcf\x14F\xed\xda\xc7?\xf9}\x00\'\xbc\x11\xff\xa5U$\xbc\xa9\x11F?O`\x9ca\xd3\xe8\xf6\xa3\x9d\x12\xadX\x89\xfb\x1a\x1f^\x94\xf1b\xdd\x8a\x91\xe0\x99\xa8\x9cnF\x89\x8e\x02\x9c\xe2\xa4u*W\xa7\xeb1\xecTjw\xa14(\xc5\xb0\xc6\xf2\xbf\xd9B\'9z\xf9qz\xb4\x03\xb4\xbb\x8a\xabDn\xeaz%\x86\xa9}\x1b\r\xa9\x98\x8e\xf8\xa9\xf5\x1d\x88\xa9f\x18\xcemx\xc1A\x99\x9b\xca#+\xfe\xefz\xf6N+\x16n\x14\x84\at_\xff\xd8\x9a\xeeW}qo3\xe4\xf1\xc7BLs^$.\xb5\xcfz\x0f0Z\xa72\x95!\xd5\xbe6\x82\x06\xbf\x87.G\xe9\x91\xe5\xb1\xfd\x04?=\xf2\xcd\x12\x8b\xeb\x03b\xdd\x8c\xf3\xcf\x8a\xbaU\xbe\xed\xdc ;\xe9\xf1B\x1bQS\x912\x1e\xee\xb4\x18\b\xaf\xf1L\x9eqq\x90\xadr\xe96\xb5\xf0\xee\xf8\x19\xce\xf4\xa0\xd8\a\x85\xf7\xa3\xb5\x06\xbbBzE\xc1=XO\xc6\x84\xc8\xea\xfb\x18\xc8/\x8dTt\x94{\xb5\xc3\xb0\xb8\x13\xca\vEk\xd7\xffY\xf0\x0fB\xea\x9b&oS\x85\xa2\x8f\xa7\a\xf1U2\x81_jl\x80\x81\x8e\xbb\xb5\xbdB\xdd\xa2\nZ\x9eY\x11\x880\xf7\xcen\xb9Q\xe0q\xde\xf7\xa7X\xc1`\xe0\x86|?\x90}\f`\xe6\xb34\r\xf6$3\xd1*\x15\xf6\x8fC\x06\xec\xdd!\x19\xe3\xed\xb9\x04\xcd\x99H\xa6\xd5\xa2nH\x91\xe7', 0x43, '\x85\n\x81?\xf6\x01s\x0e|a\x9dA\x87\xb1L\x92L\xaa\n\'\x9a\b\xa2_\xf6js\xf4\xb4\xddt\x1c\x19\xb3\xe3\xdcJ\xd6\xc1\xbb6\xbe\x8b\xfb:\xd9\x10\xf5`:\x11\xce\x82\xd9\x1f\xee\xda&HjD\x9e6 \x14\xbe\x87', 0x16f, '\x17\xe0_\x00\x00\x00\x00\xcf\x1e|~\xf4*wBX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0PI\xff\x02)\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xf0|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x93#s\xbf\xfc\x12\xa2\xd6\xf3\x1bv\xbc6\x04\x8c\x10No\xb5\xe5\x82\xd1^f\xd3\x8bs\x91\x8d@.1mT>\xca\xf0\'\xb9\xf7\xb5K]\'\xda\x0fp\xca\x94\xe7\xe9{W0\x12\xa0\x90\x1b\xadB\xeaW\x14G4)\xf8\x1eP\xa69\xb0\xab\x96\x15\xdc\xdf\xc2\xf4\xe31!wG\x86\xa9Y;:\x93\x94KS\x16\xa7R\x11\xb6\xd6?\x9e\xac:\xf2\xd74\xa2dE\xfc\x1b;8\xca|<\xd9\x97h^mK\vF\xf5\xe2\xd3\x83bn\xbaQt\xfc\xf6\xbeI\x9awZ\x91\xf5\xc8yP\xef\t\xaaY\xb7f\x12\xc5zfz>R\xee\xc8\x16n.\xcd\xb1\x89@v5\x1d30\x00\xb5.\xf1\xd7\x03\x04&\xe197Jd\x85>,\xfd]\xe7\x86\x7f!\xb1\xfb\xbd\t\xda\x7f\x85\xfb\n\r\x1dU\x9dq\x83A\xec\x90#\x00Q\xf6\xc8\xa7\x12s\xfd\x85P\xbbK\x80\xa8f\xc8p\x89B\x9b\xba\xad\xd3\xcbjkC\xc7+$<\x9e~3>\x95\xa5\xc8[', 0x1e1, '\x8fE\x88i\xa1\xda}\xeaO\x1c\xbf\xbb\xde\x95V$\xdc\xb1\x1a\xfc\xa0\xd7R\x80!\x1aA|\'\x8d\xc2\x80?\xb2\x13\xd0@\xcb$\xc6\xf4\x14\x9aEQ\'Ku\xec59\xbc\x06\x8f\x1bE\x00\x04\xad\xf3\xcfIb\xbd\x14\xf9Q\xbb\xdd\x80\x13[\xebM~\xb1\x14c\xa6\x89\n{\xfd\xa9O\x00\x88\xbb2\xd4\x15\x85\x03\xe2\xda\xbb\xf61\xb5\xf8\xc3\xfa\xa7\x90\x1f\x90\xf3\xd8\xc0\xb3\x83IUH`AAb\x19I<\x17Wu\x06\x0f\xcd\xe7)\xf34?\xa3\xf6\xc5\xfd\x15Q\t$$\"k]\xce\xf5\n\xf0\x13\xf9\xf2g\xa0\x84\x10\\\xf0+f\x02-\v5vP\xcbs)\xfd\x1bt\x85p\xd7\xa5$\xce\x8d\x9d\xb6\xd9\xe7J\"N\\\xc7\x19\b\x15\x02\x14\xb9\x14\xac\xaa3Q\'\x02f\xc8[u\xf5\xbe\x94\xe1\xc47w04\xf9=\xbc\xe5\xc6\xb4\x87\x14\xa7\t\xdb\x8d\x0e]\x7fl\xf8wcm\x12I\xdax\xc1\x98;Y\x8f\xe0AX\x86\xfap\x10\xd8\"\xc0<\x8f\xa9e\x03\x04\bs\xc0k\xdf%\x9d\xd8\xdb\x82\x89\xc4d>\x0e&\xfcNC\xd7{\xa4`\xee\xf2\xb9\x96\xa7P#R\xe1\x0f7\xa1\x83\xf8\v\x13\xd3?\xb7M@Y\xc2\x83\xdbXc\xbf\xdf\xe7_V\xa7\b\t\xf2v<]\x02\xb4\xdfW\x06\x8a\x9bB\x01\x1f\xd4Y\x92\xfe\xad\xdb9\xea\xfd\xb0\x9a\xb2\x17]\x82\x13\x8c\xc1\xe6\xc5\xc7M\xf2\x18Q\x8b\x87V\xf0{\xa4*\xbd?\x16H\\\xa3\x82\x0eu\xef\x1e\xe9\t'}, 0x12, ')\x94\x949\xb6z\x14\a\x17\x9d\x15M\x00\x00\x00\x00\x00\x00'}}, 0x6c2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 28.682154936s ago: executing program 3 (id=13534): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a37", @ANYRES32, @ANYBLOB, @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 28.630289698s ago: executing program 53 (id=13534): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a37", @ANYRES32, @ANYBLOB, @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 27.018854008s ago: executing program 8 (id=13549): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000008c0), 0xfc, 0x5ba, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000100)='2', 0xfffffe16, 0x8000c5e) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x9f) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c15}], 0x1, 0x5a00, 0x0, 0x3) 26.509238583s ago: executing program 8 (id=13553): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xa5023fff) ftruncate(r0, 0x4a8e) 26.138895124s ago: executing program 8 (id=13556): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 25.121875846s ago: executing program 8 (id=13558): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0xba105a, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2b954cf, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 25.076596197s ago: executing program 8 (id=13559): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x270, 0x0, 0x340, 0x270, 0x340, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 24.798368276s ago: executing program 8 (id=13560): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 24.778072696s ago: executing program 54 (id=13560): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.638426679s ago: executing program 6 (id=13907): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 2.553506871s ago: executing program 6 (id=13910): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x7, @private2, 0x14cd}], 0x1c) 2.473671474s ago: executing program 6 (id=13912): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000200001100090a2dbd7000fcdbdf25fe880000000000000000000000000001000004d602006c00cc011100ac141427030000000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000200100000000000000000000000000025e030000000000000a000200fe8800000000000000000000000001017f000001000000000000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000003c030000063500000a0002"], 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x80) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.2582719s ago: executing program 6 (id=13916): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x9, 0x1, 0x5, 0x8, 0x20006, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/164, 0xa4}], 0x1, 0xe, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.897396892s ago: executing program 6 (id=13926): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.703222627s ago: executing program 6 (id=13931): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) socket(0x10, 0x803, 0x0) 1.579108861s ago: executing program 1 (id=13937): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 1.536993983s ago: executing program 0 (id=13939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) 1.486200014s ago: executing program 0 (id=13941): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000000), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) 1.430336556s ago: executing program 9 (id=13942): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.421113626s ago: executing program 0 (id=13943): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xffffff53, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005"], 0x58}, 0x1, 0x2}, 0x80) 1.319464749s ago: executing program 9 (id=13944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/160, 0xa0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1.318947189s ago: executing program 4 (id=13945): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 653.61216ms ago: executing program 1 (id=13946): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 498.388875ms ago: executing program 0 (id=13947): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x800, 0x0, 0x0, 0x7579e159, 0x4, 0xfffffdfc, 0xef4}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 483.510705ms ago: executing program 9 (id=13948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x0, 0xb9, 0x4, r3}, 0x10) 448.099856ms ago: executing program 4 (id=13949): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 398.190337ms ago: executing program 0 (id=13950): pipe2(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 398.020488ms ago: executing program 9 (id=13951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6) 397.861877ms ago: executing program 1 (id=13952): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40845}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="d03a5ccb", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf25030000001800018014"], 0x2c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 392.981548ms ago: executing program 4 (id=13953): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 324.42774ms ago: executing program 0 (id=13954): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}, {r1, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 292.555361ms ago: executing program 4 (id=13955): unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 292.183641ms ago: executing program 1 (id=13956): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 218.134763ms ago: executing program 9 (id=13957): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 172.928464ms ago: executing program 4 (id=13958): clock_nanosleep(0xa, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 162.484235ms ago: executing program 1 (id=13959): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = open(&(0x7f0000000100)='./file1\x00', 0xe9344152a17c60ff, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) 78.326598ms ago: executing program 9 (id=13960): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2e, 0x6e}) 64.763958ms ago: executing program 4 (id=13961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=13962): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1b, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081bc1"}, &(0x7f0000000140)=0x23) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): entered disabled state [ 681.500958][ T7068] bridge_slave_1: entered allmulticast mode [ 681.507682][ T7068] bridge_slave_1: entered promiscuous mode [ 681.536293][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.546909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.548242][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.555547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.572621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.585965][ T7068] team0: Port device team_slave_0 added [ 681.614338][ T7068] team0: Port device team_slave_1 added [ 681.646215][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.666899][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.724723][ T7099] loop5: detected capacity change from 0 to 512 [ 681.758621][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.774786][ T7103] netlink: 7 bytes leftover after parsing attributes in process `syz.7.12912'. [ 681.790481][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.797830][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.824385][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.829494][ T7099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 681.957365][ T7068] hsr_slave_0: entered promiscuous mode [ 681.969615][ T7068] hsr_slave_1: entered promiscuous mode [ 681.979767][ T7099] EXT4-fs (loop5): 1 truncate cleaned up [ 681.987452][ T7068] debugfs: 'hsr0' already exists in 'hsr' [ 682.006513][ T7068] Cannot create hsr debugfs directory [ 682.024390][ T7099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.051066][ T28] audit: type=1400 audit(1782119962.348:3701): avc: denied { write } for pid=7098 comm="syz.5.12910" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 682.095376][ T7105] loop7: detected capacity change from 0 to 512 [ 682.161396][ T28] audit: type=1400 audit(1782119962.458:3702): avc: denied { setattr } for pid=7098 comm="syz.5.12910" path="pipe:[118313]" dev="pipefs" ino=118313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 682.190756][ T7105] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 682.293906][ T7105] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.12913: bad orphan inode 131083 [ 682.347666][ T7105] loop7: lost filesystem error report for type 5 error -117 [ 682.387234][ T5661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.387981][ T7105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.605232][ T28] audit: type=1400 audit(1782119962.898:3703): avc: denied { write } for pid=7111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.639313][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.652291][ T7068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 682.670665][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.678879][ T7068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 682.713975][ T28] audit: type=1400 audit(1782119963.008:3704): avc: denied { write } for pid=7125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.750322][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.782566][ T7068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 682.792932][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.802288][ T7068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 682.814947][ T7068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.974170][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.011142][ T7068] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.058010][T14532] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.065166][T14532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.102724][ T28] audit: type=1400 audit(1782119963.398:3705): avc: denied { write } for pid=7142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.162219][T14539] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.169948][T14539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.366967][ T7181] smc: net device lo applied user defined pnetid SYZ2 [ 683.386230][ T7181] smc: net device lo erased user defined pnetid SYZ2 [ 683.541032][ T7068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.705467][ T7068] veth0_vlan: entered promiscuous mode [ 683.725731][ T7068] veth1_vlan: entered promiscuous mode [ 683.760248][ T7068] veth0_macvtap: entered promiscuous mode [ 683.776350][ T7068] veth1_macvtap: entered promiscuous mode [ 683.825955][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.848038][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.873758][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.882721][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.958391][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.996905][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.184048][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12933'. [ 684.297097][ T7266] bridge0: port 3(ip6gretap0) entered blocking state [ 684.321191][ T7266] bridge0: port 3(ip6gretap0) entered disabled state [ 684.329902][ T7266] ip6gretap0: entered allmulticast mode [ 684.342347][ T7266] ip6gretap0: entered promiscuous mode [ 684.360721][ T7266] bridge0: port 3(ip6gretap0) entered blocking state [ 684.367556][ T7266] bridge0: port 3(ip6gretap0) entered forwarding state [ 684.412817][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 684.412840][ T28] audit: type=1400 audit(1782119964.708:3713): avc: denied { write } for pid=7254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.531288][ T28] audit: type=1400 audit(1782119964.828:3714): avc: denied { write } for pid=7278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.862271][ T28] audit: type=1400 audit(1782119965.158:3715): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.931059][ T28] audit: type=1400 audit(1782119965.228:3716): avc: denied { write } for pid=7296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.155744][ T7309] pimreg: entered allmulticast mode [ 685.174576][ T28] audit: type=1400 audit(1782119965.468:3717): avc: denied { write } for pid=7298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.212440][ T7309] pimreg: left allmulticast mode [ 685.261270][ T28] audit: type=1400 audit(1782119965.558:3718): avc: denied { write } for pid=7319 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.596697][ T28] audit: type=1400 audit(1782119965.888:3719): avc: denied { write } for pid=7327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.622372][ T7353] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12954'. [ 685.662965][ T28] audit: type=1400 audit(1782119965.958:3720): avc: denied { write } for pid=7357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.860357][ T7363] loop7: detected capacity change from 0 to 2048 [ 685.942077][ T7363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.986471][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.041069][ T28] audit: type=1400 audit(1782119966.328:3721): avc: denied { write } for pid=7366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.094588][ T28] audit: type=1400 audit(1782119966.388:3722): avc: denied { write } for pid=7388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.303509][ T7413] xt_hashlimit: size too large, truncated to 1048576 [ 686.356256][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12967'. [ 687.063705][ T7441] loop2: detected capacity change from 0 to 512 [ 687.148682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.157005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.165260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.324158][ T7441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 687.376001][ T7441] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.12971: bad orphan inode 131083 [ 687.463524][ T7441] loop2: lost filesystem error report for type 5 error -117 [ 687.487239][ T7441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.566616][ T7483] xt_hashlimit: size too large, truncated to 1048576 [ 687.676007][ T7068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.730568][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12987'. [ 688.008217][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12995'. [ 688.170154][ T7525] netlink: 'syz.4.13001': attribute type 8 has an invalid length. [ 688.184110][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13001'. [ 688.199260][ T7525] veth1_to_team: entered promiscuous mode [ 688.211852][ T7525] gretap0: entered promiscuous mode [ 688.234011][ T7525] veth1_to_team: left promiscuous mode [ 688.255223][ T7525] gretap0: left promiscuous mode [ 688.339302][ T7530] netlink: 'syz.5.13003': attribute type 4 has an invalid length. [ 688.351458][ T7528] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 688.351458][ T7528] program syz.7.13002 not setting count and/or reply_len properly [ 688.581717][ T7539] loop5: detected capacity change from 0 to 512 [ 688.647608][ T7539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.838730][ T5661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.060809][ T7561] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 689.060809][ T7561] program syz.4.13017 not setting count and/or reply_len properly [ 690.116424][ T7590] loop7: detected capacity change from 0 to 512 [ 690.139041][ T7590] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 690.184721][ T7590] EXT4-fs (loop7): 1 truncate cleaned up [ 690.200669][ T7596] loop5: detected capacity change from 0 to 512 [ 690.219696][ T7590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.288214][ T7596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 690.302881][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 690.302901][ T28] audit: type=1400 audit(1782119970.598:3737): avc: denied { write } for pid=7589 comm="syz.7.13025" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.351128][ T7596] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.13026: bad orphan inode 131083 [ 690.415740][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.429304][ T7596] loop5: lost filesystem error report for type 5 error -117 [ 690.431973][ T7596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.462763][ T28] audit: type=1400 audit(1782119970.758:3738): avc: denied { write } for pid=7595 comm="syz.5.13026" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.822248][ T5661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.190902][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13039'. [ 691.207327][ T7631] veth1_to_batadv: entered promiscuous mode [ 691.222341][ T7631] veth1_to_batadv: entered allmulticast mode [ 691.236038][ T7631] veth1_to_batadv: left promiscuous mode [ 691.249286][ T7631] veth1_to_batadv: left allmulticast mode [ 691.733455][ T7641] loop7: detected capacity change from 0 to 512 [ 691.740209][ T7641] EXT4-fs: Ignoring removed orlov option [ 691.784730][ T7641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.811287][ T28] audit: type=1400 audit(1782119972.098:3739): avc: denied { write } for pid=7640 comm="syz.7.13043" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.844394][ T7645] loop2: detected capacity change from 0 to 512 [ 691.871849][ T7645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 691.912328][ T7645] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.13044: bad orphan inode 131083 [ 691.929196][ T7645] loop2: lost filesystem error report for type 5 error -117 [ 691.929750][ T7645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.962315][ T28] audit: type=1400 audit(1782119972.258:3740): avc: denied { write } for pid=7644 comm="syz.2.13044" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.060705][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.076078][ T7068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.396177][ T7669] xt_CT: No such helper "snmp_trap" [ 692.401755][ T7674] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 692.401755][ T7674] program syz.2.13053 not setting count and/or reply_len properly [ 692.910331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.925251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.936855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.590424][ T7687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.640080][ T7699] loop7: detected capacity change from 0 to 512 [ 695.668693][ T7699] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 695.733811][ T7699] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.13059: bad orphan inode 131083 [ 695.744472][ T7699] loop7: lost filesystem error report for type 5 error -117 [ 695.746869][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 695.762257][ C0] EXT4-fs (loop7): initial error at time 1782119976: ext4_orphan_get:1425 [ 695.771300][ C0] EXT4-fs (loop7): last error at time 1782119976: ext4_orphan_get:1425 [ 695.778964][ T7699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.830187][ T28] audit: type=1400 audit(1782119976.128:3741): avc: denied { write } for pid=7698 comm="syz.7.13059" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.001457][ T7718] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 696.001457][ T7718] program syz.2.13069 not setting count and/or reply_len properly [ 696.136807][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.165940][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13073'. [ 696.193350][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13073'. [ 696.215380][ T7728] netlink: 'syz.5.13075': attribute type 1 has an invalid length. [ 696.250315][ T7728] netlink: 'syz.5.13075': attribute type 4 has an invalid length. [ 696.266987][ T7728] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.13075'. [ 696.750582][ T7767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 696.794594][ T28] audit: type=1400 audit(1782119977.088:3742): avc: denied { write } for pid=7768 comm="syz.0.13092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 696.835865][ T6040] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 696.850016][ T6040] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 696.862320][ T28] audit: type=1400 audit(1782119977.118:3743): avc: denied { read } for pid=7770 comm="syz.0.13094" path="socket:[125905]" dev="sockfs" ino=125905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 696.888064][ T6040] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 696.906937][ T6040] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 696.951089][ T7777] fido_id[7777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 696.988606][ T7779] loop5: detected capacity change from 0 to 512 [ 697.002715][ T7779] EXT4-fs: Mount option(s) incompatible with ext2 [ 697.190180][ T7798] netlink: 'syz.2.13103': attribute type 29 has an invalid length. [ 697.277822][ T28] audit: type=1400 audit(1782119977.578:3744): avc: denied { setopt } for pid=7805 comm="syz.0.13107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 697.306969][ T28] audit: type=1400 audit(1782119977.598:3745): avc: denied { connect } for pid=7805 comm="syz.0.13107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 697.530641][ T28] audit: type=1400 audit(1782119977.828:3746): avc: denied { read } for pid=7823 comm="syz.0.13111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 697.899300][ T7785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.401000][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13120'. [ 698.419281][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13120'. [ 698.626113][ T28] audit: type=1400 audit(1782119978.918:3747): avc: denied { lock } for pid=7852 comm="syz.0.13124" path="socket:[127062]" dev="sockfs" ino=127062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 698.666950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.675265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.683596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.701402][ T7847] netlink: 68 bytes leftover after parsing attributes in process `syz.7.13121'. [ 698.712824][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13121'. [ 699.954314][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13142'. [ 699.991602][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13142'. [ 700.065564][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13143'. [ 701.642684][ T8031] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 701.690896][ T8031] SELinux: failed to load policy [ 701.901258][ T8060] bridge3: entered promiscuous mode [ 701.906586][ T8060] bridge3: entered allmulticast mode [ 701.985080][ T8070] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 701.985080][ T8070] program syz.4.13184 not setting count and/or reply_len properly [ 702.092016][ T8076] loop7: detected capacity change from 0 to 1024 [ 702.111159][ T8076] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 702.135651][ T8076] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 702.146616][ T8076] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 702.178096][ T8076] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 702.560642][ T8101] xt_hashlimit: size too large, truncated to 1048576 [ 702.849569][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13203'. [ 702.873065][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13204'. [ 703.131976][ T8133] lo: Caught tx_queue_len zero misconfig [ 703.325939][ T28] audit: type=1400 audit(1782119983.618:3748): avc: denied { connect } for pid=8138 comm="syz.0.13213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 703.450286][ T8149] netlink: 'syz.0.13217': attribute type 10 has an invalid length. [ 703.459823][ T8149] dummy0: entered promiscuous mode [ 703.465610][ T8149] dummy0: entered allmulticast mode [ 703.474185][ T8149] team0: Failed to send options change via netlink (err -105) [ 703.482547][ T8149] team0: Port device dummy0 added [ 703.496594][ T8149] netlink: 'syz.0.13217': attribute type 10 has an invalid length. [ 703.508824][ T8149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 703.518976][ T8149] dummy0: left promiscuous mode [ 703.545432][ T8149] dummy0: left allmulticast mode [ 703.552213][ T8149] team0: Failed to send options change via netlink (err -105) [ 703.561794][ T8149] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 703.571163][ T8149] team0: Port device dummy0 removed [ 703.579121][ T8149] : (slave dummy0): Enslaving