last executing test programs: 13.450461637s ago: executing program 0 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000080)={@multicast1, @empty, @broadcast}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 12.894105503s ago: executing program 0 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$tun(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe800000000000100000"], 0x6e) 12.67027756s ago: executing program 0 (id=1048): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12.612395272s ago: executing program 0 (id=1050): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0xfffe, @remote}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = dup(r1) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x8007}, {0xeb4, 0x8007}, 0x14, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r4 = socket(0xa, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x801, @empty}, 0x10) listen(r5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='port=2049,addr=127.0.0.1,clientaddr=127.0.0.1,timeo=1,retrans=1\x00') sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="9d", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000f26002000200000000000001070000000400002000000000ffffff7f", @ANYRES32=0x0, @ANYBLOB="18000000000000003a1d6e697fb80700000000ff7f060000000400"], 0x48, 0x8d5}, 0x24000052) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 12.468464332s ago: executing program 0 (id=1054): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa557"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 12.157322797s ago: executing program 0 (id=1060): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='-'], 0x27) 12.119572305s ago: executing program 32 (id=1060): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000940)=ANY=[@ANYBLOB='-'], 0x27) 6.164299055s ago: executing program 2 (id=1149): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152bc03df18b2b285d09e94e", 0x0}, 0x20) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8, 0x0, 0xc}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (async) set_mempolicy(0x8006, 0x0, 0x3) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = inotify_init1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x44000160) (async) dup(r6) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r7, &(0x7f0000000000), 0x0}, 0x20) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000002440)=0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000240)={0x50c6, 0x80, 0x3d2}) (async) unshare(0x20000) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0xf000200a}) 6.044357891s ago: executing program 2 (id=1155): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 5.994863641s ago: executing program 2 (id=1159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffff, 0x48}]}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 5.95031308s ago: executing program 2 (id=1160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0xfffffffd, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x19b522) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r4, &(0x7f00000008c0)="05010906", 0x4) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) fadvise64(r0, 0xe36, 0x6, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r5 = io_uring_setup(0x7272, &(0x7f0000000440)={0x0, 0x8270, 0x20, 0x1, 0x117, 0x0, r3}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0068000000069078ac1414bbac14140b820200004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50400000907a00"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x25, &(0x7f0000000840)=[{0x0}], 0x1) 5.627141758s ago: executing program 2 (id=1167): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x5, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.732500474s ago: executing program 2 (id=1189): connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0xfff, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffff3bffffaaaaaaaaaabb88a800a88800000086dd60000000000000000000000000000000000000000000000000000000000000000000000000000000a92e0771"], 0x0) 4.732256014s ago: executing program 33 (id=1189): connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0xfff, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffff3bffffaaaaaaaaaabb88a800a88800000086dd60000000000000000000000000000000000000000000000000000000000000000000000000000000a92e0771"], 0x0) 2.104509372s ago: executing program 5 (id=1224): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0xfe61, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="6b8d4f37b9306a303cab00"/21], 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x20000000) 2.046900933s ago: executing program 5 (id=1226): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.865085882s ago: executing program 5 (id=1229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 1.757806954s ago: executing program 6 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x20ff85, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x8) 1.00766747s ago: executing program 5 (id=1250): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30860000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 873.618788ms ago: executing program 5 (id=1254): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 873.264358ms ago: executing program 1 (id=1255): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000000072eaf45e146bf70000002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2, r1}, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000000000800700000040080200", @ANYRES32=0x1, @ANYBLOB="fbffffff00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000028e3ffff0400000009002700"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300f8ffffff0000040000000000000000004112c132ade99e10770000", @ANYRES32=r7, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="03000000040000000800"/28], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) close(0x3) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf2502000000050001000000c0f84c05ee5474fa853fb28a33176a1a00c6c8e61e8346c3bedeb608a6232af1e649d902611612cc"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 872.681058ms ago: executing program 6 (id=1256): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") unshare(0x6020400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup2(r1, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 738.279586ms ago: executing program 6 (id=1258): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") unshare(0x6020400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup2(r1, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 703.662273ms ago: executing program 1 (id=1259): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) read(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37) r0 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlockall(0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x5, [@typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @union={0x7, 0x6, 0x0, 0x5, 0x1, 0xfffffffa, [{0x1, 0x2, 0x8}, {0x7, 0x2}, {0xb, 0x2, 0x3}, {0x1, 0x4, 0x8aa9}, {0x8, 0x4, 0x401}, {0x6, 0x5, 0x6}]}, @enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x10000}, {0x0, 0x6}, {0x2, 0x80}, {0xb, 0x6}, {0x7, 0x4}, {0x10, 0x40}, {0x0, 0x7fffffff}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000140)=""/140, 0xcd, 0x8c, 0x1, 0xfffffff7}, 0x28) r2 = syz_open_dev$usbmon(&(0x7f0000000480), 0x1, 0x204001) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500)) r6 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000840)=0xe8) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="ddee44d79cb29e3a1a4711755e686087aab7e7dc9e29edafe2a4d796cb92c820ac52f5d5dba8c7d3450b84005c1ca16e4d30ec8d7533fcf307dab4be2db7ae4998d79eb63a3df2ac705eaf63a59fb70e8c6a781b69220f02f41fe3d95bfaff100e7e9e64b8a1efca7e943a173cd86627dae60fba7edfc6a431800417e70b62fd1900553fbb3f8c8e1302301a23c74010ae9fe15be61a7649a681e76b8906807a71c3c024b62649474acb82f6a9d942ff70b96fdad8f0ee6bdd876ae82e778abd8e3880b0dfc0", 0xc6}, {&(0x7f00000003c0)="d5074dbcd80938caa65eb80526afd3e9783b667851b9480b60447289003b925282361fdf5adfb59129b8dd836276429523bcf6117f6894b5796c7f5da14dee830910fb54f96c31a22cb428dd07855387a985323f2b009dfde64d00b210de153a802d50a5", 0x64}], 0x2, &(0x7f0000000900)=[@rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r3, r1, r1, r1, r1]}}, @rights={{0x38, 0x1, 0x1, [r1, r4, r1, r1, r1, r1, r1, r1, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r14}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0, 0x44}}], 0x1, 0x24008010) socket$inet(0x2, 0xa, 0xd10a) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x19) mlockall(0x5) semget$private(0x0, 0x1, 0x281) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000a40)={0x80000004}) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000a80)=""/10) socket$packet(0x11, 0x3, 0x300) r15 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100000, 0x0) sendmsg$nl_xfrm(r15, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)=@allocspi={0x170, 0x16, 0x100, 0x70bd28, 0x25dfdbfe, {{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@loopback, 0x4e23, 0x7, 0x4e23, 0x6, 0xa, 0x80, 0xa0, 0x16, r11, r13}, {@in=@private=0xa010101, 0x4d2, 0xff}, @in=@multicast1, {0x6, 0x3, 0x593, 0x8, 0xf, 0x9, 0x40, 0x10000}, {0x9, 0x3, 0x2}, {0x1, 0x4, 0x5e}, 0x70bd29, 0x3506, 0x2, 0x0, 0x5, 0x81}, 0xe2, 0x4}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in6=@private1}}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0xd8667cd8d2d4ef9b, 0x1, 0x0, 0x3503, 0x2, 0xa}]}, @offload={0xc, 0x1c, {r11, 0x1}}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x4000841) ioctl$BLKFRAGET(r15, 0x1265, &(0x7f0000000d40)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r15, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 678.549529ms ago: executing program 5 (id=1260): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 616.548531ms ago: executing program 3 (id=1262): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 594.173286ms ago: executing program 3 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0xff}, 0xeb6e6c7964126a80, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@udp=r3, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000100)={'a', ' *:* ', 'r\x00'}, 0x8) mkdirat$cgroup(r9, &(0x7f00000001c0)='syz1\x00', 0x1ff) write$cgroup_devices(r10, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) sendmsg$inet(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002a80)="8f", 0x1}], 0x1}, 0x4850) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 586.845808ms ago: executing program 6 (id=1264): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100fcff02000000000000000084ec249b0000000000000000000000f2cb7549fdc3478e4ecc5b0700a3cdcd14fb1329ecee3ddd4e216f6190bcc8ce2ce28b6de1fb2fde"], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40d0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4}, 0x38) 502.122615ms ago: executing program 1 (id=1265): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30860000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 501.908055ms ago: executing program 4 (id=1266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe800000000000100000"], 0x6e) 497.720136ms ago: executing program 3 (id=1267): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x3eb, 0x4}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x6, 0x30}, &(0x7f00000005c0)=0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x802, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080)={0x81}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000040)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000100)={0x4}, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xe5e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xffffff01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000500000000000000010100939dd000558fc0fffcffffff18490000fbffffff00000000000000009500000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x24, &(0x7f0000000500)=""/36, 0x41000, 0x8, '\x00', r6, 0x0, r2, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r2, r2, r1, r2, r2, r2, r1, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x5, 0x8}], 0x10, 0x8001}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd4, "64facd11fc00e8624890401ab86ed569f97a6f4badb0011aab541e8ed7616dbe7c78f6fb2540ee835cba6d7211f6011064319c7608406e2877517c76fe9b5b7551c85a811d22f5ba4aad2795a30742bb090ba96836cc46e5edeaa9d36f0395bfa4f760c8d61e2356a4264e142d3f0c33433cc7aa3b79ec96f823c990100bb4c49813e15f0b9d7a2f47c4e919d4e6d54297bfe0b2a3e2a46e72296be96c0ff2581461c6236783c62c39f5cd778d891d77fb4286b1dff3ab54f8d56ac046b52a4f724d38cdc20e626507b94d52b6b06d723307d34d"}, &(0x7f0000000280)=0xdc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 452.503656ms ago: executing program 6 (id=1268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @remote, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, @loopback}}}}}}, 0x66) 448.028137ms ago: executing program 1 (id=1269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000000072eaf45e146bf70000002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2, r1}, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000000000800700000040080200", @ANYRES32=0x1, @ANYBLOB="fbffffff00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000028e3ffff0400000009002700"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300f8ffffff0000040000000000000000004112c132ade99e10770000", @ANYRES32=r7, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="03000000040000000800"/28], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) close(0x3) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf2502000000050001000000c0f84c05ee5474fa853fb28a33176a1a00c6c8e61e8346c3bedeb608a6232af1e649d902611612cc"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 415.559523ms ago: executing program 3 (id=1270): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 412.887814ms ago: executing program 6 (id=1271): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x4a) write$binfmt_aout(r0, &(0x7f0000000340)={{0x0, 0x4, 0x1f, 0x2e3, 0x1, 0x80000000, 0x93, 0x8}}, 0x20) 377.030472ms ago: executing program 4 (id=1272): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x126, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="61058b40030582cb01266c1bec4310d7475a688cbc603f"], 0x8e) 321.645043ms ago: executing program 4 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x8000) 318.103474ms ago: executing program 1 (id=1274): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 303.624307ms ago: executing program 4 (id=1275): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80083, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (fail_nth: 2) 286.03799ms ago: executing program 1 (id=1276): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x87) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0x400000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a00dd7b00000000000000001c1400"], 0x1c}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd4(r0, &(0x7f0000000140)={[0x8]}, 