as an active interface with an up link [ 704.427507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.436518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.445449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.523976][ T8169] loop7: detected capacity change from 0 to 1024 [ 704.578253][ T8169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.603110][ T28] audit: type=1400 audit(1782119984.898:3749): avc: denied { write } for pid=8168 comm="syz.7.13225" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.648651][ T8175] syzkaller1: entered promiscuous mode [ 704.668087][ T8175] syzkaller1: entered allmulticast mode [ 704.802689][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.116311][ T8188] loop2: detected capacity change from 0 to 512 [ 705.275858][ T8188] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 705.288391][ T8188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 705.308337][ T8188] System zones: 0-1, 15-15, 18-18, 34-34 [ 705.315691][ T8188] EXT4-fs (loop2): orphan cleanup on readonly fs [ 705.375735][ T8188] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 705.387503][ T8188] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 705.423692][ T8188] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 705.438573][ T8188] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.13231: bad orphan inode 16 [ 705.597711][ T8188] loop2: lost filesystem error report for type 5 error -117 [ 705.603694][ T8188] ext4_test_bit(bit=15, block=18) = 1 [ 705.612985][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 705.613014][ C1] EXT4-fs (loop2): initial error at time 1782119985: ext4_orphan_get:1425 [ 705.613134][ C1] EXT4-fs (loop2): last error at time 1782119985: ext4_orphan_get:1425 [ 705.687802][ T8188] is_bad_inode(inode)=0 [ 705.692446][ T8188] NEXT_ORPHAN(inode)=0 [ 705.698674][ T8188] max_ino=32 [ 705.702894][ T8188] i_nlink=2 [ 705.772961][ T8188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.907924][ T7068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.653272][ T8232] loop7: detected capacity change from 0 to 512 [ 706.692989][ T8232] EXT4-fs: Ignoring removed nobh option [ 706.705018][ T8232] EXT4-fs: Ignoring removed orlov option [ 706.714504][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13250'. [ 706.725431][ T8232] EXT4-fs error (device loop7): __ext4_iget:5533: inode #11: block 1: comm syz.7.13248: invalid block [ 706.738417][ T8232] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 706.738993][ T8232] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.13248: couldn't read orphan inode 11 (err -117) [ 706.748196][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 706.748212][ C1] EXT4-fs (loop7): initial error at time 1782119987: __ext4_iget:5533: inode 11: block 1 [ 706.748258][ C1] EXT4-fs (loop7): last error at time 1782119987: __ext4_iget:5533: inode 11: block 1 [ 706.804225][ T8232] loop7: lost filesystem error report for type 5 error -117 [ 706.804981][ T8232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.864941][ T28] audit: type=1400 audit(1782119987.158:3750): avc: denied { write } for pid=8231 comm="syz.7.13248" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 706.865286][ T8232] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 706.975559][ T8257] netlink: 'syz.0.13259': attribute type 1 has an invalid length. [ 707.014979][ T8257] bond7: entered promiscuous mode [ 707.022585][T32210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.023643][ T8257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.065509][ T8257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.111554][ T8257] bond7: (slave gre4): The slave device specified does not support setting the MAC address [ 707.124619][ T8257] bond7: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 707.153934][ T8257] bond7: (slave gre4): making interface the new active one [ 707.170004][ T8257] gre4: entered promiscuous mode [ 707.189318][ T8257] bond7: (slave gre4): Enslaving as an active interface with an up link [ 707.383068][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13266'. [ 707.501300][ T28] audit: type=1400 audit(1782119987.798:3751): avc: denied { ioctl } for pid=8315 comm="syz.7.13268" path="socket:[127644]" dev="sockfs" ino=127644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.529672][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13268'. [ 709.050177][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13299'. [ 709.231419][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.257114][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.302564][ T8499] loop5: detected capacity change from 0 to 512 [ 709.373592][ T8499] EXT4-fs: Ignoring removed mblk_io_submit option [ 709.623250][ T8499] EXT4-fs (loop5): 1 orphan inode deleted [ 709.707477][ T28] audit: type=1326 audit(1782119989.948:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8537 comm="syz.7.13311" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcf3dace59 code=0x0 [ 709.737861][ T8534] lo speed is unknown, defaulting to 1000 [ 709.745910][ T8499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.914834][ T8553] loop2: detected capacity change from 0 to 512 [ 709.964045][ T8553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 709.992583][ T8553] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.13317: iget: bad i_size value: 38620345925642 [ 710.006070][ T8553] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 710.006316][ T8553] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.13317: couldn't read orphan inode 15 (err -117) [ 710.015507][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 710.015530][ C0] EXT4-fs (loop2): initial error at time 1782119990: ext4_orphan_get:1399: inode 15 [ 710.015559][ C0] EXT4-fs (loop2): last error at time 1782119990: ext4_orphan_get:1399: inode 15 [ 710.055472][ T8553] loop2: lost filesystem error report for type 5 error -117 [ 710.063267][ T8553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.086492][ T5661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.100998][ T28] audit: type=1400 audit(1782119990.398:3753): avc: denied { write } for pid=8552 comm="syz.2.13317" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 710.186896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.195243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.203619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.218535][ T8556] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 710.233955][ T28] audit: type=1400 audit(1782119990.518:3754): avc: denied { mac_admin } for pid=8552 comm="syz.2.13317" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.257672][ T28] audit: type=1400 audit(1782119990.558:3755): avc: denied { relabelto } for pid=8552 comm="syz.2.13317" name="cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 710.366380][ T8553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.13317: bg 0: block 5: invalid block bitmap [ 710.408130][ T8553] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1896 with error 28 [ 710.423865][ T8553] EXT4-fs (loop2): This should not happen!! Data will be lost [ 710.423865][ T8553] [ 710.433995][ T28] audit: type=1400 audit(1782119990.718:3756): avc: denied { append } for pid=8552 comm="syz.2.13317" path="/65/bus/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 710.448847][ T8573] xt_connbytes: Forcing CT accounting to be enabled [ 710.463265][ T8553] EXT4-fs (loop2): Total free blocks count 0 [ 710.463290][ T8553] EXT4-fs (loop2): Free/Dirty block details [ 710.463308][ T8553] EXT4-fs (loop2): free_blocks=0 [ 710.463326][ T8553] EXT4-fs (loop2): dirty_blocks=1900 [ 710.463416][ T8553] EXT4-fs (loop2): Block reservation details [ 710.463464][ T8553] EXT4-fs (loop2): i_reserved_data_blocks=1900 [ 710.619523][ T7068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.699522][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13325'. [ 710.842504][ T8605] netlink: 'syz.4.13338': attribute type 10 has an invalid length. [ 710.852800][ T8601] loop5: detected capacity change from 0 to 512 [ 710.875482][ T8601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 710.897588][ T8605] team0: Failed to send options change via netlink (err -105) [ 710.913842][ T8601] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 710.923512][ T8605] team0: Port device dummy0 added [ 710.929609][ T8615] netlink: 'syz.4.13338': attribute type 10 has an invalid length. [ 710.952347][ T8601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 710.977903][ T28] audit: type=1400 audit(1782119991.268:3757): avc: denied { setopt } for pid=8618 comm="syz.7.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 710.998077][ T8615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 711.010344][ T8601] System zones: 1-12 [ 711.027301][ T8601] EXT4-fs (loop5): orphan cleanup on readonly fs [ 711.044427][ T8615] team0: Failed to send options change via netlink (err -105) [ 711.060561][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.080662][ T8615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 711.099768][ T8615] team0: Port device dummy0 removed [ 711.108409][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.109278][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.116931][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 711.117020][ C0] EXT4-fs (loop5): initial error at time 1782119991: ext4_read_block_bitmap_nowait:517 [ 711.117118][ C0] EXT4-fs (loop5): last error at time 1782119991: ext4_read_block_bitmap_nowait:517 [ 711.161148][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.161367][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.171723][ T8615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 711.182758][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.186303][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.213612][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.217203][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.249406][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.255184][ T8601] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.13337: Block bitmap for bg 0 marked uninitialized [ 711.278017][ T8601] loop5: lost filesystem error report for type 5 error -117 [ 711.279691][ T8601] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 711.320308][ T8601] EXT4-fs (loop5): 1 truncate cleaned up [ 711.340757][ T8601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 711.679293][ T5661] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.010360][ T8662] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 712.067258][ T28] audit: type=1326 audit(1782119992.358:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.0.13366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69bf9ce59 code=0x7ffc0000 [ 712.098866][ T28] audit: type=1326 audit(1782119992.368:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.0.13366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69bf9ce59 code=0x7ffc0000 [ 712.156828][ T28] audit: type=1326 audit(1782119992.368:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.0.13366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69bf9ce59 code=0x7ffc0000 [ 712.208539][ T28] audit: type=1326 audit(1782119992.368:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.0.13366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc69bf9ce59 code=0x7ffc0000 [ 712.662574][ T8680] lo speed is unknown, defaulting to 1000 [ 712.872194][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13374'. [ 713.008236][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.038455][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.046932][ T8680] bridge_slave_0: entered allmulticast mode [ 713.054202][ T8680] bridge_slave_0: entered promiscuous mode [ 713.071333][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.089907][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.120054][ T8680] bridge_slave_1: entered allmulticast mode [ 713.131368][ T8680] bridge_slave_1: entered promiscuous mode [ 713.219163][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.242632][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.290630][ T8680] team0: Port device team_slave_0 added [ 713.303527][ T8680] team0: Port device team_slave_1 added [ 713.342951][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.357450][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.411703][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.441556][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.455952][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.515876][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.588952][ T8680] hsr_slave_0: entered promiscuous mode [ 713.595473][ T8680] hsr_slave_1: entered promiscuous mode [ 713.601787][ T8680] debugfs: 'hsr0' already exists in 'hsr' [ 713.607692][ T8680] Cannot create hsr debugfs directory [ 714.140137][ T8765] loop5: detected capacity change from 0 to 736 [ 714.563364][ T8796] loop5: detected capacity change from 0 to 512 [ 714.593667][ T8796] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 714.730556][ T8824] loop5: detected capacity change from 0 to 512 [ 714.746271][ T8824] EXT4-fs: dax option not supported [ 714.756995][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 714.757014][ T28] audit: type=1400 audit(1782119995.048:3792): avc: denied { write } for pid=8826 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.811278][ T28] audit: type=1400 audit(1782119995.108:3793): avc: denied { mount } for pid=8830 comm="syz.5.13393" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 714.945304][ T28] audit: type=1400 audit(1782119995.238:3794): avc: denied { listen } for pid=8840 comm="syz.0.13396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 715.013056][ T28] audit: type=1400 audit(1782119995.238:3795): avc: denied { accept } for pid=8840 comm="syz.0.13396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 715.067342][ T28] audit: type=1400 audit(1782119995.348:3796): avc: denied { write } for pid=8832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.099634][ T8850] syzkaller1: entered promiscuous mode [ 715.116836][ T8850] syzkaller1: entered allmulticast mode [ 715.129326][ T28] audit: type=1400 audit(1782119995.418:3797): avc: denied { write } for pid=8852 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.226966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.235670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.243975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.341284][ T28] audit: type=1400 audit(1782119995.628:3798): avc: denied { write } for pid=8854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.413230][ T28] audit: type=1400 audit(1782119995.708:3799): avc: denied { write } for pid=8868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.616434][ T28] audit: type=1400 audit(1782119995.908:3800): avc: denied { write } for pid=8870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.694322][ T28] audit: type=1400 audit(1782119995.988:3801): avc: denied { write } for pid=8881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.558737][ T8712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.570058][ T8680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 716.580776][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.611752][ T8680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 716.638770][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.661305][ T8680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 716.689949][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.713418][ T8680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 716.757302][ T8680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.856097][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.881353][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.915013][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.922151][T14517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.945185][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.952356][T14530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.236694][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.384064][ T8680] veth0_vlan: entered promiscuous mode [ 717.426634][ T8680] veth1_vlan: entered promiscuous mode [ 717.485111][ T8680] veth0_macvtap: entered promiscuous mode [ 717.503583][ T8680] veth1_macvtap: entered promiscuous mode [ 717.535384][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.548203][ T9002] lo speed is unknown, defaulting to 1000 [ 717.561139][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.589572][T14517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.600253][T14517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.626314][T14517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.638020][T14517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.936170][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.944486][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.953972][ T9002] bridge_slave_0: entered allmulticast mode [ 717.961020][ T9002] bridge_slave_0: entered promiscuous mode [ 717.968451][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.975643][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.984338][ T9002] bridge_slave_1: entered allmulticast mode [ 717.991100][ T9002] bridge_slave_1: entered promiscuous mode [ 718.012360][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.023424][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.069576][ T9002] team0: Port device team_slave_0 added [ 718.077407][ T9002] team0: Port device team_slave_1 added [ 718.099753][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.107351][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.135249][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.147337][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.154356][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.225382][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.352565][ T9002] hsr_slave_0: entered promiscuous mode [ 718.372227][ T9002] hsr_slave_1: entered promiscuous mode [ 718.382276][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 718.398293][ T9002] Cannot create hsr debugfs directory [ 719.128003][ T9002] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 719.163819][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.182039][ T9002] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 719.219259][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.245660][ T9002] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 719.291821][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.324044][ T9002] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 719.357521][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.525919][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.574415][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.617136][T14530] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.624374][T14530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.675283][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.682520][T14530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.924359][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 719.924377][ T28] audit: type=1400 audit(1782120000.218:3819): avc: denied { write } for pid=9143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.085173][ T28] audit: type=1400 audit(1782120000.378:3820): avc: denied { write } for pid=9165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.214662][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.426876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.435158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.443451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.526943][ T2199] bridge_slave_1: left allmulticast mode [ 720.533120][ T2199] bridge_slave_1: left promiscuous mode [ 720.545189][ T2199] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.564724][ T28] audit: type=1400 audit(1782120000.858:3821): avc: denied { write } for pid=9171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.625635][ T2199] bridge_slave_0: left allmulticast mode [ 720.642202][ T2199] bridge_slave_0: left promiscuous mode [ 720.665245][ T2199] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.674477][ T28] audit: type=1400 audit(1782120000.948:3822): avc: denied { write } for pid=9199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.825882][ T28] audit: type=1400 audit(1782120001.118:3823): avc: denied { write } for pid=9204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.917151][ T28] audit: type=1400 audit(1782120001.188:3824): avc: denied { write } for pid=9221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.950497][ T2199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.979939][ T2199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.003854][ T2199] bond0 (unregistering): Released all slaves [ 721.106108][ T28] audit: type=1400 audit(1782120001.398:3825): avc: denied { write } for pid=9225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.156472][ T9002] veth0_vlan: entered promiscuous mode [ 721.171528][ T9002] veth1_vlan: entered promiscuous mode [ 721.199995][ T9002] veth0_macvtap: entered promiscuous mode [ 721.209770][ T9002] veth1_macvtap: entered promiscuous mode [ 721.228625][ T28] audit: type=1400 audit(1782120001.528:3826): avc: denied { write } for pid=9243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.258144][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.279742][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.291861][ T2199] hsr_slave_0: left promiscuous mode [ 721.313495][ T2199] hsr_slave_1: left promiscuous mode [ 721.327448][ T2199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.358272][ T2199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.367243][ T2199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.394624][ T2199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.421480][ T2199] veth1_macvtap: left promiscuous mode [ 721.438205][ T2199] veth0_macvtap: left promiscuous mode [ 721.443915][ T2199] veth1_vlan: left promiscuous mode [ 721.449372][ T2199] veth0_vlan: left promiscuous mode [ 721.580219][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13465'. [ 721.641074][ T2199] team0 (unregistering): Port device team_slave_1 removed [ 721.664376][ T2199] team0 (unregistering): Port device team_slave_0 removed [ 721.774413][ T3464] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.790328][ T3464] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.846476][ T3464] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.870856][ T3464] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.007368][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13473'. [ 722.028575][ T28] audit: type=1400 audit(1782120002.318:3827): avc: denied { write } for pid=9265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.100892][ T28] audit: type=1400 audit(1782120002.358:3828): avc: denied { associate } for pid=9277 comm="syz.0.13472" name="cpuset.effective_mems" dev="tmpfs" ino=16121 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 722.153089][ T2199] IPVS: stop unused estimator thread 0... [ 722.619318][ T9327] loop8: detected capacity change from 0 to 512 [ 722.661606][ T9327] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 723.373301][ T9391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13492'. [ 723.407220][ T9391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13492'. [ 723.660336][ T9403] loop2: detected capacity change from 0 to 512 [ 723.727030][ T9403] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.13495: inode has both inline data and extents flags [ 723.740660][ T9403] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 723.742147][ T9403] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.13495: couldn't read orphan inode 15 (err -117) [ 723.751486][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 723.751505][ C0] EXT4-fs (loop2): initial error at time 1782120004: ext4_orphan_get:1399: inode 15 [ 723.751531][ C0] EXT4-fs (loop2): last error at time 1782120004: ext4_orphan_get:1399: inode 15 [ 723.790042][ T9403] loop2: lost filesystem error report for type 5 error -117 [ 723.803641][ T9403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.966859][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13499'. [ 724.468984][ T9419] loop2: detected capacity change from 512 to 0 [ 724.470085][ C1] I/O error, dev loop2, sector 74 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 724.485010][ C1] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 724.498550][ T9403] EXT4-fs error (device loop2): ext4_splice_branch:472: inode #18: block 37: comm syz.2.13495: IO error syncing itable block [ 724.530797][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.554474][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 724.569035][ T9403] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.13495: Error while async write back metadata [ 724.595891][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.612030][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 724.626350][ T9403] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.13495: Error while async write back metadata [ 724.650790][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.669502][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 724.682775][ T9403] EXT4-fs (loop2): discard request in group:0 block:236 count:1 failed with -5 [ 724.700827][ T9403] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.13495: Error while async write back metadata [ 724.748859][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.765056][ T9447] loop8: detected capacity change from 0 to 512 [ 724.788221][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 724.797304][ T9447] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.13508: inode has both inline data and extents flags [ 724.822250][ T9403] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: IO failure [ 724.831818][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.850979][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 724.858225][ T9447] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 724.858885][ T9447] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.13508: couldn't read orphan inode 15 (err -117) [ 724.868080][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 724.868106][ C1] EXT4-fs (loop8): initial error at time 1782120005: ext4_orphan_get:1399: inode 15 [ 724.868148][ C1] EXT4-fs (loop8): last error at time 1782120005: ext4_orphan_get:1399: inode 15 [ 724.914868][ T9403] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 18: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 724.929668][ T9403] EXT4-fs (loop2): pa ffff888107a387e0: logic 13, phys. 205, len 51 [ 724.938930][ T9403] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5459: group 0, free 50, pa_free 49 [ 724.949121][ T3407] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 724.969813][ T9447] loop8: lost filesystem error report for type 5 error -117 [ 724.971887][ T9447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.975510][ T3407] EXT4-fs (loop2): I/O error while writing superblock [ 724.980013][ T9403] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.13495: Error while async write back metadata [ 725.065550][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 725.080742][ T9403] EXT4-fs (loop2): I/O error while writing superblock [ 725.091870][ T9403] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 725.098902][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 725.098956][ T28] audit: type=1400 audit(1782120005.388:3843): avc: denied { write } for pid=9446 comm="syz.8.13508" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.106802][ T9403] EXT4-fs error (device loop2): ext4_free_data:978: inode #18: block 37: comm syz.2.13495: IO error syncing itable block [ 725.106863][ T9403] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 725.106963][ T9403] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.13495: Error while async write back metadata [ 725.107067][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 725.107102][ T9403] Buffer I/O error on device loop2, logical block 41 [ 725.107127][ T9403] Buffer I/O error on device loop2, logical block 42 [ 725.107142][ T9403] Buffer I/O error on device loop2, logical block 43 [ 725.107159][ T9403] Buffer I/O error on device loop2, logical block 44 [ 725.107259][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 725.107292][ T9403] Buffer I/O error on device loop2, logical block 49 [ 725.107314][ T9403] Buffer I/O error on device loop2, logical block 50 [ 725.107329][ T9403] Buffer I/O error on device loop2, logical block 51 [ 725.107345][ T9403] Buffer I/O error on device loop2, logical block 52 [ 725.107375][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 725.251728][ T9403] Buffer I/O error on device loop2, logical block 57 [ 725.258473][ T9403] Buffer I/O error on device loop2, logical block 58 [ 725.265345][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 725.276689][ T28] audit: type=1400 audit(1782120005.548:3844): avc: denied { write } for pid=9446 comm="syz.8.13508" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.351071][ T9002] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.377333][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 725.415177][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 725.447389][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 725.466928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.475734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.475649][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 725.484103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.529760][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 725.552924][ T9403] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 725.595824][ T9465] loop8: detected capacity change from 0 to 1024 [ 725.615623][ T9465] EXT4-fs: Ignoring removed bh option [ 725.626883][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 725.657733][ T28] audit: type=1400 audit(1782120005.948:3845): avc: denied { write } for pid=7068 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.702746][ T9465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.721257][ T28] audit: type=1400 audit(1782120006.018:3846): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.737769][ T9465] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 725.745878][ T28] audit: type=1400 audit(1782120006.018:3847): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.780298][ T28] audit: type=1400 audit(1782120006.018:3848): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.805759][ T28] audit: type=1400 audit(1782120006.018:3849): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.840716][ T28] audit: type=1400 audit(1782120006.018:3850): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.865289][ T28] audit: type=1400 audit(1782120006.018:3851): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.892692][ T28] audit: type=1400 audit(1782120006.018:3852): avc: denied { write } for pid=9464 comm="syz.8.13515" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.950411][ T9002] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.042143][ T3464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.133723][ T3464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.234747][ T3464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.323045][ T3464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.403073][ T9511] loop8: detected capacity change from 0 to 1024 [ 726.469377][ T9511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.575842][ T9490] lo speed is unknown, defaulting to 1000 [ 726.597318][ T3464] ip6gretap0: left allmulticast mode [ 726.613440][ T3464] ip6gretap0: left promiscuous mode [ 726.633082][ T3464] bridge0: port 3(ip6gretap0) entered disabled state [ 726.665113][ T3464] bridge_slave_1: left allmulticast mode [ 726.698247][ T3464] bridge_slave_1: left promiscuous mode [ 726.718370][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.749145][ T3464] bridge_slave_0: left allmulticast mode [ 726.776926][ T3464] bridge_slave_0: left promiscuous mode [ 726.782694][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.851034][ T9002] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.044960][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.085871][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.110843][ T3464] bond0 (unregistering): Released all slaves [ 727.125351][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 727.538641][ T3464] hsr_slave_0: left promiscuous mode [ 727.552592][ T3464] hsr_slave_1: left promiscuous mode [ 727.569360][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.588915][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.604579][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.613339][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.644938][ T3464] veth1_macvtap: left promiscuous mode [ 727.651000][ T3464] veth0_macvtap: left promiscuous mode [ 727.656674][ T3464] veth1_vlan: left promiscuous mode [ 727.662937][ T3464] veth0_vlan: left promiscuous mode [ 727.796459][ T9576] loop8: detected capacity change from 0 to 512 [ 727.820803][ T9576] EXT4-fs: test_dummy_encryption option not supported [ 727.863139][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 727.879700][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 727.936792][ T9531] lo speed is unknown, defaulting to 1000 [ 727.941549][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 727.950920][ T9576] tipc: Started in network mode [ 727.958118][ T9576] tipc: Node identity ac14140f, cluster identity 4711 [ 727.977114][ T9576] tipc: Enabled bearer , priority 10 [ 728.095611][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.119477][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.144465][ T9490] bridge_slave_0: entered allmulticast mode [ 728.171840][ T9490] bridge_slave_0: entered promiscuous mode [ 728.194279][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.211304][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.229965][ T9490] bridge_slave_1: entered allmulticast mode [ 728.244005][ T9490] bridge_slave_1: entered promiscuous mode [ 728.327888][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.372948][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.402539][ T9606] loop8: detected capacity change from 0 to 1024 [ 728.444335][ T9490] team0: Port device team_slave_0 added [ 728.469894][ T9606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.488163][ T9490] team0: Port device team_slave_1 added [ 728.534041][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 728.573046][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.601203][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.678432][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.698752][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.719580][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.776830][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.855684][ T9490] hsr_slave_0: entered promiscuous mode [ 728.864540][ T9002] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.875538][ T9622] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 728.878650][ T9490] hsr_slave_1: entered promiscuous mode [ 728.899102][ T9490] debugfs: 'hsr0' already exists in 'hsr' [ 728.905047][ T9490] Cannot create hsr debugfs directory [ 728.940232][ T9630] loop8: detected capacity change from 0 to 256 [ 729.023105][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.024055][ T9630] futex_wake_op: syz.8.13553 tries to shift op by 35; fix this program [ 729.039760][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.078050][ T9531] bridge_slave_0: entered allmulticast mode [ 729.114018][ T9531] bridge_slave_0: entered promiscuous mode [ 729.131001][ T3407] tipc: Node number set to 2886997007 [ 729.153780][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.170382][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.177832][ T9531] bridge_slave_1: entered allmulticast mode [ 729.184783][ T9531] bridge_slave_1: entered promiscuous mode [ 729.192146][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 729.223768][ T3464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.298697][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.310141][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.325148][ T3464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.386823][ T9490] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.402450][ T9490] netdevsim netdevsim9 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 729.412558][ T9490] netdevsim netdevsim9 eth3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 729.423017][ T9490] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.435818][ T9531] team0: Port device team_slave_0 added [ 729.449068][ T3464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.473815][ T9531] team0: Port device team_slave_1 added [ 729.512365][ T9490] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.528209][ T9490] netdevsim netdevsim9 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 729.549281][ T9490] netdevsim netdevsim9 eth2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 729.576876][ T9490] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.602720][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.618398][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.683668][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.713534][ T3464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.731599][ T9490] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.742537][ T9490] netdevsim netdevsim9 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 729.753379][ T9490] netdevsim netdevsim9 eth1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 729.764432][ T9490] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.817313][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.824372][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.850429][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.900747][ T9531] hsr_slave_0: entered promiscuous mode [ 729.907121][ T9531] hsr_slave_1: entered promiscuous mode [ 729.913255][ T9531] debugfs: 'hsr0' already exists in 'hsr' [ 729.919214][ T9531] Cannot create hsr debugfs directory [ 729.937612][ T9490] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.947934][ T9490] netdevsim netdevsim9 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 729.957888][ T9490] netdevsim netdevsim9 eth0 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 729.967928][ T9490] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.022187][ T3464] bridge_slave_1: left allmulticast mode [ 730.028244][ T3464] bridge_slave_1: left promiscuous mode [ 730.037220][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.060846][ T3464] bridge_slave_0: left allmulticast mode [ 730.078395][ T3464] bridge_slave_0: left promiscuous mode [ 730.084144][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.274377][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.305546][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.320961][ T3464] bond0 (unregistering): Released all slaves [ 730.463191][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 730.463210][ T28] audit: type=1400 audit(1782120010.758:3894): avc: denied { write } for pid=9663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.521314][ T9490] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 730.534483][ T28] audit: type=1400 audit(1782120010.828:3895): avc: denied { write } for pid=9674 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.561206][ T9490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.631410][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 730.653743][ T3464] hsr_slave_0: left promiscuous mode [ 730.668125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.676647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.684989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.716672][ T3464] hsr_slave_1: left promiscuous mode [ 730.740427][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.751546][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.767256][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.774854][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.788919][ T3464] veth1_macvtap: left promiscuous mode [ 730.794570][ T3464] veth0_macvtap: left promiscuous mode [ 730.800576][ T3464] veth1_vlan: left promiscuous mode [ 730.806021][ T3464] veth0_vlan: left promiscuous mode [ 730.936421][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 730.950319][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 730.964836][ T9687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.005428][ T9490] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 731.030149][ T9490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.038414][ T9490] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 731.052715][ T9490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.101676][ T9490] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 731.121404][ T9490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.289298][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.323945][ T9677] lo speed is unknown, defaulting to 1000 [ 731.338881][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.364829][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.372657][T14521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.396776][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.403964][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.463924][ T28] audit: type=1400 audit(1782120011.758:3896): avc: denied { write } for pid=9702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.522110][ T28] audit: type=1400 audit(1782120011.818:3897): avc: denied { write } for pid=9713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.571330][ T3464] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.600948][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 731.647757][ T3464] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.686019][ T30] bond0: (slave bond_slave_0): interface is now down [ 731.692908][ T30] bond0: (slave bond_slave_1): interface is now down [ 731.702710][ T9722] rdma_rxe: rxe_newlink: failed to add bond0 [ 731.704089][ T30] bond0: (slave dummy0): interface is now down [ 731.729451][ T9531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.737963][ T30] bond0: (slave bond_slave_0): interface is now down [ 731.745999][ T9531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.751349][ T30] bond0: (slave bond_slave_1): interface is now down [ 731.759955][ T30] bond0: (slave dummy0): interface is now down [ 731.768751][ T3464] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.779187][ T30] bond0: (slave bond_slave_0): interface is now down [ 731.786049][ T30] bond0: (slave bond_slave_1): interface is now down [ 731.794407][ T30] bond0: (slave dummy0): interface is now down [ 731.804642][ T9531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.814376][ T9531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.824453][T14528] bond0: (slave bond_slave_0): interface is now down [ 731.831480][T14528] bond0: (slave bond_slave_1): interface is now down [ 731.839524][ T9531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 731.846534][T14528] bond0: (slave dummy0): interface is now down [ 731.858236][ T9531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.872678][ T9531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.879953][T14521] bond0: (slave bond_slave_0): interface is now down [ 731.887280][T14521] bond0: (slave bond_slave_1): interface is now down [ 731.894017][T14521] bond0: (slave dummy0): interface is now down [ 731.902502][ T9531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.917073][ T30] bond0: (slave bond_slave_0): interface is now down [ 731.928987][ T30] bond0: (slave bond_slave_1): interface is now down [ 731.937417][ T30] bond0: (slave dummy0): interface is now down [ 731.956858][ T2199] bond0: (slave bond_slave_0): interface is now down [ 731.966206][ T3464] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.978684][ T2199] bond0: (slave bond_slave_1): interface is now down [ 731.985688][ T2199] bond0: (slave dummy0): interface is now down [ 732.006925][ T30] bond0: (slave bond_slave_0): interface is now down [ 732.030875][ T30] bond0: (slave bond_slave_1): interface is now down [ 732.045748][ T30] bond0: (slave dummy0): interface is now down [ 732.068103][T14517] bond0: (slave bond_slave_0): interface is now down [ 732.079725][T14517] bond0: (slave bond_slave_1): interface is now down [ 732.095760][T14517] bond0: (slave dummy0): interface is now down [ 732.137201][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.144113][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.150360][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.151339][ T2199] bond0: (slave dummy0): interface is now down [ 732.175925][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.177741][ T30] bond0: (slave bond_slave_0): interface is now down [ 732.196919][ T30] bond0: (slave bond_slave_1): interface is now down [ 732.204343][ T9677] bridge_slave_0: entered allmulticast mode [ 732.208319][ T30] bond0: (slave dummy0): interface is now down [ 732.228918][ T9677] bridge_slave_0: entered promiscuous mode [ 732.236883][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.249803][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.258937][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.269781][ T2199] bond0: (slave dummy0): interface is now down [ 732.277619][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.292965][ T9677] bridge_slave_1: entered allmulticast mode [ 732.308748][ T9677] bridge_slave_1: entered promiscuous mode [ 732.316940][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.316937][ T28] audit: type=1400 audit(1782120012.608:3898): avc: denied { write } for pid=9745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.325721][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.386027][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.409316][ T2199] bond0: (slave dummy0): interface is now down [ 732.424002][ T28] audit: type=1400 audit(1782120012.718:3899): avc: denied { write } for pid=9771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.447689][T14532] bond0: (slave bond_slave_0): interface is now down [ 732.471759][T14532] bond0: (slave bond_slave_1): interface is now down [ 732.478776][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.496561][T14532] bond0: (slave dummy0): interface is now down [ 732.512666][ T3464] bridge_slave_1: left allmulticast mode [ 732.518703][ T3464] bridge_slave_1: left promiscuous mode [ 732.524445][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.527997][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.540239][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.547317][ T2199] bond0: (slave dummy0): interface is now down [ 732.556387][ T3464] bridge_slave_0: left allmulticast mode [ 732.562284][ T3464] bridge_slave_0: left promiscuous mode [ 732.568171][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.575768][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.582789][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.590131][ T2199] bond0: (slave dummy0): interface is now down [ 732.606913][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.615029][ T2199] bond0: (slave bond_slave_1): interface is now down [ 732.629312][ T2199] bond0: (slave dummy0): interface is now down [ 732.672260][T14532] bond0: (slave bond_slave_0): interface is now down [ 732.684310][T14532] bond0: (slave bond_slave_1): interface is now down [ 732.697713][T14532] bond0: (slave dummy0): interface is now down [ 732.707622][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.719288][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.729065][ T30] bond0: (slave bond_slave_0): interface is now down [ 732.735937][ T30] bond0: (slave bond_slave_1): interface is now down [ 732.743306][ T30] bond0: (slave dummy0): interface is now down [ 732.751270][ T3464] bond0 (unregistering): Released all slaves [ 732.761658][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.773728][T14532] bond0: (slave bond_slave_0): interface is now down [ 732.786086][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 732.793598][T14532] bond0: (slave bond_slave_1): interface is now down [ 732.808095][T14532] bond0: (slave dummy0): interface is now down [ 732.836889][T14521] bond0: (slave bond_slave_0): interface is now down [ 732.847022][ T3464] tipc: Disabling bearer [ 732.856442][T14521] bond0: (slave bond_slave_1): interface is now down [ 732.863742][ T3464] tipc: Left network mode [ 732.870868][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.878022][T14521] bond0: (slave dummy0): interface is now down [ 732.886507][ T9677] team0: Port device team_slave_0 added [ 732.894813][ T9677] team0: Port device team_slave_1 added [ 732.907104][T14521] bond0: (slave bond_slave_0): interface is now down [ 732.915717][T14521] bond0: (slave bond_slave_1): interface is now down [ 732.942345][T14521] bond0: (slave dummy0): interface is now down [ 732.977247][ T2199] bond0: (slave bond_slave_0): interface is now down [ 732.986741][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.006801][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.013719][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.043246][ T2199] bond0: (slave dummy0): interface is now down [ 733.068770][ T30] bond0: (slave bond_slave_0): interface is now down [ 733.085708][ T30] bond0: (slave bond_slave_1): interface is now down [ 733.092548][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.109358][ T30] bond0: (slave dummy0): interface is now down [ 733.125171][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.132035][T14521] bond0: (slave bond_slave_0): interface is now down [ 733.149487][T14521] bond0: (slave bond_slave_1): interface is now down [ 733.165662][T14521] bond0: (slave dummy0): interface is now down [ 733.178578][ T3464] hsr_slave_0: left promiscuous mode [ 733.188822][ T3464] hsr_slave_1: left promiscuous mode [ 733.194917][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.200057][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.207821][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.218776][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.225603][ T2199] bond0: (slave dummy0): interface is now down [ 733.234609][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.242515][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.256339][ T3464] veth1_macvtap: left promiscuous mode [ 733.262024][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.270142][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.279309][ T28] audit: type=1400 audit(1782120013.578:3900): avc: denied { write } for pid=9793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.304705][ T3464] veth0_macvtap: left promiscuous mode [ 733.312182][ T2199] bond0: (slave dummy0): interface is now down [ 733.319033][ T3464] veth1_vlan: left promiscuous mode [ 733.324425][ T3464] veth0_vlan: left promiscuous mode [ 733.337367][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.344228][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.351425][ T2199] bond0: (slave dummy0): interface is now down [ 733.365310][ T28] audit: type=1400 audit(1782120013.658:3901): avc: denied { write } for pid=9823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 733.397431][T14528] bond0: (slave bond_slave_0): interface is now down [ 733.415673][T14528] bond0: (slave bond_slave_1): interface is now down [ 733.422595][T14528] bond0: (slave dummy0): interface is now down [ 733.448544][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.456007][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.464956][ T2199] bond0: (slave dummy0): interface is now down [ 733.471582][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 733.482009][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 733.489482][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.496594][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.503622][ T2199] bond0: (slave dummy0): interface is now down [ 733.526824][T14532] bond0: (slave bond_slave_0): interface is now down [ 733.533719][T14532] bond0: (slave bond_slave_1): interface is now down [ 733.542561][T14532] bond0: (slave dummy0): interface is now down [ 733.551865][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.558944][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.576882][T14532] bond0: (slave bond_slave_0): interface is now down [ 733.585410][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.606351][T14532] bond0: (slave bond_slave_1): interface is now down [ 733.614924][T14532] bond0: (slave dummy0): interface is now down [ 733.623356][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 733.645661][ T2199] bond0: (slave bond_slave_0): interface is now down [ 733.654506][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.661649][T14528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.671185][ T2199] bond0: (slave bond_slave_1): interface is now down [ 733.678147][ T2199] bond0: (slave dummy0): interface is now down [ 733.686457][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.693644][T14528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.701087][T14532] bond0: (slave bond_slave_0): interface is now down [ 733.710413][T14532] bond0: (slave bond_slave_1): interface is now down [ 733.728933][T14532] bond0: (slave dummy0): interface is now down [ 733.778426][T14528] bond0: (slave bond_slave_0): interface is now down [ 733.787823][ T9490] veth0_vlan: entered promiscuous mode [ 733.794036][T14528] bond0: (slave bond_slave_1): interface is now down [ 733.811522][T14528] bond0: (slave dummy0): interface is now down [ 733.846210][ T9677] hsr_slave_0: entered promiscuous mode [ 733.857016][T14521] bond0: (slave bond_slave_0): interface is now down [ 733.864970][ T9677] hsr_slave_1: entered promiscuous mode [ 733.878703][T14521] bond0: (slave bond_slave_1): interface is now down [ 733.882750][ T9677] debugfs: 'hsr0' already exists in 'hsr' [ 733.897417][T14521] bond0: (slave dummy0): interface is now down [ 733.909054][ T9677] Cannot create hsr debugfs directory [ 733.918761][ T9490] veth1_vlan: entered promiscuous mode [ 733.937201][T14532] bond0: (slave bond_slave_0): interface is now down [ 733.944575][T14532] bond0: (slave bond_slave_1): interface is now down [ 733.953300][T14532] bond0: (slave dummy0): interface is now down [ 733.996817][T14528] bond0: (slave bond_slave_0): interface is now down [ 734.010177][ T9490] veth0_macvtap: entered promiscuous mode [ 734.018447][T14528] bond0: (slave bond_slave_1): interface is now down [ 734.037699][T14528] bond0: (slave dummy0): interface is now down [ 734.054093][ T28] audit: type=1400 audit(1782120014.348:3902): avc: denied { write } for pid=9829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.087481][T14521] bond0: (slave bond_slave_0): interface is now down [ 734.094363][ T9490] veth1_macvtap: entered promiscuous mode [ 734.109382][T14521] bond0: (slave bond_slave_1): interface is now down [ 