0x8, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0xb, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="97c592c2", @ANYRES16=r9, @ANYBLOB="200025bd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0xe0c038089ccb46a7}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) msgget(0x3, 0x180) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r10 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0723d78c65a5da6b00007136ad6d00"], &(0x7f00000002c0)='syzkaller\x00', 0x3a, 0xd2, &(0x7f0000000640)=""/210, 0x40f00, 0x19, '\x00', r7, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x0, &(0x7f0000000800)=[r10, r10, r10, r5, r10, r5, 0xffffffffffffffff, r5, r10, r10], &(0x7f0000000840), 0x10, 0x8}, 0x94) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r10, 0x7a5a4000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$key(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)={0x2, 0x17, 0x2c, 0x0, 0x20, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d4, 0x7, 0x9d, 0x79, 0x4, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb2, 0x6, {0x6, 0x2b, 0x0, 0x4b, 0x0, 0x8, 0x0, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_key={0xd, 0x9, 0x2e0, 0x0, "1edcf58544b7398a31d9742c262c000f5f727e9b8fe557a26a15795299b08c5db65ff76971490b99cce91ec21de90ddd50840c30f4471d2f519518eda99f41aae4c37e50789826b52525e112624bcf99141e9cc19fd50bb3920c0707"}, @sadb_address={0x5, 0x7, 0x3c, 0x80, 0x0, @in6={0xa, 0x9, 0x2, @remote, 0x6}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}]}, 0x100}}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYRES64=r11], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb6, &(0x7f000000cf3d)=""/182, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) 273.234273ms ago: executing program 3 (id=1277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0xff}, 0xeb6e6c7964126a80, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@udp=r3, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000100)={'a', ' *:* ', 'r\x00'}, 0x8) mkdirat$cgroup(r9, &(0x7f00000001c0)='syz1\x00', 0x1ff) write$cgroup_devices(r10, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) sendmsg$inet(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002a80)="8f", 0x1}], 0x1}, 0x4850) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 194.635159ms ago: executing program 4 (id=1278): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa557"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 24.379385ms ago: executing program 4 (id=1279): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30860000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 0s ago: executing program 3 (id=1280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000080)=0x2, 0x1000000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x204802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x5, 0x0, 0x0) r6 = accept4$llc(r3, 0x0, 0x0, 0x80400) fsetxattr$trusted_overlay_upper(r6, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r8, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) write$cgroup_int(r7, &(0x7f0000000480)=0xfe8e, 0x12) kernel console output (not intermixed with test programs): 1][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.204196][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.218723][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.225227][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.225693][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.233093][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.239917][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.246035][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.255562][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.260273][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.261379][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.266785][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.290817][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.294071][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.298605][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.302041][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.306577][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.315265][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.328998][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.329633][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.335620][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.414065][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.426031][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.429851][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.429883][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.431853][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.431883][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.449167][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.459455][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.472550][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.472582][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.481152][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.481180][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.490210][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.513986][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.514015][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.517994][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.518029][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.577296][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.587145][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.599156][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.614425][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.617655][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.617691][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.623631][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.623663][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.632871][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.632902][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.649894][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.649925][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.806260][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.845359][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.877765][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.915103][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.917949][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.989448][ T3296] veth0_vlan: entered promiscuous mode [ 31.991894][ T3296] veth1_vlan: entered promiscuous mode [ 31.998704][ T3296] veth0_macvtap: entered promiscuous mode [ 32.000005][ T3296] veth1_macvtap: entered promiscuous mode [ 32.005123][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.006579][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.074438][ T3302] veth0_vlan: entered promiscuous mode [ 32.076989][ T3295] veth0_vlan: entered promiscuous mode [ 32.079794][ T3302] veth1_vlan: entered promiscuous mode [ 32.080533][ T364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.081139][ T364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.081266][ T364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.081301][ T364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.088914][ T3295] veth1_vlan: entered promiscuous mode [ 32.128288][ T3295] veth0_macvtap: entered promiscuous mode [ 32.141128][ T3295] veth1_macvtap: entered promiscuous mode [ 32.151392][ T3301] veth0_vlan: entered promiscuous mode [ 32.163397][ T3301] veth1_vlan: entered promiscuous mode [ 32.164664][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.167730][ T3296] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.168425][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.178893][ T3302] veth0_macvtap: entered promiscuous mode [ 32.186765][ T3302] veth1_macvtap: entered promiscuous mode [ 32.234473][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.238615][ T3301] veth0_macvtap: entered promiscuous mode [ 32.240143][ T3301] veth1_macvtap: entered promiscuous mode [ 32.261205][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.261319][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.261355][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.261385][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.288303][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.298530][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.304333][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.366155][ T3303] veth0_vlan: entered promiscuous mode [ 32.380901][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381015][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381051][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381189][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381241][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381359][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.381406][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.382360][ T3303] veth1_vlan: entered promiscuous mode [ 32.450646][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.476267][ T3303] veth0_macvtap: entered promiscuous mode [ 32.478090][ T3303] veth1_macvtap: entered promiscuous mode [ 32.494463][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.498223][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.517210][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517472][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517603][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517803][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635804][ T3517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 32.930313][ T3527] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 32.945016][ T3531] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 32.982894][ T3531] veth3: entered allmulticast mode [ 33.026301][ T3531] syz.1.13 (3531) used greatest stack depth: 10992 bytes left [ 33.200874][ T3549] Zero length message leads to an empty skb [ 33.295099][ T3557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 33.426682][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 33.426696][ T29] audit: type=1400 audit(1790572951.155:180): avc: denied { create } for pid=3569 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.429157][ T29] audit: type=1400 audit(1790572951.155:181): avc: denied { connect } for pid=3569 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.429180][ T29] audit: type=1400 audit(1790572951.155:182): avc: denied { read } for pid=3569 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.430240][ T29] audit: type=1400 audit(1790572951.155:183): avc: denied { create } for pid=3567 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.435778][ T29] audit: type=1400 audit(1790572951.165:184): avc: denied { write } for pid=3567 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.437952][ T29] audit: type=1400 audit(1790572951.165:185): avc: denied { name_bind } for pid=3567 comm="syz.2.30" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.437978][ T29] audit: type=1400 audit(1790572951.165:186): avc: denied { node_bind } for pid=3567 comm="syz.2.30" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.524403][ T29] audit: type=1400 audit(1790572951.245:187): avc: denied { ioctl } for pid=3569 comm="syz.3.29" path="socket:[4856]" dev="sockfs" ino=4856 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.532139][ T29] audit: type=1400 audit(1790572951.245:188): avc: denied { write } for pid=3569 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.608053][ T3572] syzkaller0: entered promiscuous mode [ 33.608072][ T3572] syzkaller0: entered allmulticast mode [ 33.761787][ T3590] ip_tables: iptables: counters copy to user failed while replacing table [ 33.761821][ T29] audit: type=1400 audit(1790572951.495:189): avc: denied { setopt } for pid=3588 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.010098][ T3601] veth3: entered allmulticast mode [ 34.212022][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3620 comm=syz.3.51 [ 34.248808][ T3620] veth3: entered allmulticast mode [ 34.408628][ T3639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 34.517212][ T3639] vlan2: entered promiscuous mode [ 34.517232][ T3639] bond0: entered promiscuous mode [ 34.517247][ T3639] bond_slave_0: entered promiscuous mode [ 34.517358][ T3639] bond_slave_1: entered promiscuous mode [ 34.520138][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.520160][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.520888][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.520905][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.521515][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.522951][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.523435][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.698099][ T3653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.038818][ T3695] syzkaller0: entered promiscuous mode [ 35.038837][ T3695] syzkaller0: entered allmulticast mode [ 35.247145][ T3685] loop1: detected capacity change from 0 to 2048 [ 35.337348][ T3685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.390574][ T3685] netlink: zone id is out of range [ 35.390622][ T3685] netlink: zone id is out of range [ 35.390752][ T3685] netlink: zone id is out of range [ 35.390840][ T3685] netlink: zone id is out of range [ 35.390862][ T3685] netlink: zone id is out of range [ 35.390939][ T3685] netlink: zone id is out of range [ 35.390962][ T3685] netlink: zone id is out of range [ 35.390979][ T3685] netlink: zone id is out of range [ 35.463939][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.934922][ T3752] syzkaller0: entered promiscuous mode [ 35.934944][ T3752] syzkaller0: entered allmulticast mode [ 36.169926][ T3744] loop2: detected capacity change from 0 to 2048 [ 36.240169][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.254566][ T3770] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=3770 comm=syz.3.114 [ 36.386999][ T3776] syzkaller0: entered promiscuous mode [ 36.387020][ T3776] syzkaller0: entered allmulticast mode [ 36.423774][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.753014][ T3805] syzkaller1: entered allmulticast mode [ 37.051874][ T3837] syzkaller0: entered promiscuous mode [ 37.051896][ T3837] syzkaller0: entered allmulticast mode [ 37.225384][ T3812] loop1: detected capacity change from 0 to 2048 [ 37.280744][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.317065][ T3879] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=3879 comm=syz.2.140 [ 37.385112][ T3812] syz.1.127 (3812) used greatest stack depth: 10784 bytes left [ 37.547708][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.651397][ T3905] __nla_validate_parse: 278 callbacks suppressed [ 37.651414][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 37.720083][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 37.772438][ T3917] netlink: 68 bytes leftover after parsing attributes in process `syz.2.153'. [ 37.797920][ T3919] tipc: Started in network mode [ 37.797951][ T3919] tipc: Node identity 664f142b074d, cluster identity 4711 [ 37.798034][ T3919] tipc: Enabled bearer , priority 0 [ 37.798486][ T3919] syzkaller0: entered promiscuous mode [ 37.798511][ T3919] syzkaller0: entered allmulticast mode [ 37.833916][ T3919] tipc: Resetting bearer [ 37.836578][ T3918] tipc: Resetting bearer [ 37.871431][ T3918] tipc: Disabling bearer [ 38.005950][ T3935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.161'. [ 38.050945][ T3945] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 38.085582][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 38.114299][ T3945] bond2: (slave veth0_to_bond): making interface the new active one [ 38.114684][ T3945] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 38.153123][ T3954] loop2: detected capacity change from 0 to 512 [ 38.192228][ T3954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.192292][ T3954] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.314035][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.338880][ T3977] loop2: detected capacity change from 0 to 512 [ 38.342233][ T3977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 38.342276][ T3977] System zones: 1-12 [ 38.343010][ T3977] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.176: missing EA_INODE flag [ 38.343034][ T3977] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.343187][ T3977] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.176: error while reading EA inode 12 err=-117 [ 38.343219][ T3977] loop2: lost filesystem error report for type 5 error -117 [ 38.343356][ T3977] EXT4-fs (loop2): 1 orphan inode deleted [ 38.343693][ T3977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.355153][ T3977] tipc: Started in network mode [ 38.355179][ T3977] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.355334][ T3977] tipc: New replicast peer: 172.20.20.187 [ 38.355598][ T3977] tipc: Enabled bearer , priority 10 [ 38.416088][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 38.421246][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.592311][ T4001] loop4: detected capacity change from 0 to 512 [ 38.598785][ T4001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 38.598892][ T4001] System zones: 1-12 [ 38.617055][ T4001] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.187: missing EA_INODE flag [ 38.617079][ T4001] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.621440][ T4001] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.187: error while reading EA inode 12 err=-117 [ 38.621543][ T4001] loop4: lost filesystem error report for type 5 error -117 [ 38.632035][ T4001] EXT4-fs (loop4): 1 orphan inode deleted [ 38.632574][ T4001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.683329][ T4001] tipc: Started in network mode [ 38.683374][ T4001] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.683456][ T4001] tipc: New replicast peer: 172.20.20.187 [ 38.683647][ T4001] tipc: Enabled bearer , priority 10 [ 38.711310][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.758352][ T4013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.191'. [ 38.829829][ T4025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.198'. [ 38.906650][ T4038] loop1: detected capacity change from 0 to 512 [ 38.921068][ T4038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 38.921098][ T4038] System zones: 1-12 [ 38.921901][ T4038] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.201: missing EA_INODE flag [ 38.921928][ T4038] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.922122][ T4038] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.201: error while reading EA inode 12 err=-117 [ 38.922150][ T4038] loop1: lost filesystem error report for type 5 error -117 [ 38.922254][ T4038] EXT4-fs (loop1): 1 orphan inode deleted [ 38.922656][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.984040][ T4047] netlink: 'syz.0.206': attribute type 8 has an invalid length. [ 38.984058][ T4047] netlink: 72 bytes leftover after parsing attributes in process `syz.0.206'. [ 38.999049][ T4038] tipc: New replicast peer: 172.20.20.187 [ 38.999248][ T4038] tipc: Enabled bearer , priority 10 [ 39.048252][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.106104][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 39.106149][ T29] audit: type=1400 audit(1790572956.835:334): avc: denied { execute } for pid=4051 comm="syz.4.209" path="/31/memory.events" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.180371][ T4069] netlink: 'syz.2.217': attribute type 8 has an invalid length. [ 39.180387][ T4069] netlink: 72 bytes leftover after parsing attributes in process `syz.2.217'. [ 39.217981][ T4079] loop2: detected capacity change from 0 to 512 [ 39.228662][ T4079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 39.228693][ T4079] System zones: 1-12 [ 39.230581][ T4079] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.218: missing EA_INODE flag [ 39.230697][ T4079] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 39.238742][ T4079] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.218: error while reading EA inode 12 err=-117 [ 39.238773][ T4079] loop2: lost filesystem error report for type 5 error -117 [ 39.242791][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 39.242807][ C1] EXT4-fs (loop2): initial error at time 1790572956: ext4_xattr_inode_iget:437: inode 12 [ 39.242852][ C1] EXT4-fs (loop2): last error at time 1790572956: ext4_xattr_inode_iget:442 [ 39.264688][ T4079] EXT4-fs (loop2): 1 orphan inode deleted [ 39.265060][ T4079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.320635][ T4079] tipc: Enabling of bearer rejected, already enabled [ 39.360542][ T4088] syzkaller0: entered promiscuous mode [ 39.360559][ T4088] syzkaller0: entered allmulticast mode [ 39.381408][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.457645][ T4092] net_ratelimit: 296 callbacks suppressed [ 39.457664][ T4092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 39.475464][ T37] tipc: Node number set to 2886997162 [ 39.522194][ T4101] netlink: 'syz.0.228': attribute type 8 has an invalid length. [ 39.610067][ T4119] loop0: detected capacity change from 0 to 512 [ 39.633143][ T4119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 39.633176][ T4119] System zones: 1-12 [ 39.633424][ T4119] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.233: missing EA_INODE flag [ 39.633449][ T4119] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 39.633611][ T4119] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.233: error while reading EA inode 12 err=-117 [ 39.633638][ T4119] loop0: lost filesystem error report for type 5 error -117 [ 39.633800][ T4119] EXT4-fs (loop0): 1 orphan inode deleted [ 39.634292][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.637384][ T4119] tipc: Started in network mode [ 39.637408][ T4119] tipc: Node identity ac1414aa, cluster identity 4711 [ 39.637463][ T4119] tipc: New replicast peer: 172.20.20.187 [ 39.637636][ T4119] tipc: Enabled bearer , priority 10 [ 39.666137][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.786471][ T29] audit: type=1400 audit(1790572957.515:335): avc: denied { create } for pid=4130 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.809909][ T3370] tipc: Node number set to 2886997162 [ 40.133392][ T9] tipc: Node number set to 1627526187 [ 40.518968][ T4235] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.640480][ T9] tipc: Node number set to 2886997162 [ 40.866619][ T4255] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 40.900076][ T4257] loop3: detected capacity change from 0 to 512 [ 40.908261][ T4257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 40.908294][ T4257] System zones: 1-12 [ 40.908815][ T4257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.284: missing EA_INODE flag [ 40.908857][ T4257] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 40.908941][ T4257] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.284: error while reading EA inode 12 err=-117 [ 40.908964][ T4257] loop3: lost filesystem error report for type 5 error -117 [ 40.909155][ T4257] EXT4-fs (loop3): 1 orphan inode deleted [ 40.909664][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.972323][ T4257] tipc: Started in network mode [ 40.972391][ T4257] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.972507][ T4257] tipc: New replicast peer: 172.20.20.187 [ 40.972726][ T4257] tipc: Enabled bearer , priority 10 [ 41.008895][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.034924][ T4262] Illegal XDP return value 4294967294 on prog (id 37) dev syz_tun, expect packet loss! [ 41.139545][ T4276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.168269][ T4278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.241969][ T4282] loop0: detected capacity change from 0 to 512 [ 41.256946][ T4282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 41.256979][ T4282] System zones: 1-12 [ 41.257321][ T4282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.295: missing EA_INODE flag [ 41.257421][ T4282] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 41.258143][ T4282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.295: error while reading EA inode 12 err=-117 [ 41.258167][ T4282] loop0: lost filesystem error report for type 5 error -117 [ 41.260508][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 41.260531][ C0] EXT4-fs (loop0): initial error at time 1790572958: ext4_xattr_inode_iget:437: inode 12 [ 41.260569][ C0] EXT4-fs (loop0): last error at time 1790572958: ext4_xattr_inode_iget:442 [ 41.340684][ T4282] EXT4-fs (loop0): 1 orphan inode deleted [ 41.341010][ T4282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.369918][ T4282] tipc: Enabling of bearer rejected, already enabled [ 41.400282][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.451113][ T4288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.568055][ T4303] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4303 comm=syz.2.304 [ 41.620157][ T4308] loop2: detected capacity change from 0 to 512 [ 41.654031][ T4308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.654137][ T4308] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.689402][ T4316] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4316 comm=syz.3.309 [ 41.689896][ T29] audit: type=1326 audit(1790572959.415:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.691594][ T29] audit: type=1326 audit(1790572959.425:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.691756][ T29] audit: type=1326 audit(1790572959.425:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.692282][ T29] audit: type=1326 audit(1790572959.425:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.692361][ T29] audit: type=1326 audit(1790572959.425:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.693962][ T29] audit: type=1326 audit(1790572959.425:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.694289][ T29] audit: type=1326 audit(1790572959.425:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.703017][ T29] audit: type=1326 audit(1790572959.425:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.2.306" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 41.928356][ T4325] syzkaller0: entered promiscuous mode [ 41.928374][ T4325] syzkaller0: entered allmulticast mode [ 42.091916][ T3376] tipc: Node number set to 2886997162 [ 42.135741][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.238547][ T4344] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4344 comm=syz.2.322 [ 42.380287][ T4359] syzkaller0: entered promiscuous mode [ 42.380310][ T4359] syzkaller0: entered allmulticast mode [ 42.442084][ T4365] syzkaller1: entered promiscuous mode [ 42.442106][ T4365] syzkaller1: entered allmulticast mode [ 42.482615][ T4371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4371 comm=syz.3.333 [ 42.627667][ T4391] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 42.641905][ T4391] veth3: entered allmulticast mode [ 42.643200][ T4391] bond1: (slave veth3): Enslaving as an active interface with a down link [ 42.770735][ T4407] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4407 comm=syz.1.347 [ 42.895826][ T4413] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.966702][ T4417] syzkaller0: entered promiscuous mode [ 42.966725][ T4417] syzkaller0: entered allmulticast mode [ 43.038697][ T4420] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 43.057035][ T4420] veth3: entered allmulticast mode [ 43.059476][ T4420] bond3: (slave veth3): Enslaving as an active interface with a down link [ 43.059488][ T4423] __nla_validate_parse: 13 callbacks suppressed [ 43.059500][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 43.065439][ T4420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 43.093384][ T4425] syzkaller0: entered promiscuous mode [ 43.093439][ T4425] syzkaller0: entered allmulticast mode [ 43.356081][ T4437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4437 comm=syz.1.359 [ 43.414551][ T4443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.512231][ T4451] syzkaller0: entered promiscuous mode [ 43.512314][ T4451] syzkaller0: entered allmulticast mode [ 43.763848][ T364] IPVS: starting estimator thread 0... [ 43.847057][ T4479] syzkaller0: entered promiscuous mode [ 43.847120][ T4479] syzkaller0: entered allmulticast mode [ 43.850540][ T4474] IPVS: using max 2208 ests per chain, 110400 per kthread [ 43.887674][ T4480] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4480 comm=syz.2.376 [ 44.003889][ T4486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.026259][ T4490] syzkaller0: entered promiscuous mode [ 44.026279][ T4490] syzkaller0: entered allmulticast mode [ 44.097729][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 44.173788][ T364] IPVS: starting estimator thread 0... [ 44.193633][ T4503] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 44.226144][ T4503] veth5: entered allmulticast mode [ 44.226360][ T4510] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4510 comm=syz.4.389 [ 44.229788][ T4503] bond2: (slave veth5): Enslaving as an active interface with a down link [ 44.262485][ T4501] IPVS: using max 2400 ests per chain, 120000 per kthread [ 44.269633][ T4503] bond2: (slave veth0_to_bond): making interface the new active one [ 44.277711][ T4503] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 44.309964][ T4512] syzkaller0: entered promiscuous mode [ 44.310030][ T4512] syzkaller0: entered allmulticast mode [ 44.336156][ T4514] syzkaller0: entered promiscuous mode [ 44.336177][ T4514] syzkaller0: entered allmulticast mode [ 44.411150][ T4520] syzkaller0: entered promiscuous mode [ 44.411170][ T4520] syzkaller0: entered allmulticast mode [ 44.445029][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 44.547030][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 44.621235][ T4538] syzkaller0: entered promiscuous mode [ 44.621249][ T4538] syzkaller0: entered allmulticast mode [ 44.647605][ T4536] syzkaller0: entered promiscuous mode [ 44.647619][ T4536] syzkaller0: entered allmulticast mode [ 44.742465][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 44.769554][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 44.806115][ T4553] syzkaller0: entered promiscuous mode [ 44.806132][ T4553] syzkaller0: entered allmulticast mode [ 44.845073][ T4559] loop2: detected capacity change from 0 to 512 [ 44.863380][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 44.863450][ T4559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.863532][ T4559] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.865930][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 44.865942][ T29] audit: type=1326 audit(1790572962.595:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.865971][ T29] audit: type=1326 audit(1790572962.595:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.866002][ T29] audit: type=1326 audit(1790572962.595:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867344][ T29] audit: type=1326 audit(1790572962.595:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867376][ T29] audit: type=1326 audit(1790572962.595:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867472][ T29] audit: type=1326 audit(1790572962.595:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867501][ T29] audit: type=1326 audit(1790572962.595:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867531][ T29] audit: type=1326 audit(1790572962.595:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867585][ T29] audit: type=1326 audit(1790572962.595:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 44.867612][ T29] audit: type=1326 audit(1790572962.595:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.2.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 45.041032][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.250145][ T4583] syzkaller1: entered promiscuous mode [ 45.250163][ T4583] syzkaller1: entered allmulticast mode [ 45.277549][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 45.334741][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 45.407979][ T4599] syzkaller0: entered promiscuous mode [ 45.407997][ T4599] syzkaller0: entered allmulticast mode [ 45.482584][ T4609] syzkaller0: entered promiscuous mode [ 45.482597][ T4609] syzkaller0: entered allmulticast mode [ 45.858965][ T4642] syzkaller0: entered promiscuous mode [ 45.858979][ T4642] syzkaller0: entered allmulticast mode [ 45.974606][ T4644] loop3: detected capacity change from 0 to 512 [ 45.982555][ T4644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.982622][ T4644] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.460936][ T4669] syzkaller0: entered promiscuous mode [ 46.460961][ T4669] syzkaller0: entered allmulticast mode [ 46.677337][ T4683] loop2: detected capacity change from 0 to 128 [ 46.763577][ T4691] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4691 comm=syz.0.470 [ 46.783959][ T4693] syzkaller0: entered promiscuous mode [ 46.783979][ T4693] syzkaller0: entered allmulticast mode [ 46.872465][ T4695] syzkaller0: entered promiscuous mode [ 46.872543][ T4695] syzkaller0: entered allmulticast mode [ 47.078602][ T4714] syzkaller0: entered promiscuous mode [ 47.078624][ T4714] syzkaller0: entered allmulticast mode [ 47.125733][ T79] IPVS: starting estimator thread 0... [ 47.128517][ T4719] loop4: detected capacity change from 0 to 128 [ 47.176194][ T4722] syzkaller0: entered promiscuous mode [ 47.176215][ T4722] syzkaller0: entered allmulticast mode [ 47.211357][ T4720] IPVS: using max 1968 ests per chain, 98400 per kthread [ 47.456168][ T4738] syzkaller0: entered promiscuous mode [ 47.456189][ T4738] syzkaller0: entered allmulticast mode [ 47.560062][ T4750] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4750 comm=syz.2.497 [ 47.568196][ T4748] syzkaller0: entered promiscuous mode [ 47.568216][ T4748] syzkaller0: entered allmulticast mode [ 47.647021][ T4756] loop4: detected capacity change from 0 to 512 [ 47.668022][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.668147][ T4756] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.872448][ T4772] geneve2: entered promiscuous mode [ 48.542202][ T4613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.578868][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.578994][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.629532][ T4781] __nla_validate_parse: 10 callbacks suppressed [ 48.629549][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 48.646111][ T4785] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4785 comm=syz.3.508 [ 48.726785][ T4792] syzkaller0: entered promiscuous mode [ 48.726886][ T4792] syzkaller0: entered allmulticast mode [ 48.729976][ T4795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 48.822018][ T4791] loop0: detected capacity change from 0 to 1024 [ 48.824747][ T4791] EXT4-fs: Ignoring removed i_version option [ 48.848384][ T4791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.848556][ T4791] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 48.954577][ T4804] syzkaller0: entered promiscuous mode [ 48.954662][ T4804] syzkaller0: entered allmulticast mode [ 49.005219][ T4791] loop0: detected capacity change from 0 to 512 [ 49.051020][ T4791] EXT4-fs (loop0): invalid journal inode [ 49.051288][ T4791] EXT4-fs (loop0): can't get journal size [ 49.074273][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 49.089936][ T4791] EXT4-fs (loop0): 1 truncate cleaned up [ 49.107253][ T4791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.271460][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 49.298468][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 49.358655][ T4845] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4845 comm=syz.1.532 [ 49.634943][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 49.638561][ T4858] syzkaller0: entered promiscuous mode [ 49.638581][ T4858] syzkaller0: entered allmulticast mode [ 49.726400][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.745645][ T4880] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=4880 comm=syz.0.545 [ 49.949858][ T4901] syzkaller0: entered promiscuous mode [ 49.949880][ T4901] syzkaller0: entered allmulticast mode [ 49.970796][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 50.084564][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 50.256149][ T4953] loop4: detected capacity change from 0 to 512 [ 50.270397][ T4953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.270823][ T4953] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.273316][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 50.273327][ T29] audit: type=1326 audit(1790572968.005:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.273451][ T29] audit: type=1326 audit(1790572968.005:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.273520][ T29] audit: type=1326 audit(1790572968.005:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.273593][ T29] audit: type=1326 audit(1790572968.005:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275025][ T29] audit: type=1326 audit(1790572968.005:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275064][ T29] audit: type=1326 audit(1790572968.005:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275137][ T29] audit: type=1326 audit(1790572968.005:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275163][ T29] audit: type=1326 audit(1790572968.005:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275190][ T29] audit: type=1326 audit(1790572968.005:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.275293][ T29] audit: type=1326 audit(1790572968.005:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4951 comm="syz.4.575" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d738fe159 code=0x7ffc0000 [ 50.442335][ T4961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 50.593299][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.764254][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 50.959920][ T4999] loop0: detected capacity change from 0 to 512 [ 50.991820][ T4999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.991929][ T4999] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.028993][ T4994] syz.4.592 (4994) used greatest stack depth: 10176 bytes left [ 51.112285][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.390008][ T5033] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5033 comm=syz.3.606 [ 51.455936][ T5041] loop3: detected capacity change from 0 to 512 [ 51.468544][ T5041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.468741][ T5041] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.538426][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.588711][ T5049] syzkaller0: entered promiscuous mode [ 51.588724][ T5049] syzkaller0: entered allmulticast mode [ 51.679447][ T5057] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5057 comm=syz.1.617 [ 51.771230][ T5066] loop3: detected capacity change from 0 to 512 [ 51.791332][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.791552][ T5066] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.871011][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.882638][ T5080] syzkaller0: entered promiscuous mode [ 51.882719][ T5080] syzkaller0: entered allmulticast mode [ 52.571995][ T5160] syzkaller0: entered promiscuous mode [ 52.572047][ T5160] syzkaller0: entered allmulticast mode [ 52.734714][ T5179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.997376][ T5213] loop1: detected capacity change from 0 to 512 [ 53.027659][ T5213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.027699][ T5213] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.113014][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.113295][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.171905][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.176432][ T5213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.271073][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.271919][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.272031][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.272067][ T51] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.396677][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.455577][ T5256] syzkaller0: entered promiscuous mode [ 53.455620][ T5256] syzkaller0: entered allmulticast mode [ 53.466895][ T5258] syzkaller0: entered promiscuous mode [ 53.466911][ T5258] syzkaller0: entered allmulticast mode [ 53.608677][ T5270] loop0: detected capacity change from 0 to 512 [ 53.623060][ T5270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 53.623087][ T5270] System zones: 1-12 [ 53.623497][ T5270] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.687: missing EA_INODE flag [ 53.623522][ T5270] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 53.623655][ T5270] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.687: error while reading EA inode 12 err=-117 [ 53.623680][ T5270] loop0: lost filesystem error report for type 5 error -117 [ 53.623815][ T5270] EXT4-fs (loop0): 1 orphan inode deleted [ 53.624155][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.642866][ T5271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.721982][ T5270] tipc: Enabling of bearer rejected, already enabled [ 53.740074][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.890039][ T5290] __nla_validate_parse: 5 callbacks suppressed [ 53.890053][ T5290] netlink: 68 bytes leftover after parsing attributes in process `syz.3.695'. [ 53.974781][ T5300] syzkaller0: entered promiscuous mode [ 53.974801][ T5300] syzkaller0: entered allmulticast mode [ 53.976335][ T5298] syzkaller0: entered promiscuous mode [ 53.976431][ T5298] syzkaller0: entered allmulticast mode [ 54.033995][ T5302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.699'. [ 54.087755][ T5304] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.257941][ T5319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.706'. [ 54.387830][ T5335] loop3: detected capacity change from 0 to 512 [ 54.389089][ T5335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 54.389134][ T5335] System zones: 1-12 [ 54.389390][ T5335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.711: missing EA_INODE flag [ 54.389435][ T5335] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 54.389515][ T5335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.711: error while reading EA inode 12 err=-117 [ 54.389630][ T5335] loop3: lost filesystem error report for type 5 error -117 [ 54.390250][ T5335] EXT4-fs (loop3): 1 orphan inode deleted [ 54.390693][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.406144][ T5335] tipc: Enabling of bearer rejected, already enabled [ 54.429948][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.652520][ T5347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 54.891404][ T5352] netlink: 68 bytes leftover after parsing attributes in process `syz.2.718'. [ 55.039422][ T5366] loop2: detected capacity change from 0 to 512 [ 55.041852][ T5366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 55.041880][ T5366] System zones: 1-12 [ 55.042172][ T5366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.722: missing EA_INODE flag [ 55.042277][ T5366] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 55.042349][ T5366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.722: error while reading EA inode 12 err=-117 [ 55.042420][ T5366] loop2: lost filesystem error report for type 5 error -117 [ 55.042573][ T5366] EXT4-fs (loop2): 1 orphan inode deleted [ 55.043112][ T5366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.050291][ T5366] tipc: Enabling of bearer rejected, already enabled [ 55.101137][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.246729][ T5374] syzkaller0: entered promiscuous mode [ 55.246750][ T5374] syzkaller0: entered allmulticast mode [ 55.319609][ T5376] syzkaller0: entered promiscuous mode [ 55.319627][ T5376] syzkaller0: entered allmulticast mode [ 55.397944][ T5378] syzkaller0: entered promiscuous mode [ 55.397962][ T5378] syzkaller0: entered allmulticast mode [ 55.566292][ T5396] loop3: detected capacity change from 0 to 512 [ 55.771732][ T5396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 55.771827][ T5396] System zones: 1-12 [ 55.775447][ T5396] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.733: missing EA_INODE flag [ 55.775533][ T5396] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 55.775801][ T5396] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.733: error while reading EA inode 12 err=-117 [ 55.775844][ T5396] loop3: lost filesystem error report for type 5 error -117 [ 55.778212][ T5396] EXT4-fs (loop3): 1 orphan inode deleted [ 55.806887][ T5396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.886332][ T5396] tipc: Enabling of bearer rejected, already enabled [ 55.947292][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.026429][ T5412] syzkaller0: entered promiscuous mode [ 56.026457][ T5412] syzkaller0: entered allmulticast mode [ 56.050753][ T5414] syzkaller0: entered promiscuous mode [ 56.050800][ T5414] syzkaller0: entered allmulticast mode [ 56.053398][ T5416] syzkaller0: entered promiscuous mode [ 56.053416][ T5416] syzkaller0: entered allmulticast mode [ 56.312862][ T5418] syzkaller0: entered promiscuous mode [ 56.312879][ T5418] syzkaller0: entered allmulticast mode [ 59.135564][ T5425] syzkaller0: entered promiscuous mode [ 59.135628][ T5425] syzkaller0: entered allmulticast mode [ 59.446656][ T5451] loop2: detected capacity change from 0 to 512 [ 59.464174][ T5451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.464311][ T5451] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.467529][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 59.467572][ T29] audit: type=1326 audit(1790572977.195:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.467647][ T29] audit: type=1326 audit(1790572977.195:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.467716][ T29] audit: type=1326 audit(1790572977.195:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.468976][ T29] audit: type=1326 audit(1790572977.195:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.469008][ T29] audit: type=1326 audit(1790572977.195:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.469051][ T29] audit: type=1326 audit(1790572977.195:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.469140][ T29] audit: type=1326 audit(1790572977.195:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.471681][ T29] audit: type=1326 audit(1790572977.205:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.471708][ T29] audit: type=1326 audit(1790572977.205:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.471730][ T29] audit: type=1326 audit(1790572977.205:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5450 comm="syz.2.752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f390194e159 code=0x7ffc0000 [ 59.608858][ T5437] loop1: detected capacity change from 0 to 2048 [ 59.620288][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 59.719241][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.761049][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.812363][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.814717][ T5463] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5463 comm=syz.0.755 [ 59.858156][ T5467] syzkaller0: entered promiscuous mode [ 59.858175][ T5467] syzkaller0: entered allmulticast mode [ 59.942848][ T5472] syzkaller0: entered promiscuous mode [ 59.942865][ T5472] syzkaller0: entered allmulticast mode [ 60.004163][ T5480] syzkaller0: entered promiscuous mode [ 60.004183][ T5480] syzkaller0: entered allmulticast mode [ 60.060803][ T5483] syzkaller0: entered promiscuous mode [ 60.060822][ T5483] syzkaller0: entered allmulticast mode [ 60.197529][ T5496] loop0: detected capacity change from 0 to 512 [ 60.222641][ T5496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.222702][ T5496] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.285510][ T5504] syzkaller0: entered promiscuous mode [ 60.285532][ T5504] syzkaller0: entered allmulticast mode [ 60.436520][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.436669][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.553268][ T5492] loop1: detected capacity change from 0 to 2048 [ 60.664896][ T5492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.694531][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.697340][ T5496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.775823][ T5528] loop2: detected capacity change from 0 to 2048 [ 60.787375][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.794951][ T5528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.815676][ T5525] syzkaller0: entered promiscuous mode [ 60.815715][ T5525] syzkaller0: entered allmulticast mode [ 60.851936][ T79] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.851979][ T79] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.852015][ T79] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.852126][ T79] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.896787][ T5522] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.775'. [ 60.896988][ T5522] netlink: zone id is out of range [ 60.897026][ T5522] netlink: zone id is out of range [ 60.898621][ T5522] netlink: zone id is out of range [ 60.898881][ T5522] netlink: zone id is out of range [ 60.898910][ T5522] netlink: zone id is out of range [ 60.898931][ T5522] netlink: zone id is out of range [ 60.898959][ T5522] netlink: zone id is out of range [ 60.899028][ T5522] netlink: zone id is out of range [ 60.899110][ T5522] netlink: zone id is out of range [ 60.899160][ T5522] netlink: zone id is out of range [ 61.028792][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.063278][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.103508][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 61.107171][ T5550] vlan2: entered promiscuous mode [ 61.107188][ T5550] bond0: entered promiscuous mode [ 61.107200][ T5550] bond_slave_0: entered promiscuous mode [ 61.107321][ T5550] bond_slave_1: entered promiscuous mode [ 61.131906][ T5549] syzkaller0: entered promiscuous mode [ 61.131925][ T5549] syzkaller0: entered allmulticast mode [ 61.325932][ T5564] syzkaller0: entered promiscuous mode [ 61.325953][ T5564] syzkaller0: entered allmulticast mode [ 61.364385][ T5562] loop2: detected capacity change from 0 to 2048 [ 61.383792][ T5562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.415595][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.533652][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 61.802260][ T5586] syzkaller0: entered promiscuous mode [ 61.802354][ T5586] syzkaller0: entered allmulticast mode [ 62.028320][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 62.153031][ T5597] loop1: detected capacity change from 0 to 2048 [ 62.173350][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.203262][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.252718][ T5613] syzkaller0: entered promiscuous mode [ 62.252811][ T5613] syzkaller0: entered allmulticast mode [ 62.404705][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 62.550487][ T5636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.813'. [ 62.668671][ T5650] syzkaller0: entered promiscuous mode [ 62.668693][ T5650] syzkaller0: entered allmulticast mode [ 62.678308][ T5648] loop2: detected capacity change from 0 to 2048 [ 62.708076][ T5648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.740702][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.768519][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 62.963593][ T5685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 63.019272][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 63.109360][ T364] IPVS: starting estimator thread 0... [ 63.201764][ T5704] IPVS: using max 2016 ests per chain, 100800 per kthread [ 63.305312][ T5696] loop4: detected capacity change from 0 to 2048 [ 63.305577][ T5711] syzkaller0: entered promiscuous mode [ 63.305673][ T5711] syzkaller0: entered allmulticast mode [ 63.772738][ T5751] syzkaller0: entered promiscuous mode [ 63.772895][ T5751] syzkaller0: entered allmulticast mode [ 64.097683][ T5783] syzkaller0: entered promiscuous mode [ 64.097715][ T5783] syzkaller0: entered allmulticast mode [ 64.247435][ T5776] loop2: detected capacity change from 0 to 2048 [ 64.257805][ T5787] syzkaller0: entered promiscuous mode [ 64.257823][ T5787] syzkaller0: entered allmulticast mode [ 64.372267][ T5796] macsec1: entered allmulticast mode [ 64.372283][ T5796] veth1_macvtap: entered allmulticast mode [ 64.525130][ T5819] syzkaller0: entered promiscuous mode [ 64.525150][ T5819] syzkaller0: entered allmulticast mode [ 64.563906][ T5826] loop1: detected capacity change from 0 to 512 [ 64.574671][ T5826] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.588143][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 64.588156][ T29] audit: type=1326 audit(1790572982.315:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.588331][ T29] audit: type=1326 audit(1790572982.315:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.588496][ T29] audit: type=1326 audit(1790572982.315:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.588702][ T29] audit: type=1326 audit(1790572982.315:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.588846][ T29] audit: type=1326 audit(1790572982.315:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.589065][ T29] audit: type=1326 audit(1790572982.315:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.589145][ T29] audit: type=1326 audit(1790572982.315:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.589826][ T29] audit: type=1326 audit(1790572982.315:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.590388][ T29] audit: type=1326 audit(1790572982.315:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.591568][ T29] audit: type=1326 audit(1790572982.325:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.880" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3568e159 code=0x7ffc0000 [ 64.655227][ T5831] syzkaller0: entered promiscuous mode [ 64.655247][ T5831] syzkaller0: entered allmulticast mode [ 64.827657][ T5834] loop4: detected capacity change from 0 to 2048 [ 64.925561][ T5844] syzkaller0: entered promiscuous mode [ 64.925583][ T5844] syzkaller0: entered allmulticast mode [ 65.024827][ T5854] loop1: detected capacity change from 0 to 512 [ 65.025163][ T5854] ext4: Unknown parameter 'measure' [ 65.058784][ T5856] syzkaller0: entered promiscuous mode [ 65.058863][ T5856] syzkaller0: entered allmulticast mode [ 65.168449][ T5854] loop1: detected capacity change from 0 to 512 [ 65.252036][ T5867] syzkaller0: entered promiscuous mode [ 65.252053][ T5867] syzkaller0: entered allmulticast mode [ 65.253125][ T5854] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.307529][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.307754][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.508386][ T5854] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 65.536204][ T5873] loop4: detected capacity change from 0 to 512 [ 65.560280][ T5877] __nla_validate_parse: 2 callbacks suppressed [ 65.560306][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 65.579610][ T5873] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.712698][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 65.773541][ T5854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.776802][ T5877] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 65.777041][ T5877] bond1: entered allmulticast mode [ 65.797469][ T5888] syzkaller0: entered promiscuous mode [ 65.797489][ T5888] syzkaller0: entered allmulticast mode [ 65.881253][ T5902] syz.1.902 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.935554][ T5910] syzkaller0: entered promiscuous mode [ 65.935572][ T5910] syzkaller0: entered allmulticast mode [ 65.990014][ T3021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.151325][ T5943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5943 comm=syz.0.909 [ 66.211552][ T5951] FAULT_INJECTION: forcing a failure. [ 66.211552][ T5951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 66.211652][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.911 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.211680][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.211777][ T5951] Call Trace: [ 66.211786][ T5951] [ 66.211795][ T5951] __dump_stack+0x1d/0x30 [ 66.211869][ T5951] dump_stack_lvl+0x95/0xd0 [ 66.211894][ T5951] dump_stack+0x15/0x1b [ 66.211917][ T5951] should_fail_ex+0x262/0x280 [ 66.211943][ T5951] should_fail+0xb/0x20 [ 66.211965][ T5951] get_futex_key+0x12d/0xb10 [ 66.212046][ T5951] ? btf_new_fd+0x3a6/0x6a0 [ 66.212073][ T5951] futex_wake+0x89/0x400 [ 66.212175][ T5951] ? __sys_bpf+0xbce/0xc30 [ 66.212205][ T5951] do_futex+0x3f8/0x460 [ 66.212243][ T5951] __se_sys_futex+0x2f6/0x370 [ 66.212280][ T5951] __x64_sys_futex+0x78/0x90 [ 66.212322][ T5951] x64_sys_call+0x22e2/0x2550 [ 66.212345][ T5951] do_syscall_64+0x112/0x360 [ 66.212447][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.212472][ T5951] RIP: 0033:0x7f763a9be159 [ 66.212520][ T5951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.212541][ T5951] RSP: 002b:00007f76394170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 66.212559][ T5951] RAX: ffffffffffffffda RBX: 00007f763ac45fa8 RCX: 00007f763a9be159 [ 66.212572][ T5951] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f763ac45fac [ 66.212643][ T5951] RBP: 00007f763ac45fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 66.212655][ T5951] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 66.212669][ T5951] R13: 00007f763ac46038 R14: 00007ffc485d74f0 R15: 00007ffc485d75d8 [ 66.212727][ T5951] [ 66.277146][ T5918] loop2: detected capacity change from 0 to 8192 [ 66.279955][ T5918] ======================================================= [ 66.279955][ T5918] WARNING: The mand mount option has been deprecated and [ 66.279955][ T5918] and is ignored by this kernel. Remove the mand [ 66.279955][ T5918] option from the mount to silence this warning. [ 66.279955][ T5918] ======================================================= [ 66.387181][ T5959] capability: warning: `syz.2.912' uses deprecated v2 capabilities in a way that may be insecure [ 66.388105][ T5959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=5959 comm=syz.2.912 [ 66.417561][ T5961] syzkaller0: entered promiscuous mode [ 66.417581][ T5961] syzkaller0: entered allmulticast mode [ 66.567458][ T5966] syzkaller0: entered promiscuous mode [ 66.567534][ T5966] syzkaller0: entered allmulticast mode [ 66.756705][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 66.774463][ T5978] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5978 comm=syz.2.920 [ 66.874971][ T5988] loop1: detected capacity change from 0 to 512 [ 66.888821][ T5988] EXT4-fs mount: 12 callbacks suppressed [ 66.888837][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.888914][ T5988] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.944970][ T5992] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 66.945099][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 66.963693][ T5992] team0 (unregistering): Failed to send options change via netlink (err -105) [ 66.973868][ T5992] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 66.974013][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 67.000362][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.030320][ T5996] program syz.4.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.091626][ T6004] net_ratelimit: 275 callbacks suppressed [ 67.091642][ T6004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.143218][ T6015] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=6015 comm=syz.1.933 [ 67.175026][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 67.309932][ T6010] loop2: detected capacity change from 0 to 128 [ 67.320258][ T6010] FAT-fs (loop2): bogus logical sector size 0 [ 67.320316][ T6010] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 67.320343][ T6010] FAT-fs (loop2): Can't find a valid FAT filesystem [ 67.327435][ T6037] loop1: detected capacity change from 0 to 512 [ 67.372107][ T6037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.372207][ T6037] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.440572][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.459510][ T6033] loop0: detected capacity change from 0 to 2048 [ 67.512737][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.538762][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.562758][ T6053] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=6053 comm=syz.0.944 [ 67.605946][ T6059] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.605963][ T6059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.607320][ T6059] EXT4-fs (loop1): 1 truncate cleaned up [ 67.607859][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.624501][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.687123][ T6066] FAULT_INJECTION: forcing a failure. [ 67.687123][ T6066] name failslab, interval 1, probability 0, space 0, times 1 [ 67.687153][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.0.950 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.687179][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.687214][ T6066] Call Trace: [ 67.687221][ T6066] [ 67.687230][ T6066] __dump_stack+0x1d/0x30 [ 67.687254][ T6066] dump_stack_lvl+0x95/0xd0 [ 67.687275][ T6066] dump_stack+0x15/0x1b [ 67.687296][ T6066] should_fail_ex+0x262/0x280 [ 67.687399][ T6066] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 67.687433][ T6066] should_failslab+0x8c/0xb0 [ 67.687532][ T6066] __kmalloc_cache_noprof+0x7a/0x400 [ 67.687566][ T6066] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 67.687605][ T6066] ? selinux_netlbl_sk_security_free+0x18b/0x1d0 [ 67.687648][ T6066] selinux_netlbl_sock_genattr+0x88/0x260 [ 67.687669][ T6066] selinux_netlbl_socket_post_create+0x66/0x100 [ 67.687718][ T6066] selinux_mptcp_add_subflow+0xbd/0xd0 [ 67.687738][ T6066] security_mptcp_add_subflow+0x3c/0x70 [ 67.687776][ T6066] mptcp_subflow_create_socket+0xe3/0x500 [ 67.687805][ T6066] __mptcp_nmpc_sk+0xb5/0x3d0 [ 67.687824][ T6066] mptcp_sendmsg_fastopen+0x88/0x320 [ 67.687888][ T6066] mptcp_sendmsg+0xec3/0x1130 [ 67.687904][ T6066] ? avc_has_perm+0x101/0x190 [ 67.687920][ T6066] ? selinux_socket_sendmsg+0x2e2/0x410 [ 67.687976][ T6066] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 67.687992][ T6066] inet6_sendmsg+0xc5/0xd0 [ 67.688006][ T6066] ? __pfx_inet6_sendmsg+0x10/0x10 [ 67.688096][ T6066] ____sys_sendmsg+0x390/0x580 [ 67.688113][ T6066] ___sys_sendmsg+0x195/0x1e0 [ 67.688155][ T6066] __x64_sys_sendmsg+0xd4/0x160 [ 67.688170][ T6066] x64_sys_call+0x22ab/0x2550 [ 67.688185][ T6066] do_syscall_64+0x112/0x360 [ 67.688199][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.688280][ T6066] RIP: 0033:0x7f763a9be159 [ 67.688298][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.688316][ T6066] RSP: 002b:00007f7639417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.688329][ T6066] RAX: ffffffffffffffda RBX: 00007f763ac45fa0 RCX: 00007f763a9be159 [ 67.688338][ T6066] RDX: 0000000020000010 RSI: 0000200000000140 RDI: 0000000000000006 [ 67.688345][ T6066] RBP: 00007f763aa5506b R08: 0000000000000000 R09: 0000000000000000 [ 67.688388][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.688396][ T6066] R13: 00007f763ac46038 R14: 00007f763ac45fa0 R15: 00007ffc485d75d8 [ 67.688408][ T6066] [ 67.752474][ T6069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.752612][ T6069] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.850971][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.979125][ T6075] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 67.979270][ T6075] EXT4-fs (loop0): mount failed [ 68.194862][ T6078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.227565][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.302381][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.302441][ T6096] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.365595][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.400073][ T6103] syzkaller0: entered promiscuous mode [ 68.400091][ T6103] syzkaller0: entered allmulticast mode [ 68.444225][ T364] IPVS: starting estimator thread 0... [ 68.533242][ T6111] IPVS: using max 1920 ests per chain, 96000 per kthread [ 68.667839][ T6129] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 68.668366][ T6129] JBD2: no valid journal superblock found [ 68.668374][ T6129] EXT4-fs (loop3): Could not load journal inode [ 68.707885][ T6129] EXT4-fs: dax option not supported [ 68.862959][ T6137] syzkaller0: entered promiscuous mode [ 68.863053][ T6137] syzkaller0: entered allmulticast mode [ 68.901493][ T6117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.923353][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 68.977202][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.006079][ T6140] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 69.128792][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 69.234634][ T6176] syzkaller0: entered promiscuous mode [ 69.234671][ T6176] syzkaller0: entered allmulticast mode [ 69.678533][ T6174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.781319][ T6178] set_capacity_and_notify: 10 callbacks suppressed [ 69.781411][ T6178] loop1: detected capacity change from 0 to 1764 [ 69.793071][ T6195] loop4: detected capacity change from 0 to 512 [ 69.793354][ T6195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.800077][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.801485][ T6195] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 69.829024][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 69.829040][ T29] audit: type=1400 audit(1790572987.545:2325): avc: denied { mount } for pid=6177 comm="syz.1.993" name="/" dev="loop1" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.840345][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 69.877320][ T29] audit: type=1400 audit(1790572987.605:2326): avc: denied { read write } for pid=6198 comm="syz.3.1002" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.877432][ T29] audit: type=1400 audit(1790572987.605:2327): avc: denied { open } for pid=6198 comm="syz.3.1002" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 69.888205][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 69.913568][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 69.926873][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 69.966542][ T29] audit: type=1400 audit(1790572987.695:2328): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 70.003818][ T29] audit: type=1400 audit(1790572987.735:2329): avc: denied { append } for pid=6204 comm="syz.3.1004" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.007237][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.007400][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.031483][ T29] audit: type=1400 audit(1790572987.755:2330): avc: denied { module_request } for pid=6206 comm="syz.1.1005" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.049592][ T6190] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 70.083452][ T29] audit: type=1400 audit(1790572987.815:2331): avc: denied { append } for pid=6204 comm="syz.3.1004" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 70.084470][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.084536][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.206802][ T6238] FAULT_INJECTION: forcing a failure. [ 70.206802][ T6238] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.206883][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.0.1011 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.207014][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.207026][ T6238] Call Trace: [ 70.207031][ T6238] [ 70.207038][ T6238] __dump_stack+0x1d/0x30 [ 70.207063][ T6238] dump_stack_lvl+0x95/0xd0 [ 70.207091][ T6238] dump_stack+0x15/0x1b [ 70.207109][ T6238] should_fail_ex+0x262/0x280 [ 70.207136][ T6238] should_fail+0xb/0x20 [ 70.207172][ T6238] should_fail_usercopy+0x1a/0x20 [ 70.207201][ T6238] _copy_to_user+0x20/0xa0 [ 70.207229][ T6238] simple_read_from_buffer+0xb5/0x130 [ 70.207250][ T6238] proc_fail_nth_read+0x10e/0x150 [ 70.207276][ T6238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.207337][ T6238] vfs_read+0x18e/0x7c0 [ 70.207413][ T6238] ? __rcu_read_unlock+0x4e/0x70 [ 70.207511][ T6238] ? __fget_files+0x184/0x1c0 [ 70.207536][ T6238] ? mutex_lock+0x57/0x90 [ 70.207570][ T6238] ksys_read+0xdc/0x1a0 [ 70.207674][ T6238] __x64_sys_read+0x40/0x50 [ 70.207754][ T6238] x64_sys_call+0x2135/0x2550 [ 70.207782][ T6238] do_syscall_64+0x112/0x360 [ 70.207875][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.207926][ T6238] RIP: 0033:0x7f763a97e98e [ 70.207944][ T6238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.207963][ T6238] RSP: 002b:00007f7639416fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.207982][ T6238] RAX: ffffffffffffffda RBX: 00007f76394176c0 RCX: 00007f763a97e98e [ 70.207999][ T6238] RDX: 000000000000000f RSI: 00007f76394170a0 RDI: 0000000000000003 [ 70.208011][ T6238] RBP: 00007f7639417090 R08: 0000000000000000 R09: 0000000000000000 [ 70.208023][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.208035][ T6238] R13: 00007f763ac46038 R14: 00007f763ac45fa0 R15: 00007ffc485d75d8 [ 70.208051][ T6238] [ 70.210617][ T29] audit: type=1400 audit(1790572987.935:2332): avc: denied { create } for pid=6233 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 70.222368][ T29] audit: type=1400 audit(1790572987.955:2333): avc: denied { sys_admin } for pid=6233 comm="syz.2.1010" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 70.348987][ T6241] syzkaller0: entered promiscuous mode [ 70.349007][ T6241] syzkaller0: entered allmulticast mode [ 70.421972][ T29] audit: type=1400 audit(1790572988.155:2334): avc: denied { view } for pid=6242 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.942002][ T6275] syzkaller0: entered promiscuous mode [ 70.942021][ T6275] syzkaller0: entered allmulticast mode [ 71.006498][ T6277] syzkaller1: entered promiscuous mode [ 71.006657][ T6277] syzkaller1: entered allmulticast mode [ 71.109975][ T6280] syzkaller0: entered promiscuous mode [ 71.109995][ T6280] syzkaller0: entered allmulticast mode [ 71.280828][ T6296] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 71.304050][ T6296] bond3: entered promiscuous mode [ 71.304148][ T6296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.454894][ T6291] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 71.454929][ T6291] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 71.454947][ T6291] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 71.553897][ T6296] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 71.553918][ T6296] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 71.598755][ T6322] loop2: detected capacity change from 0 to 512 [ 71.619215][ T6320] syzkaller0: entered promiscuous mode [ 71.619235][ T6320] syzkaller0: entered allmulticast mode [ 71.792524][ T6333] syzkaller0: entered promiscuous mode [ 71.792620][ T6333] syzkaller0: entered allmulticast mode [ 71.914692][ T6344] loop2: detected capacity change from 0 to 512 [ 71.925975][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.926046][ T6344] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.064211][ T6360] loop0: detected capacity change from 0 to 128 [ 72.067319][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.081121][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.081121][ T6360] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 72.081281][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.081281][ T6360] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 72.081680][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.081680][ T6360] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 72.081704][ T6360] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 72.081721][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.081721][ T6360] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 72.081770][ T6360] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 72.082198][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.082198][ T6360] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 72.082459][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.082459][ T6360] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 72.082561][ T6360] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 72.082579][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.082579][ T6360] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 72.082601][ T6360] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 72.082699][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.082699][ T6360] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 72.082937][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.082937][ T6360] loop0: rw=8390657, sector=198, nr_sectors = 2 limit=128 [ 72.082997][ T6360] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 72.083014][ T6360] syz.0.1050: attempt to access beyond end of device [ 72.083014][ T6360] loop0: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 72.083071][ T6360] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 72.083569][ T6360] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 72.083587][ T6360] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 72.083935][ T6360] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 72.084034][ T6360] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 72.158256][ T6365] syzkaller0: entered promiscuous mode [ 72.158358][ T6365] syzkaller0: entered allmulticast mode [ 72.263091][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 72.438717][ T6374] syzkaller0: entered promiscuous mode [ 72.438805][ T6374] syzkaller0: entered allmulticast mode [ 72.505100][ T6382] loop1: detected capacity change from 0 to 512 [ 72.508979][ T6382] EXT4-fs: test_dummy_encryption option not supported [ 72.877734][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.877766][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.877974][ T6384] bridge_slave_0: entered allmulticast mode [ 72.878397][ T6384] bridge_slave_0: entered promiscuous mode [ 72.886761][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.886802][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.886926][ T6384] bridge_slave_1: entered allmulticast mode [ 72.890781][ T6384] bridge_slave_1: entered promiscuous mode [ 72.941103][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.945613][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.995792][ T6384] team0: Port device team_slave_0 added [ 73.002471][ T6384] team0: Port device team_slave_1 added [ 73.037414][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.037430][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.037491][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.039239][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.039252][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.039279][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.107748][ T6384] hsr_slave_0: entered promiscuous mode [ 73.108372][ T6384] hsr_slave_1: entered promiscuous mode [ 73.108613][ T6384] debugfs: 'hsr0' already exists in 'hsr' [ 73.108626][ T6384] Cannot create hsr debugfs directory [ 73.213700][ T3386] kernel read not supported for file /484/net/protocols (pid: 3386 comm: kworker/1:7) [ 73.280398][ T6384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.291908][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.294117][ T6384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.307030][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.309167][ T6384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.321240][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.321994][ T6384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.327450][ T6384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.393655][ T6433] syzkaller0: entered promiscuous mode [ 73.393674][ T6433] syzkaller0: entered allmulticast mode [ 73.400041][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.400151][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.400259][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.400289][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.483742][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.506630][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.507258][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.520094][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.533454][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.533498][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.536284][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.536367][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.613496][ T6384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.793857][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.999720][ T6384] veth0_vlan: entered promiscuous mode [ 74.002042][ T6384] veth1_vlan: entered promiscuous mode [ 74.010832][ T6384] veth0_macvtap: entered promiscuous mode [ 74.013956][ T6384] veth1_macvtap: entered promiscuous mode [ 74.028756][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.033401][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.098585][ T6467] loop3: detected capacity change from 0 to 764 [ 74.121235][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.121440][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.121484][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.121518][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281480][ T6495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6495 comm=syz.3.1077 [ 74.329530][ T6485] syzkaller0: entered promiscuous mode [ 74.329550][ T6485] syzkaller0: entered allmulticast mode [ 74.453628][ T6500] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 74.559168][ T6511] loop5: detected capacity change from 0 to 1024 [ 74.559523][ T6511] EXT4-fs: Ignoring removed bh option [ 74.586895][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.603850][ T6511] process 'syz.5.1089' launched './file2' with NULL argv: empty string added [ 74.628595][ T6511] tipc: Started in network mode [ 74.628680][ T6511] tipc: Node identity 964bbde0967e, cluster identity 4711 [ 74.628718][ T6511] tipc: Enabled bearer , priority 0 [ 74.634385][ T6511] syzkaller0: entered promiscuous mode [ 74.634404][ T6511] syzkaller0: entered allmulticast mode [ 74.650743][ T6509] tipc: Resetting bearer [ 74.661435][ T6509] tipc: Disabling bearer [ 74.675237][ T6524] loop1: detected capacity change from 0 to 512 [ 74.709912][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.710013][ T6524] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.748649][ T6524] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.1091: iget: bad i_size value: 2533274857506816 [ 74.767205][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.803918][ T42] IPVS: starting estimator thread 0... [ 74.860790][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.891778][ T6537] IPVS: using max 2448 ests per chain, 122400 per kthread [ 74.996494][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 74.996510][ T29] audit: type=1326 audit(1790572992.725:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.996753][ T29] audit: type=1326 audit(1790572992.725:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.996779][ T29] audit: type=1326 audit(1790572992.725:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.996900][ T29] audit: type=1326 audit(1790572992.725:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997125][ T29] audit: type=1326 audit(1790572992.725:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997251][ T29] audit: type=1326 audit(1790572992.725:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997420][ T29] audit: type=1326 audit(1790572992.725:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997456][ T29] audit: type=1326 audit(1790572992.725:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997604][ T29] audit: type=1326 audit(1790572992.725:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.997882][ T29] audit: type=1326 audit(1790572992.725:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.5.1097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12b530e159 code=0x7ffc0000 [ 74.998411][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1097'. [ 74.998423][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1097'. [ 75.104916][ T6545] syzkaller0: entered promiscuous mode [ 75.104937][ T6545] syzkaller0: entered allmulticast mode [ 75.696470][ T6579] loop5: detected capacity change from 0 to 512 [ 75.712231][ T6575] loop2: detected capacity change from 0 to 512 [ 75.741153][ T6579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.741263][ T6579] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.745099][ T6575] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 75.806346][ T6384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.114515][ T6590] syzkaller0: entered promiscuous mode [ 76.114537][ T6590] syzkaller0: entered allmulticast mode [ 76.144065][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 76.591399][ T6615] loop3: detected capacity change from 0 to 512 [ 76.608275][ T6615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.608421][ T6615] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.743021][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.047752][ T6633] syzkaller0: entered promiscuous mode [ 77.047773][ T6633] syzkaller0: entered allmulticast mode [ 77.133075][ T6635] loop5: detected capacity change from 0 to 512 [ 77.136429][ T6635] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.484822][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 77.534338][ T6668] loop1: detected capacity change from 0 to 512 [ 77.544809][ T6668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.544993][ T6668] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.648089][ T6672] loop3: detected capacity change from 0 to 1024 [ 77.648540][ T6672] EXT4-fs: Ignoring removed orlov option [ 77.665744][ T6672] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 77.667561][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.818326][ T6684] syzkaller0: entered promiscuous mode [ 77.818346][ T6684] syzkaller0: entered allmulticast mode [ 77.823998][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 77.826040][ T6696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1136'. [ 77.910254][ T6696] loop4: detected capacity change from 0 to 2048 [ 77.937439][ T6696] loop4: p1 p3 < > p4 < p5 > [ 77.937450][ T6696] loop4: partition table partially beyond EOD, truncated [ 77.937514][ T6696] loop4: p1 size 196608 extends beyond EOD, truncated [ 77.938351][ T6696] loop4: p3 start 614273 is beyond EOD, truncated [ 77.938718][ T6696] loop4: p5 size 196608 extends beyond EOD, truncated [ 78.008447][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 78.009327][ T5889] udevd[5889]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 78.010136][ T3644] udevd[3644]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 78.165648][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1140'. [ 78.279565][ T6719] syzkaller0: entered promiscuous mode [ 78.279582][ T6719] syzkaller0: entered allmulticast mode [ 78.466940][ T6765] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1149'. [ 78.703086][ T6805] loop4: detected capacity change from 0 to 8192 [ 78.707445][ T6805] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.746760][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1157'. [ 78.840240][ T6818] loop2: detected capacity change from 0 to 512 [ 78.853390][ T6818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.893687][ T6818] EXT4-fs (loop2): 1 truncate cleaned up [ 78.918698][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.969549][ T6825] syzkaller0: entered promiscuous mode [ 78.969572][ T6825] syzkaller0: entered allmulticast mode [ 78.983240][ T6833] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1166'. [ 79.109686][ T6853] loop5: detected capacity change from 0 to 128 [ 79.137027][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1171'. [ 79.152312][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1174'. [ 79.219395][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.232440][ T6861] syzkaller0: entered promiscuous mode [ 79.232460][ T6861] syzkaller0: entered allmulticast mode [ 79.272758][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.298137][ T6866] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.321432][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.394198][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.453207][ T6868] netlink: 11870 bytes leftover after parsing attributes in process `syz.4.1180'. [ 79.463365][ T6868] netlink: 'syz.4.1180': attribute type 7 has an invalid length. [ 79.491181][ T6890] netlink: 'syz.4.1180': attribute type 7 has an invalid length. [ 79.501497][ T6891] netlink: 'syz.4.1180': attribute type 7 has an invalid length. [ 79.534888][ T31] bridge_slave_1: left allmulticast mode [ 79.534910][ T31] bridge_slave_1: left promiscuous mode [ 79.535041][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.539964][ T31] bridge_slave_0: left allmulticast mode [ 79.540040][ T31] bridge_slave_0: left promiscuous mode [ 79.540179][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.654368][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.660240][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.677474][ T31] bond0 (unregistering): Released all slaves [ 79.729449][ T6897] syzkaller0: entered promiscuous mode [ 79.729471][ T6897] syzkaller0: entered allmulticast mode [ 79.737369][ T6902] Invalid option length (0) for dns_resolver key [ 79.744014][ T31] tipc: Disabling bearer [ 79.744049][ T31] tipc: Left network mode [ 79.794970][ T31] hsr_slave_0: left promiscuous mode [ 79.795254][ T31] hsr_slave_1: left promiscuous mode [ 79.795789][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.795801][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.796275][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.796300][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.798758][ T31] veth1_macvtap: left promiscuous mode [ 79.798782][ T31] veth0_macvtap: left promiscuous mode [ 79.798821][ T31] veth1_vlan: left promiscuous mode [ 79.798975][ T31] veth0_vlan: left promiscuous mode [ 79.865481][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.007999][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 80.008066][ T29] audit: type=1400 audit(1790572997.735:2508): avc: denied { create } for pid=6937 comm="syz.5.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.041697][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 80.067370][ T6938] EXT4-fs: dax option not supported [ 80.180925][ T29] audit: type=1400 audit(1790572997.905:2509): avc: denied { block_suspend } for pid=6951 comm="syz.3.1196" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.340578][ T29] audit: type=1400 audit(1790572998.055:2510): avc: denied { name_bind } for pid=6937 comm="syz.5.1193" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.416038][ T6949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.477949][ T6949] EXT4-fs (loop1): 1 truncate cleaned up [ 80.496386][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.565102][ T29] audit: type=1400 audit(1790572998.295:2511): avc: denied { write } for pid=6955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.662115][ T29] audit: type=1400 audit(1790572998.395:2512): avc: denied { write } for pid=6973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.783697][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 80.942871][ T31] IPVS: stop unused estimator thread 0... [ 80.974403][ T6949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.014343][ T6949] syz.1.1194 (6949) used greatest stack depth: 9928 bytes left [ 81.015463][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.063854][ T29] audit: type=1400 audit(1790572998.795:2513): avc: denied { write } for pid=6979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.067106][ T6982] syzkaller0: entered promiscuous mode [ 81.067205][ T6982] syzkaller0: entered allmulticast mode [ 81.107494][ T29] audit: type=1400 audit(1790572998.835:2514): avc: denied { write } for pid=7002 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.142653][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.142690][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.142756][ T6932] bridge_slave_0: entered allmulticast mode [ 81.143248][ T6932] bridge_slave_0: entered promiscuous mode [ 81.146658][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.146690][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.146838][ T6932] bridge_slave_1: entered allmulticast mode [ 81.147309][ T6932] bridge_slave_1: entered promiscuous mode [ 81.190193][ T6988] syzkaller0: entered promiscuous mode [ 81.190213][ T6988] syzkaller0: entered allmulticast mode [ 81.197956][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.208735][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.225854][ T29] audit: type=1400 audit(1790572998.945:2515): avc: denied { shutdown } for pid=7010 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.257367][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.299758][ T6932] team0: Port device team_slave_0 added [ 81.303021][ T6932] team0: Port device team_slave_1 added [ 81.344584][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.344599][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.344628][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.345375][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.345387][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.345417][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.401124][ T6932] hsr_slave_0: entered promiscuous mode [ 81.401542][ T6932] hsr_slave_1: entered promiscuous mode [ 81.405608][ T6932] debugfs: 'hsr0' already exists in 'hsr' [ 81.405623][ T6932] Cannot create hsr debugfs directory [ 81.485099][ T29] audit: type=1400 audit(1790572999.215:2516): avc: denied { execmod } for pid=7037 comm="syz.5.1207" path="/33/blkio.bfq.sectors_recursive" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.492129][ T7026] set_capacity_and_notify: 2 callbacks suppressed [ 81.492144][ T7026] loop4: detected capacity change from 0 to 8192 [ 81.496175][ T7026] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.545438][ T29] audit: type=1400 audit(1790572999.275:2517): avc: denied { write } for pid=7027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.613164][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.654730][ T6932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 81.657419][ T6932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.659416][ T6932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 81.684512][ T6932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.685211][ T6932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 81.706371][ T6932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.710136][ T6932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 81.726293][ T6932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.781269][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.789164][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.811595][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.811633][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.814794][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.814827][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.915776][ T7065] loop4: detected capacity change from 0 to 512 [ 81.984206][ T7075] syzkaller0: entered promiscuous mode [ 81.984227][ T7075] syzkaller0: entered allmulticast mode [ 82.102358][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.140269][ T7065] loop4: detected capacity change from 0 to 512 [ 82.151128][ T7065] EXT4-fs: Ignoring removed i_version option [ 82.212583][ T7101] loop3: detected capacity change from 0 to 1024 [ 82.212987][ T7101] EXT4-fs: Ignoring removed bh option [ 82.217475][ T7101] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 82.242186][ T7065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.243387][ T7065] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.269892][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.329305][ T7102] loop5: detected capacity change from 0 to 8192 [ 82.337789][ T7102] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.418262][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.432505][ T6932] veth0_vlan: entered promiscuous mode [ 82.450159][ T6932] veth1_vlan: entered promiscuous mode [ 82.464653][ T7124] loop4: detected capacity change from 0 to 512 [ 82.486925][ T7124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.487030][ T7124] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.492509][ T6932] veth0_macvtap: entered promiscuous mode [ 82.493883][ T6932] veth1_macvtap: entered promiscuous mode [ 82.498913][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.503042][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.552687][ T6791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554168][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554233][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554266][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.557898][ T7127] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.668885][ T7135] syzkaller0: entered promiscuous mode [ 82.668907][ T7135] syzkaller0: entered allmulticast mode [ 82.737837][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.885303][ T7153] __nla_validate_parse: 8 callbacks suppressed [ 82.885337][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 83.066289][ T7160] loop6: detected capacity change from 0 to 1024 [ 83.184958][ T7165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.260071][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.294243][ T7170] loop3: detected capacity change from 0 to 512 [ 83.302061][ T7170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.302245][ T7170] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.383878][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.421835][ T7184] syzkaller0: entered promiscuous mode [ 83.421868][ T7184] syzkaller0: entered allmulticast mode [ 83.504222][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 83.504240][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 83.642903][ T7208] syzkaller0: entered promiscuous mode [ 83.642923][ T7208] syzkaller0: entered allmulticast mode [ 83.828630][ T7226] loop6: detected capacity change from 0 to 512 [ 83.840215][ T7227] syzkaller0: entered promiscuous mode [ 83.840234][ T7227] syzkaller0: entered allmulticast mode [ 83.840234][ T7226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 83.840301][ T7226] System zones: 1-12 [ 83.846030][ T7226] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1256: missing EA_INODE flag [ 83.846051][ T7226] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 83.847181][ T7226] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1256: error while reading EA inode 12 err=-117 [ 83.847207][ T7226] loop6: lost filesystem error report for type 5 error -117 [ 83.848775][ T7226] EXT4-fs (loop6): 1 orphan inode deleted [ 83.849297][ T7226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.912332][ T6932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.948715][ T7240] loop6: detected capacity change from 0 to 512 [ 83.959109][ T7240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 83.959136][ T7240] System zones: 1-12 [ 83.959426][ T7240] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1258: missing EA_INODE flag [ 83.959447][ T7240] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 83.959599][ T7240] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1258: error while reading EA inode 12 err=-117 [ 83.959621][ T7240] loop6: lost filesystem error report for type 5 error -117 [ 83.959701][ T7240] EXT4-fs (loop6): 1 orphan inode deleted [ 83.961220][ T7240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.063047][ T6932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.102561][ T7253] sctp: [Deprecated]: syz.6.1264 (pid 7253) Use of int in max_burst socket option. [ 84.102561][ T7253] Use struct sctp_assoc_value instead [ 84.255609][ T7267] syzkaller0: entered promiscuous mode [ 84.255628][ T7267] syzkaller0: entered allmulticast mode [ 84.373448][ T7281] FAULT_INJECTION: forcing a failure. [ 84.373448][ T7281] name failslab, interval 1, probability 0, space 0, times 0 [ 84.373476][ T7281] CPU: 1 UID: 0 PID: 7281 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.373498][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.373510][ T7281] Call Trace: [ 84.373516][ T7281] [ 84.373523][ T7281] __dump_stack+0x1d/0x30 [ 84.373544][ T7281] dump_stack_lvl+0x95/0xd0 [ 84.373563][ T7281] dump_stack+0x15/0x1b [ 84.373582][ T7281] should_fail_ex+0x262/0x280 [ 84.373605][ T7281] ? vm_area_alloc+0x2c/0xb0 [ 84.373633][ T7281] should_failslab+0x8c/0xb0 [ 84.373660][ T7281] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 84.373689][ T7281] ? vm_area_alloc+0x2c/0xb0 [ 84.373721][ T7281] vm_area_alloc+0x2c/0xb0 [ 84.373750][ T7281] mmap_region+0x1259/0x21e0 [ 84.373798][ T7281] do_mmap+0xa20/0xc70 [ 84.373818][ T7281] vm_mmap_pgoff+0x183/0x2d0 [ 84.373848][ T7281] ksys_mmap_pgoff+0xc1/0x310 [ 84.373867][ T7281] ? __x64_sys_mmap+0x49/0x70 [ 84.373899][ T7281] x64_sys_call+0x23b3/0x2550 [ 84.373926][ T7281] do_syscall_64+0x112/0x360 [ 84.373953][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.373977][ T7281] RIP: 0033:0x7f6d738fe159 [ 84.373991][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.374008][ T7281] RSP: 002b:00007f6d72357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 84.374027][ T7281] RAX: ffffffffffffffda RBX: 00007f6d73b85fa0 RCX: 00007f6d738fe159 [ 84.374039][ T7281] RDX: 0000000000000002 RSI: 0000000000008000 RDI: 0000000000000000 [ 84.374049][ T7281] RBP: 00007f6d72357090 R08: ffffffffffffffff R09: 0000000000000000 [ 84.374063][ T7281] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000001 [ 84.374076][ T7281] R13: 00007f6d73b86038 R14: 00007f6d73b85fa0 R15: 00007ffd85885bb8 [ 84.374095][ T7281] [ 84.666192][ T5226] kernel write not supported for file /snd/seq (pid: 5226 comm: kworker/0:7) [ 84.669413][ T7277] ================================================================== [ 84.669440][ T7277] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 84.669466][ T7277] [ 84.669472][ T7277] read-write to 0xffff88810d62b764 of 4 bytes by task 7268 on cpu 1: [ 84.669491][ T7277] fifo_open+0x89/0x5b0 [ 84.669510][ T7277] do_dentry_open+0x49f/0xa60 [ 84.669535][ T7277] vfs_open+0x37/0x1e0 [ 84.669558][ T7277] path_openat+0xc01/0x10d0 [ 84.669587][ T7277] do_file_open+0x16c/0x290 [ 84.669614][ T7277] do_sys_openat2+0xa0/0x130 [ 84.669634][ T7277] __x64_sys_open+0xe6/0x110 [ 84.669655][ T7277] x64_sys_call+0x23a8/0x2550 [ 84.669682][ T7277] do_syscall_64+0x112/0x360 [ 84.669706][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.669730][ T7277] [ 84.669744][ T7277] read to 0xffff88810d62b764 of 4 bytes by task 7277 on cpu 0: [ 84.669762][ T7277] wait_for_partner+0xc9/0x1d0 [ 84.669784][ T7277] fifo_open+0x443/0x5b0 [ 84.669803][ T7277] do_dentry_open+0x49f/0xa60 [ 84.669828][ T7277] vfs_open+0x37/0x1e0 [ 84.669851][ T7277] path_openat+0xc01/0x10d0 [ 84.669883][ T7277] do_file_open+0x16c/0x290 [ 84.669915][ T7277] do_sys_openat2+0xa0/0x130 [ 84.669941][ T7277] __x64_sys_open+0xe6/0x110 [ 84.669967][ T7277] x64_sys_call+0x23a8/0x2550 [ 84.669994][ T7277] do_syscall_64+0x112/0x360 [ 84.670016][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.670040][ T7277] [ 84.670044][ T7277] value changed: 0x00000001 -> 0x00000002 [ 84.670056][ T7277] [ 84.670061][ T7277] Reported by Kernel Concurrency Sanitizer on: [ 84.670073][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.6.1271 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.670100][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.670114][ T7277] ================================================================== [ 84.764760][ T7298] FAULT_INJECTION: forcing a failure. [ 84.764760][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 84.764836][ T7298] CPU: 1 UID: 0 PID: 7298 Comm: syz.3.1280 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.764893][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.764961][ T7298] Call Trace: [ 84.764968][ T7298] [ 84.764976][ T7298] __dump_stack+0x1d/0x30 [ 84.765002][ T7298] dump_stack_lvl+0x95/0xd0 [ 84.765026][ T7298] dump_stack+0x15/0x1b [ 84.765057][ T7298] should_fail_ex+0x262/0x280 [ 84.765085][ T7298] should_failslab+0x8c/0xb0 [ 84.765119][ T7298] __kmalloc_node_noprof+0xdb/0x500 [ 84.765152][ T7298] ? pcpu_alloc_area+0x49c/0x4c0 [ 84.765256][ T7298] ? mempool_init_node+0xb3/0x260 [ 84.765288][ T7298] ? mempool_init_node+0xb3/0x260 [ 84.765320][ T7298] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 84.765405][ T7298] mempool_init_node+0xb3/0x260 [ 84.765436][ T7298] ? __rcu_read_unlock+0x4e/0x70 [ 84.765535][ T7298] ? __pfx_mempool_free_slab+0x10/0x10 [ 84.765585][ T7298] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 84.765698][ T7298] mempool_init_noprof+0x3a/0x50 [ 84.765729][ T7298] bioset_init+0x177/0x480 [ 84.765756][ T7298] ? __pfx_no_op+0x10/0x10 [ 84.765843][ T7298] ? percpu_ref_init+0x1dd/0x250 [ 84.765869][ T7298] mddev_init+0xc6/0x420 [ 84.765919][ T7298] ? __pfx_md_probe+0x10/0x10 [ 84.765951][ T7298] md_alloc+0x99/0xa00 [ 84.765979][ T7298] ? __rcu_read_unlock+0x4e/0x70 [ 84.766068][ T7298] ? __pfx_md_probe+0x10/0x10 [ 84.766091][ T7298] md_alloc_and_put+0x18/0x170 [ 84.766115][ T7298] md_probe+0x68/0x80 [ 84.766138][ T7298] blk_request_module+0x1bd/0x1e0 [ 84.766216][ T7298] blkdev_get_no_open+0x4b/0x100 [ 84.766244][ T7298] bdev_file_open_by_dev+0xa4/0x230 [ 84.766287][ T7298] swsusp_check+0x3f/0x2a0 [ 84.766312][ T7298] software_resume+0x41/0x2f0 [ 84.766332][ T7298] resume_store+0x2d9/0x3d0 [ 84.766353][ T7298] ? __pfx_resume_store+0x10/0x10 [ 84.766376][ T7298] kobj_attr_store+0x4a/0x70 [ 84.766408][ T7298] ? __pfx_kobj_attr_store+0x10/0x10 [ 84.766439][ T7298] sysfs_kf_write+0xfe/0x120 [ 84.766535][ T7298] ? __pfx_sysfs_kf_write+0x10/0x10 [ 84.766566][ T7298] kernfs_fop_write_iter+0x1d2/0x2e0 [ 84.766717][ T7298] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 84.766771][ T7298] vfs_write+0x57f/0x9a0 [ 84.766807][ T7298] ksys_write+0xdc/0x1a0 [ 84.766847][ T7298] __x64_sys_write+0x40/0x50 [ 84.766879][ T7298] x64_sys_call+0x154e/0x2550 [ 84.766962][ T7298] do_syscall_64+0x112/0x360 [ 84.766987][ T7298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.767031][ T7298] RIP: 0033:0x7f1f8e96e159 [ 84.767048][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.767069][ T7298] RSP: 002b:00007f1f8d3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.767091][ T7298] RAX: ffffffffffffffda RBX: 00007f1f8ebf5fa0 RCX: 00007f1f8e96e159 [ 84.767106][ T7298] RDX: 0000000000000012 RSI: 0000200000000480 RDI: 0000000000000009 [ 84.767120][ T7298] RBP: 00007f1f8ea0506b R08: 0000000000000000 R09: 0000000000000000 [ 84.767133][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.767195][ T7298] R13: 00007f1f8ebf6038 R14: 00007f1f8ebf5fa0 R15: 00007fff2571dcc8 [ 84.767214][ T7298] [ 84.774182][ T7298] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.840240][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 91.840256][ T29] audit: type=1400 audit(1790573009.565:2798): avc: denied { write } for pid=7304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.869813][ T29] audit: type=1400 audit(1790573009.585:2799): avc: denied { write } for pid=7315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.482634][ T29] audit: type=1400 audit(1790573010.215:2800): avc: denied { write } for pid=7318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.513724][ T29] audit: type=1400 audit(1790573010.225:2801): avc: denied { write } for pid=7329 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.233298][ T29] audit: type=1400 audit(1790573010.965:2802): avc: denied { write } for pid=7332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.268953][ T29] audit: type=1400 audit(1790573010.995:2803): avc: denied { write } for pid=7343 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.431901][ T29] audit: type=1400 audit(1790573011.165:2804): avc: denied { write } for pid=7346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.447119][ T29] audit: type=1400 audit(1790573011.175:2805): avc: denied { write } for pid=7357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1