734.125506][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.134791][T14521] bond0: (slave dummy0): interface is now down [ 734.153885][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.175792][ T28] audit: type=1400 audit(1782120014.468:3903): avc: denied { write } for pid=9857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.208677][T14532] bond0: (slave bond_slave_0): interface is now down [ 734.224633][T14532] bond0: (slave bond_slave_1): interface is now down [ 734.231959][ T9861] IPv6: Can't replace route, no match found [ 734.232124][ T9861] IPv6: Can't replace route, no match found [ 734.256016][T14528] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.266453][T14528] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.275617][T14532] bond0: (slave dummy0): interface is now down [ 734.296989][T14532] bond0: (slave bond_slave_0): interface is now down [ 734.310066][T14528] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.321227][T14532] bond0: (slave bond_slave_1): interface is now down [ 734.328338][T14532] bond0: (slave dummy0): interface is now down [ 734.336656][T14517] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.357109][T14517] bond0: (slave bond_slave_0): interface is now down [ 734.363970][T14517] bond0: (slave bond_slave_1): interface is now down [ 734.371822][T14517] bond0: (slave dummy0): interface is now down [ 734.415350][T14532] bond0: (slave bond_slave_0): interface is now down [ 734.444281][T14532] bond0: (slave bond_slave_1): interface is now down [ 734.462357][T14532] bond0: (slave dummy0): interface is now down [ 734.494136][T14517] bond0: (slave bond_slave_0): interface is now down [ 734.524287][T14517] bond0: (slave bond_slave_1): interface is now down [ 734.554748][T14517] bond0: (slave dummy0): interface is now down [ 734.572504][T14517] bond0: now running without any active interface! [ 734.622143][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.784508][ T9531] veth0_vlan: entered promiscuous mode [ 734.802694][ T9531] veth1_vlan: entered promiscuous mode [ 734.815138][ T9677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 734.825995][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.845367][ T9677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 734.855049][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.871536][ T9531] veth0_macvtap: entered promiscuous mode [ 734.880020][ T9677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 734.892122][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.903361][ T9531] veth1_macvtap: entered promiscuous mode [ 734.919134][ T9677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 734.930106][ T9677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.994987][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.019404][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.039521][ T3464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.049187][ T3464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.069626][ T3464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.079428][ T3464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.141737][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.216540][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.280619][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.288052][T14528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.329195][T14530] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.336344][T14530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.525863][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13597'. [ 735.623744][T14521] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.628219][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13597'. [ 735.641839][T14532] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.678940][T14532] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.699312][T14532] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.719473][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 735.719536][ T28] audit: type=1400 audit(1782120016.018:3906): avc: denied { read } for pid=9944 comm="syz.9.13601" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 735.787045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.787242][ T28] audit: type=1400 audit(1782120016.018:3907): avc: denied { open } for pid=9944 comm="syz.9.13601" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 735.795585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.879641][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.890976][ T28] audit: type=1400 audit(1782120016.078:3908): avc: denied { write } for pid=9923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.971382][ T28] audit: type=1400 audit(1782120016.168:3909): avc: denied { write } for pid=9955 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.219149][ T28] audit: type=1400 audit(1782120016.518:3910): avc: denied { write } for pid=9971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.305901][ T9677] veth0_vlan: entered promiscuous mode [ 736.336834][ T9677] veth1_vlan: entered promiscuous mode [ 736.350577][ T28] audit: type=1400 audit(1782120016.638:3911): avc: denied { write } for pid=9994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.394815][ T9677] veth0_macvtap: entered promiscuous mode [ 736.404316][ T9677] veth1_macvtap: entered promiscuous mode [ 736.440183][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.459073][ T9677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.466705][ T28] audit: type=1400 audit(1782120016.758:3912): avc: denied { write } for pid=9995 comm="syz.0.13609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 736.504790][T14530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.530444][T14530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.558160][T14530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.567293][T14530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.699739][ T28] audit: type=1400 audit(1782120016.988:3913): avc: denied { write } for pid=10001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.776641][ T28] audit: type=1400 audit(1782120017.058:3914): avc: denied { write } for pid=10024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.941107][ T28] audit: type=1400 audit(1782120017.238:3915): avc: denied { write } for pid=10028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.133990][T10023] lo speed is unknown, defaulting to 1000 [ 737.870872][T10113] loop6: detected capacity change from 0 to 1024 [ 737.906487][T10113] EXT4-fs: Ignoring removed bh option [ 737.929937][T10113] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 737.953643][T10113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.009413][T10129] netlink: 'syz.9.13631': attribute type 4 has an invalid length. [ 738.055012][T10129] netlink: 'syz.9.13631': attribute type 4 has an invalid length. [ 738.088339][ T9677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.590928][T10144] batadv1: entered promiscuous mode [ 738.633848][T10144] batadv1: entered allmulticast mode [ 738.948117][T10184] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 738.984783][T10184] team0 (unregistering): Port device team_slave_0 removed [ 738.992237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.992359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.035883][T10184] team0 (unregistering): Failed to send options change via netlink (err -105) [ 739.087936][T10184] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 739.099178][T10184] team0 (unregistering): Port device team_slave_1 removed [ 739.198032][T10205] loop6: detected capacity change from 0 to 512 [ 739.250286][T10205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.346960][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 739.685540][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 740.050916][ T9677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.057797][T10277] loop9: detected capacity change from 0 to 512 [ 740.073494][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 740.081103][T10277] EXT4-fs: Ignoring removed bh option [ 740.118166][T10277] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.13656: corrupted in-inode xattr: e_value size too large [ 740.219468][T10283] loop1: detected capacity change from 0 to 512 [ 740.231615][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13657'. [ 740.242369][T10277] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 740.243631][T10277] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.13656: couldn't read orphan inode 15 (err -117) [ 740.253231][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 740.253259][ C0] EXT4-fs (loop9): initial error at time 1782120020: ext4_iget_extra_inode:5180: inode 15 [ 740.253303][ C0] EXT4-fs (loop9): last error at time 1782120020: ext4_iget_extra_inode:5180: inode 15 [ 740.329200][T10277] loop9: lost filesystem error report for type 5 error -117 [ 740.329903][T10277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.334670][T10283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.385341][T10277] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.13656: Unrecognised inode hash code 4 [ 740.399358][T10277] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.13656: Corrupt directory, running e2fsck is recommended [ 740.413565][T10283] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.444571][ T9490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.460941][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13661'. [ 740.547841][ T9531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.549807][T10302] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 740.802274][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 740.844539][T10325] syzkaller0: entered promiscuous mode [ 740.864197][T10325] syzkaller0: entered allmulticast mode [ 741.016645][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 741.023233][ T28] audit: type=1400 audit(1782120021.308:3947): avc: denied { write } for pid=10330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.092827][ T28] audit: type=1400 audit(1782120021.388:3948): avc: denied { write } for pid=10341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.976130][ T6037] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 741.985853][ T6037] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 742.121226][T10364] netlink: 'syz.9.13675': attribute type 11 has an invalid length. [ 742.133476][ T28] audit: type=1326 audit(1782120022.428:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97329ce59 code=0x7ffc0000 [ 742.211187][ T28] audit: type=1326 audit(1782120022.428:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97329ce59 code=0x7ffc0000 [ 742.279015][ T28] audit: type=1326 audit(1782120022.428:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97329ce59 code=0x7ffc0000 [ 742.380869][ T28] audit: type=1326 audit(1782120022.428:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc97329ce59 code=0x7ffc0000 [ 742.409447][ T28] audit: type=1400 audit(1782120022.468:3953): avc: denied { write } for pid=10346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.499605][ T28] audit: type=1326 audit(1782120022.478:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc97325d68e code=0x7ffc0000 [ 742.558869][ T28] audit: type=1326 audit(1782120022.478:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc97325d68e code=0x7ffc0000 [ 742.616495][ T28] audit: type=1326 audit(1782120022.488:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.6.13676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc97325d68e code=0x7ffc0000 [ 742.818563][T10396] ref_ctr_offset mismatch. inode: 0x409e offset: 0x0 ref_ctr_offset(old): 0x100000000000000 ref_ctr_offset(new): 0x0 [ 743.305130][T10448] lo speed is unknown, defaulting to 1000 [ 744.008511][T10523] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 744.008511][T10523] program syz.9.13721 not setting count and/or reply_len properly [ 744.029775][T10523] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 744.029775][T10523] program syz.9.13721 not setting count and/or reply_len properly [ 744.048777][T10523] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 744.048777][T10523] program syz.9.13721 not setting count and/or reply_len properly [ 744.107149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.115451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.123732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.413063][T10548] lo speed is unknown, defaulting to 1000 [ 744.533789][T10562] loop6: detected capacity change from 0 to 512 [ 744.556579][T10562] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 744.605377][T10562] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.13736: bad orphan inode 13 [ 744.654764][T10562] loop6: lost filesystem error report for type 5 error -117 [ 744.656444][T10562] ext4_test_bit(bit=12, block=18) = 1 [ 744.663815][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 744.663840][ C0] EXT4-fs (loop6): last error at time 1782120024: ext4_orphan_get:1425 [ 744.724801][T10562] is_bad_inode(inode)=0 [ 744.751206][T10562] NEXT_ORPHAN(inode)=0 [ 744.775113][T10562] max_ino=32 [ 744.784966][T10562] i_nlink=1 [ 744.796667][T10562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 744.862081][T10562] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 744.872897][T10562] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 744.918772][T10562] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0008-000000000000 r/w. [ 744.951099][ T9677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 745.179380][T10600] sctp: [Deprecated]: syz.4.13747 (pid 10600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 745.179380][T10600] Use struct sctp_sack_info instead [ 745.264194][T10605] syzkaller1: entered promiscuous mode [ 745.272997][T10605] syzkaller1: entered allmulticast mode [ 745.710659][T10619] loop9: detected capacity change from 0 to 1024 [ 745.724320][T10619] EXT4-fs: Ignoring removed bh option [ 745.740954][T10619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.856152][ T9490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.043256][T10630] batadv1: entered promiscuous mode [ 746.065545][T10630] batadv1: entered allmulticast mode [ 746.823585][T10665] loop9: detected capacity change from 0 to 1024 [ 746.837378][T10665] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 746.853407][T10665] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 746.870705][T10665] EXT4-fs error (device loop9): ext4_get_journal_inode:5900: inode #32: comm syz.9.13774: iget: special inode unallocated [ 746.898239][T10665] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 746.898473][T10665] EXT4-fs (loop9): no journal found [ 746.907883][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 746.907933][ C1] EXT4-fs (loop9): initial error at time 1782120027: ext4_get_journal_inode:5900: inode 32 [ 746.907973][ C1] EXT4-fs (loop9): last error at time 1782120027: ext4_get_journal_inode:5900: inode 32 [ 746.944857][T10665] EXT4-fs (loop9): can't get journal size [ 746.952195][T10665] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.13774: iget: special inode unallocated [ 746.966590][T10665] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 746.968176][T10665] EXT4-fs (loop9): failed to initialize system zone (-117) [ 746.985261][T10665] EXT4-fs (loop9): mount failed [ 747.014766][T10665] loop9: detected capacity change from 0 to 256 [ 747.033144][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 747.033165][ T28] audit: type=1400 audit(1782120027.328:4061): avc: denied { map } for pid=10672 comm="syz.4.13776" path="socket:[137424]" dev="sockfs" ino=137424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 747.090504][T10665] FAT-fs (loop9): data area starts beyond volume (274 > 64) [ 747.105576][T10665] FAT-fs (loop9): Can't find a valid FAT filesystem [ 747.143697][ T28] audit: type=1400 audit(1782120027.438:4062): avc: denied { getopt } for pid=10679 comm="syz.0.13780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.372006][T10707] loop9: detected capacity change from 0 to 512 [ 747.379275][T10707] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 747.394062][ T28] audit: type=1326 audit(1782120027.688:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31015ce59 code=0x7ffc0000 [ 747.431891][T10707] EXT4-fs (loop9): 1 truncate cleaned up [ 747.456081][T10707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.494712][ T28] audit: type=1326 audit(1782120027.688:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31015ce59 code=0x7ffc0000 [ 747.561092][ T28] audit: type=1326 audit(1782120027.688:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31015ce59 code=0x7ffc0000 [ 747.588191][ T28] audit: type=1326 audit(1782120027.718:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb31015ce59 code=0x7ffc0000 [ 747.614901][ T28] audit: type=1326 audit(1782120027.738:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb31011d68e code=0x7ffc0000 [ 747.680654][ T9490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.700625][ T28] audit: type=1326 audit(1782120027.748:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb31011d68e code=0x7ffc0000 [ 747.751788][ T28] audit: type=1326 audit(1782120027.748:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10708 comm="syz.4.13792" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb31011d68e code=0x7ffc0000 [ 747.778594][T10734] batadv1: entered promiscuous mode [ 747.778616][T10734] batadv1: entered allmulticast mode [ 747.791217][ T28] audit: type=1400 audit(1782120027.768:4070): avc: denied { write } for pid=10706 comm="syz.9.13790" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 748.073208][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13809'. [ 748.233758][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.243488][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.175545][T10793] batadv1: entered promiscuous mode [ 749.215737][T10793] batadv1: entered allmulticast mode [ 749.252436][T10795] lo speed is unknown, defaulting to 1000 [ 749.468329][T10829] loop9: detected capacity change from 0 to 4096 [ 749.482370][T10797] lo speed is unknown, defaulting to 1000 [ 749.505437][T10829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.570594][T10833] loop1: detected capacity change from 0 to 128 [ 749.585986][ T9490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.826162][T10838] syzkaller0: entered promiscuous mode [ 749.876965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.885271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.893930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.936472][T10850] xt_l2tp: v2 tid > 0xffff: 1114116 [ 750.102635][T10859] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 750.244366][T10873] netlink: 'syz.6.13847': attribute type 8 has an invalid length. [ 750.255557][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13847'. [ 750.256812][T10860] batadv1: entered promiscuous mode [ 750.343450][T10860] batadv1: entered allmulticast mode [ 750.366667][T10873] veth1_to_team: entered promiscuous mode [ 750.374041][T10873] gretap0: entered promiscuous mode [ 750.381587][T10873] veth1_to_team: left promiscuous mode [ 750.392667][T10873] gretap0: left promiscuous mode [ 750.433196][T10882] syzkaller0: entered promiscuous mode [ 750.439433][T10882] syzkaller0: entered allmulticast mode [ 750.448907][T10881] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 750.559377][T10886] netlink: 'syz.1.13853': attribute type 1 has an invalid length. [ 750.598296][T10886] bond1: entered promiscuous mode [ 750.603726][T10886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.645752][T10886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.676553][T10886] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 750.718741][T10886] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 750.731209][T10886] bond1: (slave vti0): making interface the new active one [ 750.738959][T10886] vti0: entered promiscuous mode [ 750.746696][T10886] bond1: (slave vti0): Enslaving as an active interface with an up link [ 750.837205][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13866'. [ 751.764010][T10952] loop1: detected capacity change from 0 to 512 [ 751.798421][T10952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.826926][T10952] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.884116][ T9531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.091818][T10985] batadv1: entered promiscuous mode [ 752.114183][T10985] batadv1: entered allmulticast mode [ 752.193796][T10997] loop6: detected capacity change from 0 to 1024 [ 752.201891][T10997] EXT4-fs: Ignoring removed bh option [ 752.235095][T10997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.253279][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 752.253295][ T28] audit: type=1400 audit(1782120032.548:4097): avc: denied { write } for pid=10996 comm="syz.6.13896" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.391493][ T9677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.409887][T11014] loop1: detected capacity change from 0 to 512 [ 752.438577][T11012] xt_hashlimit: size too large, truncated to 1048576 [ 752.459330][T11014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.499607][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13903'. [ 752.514938][T11024] netlink: 'syz.9.13904': attribute type 21 has an invalid length. [ 752.525671][T11014] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.540509][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13903'. [ 752.556797][ T28] audit: type=1400 audit(1782120032.848:4098): avc: denied { write } for pid=11013 comm="syz.1.13902" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.585273][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13903'. [ 752.594833][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13903'. [ 752.610088][T14517] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.621436][ T28] audit: type=1400 audit(1782120032.918:4099): avc: denied { write } for pid=11002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.652690][ T9531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.653267][T14517] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.712828][T14517] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.738855][T14517] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.762003][ T28] audit: type=1400 audit(1782120033.058:4100): avc: denied { write } for pid=11033 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.841002][ T28] audit: type=1400 audit(1782120033.138:4101): avc: denied { name_bind } for pid=11044 comm="syz.6.13910" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 752.907843][T11051] loop6: detected capacity change from 0 to 512 [ 752.915621][T11048] batadv1: entered promiscuous mode [ 752.921453][T11051] EXT4-fs: Ignoring removed bh option [ 752.942381][T11051] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 752.960401][T11051] EXT4-fs (loop6): 1 truncate cleaned up [ 752.960827][T11048] batadv1: entered allmulticast mode [ 752.975184][T11051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.086371][ T9677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.198698][T11073] loop1: detected capacity change from 0 to 512 [ 753.205618][ T28] audit: type=1400 audit(1782120033.498:4102): avc: denied { write } for pid=11059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.250988][T11073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.260487][ T28] audit: type=1400 audit(1782120033.548:4103): avc: denied { write } for pid=11078 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.283535][T11073] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.353832][ T9531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.508210][ T28] audit: type=1400 audit(1782120033.798:4104): avc: denied { mount } for pid=11100 comm="syz.6.13926" name="/" dev="rpc_pipefs" ino=137996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 753.531099][T11101] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 753.543791][ T3407] IPVS: starting estimator thread 0... [ 753.613881][ T28] audit: type=1400 audit(1782120033.908:4105): avc: denied { write } for pid=11094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.637852][T11110] IPVS: using max 2208 ests per chain, 110400 per kthread [ 753.673862][ T28] audit: type=1400 audit(1782120033.958:4106): avc: denied { write } for pid=11123 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.788720][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13935'. [ 753.864348][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13940'. [ 753.883501][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.900513][T11147] bridge_slave_1 (unregistering): left allmulticast mode [ 753.918028][T11147] bridge_slave_1 (unregistering): left promiscuous mode [ 753.931002][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.030004][T11154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13943'. [ 755.281526][T11231] loop1: detected capacity change from 0 to 4096 [ 755.307973][T11231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.376500][ T9531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.436138][ T9531] ================================================================== [ 755.444295][ T9531] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 755.452029][ T9531] [ 755.454379][ T9531] read-write to 0xffff888237d26528 of 1 bytes by task 11236 on cpu 1: [ 755.462574][ T9531] folio_add_lru+0xa4/0x250 [ 755.467129][ T9531] shmem_get_folio_gfp+0x7cc/0xd90 [ 755.472461][ T9531] shmem_write_begin+0xfc/0x1f0 [ 755.477356][ T9531] generic_perform_write+0x186/0x490 [ 755.482914][ T9531] shmem_file_write_iter+0xc5/0xf0 [ 755.488081][ T9531] vfs_write+0x57d/0x990 [ 755.492386][ T9531] ksys_write+0xdc/0x1a0 [ 755.496860][ T9531] __x64_sys_write+0x40/0x50 [ 755.501675][ T9531] x64_sys_call+0x27e1/0x3020 [ 755.506400][ T9531] do_syscall_64+0x136/0x3c0 [ 755.511635][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.517585][ T9531] [ 755.520040][ T9531] read to 0xffff888237d26528 of 1 bytes by task 9531 on cpu 0: [ 755.527620][ T9531] __lru_add_drain_all+0x17e/0x450 [ 755.532781][ T9531] lru_add_drain_all+0x10/0x20 [ 755.537632][ T9531] invalidate_bdev+0x47/0x70 [ 755.542294][ T9531] ext4_put_super+0x614/0x7c0 [ 755.547064][ T9531] generic_shutdown_super+0xee/0x220 [ 755.552576][ T9531] kill_block_super+0x2a/0x70 [ 755.557303][ T9531] ext4_kill_sb+0x42/0x80 [ 755.561675][ T9531] deactivate_locked_super+0x75/0x1c0 [ 755.567626][ T9531] deactivate_super+0x97/0xa0 [ 755.572401][ T9531] cleanup_mnt+0x2c3/0x340 [ 755.576857][ T9531] __cleanup_mnt+0x19/0x20 [ 755.581340][ T9531] task_work_run+0x130/0x1a0 [ 755.585967][ T9531] exit_to_user_mode_loop+0x1e4/0x8c0 [ 755.591370][ T9531] do_syscall_64+0x23c/0x3c0 [ 755.596438][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.602360][ T9531] [ 755.604698][ T9531] value changed: 0x03 -> 0x04 [ 755.609390][ T9531] [ 755.611739][ T9531] Reported by Kernel Concurrency Sanitizer on: [ 755.617912][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 755.627271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.628977][ T9531] Tainted: [W]=WARN [ 755.628989][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.637460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.640872][ T9531] ================================================================== [ 755.667414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.676923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.685445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.693726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog