last executing test programs: 11m58.104864975s ago: executing program 32 (id=143): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getcwd(&(0x7f0000000200)=""/113, 0x71) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 10m49.91793102s ago: executing program 33 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x4}}, 0x80, 0x0}, 0x11) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r3, 0x9) syz_clone(0x480f000, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2de, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x44ff464cfe863680) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1840400, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$eJzs3c1vVFUbAPDn3k4Lpe/7ti8xKi5MoyGQKC0tYPBjAXtC8GPnxkoLQcpHaI0WTSwJbkyMGxckrlyI/4US3boyunDhxpUhQWNIDMboNXd6ZxjamXZaZnqx8/slw9xzzsycc0ufnnPPPXduAD1rNP8njdgVEReTiOGGskoUhaNLr7v927sn80cSWfbyr0kkRV7t9UnxPFS8+a/hiG+/SmJn38p65xYun52anZ25VKTH589dHJ9buLzvzLmp0zOnZ85PPjN5+NDBQ4cn9t/X/qUN28euvvHW8AfHX/3skz+Tic9/PJ7Ekfjl1FJZ4350ymiMxp0se295fv5zPdzpykrSV/89uStZnsEDq1LESH9EPBLD0dfwvzkc779YauOArsqSiAzoUYn4hx5VGwfUju3bOw5OuzwqATbDraNRPfpfGf+VpbnBGKnODexe9r4mU3obktfxzdfHr+aPaDkPt71DtQGNFq9sK7aWx39Sjc2RIvZ23E7vmefNRwAniuc8/6UN1j+6LN2NeXigucUrEfFos/H/2vH/WkP8v77B+sU/AAAAAAAAdM6NoxHxdLPzf2lxbm57PFE9/5csnf/7/u4Vgkc6UP/a5//Smx2oBmji1tGIF5qu/62v8R3pK1L/XVoNmJw6MzuzPyL+FxF7o39bnp5YpY59H+681qqscf1f/sjrr60FLNpxs7Lt3vdMT81P3c8+A0tuXYl4rNJ6/U/e/yeN/X8h/3twsc06du6+fqJV2drxD3RL9mnEnqb9f1J/TbL693OMV8cD47VRwUqPv/PRF63qF/9Qnrz/37F6/I8kjd/XM7e+zx+IiAMLlaxV+UbH/wPJK321z8+9PTU/f2kiYiA5tjJ/cn1thq2qFg+1eMnjf++Tq8//1cf/DXE4GBGLbdb58N9DP7UqG43Iio/V/8Mmy+N/ukn/P9iy/1//xuT1kS9b1d9e/3+w2qfvLXLM/8Hq2g3QstsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9GaUT8J5J0rL6dpmNjEUMR8VDsSGcvzM0/derCm+en87Lq/f/T2p1+h5fSSe3+/yMN6cll6QMR8f+I+LhvsJoeO3lhdrrsnQcAAAAAAAAAAAAAAAAAAIAHxFCL6/9zP/eV3Tqg6yrFs3iH3lMpuwFAacQ/9C7xD71L/EPvaiP+72xGO4DNt8H+3+kC2AKM/6FX9bf3su3dbgdQBv0/AAAAAABsKTeef/ZaEhGLzw1WH7mBoqx+YnCwrNYB3ZSW3QCgNNbwQu+y9Ad6V5uLf4EtLKlv/ZE1K2+9+j/pToMAAAAAAAAAAAAAgBX27Lrxw5rX/wNbUhpxpOw2AOVw/T/0Ltf/Q+9qcYzvmAB6yFpX8W/o+n+3DAQAAAAAAAAAAACAjppbuHx2qnYT8KnZ2ZlL1RwbW3Tju9+zbF3vyrLyfjf6I6L0n1gpGwON4bkZlUbE4oocAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggfBPAAAA//9wQh8o") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x500000a, 0x50032, 0xffffffffffffffff, 0x0) 2m39.540156213s ago: executing program 34 (id=4191): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 2m34.873499872s ago: executing program 35 (id=4300): syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[], 0x0) 2m30.300296317s ago: executing program 36 (id=4377): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x55, 0xffffffffffffffff, {0x4}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) 2m25.408602052s ago: executing program 37 (id=4476): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x243, &(0x7f0000000540)="$eJzs3D9oM2UcB/DvXRJr2yBVF0FQQUS0UOomuNRFoSCliAgqVERclFaoLW6tk4uDziqdXIq4WTtKl+KiCE5VO9RF0OJgcdAhklyr1Vb8k5p7ee/zgUvukrv7Pcfl+1yW5wnQWFNJ5pK0kkwn6SQpzu9wV7VMnW5uje8vJb3e4z8Ug/2q7crZcZNJNpM8mGSvLPJiO1nfefrop4NH731jrXPPeztPjY/0Ik8dHx0+dvLuwusfzj+w/tkX3y0UmUv3D9d19YpLPmsXyS3/R7FrRNGuuwX8E4uvfvBlP/e3Jrl7kP9OylQ3783VG/Y6uf+dvzr2re8/v32UbQWuXq/X6T8DN3tA45RJuinKmSTVelnOzFT/4b9qTZQvray+Mv3Cytry83X3VMBV6SaHj+yOfTT5p/x/26ryD1y/+vl/YnH76/76Savu1gCj1M//9LMb90X+oXHkH5pL/qG55B+aS/6huf5V/nfL0TQKGAnPf2gu+YfG+W1klvxDc8k/NNf5/AMAzdIbq3sEMlCXuvsfAAAAAAAAAAAAAAAAAADgoq3x/aWzZVQ1P3k7OX64mpXwYv1WqlnHbxy8TvxY/D55YZLi/GSG/9Ezdw55giG9X/Po65u+qbf+p3fUW39jOdl8Lclsu33x91dk2Fnvb/6b7zvPDVlgSA89WW/9X7brrT9/kHzc739mL+t/ytw2eL+8/+n279+Q9V/+ecgTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDK/BgAA///oWm3n") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, 0x0) 2m22.417642287s ago: executing program 38 (id=4511): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) 2m22.140660346s ago: executing program 39 (id=4513): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x40000010}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) 2m21.514240176s ago: executing program 40 (id=4525): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m19.873305098s ago: executing program 41 (id=4541): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x294e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)={0xd, 0x7, 0x2, {{}, 0xfffffffb}}, 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x3}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0xe}]}}}]}, 0x44}}, 0x24000000) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 2m8.661044964s ago: executing program 42 (id=4656): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 2m3.361169362s ago: executing program 43 (id=4738): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 1m58.356054671s ago: executing program 44 (id=4789): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 1m56.334749416s ago: executing program 45 (id=4815): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x88000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x8000000, 0x2, 0x0, 0x2, 0x0, 0x8}, 0x20) 1m40.499831179s ago: executing program 46 (id=4967): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x10}, 0x18) 1m27.676585266s ago: executing program 47 (id=5071): open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x4e1) lseek(r0, 0x8, 0x4) 1m20.62494029s ago: executing program 48 (id=5136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4606"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m20.514190093s ago: executing program 3 (id=5073): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r2, 0x8, 0x2000000, 0x10000) 1m20.207938693s ago: executing program 3 (id=5139): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/533], 0xf3, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") socket$igmp6(0xa, 0x3, 0x2) syncfs(0xffffffffffffffff) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40a540, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 1m17.543984827s ago: executing program 3 (id=5163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1m17.240943327s ago: executing program 49 (id=5163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1m11.384266843s ago: executing program 50 (id=5231): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000440)="7800000018002507b9409b14ffff00000204be04020506050e020409430016000400790000000000000052164cbf0568d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a005a0a2a1ce000e200c523eb6ed538f2", 0x78, 0x0, 0x0, 0x0) 1m9.512535272s ago: executing program 51 (id=5252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000900)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8002000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x0, 0x0, 0x23}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m2.901839682s ago: executing program 1 (id=5311): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nolazytime}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") 1m2.576077853s ago: executing program 1 (id=5313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x13, r0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1m2.548997154s ago: executing program 1 (id=5315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x6a) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getdents64(r0, &(0x7f0000000300)=""/20, 0x14) 1m2.415522668s ago: executing program 1 (id=5318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r2, 0x8, 0x2000000, 0x10000) 1m2.236786023s ago: executing program 1 (id=5322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000540)=""/100, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x698}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m1.889128575s ago: executing program 1 (id=5330): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f00000081c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000008440)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000000000001400000000000000000000000200000008000000000000007400000000000000000000000700000044141043"], 0x1a0}}], 0x1, 0x0) 1m1.752182659s ago: executing program 52 (id=5330): r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f00000081c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000008440)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000000000001400000000000000000000000200000008000000000000007400000000000000000000000700000044141043"], 0x1a0}}], 0x1, 0x0) 41.071882946s ago: executing program 6 (id=5502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x10, 0x4) 40.94393873s ago: executing program 6 (id=5505): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x17d4}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 40.255908632s ago: executing program 6 (id=5510): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="99010000bd37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x20, 0x13, 0x2, "8c06"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x0, 0x1, 0x5, "8e1ea1d1dd"}, 0x0, 0x0, 0x0, 0x0}) 39.559891414s ago: executing program 6 (id=5512): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x2000000, 0x10000) 38.395626491s ago: executing program 6 (id=5516): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 38.267975155s ago: executing program 2 (id=5520): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) 38.192328657s ago: executing program 2 (id=5522): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x19) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xca9f, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0x1}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 37.826651479s ago: executing program 2 (id=5526): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) 37.696009553s ago: executing program 2 (id=5527): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x2000000, 0x10000) 37.085462712s ago: executing program 6 (id=5529): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x0, 0xa8b, 0x3}) 36.894241798s ago: executing program 53 (id=5529): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x0, 0xa8b, 0x3}) 36.889864988s ago: executing program 2 (id=5531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000540)=""/100, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x698}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 36.244043669s ago: executing program 2 (id=5540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge_slave_1\x00', 0x10) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 36.22335404s ago: executing program 54 (id=5540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge_slave_1\x00', 0x10) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 33.115111988s ago: executing program 4 (id=5562): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000000)=0x2) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 33.003994292s ago: executing program 4 (id=5563): socket$inet6(0xa, 0x2, 0x3a) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000180)={0x6, 0x9, 0x1, 'queue0\x00', 0x2}) 32.531617997s ago: executing program 4 (id=5565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff8}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) 32.42192627s ago: executing program 4 (id=5567): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2205c04, 0x0) 32.327959643s ago: executing program 4 (id=5569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000540)=""/100, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x698}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 31.851937219s ago: executing program 4 (id=5572): fchmod(0xffffffffffffffff, 0x126) fsync(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x24040041) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x2a, 0xfffffffffffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 31.79276611s ago: executing program 55 (id=5572): fchmod(0xffffffffffffffff, 0x126) fsync(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x24040041) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x2a, 0xfffffffffffffffc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 25.543445249s ago: executing program 3 (id=5541): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x2000000, 0x10000) 24.411719675s ago: executing program 3 (id=5613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}}, 0x40000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) request_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffffb) 21.877836305s ago: executing program 8 (id=5628): prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000140)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) 21.688006861s ago: executing program 0 (id=5630): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fchmodat(0xffffffffffffffff, 0x0, 0x6a) 21.305883123s ago: executing program 8 (id=5631): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x208001, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000180)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c5805000000451697efe42811ee1df0fa9264f7d866b19705487b00", 0xb2, 0xfffffff7, 0x4, 0xe}, 0x3c) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/220, 0xdc, 0x4009) recvmsg$inet_nvme(r8, &(0x7f0000008a40)={&(0x7f0000007740)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000079c0)=[{&(0x7f00000077c0)=""/169, 0xa9}, {0x0}, {&(0x7f00000078c0)=""/22, 0x16}, {0x0}], 0x4, &(0x7f0000007a40)=""/4096, 0x1000}, 0x2) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000007700)={0x0}) 20.688853083s ago: executing program 8 (id=5632): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200"], 0x50) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 20.670038604s ago: executing program 0 (id=5633): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r1, 0x0, 0x0, 0x8800000) sendfile(r0, r0, 0x0, 0xe3aa6ea) 20.398780882s ago: executing program 0 (id=5635): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0xc10c3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000c00)='GPL\x00', 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="00000000000b8fdf0838eb3c3f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000030002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) r8 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r8, 0x0, 0x0, 0x2000, 0x0, 0x1f) 19.317699917s ago: executing program 8 (id=5639): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f0000000540)={[{@usrquota}, {@debug}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r0, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffff7b90, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x3]}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) fallocate(r3, 0x8, 0x2000000, 0x10000) 18.667998227s ago: executing program 0 (id=5646): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7e}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d00000000"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xba9, &(0x7f00000017c0)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) syz_usb_connect(0x5, 0x12f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 18.538930861s ago: executing program 8 (id=5647): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x6, 0x9, 0x1, 'queue0\x00', 0x2}) 18.243764961s ago: executing program 8 (id=5649): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 18.203824242s ago: executing program 56 (id=5649): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 17.95496086s ago: executing program 3 (id=5654): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144, 0x90}, {0x0}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x3}, 0x3422a61a}], 0x1, 0x10102, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 17.885962942s ago: executing program 57 (id=5654): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144, 0x90}, {0x0}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x3}, 0x3422a61a}], 0x1, 0x10102, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 17.879857802s ago: executing program 0 (id=5656): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.719735749s ago: executing program 0 (id=5666): r0 = socket(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0xc8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000340)="260000002200470105000007000000358662134641a696ace1d600000020002b1f68ce8b927301ab72c7cefa0b0ae57cb0a80c661481f6374249e4082af003d3029529b627e84a9662dc8cde66f446a33491a2bd08792d", 0x57) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200080925bd7000fcdb910d48d0ae2f53d91600bfe4a7288cf0cc2fbf8b999419657cc16ffd88310575354e6fa1f9c6ff043e6abf8024", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000044) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 16.69719918s ago: executing program 58 (id=5666): r0 = socket(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0xc8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000340)="260000002200470105000007000000358662134641a696ace1d600000020002b1f68ce8b927301ab72c7cefa0b0ae57cb0a80c661481f6374249e4082af003d3029529b627e84a9662dc8cde66f446a33491a2bd08792d", 0x57) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200080925bd7000fcdb910d48d0ae2f53d91600bfe4a7288cf0cc2fbf8b999419657cc16ffd88310575354e6fa1f9c6ff043e6abf8024", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000044) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 1.854447871s ago: executing program 5 (id=5739): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa39400, 0x0, 0x8}, 0x18) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.283953709s ago: executing program 7 (id=5650): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@empty, 0xfffb, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x5, 0x0, 0x3}, 0x7fffffff, 0x6e6bb9, 0x1}, {{@in=@empty, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x0, 0x48, 0x2c19, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.208085032s ago: executing program 7 (id=5740): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) sendfile(r0, r1, 0x0, 0x6) 1.205980032s ago: executing program 7 (id=5741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) recvmmsg(r2, &(0x7f0000002040), 0x0, 0x40000022, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000540)=""/100, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x698}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.155367403s ago: executing program 5 (id=5742): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x2, @none, 0xfe0, 0x1}, 0xe) 1.095744575s ago: executing program 5 (id=5743): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x80}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c880}, 0x40004) 1.040216367s ago: executing program 7 (id=5744): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000086, &(0x7f0000000200)=ANY=[@ANYBLOB='shortname=win95,tz=UTC,utf8=0,shortname=mixed,uni_xlate=0,tz=UTC,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,iocharsshortname=winnt,discard,shortname=mixed,check=strict,dmask=00000000000000000000007,shortname=lower,gid=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rodir,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$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") ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000840)={0x81, 0x40, 0xfffffffc, 0x9, 0x1, "55feac4d04a532d755f99232cc7edb277cd2b2"}) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x10001, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x3104) 967.784599ms ago: executing program 5 (id=5746): unshare(0x2a020400) setresuid(0x0, 0xee01, 0xee00) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) 907.795151ms ago: executing program 5 (id=5748): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x97}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 827.967974ms ago: executing program 7 (id=5749): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, 0x0) 811.318114ms ago: executing program 7 (id=5750): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) epoll_create(0x628) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x83f7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) 244.012012ms ago: executing program 9 (id=5752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x200, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="79bf8b6f9725602b530aa59ed8d4aaa48e7df8ecee50581466562ffa4f03040c9541b9d6be9d90bc", 0x28}], 0x1}}], 0x1, 0x24048054) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 243.729562ms ago: executing program 5 (id=5753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) recvmmsg(r2, &(0x7f0000002040), 0x0, 0x40000022, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f0000000880)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000540)=""/100, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x698}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 218.818403ms ago: executing program 9 (id=5754): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 186.725054ms ago: executing program 9 (id=5755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108deff00000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000001d16000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000005a40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x0) 126.610756ms ago: executing program 9 (id=5756): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000000200)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}, 0x24000080) 90.380017ms ago: executing program 9 (id=5757): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 0s ago: executing program 9 (id=5758): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 693.468895][T13483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.711524][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 693.807815][T13821] loop5: detected capacity change from 0 to 256 [ 693.877366][T13483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.901288][T13483] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.917407][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.924703][T12647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.004111][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.011632][T12737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.044314][T13836] loop5: detected capacity change from 0 to 512 [ 694.090548][T13836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 694.118752][T13836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.151366][T13350] veth0_vlan: entered promiscuous mode [ 694.173449][T13836] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.189690][T13350] veth1_vlan: entered promiscuous mode [ 694.283215][T13350] veth0_macvtap: entered promiscuous mode [ 694.305299][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 694.327241][T13350] veth1_macvtap: entered promiscuous mode [ 694.373591][ T9688] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 694.386804][T13350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.415709][T13350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.425066][ T9688] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 694.448255][T12647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.468356][T12647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.496182][T12647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.496518][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.515416][T12647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.594978][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.666832][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 694.774192][ T5200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.858408][T13483] veth0_vlan: entered promiscuous mode [ 694.907673][ T5200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.015182][T13912] loop7: detected capacity change from 0 to 512 [ 695.109088][T13483] veth1_vlan: entered promiscuous mode [ 695.133301][T13483] veth0_macvtap: entered promiscuous mode [ 695.172374][ T5200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.197532][T13912] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 695.227437][T13912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.249563][T13483] veth1_macvtap: entered promiscuous mode [ 695.282537][T13912] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 695.301425][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.340013][ T5200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.378994][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.387932][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 695.387951][ T28] audit: type=1400 audit(1780860422.778:2497): avc: denied { write } for pid=13911 comm="syz.7.5237" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 695.470709][T13905] Invalid option length (1048372) for dns_resolver key [ 695.503819][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.503977][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.504014][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.504070][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.618558][ T28] audit: type=1400 audit(1780860422.868:2498): avc: denied { write } for pid=13911 comm="syz.7.5237" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 695.658084][ T5200] bridge_slave_1: left allmulticast mode [ 695.658119][ T5200] bridge_slave_1: left promiscuous mode [ 695.658282][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.659183][ T5200] bridge_slave_0: left allmulticast mode [ 695.659264][ T5200] bridge_slave_0: left promiscuous mode [ 695.659421][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.934911][T13945] xt_TCPMSS: Only works on TCP SYN packets [ 695.993052][ T28] audit: type=1400 audit(1780860423.378:2499): avc: denied { write } for pid=13885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.037987][ T5200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.049128][ T5200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.051960][ T5200] bond0 (unregistering): Released all slaves [ 696.052777][ T28] audit: type=1400 audit(1780860423.438:2500): avc: denied { write } for pid=11509 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.053283][T11509] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 696.056938][T11509] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 696.057360][ T28] audit: type=1400 audit(1780860423.448:2501): avc: denied { write } for pid=13957 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.069117][ T5200] bond1 (unregistering): Released all slaves [ 696.080336][ T5200] bond2 (unregistering): Released all slaves [ 696.099294][ T5200] bond3 (unregistering): Released all slaves [ 696.219030][T13941] syzkaller0: entered promiscuous mode [ 696.219085][T13941] syzkaller0: entered allmulticast mode [ 696.232403][T13907] lo speed is unknown, defaulting to 1000 [ 696.237092][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 696.453744][T11509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.502583][ T5200] hsr_slave_0: left promiscuous mode [ 696.503496][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.503625][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.505552][ T5200] hsr_slave_1: left promiscuous mode [ 696.505936][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.505951][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.508632][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.508652][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.553463][ T5200] veth1_macvtap: left promiscuous mode [ 696.704829][ T28] audit: type=1400 audit(1780860424.088:2502): avc: denied { write } for pid=13962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.739899][ T5200] veth0_macvtap: left promiscuous mode [ 696.753703][ T28] audit: type=1400 audit(1780860424.138:2503): avc: denied { write } for pid=13987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.776310][ T5200] veth1_vlan: left promiscuous mode [ 696.784539][ T5200] veth0_vlan: left promiscuous mode [ 696.921859][ T5200] team0 (unregistering): Port device team_slave_1 removed [ 696.935610][ T5200] team0 (unregistering): Port device team_slave_0 removed [ 696.986021][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 697.084106][T13995] syzkaller0: entered promiscuous mode [ 697.109856][T13995] syzkaller0: entered allmulticast mode [ 697.173519][ T28] audit: type=1400 audit(1780860424.558:2504): avc: denied { write } for pid=14002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.235036][ T28] audit: type=1400 audit(1780860424.618:2505): avc: denied { write } for pid=14023 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.368617][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 697.415485][T13990] lo speed is unknown, defaulting to 1000 [ 697.813879][T14056] loop1: detected capacity change from 0 to 1024 [ 697.859469][T14056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.954002][T13483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.969704][T14063] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5269'. [ 698.274216][ T5200] IPVS: stop unused estimator thread 0... [ 698.347694][T14072] syzkaller0: entered promiscuous mode [ 698.353424][T14072] syzkaller0: entered allmulticast mode [ 698.410997][T14081] loop1: detected capacity change from 0 to 128 [ 698.435680][T14081] vfat: Unknown parameter 'non0' [ 698.451726][ T5200] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.656332][ T5200] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.881942][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.914467][T13907] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.928612][T14100] loop4: detected capacity change from 0 to 512 [ 698.942736][T13907] bridge_slave_0: entered allmulticast mode [ 698.981960][T13907] bridge_slave_0: entered promiscuous mode [ 699.006074][ T28] audit: type=1400 audit(1780860426.318:2506): avc: denied { write } for pid=14082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.049324][T14107] tmpfs: Cannot disable swap on remount [ 699.096703][ T5200] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.136617][T13907] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.153365][T13907] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.194394][T13907] bridge_slave_1: entered allmulticast mode [ 699.228192][T13907] bridge_slave_1: entered promiscuous mode [ 699.358484][ T5200] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.577635][T14135] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 699.847792][T13907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.910668][T13907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.104233][T14141] syzkaller0: entered promiscuous mode [ 700.124945][T14141] syzkaller0: entered allmulticast mode [ 700.419286][T14164] loop4: detected capacity change from 0 to 128 [ 700.662846][T13907] team0: Port device team_slave_0 added [ 700.688637][T14164] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 700.926793][T13907] team0: Port device team_slave_1 added [ 700.953882][ T5200] bridge_slave_1: left allmulticast mode [ 700.961354][T14164] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 700.973986][ T5200] bridge_slave_1: left promiscuous mode [ 700.982519][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.092700][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 701.092726][ T28] audit: type=1400 audit(1780860428.388:2511): avc: denied { write } for pid=14163 comm="syz.4.5287" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.133544][ T5200] bridge_slave_0: left allmulticast mode [ 701.145204][ T5200] bridge_slave_0: left promiscuous mode [ 701.151008][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.165162][ T28] audit: type=1400 audit(1780860428.528:2512): avc: denied { write } for pid=14157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.212762][ T28] audit: type=1400 audit(1780860428.598:2513): avc: denied { write } for pid=14184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.759788][T14193] loop1: detected capacity change from 0 to 512 [ 701.809588][T14193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.836773][T14193] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.876495][ T28] audit: type=1400 audit(1780860429.258:2514): avc: denied { write } for pid=14192 comm="syz.1.5292" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.926534][ T28] audit: type=1400 audit(1780860429.258:2515): avc: denied { write } for pid=14192 comm="syz.1.5292" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 702.034953][T13350] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.046539][T13483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.140238][ T28] audit: type=1400 audit(1780860429.528:2516): avc: denied { write } for pid=14187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.170264][ T5200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.197028][ T5200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.210920][ T28] audit: type=1400 audit(1780860429.598:2517): avc: denied { write } for pid=14208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.236933][ T5200] bond0 (unregistering): Released all slaves [ 702.248607][ T5200] bond1 (unregistering): Released all slaves [ 702.299345][T13907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.312677][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.348963][T13907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.407834][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.430959][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.468839][T13907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.478499][T13907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.509506][T13907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.528701][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.543514][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.558348][T13990] bridge_slave_0: entered allmulticast mode [ 702.571162][T13990] bridge_slave_0: entered promiscuous mode [ 702.597059][ T5200] hsr_slave_0: left promiscuous mode [ 702.608340][ T5200] hsr_slave_1: left promiscuous mode [ 702.614070][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.633498][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.642550][T14226] 9p: Bad value for 'wfdno' [ 702.647225][ T28] audit: type=1400 audit(1780860430.038:2518): avc: denied { mounton } for pid=14225 comm="syz.9.5295" path="/80/file1" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 702.674645][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.690633][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.711646][ T28] audit: type=1400 audit(1780860430.098:2519): avc: denied { write } for pid=14210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.736545][ T5200] veth1_macvtap: left promiscuous mode [ 702.742197][ T5200] veth0_macvtap: left promiscuous mode [ 702.747859][ T5200] veth1_vlan: left promiscuous mode [ 702.763057][ T5200] veth0_vlan: left promiscuous mode [ 702.772432][ T28] audit: type=1400 audit(1780860430.158:2520): avc: denied { write } for pid=14233 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.904066][ T5200] team0 (unregistering): Port device team_slave_1 removed [ 702.920907][ T5200] team0 (unregistering): Port device team_slave_0 removed [ 702.978121][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.999235][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.009823][T13990] bridge_slave_1: entered allmulticast mode [ 703.016725][T13990] bridge_slave_1: entered promiscuous mode [ 703.032175][T13907] hsr_slave_0: entered promiscuous mode [ 703.040229][T13907] hsr_slave_1: entered promiscuous mode [ 703.047347][T13907] debugfs: 'hsr0' already exists in 'hsr' [ 703.053288][T13907] Cannot create hsr debugfs directory [ 703.121801][T14275] 9p: Bad value for 'wfdno' [ 703.134965][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.168462][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.224288][T14287] loop1: detected capacity change from 0 to 128 [ 703.238355][T13990] team0: Port device team_slave_0 added [ 703.265819][T13990] team0: Port device team_slave_1 added [ 703.333511][T14302] loop1: detected capacity change from 0 to 512 [ 703.338015][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.357522][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.386785][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.394599][T14302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a866c018, mo2=0002] [ 703.411920][T14302] System zones: 1-12 [ 703.414852][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.423122][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.449261][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.465781][T14302] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.5311: ea_inode file size=0 entry size=6 [ 703.479183][T14302] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.5311: iget: bad extra_isize 90 (inode size 256) [ 703.492863][T14302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 703.493949][T14302] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.5311: error while reading EA inode 11 err=-117 [ 703.495047][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 703.508195][T14302] loop1: lost filesystem error report for type 5 error -117 [ 703.515484][ C0] EXT4-fs (loop1): initial error at time 1780860430: ext4_xattr_inode_iget:441: inode 11 [ 703.524275][T14302] EXT4-fs (loop1): 1 orphan inode deleted [ 703.529303][ C0] [ 703.529313][ C0] EXT4-fs (loop1): last error at time 1780860430: ext4_xattr_inode_iget:446 [ 703.541156][T14302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.544919][ C0] [ 703.589431][T13483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.638028][T13990] hsr_slave_0: entered promiscuous mode [ 703.669114][T13990] hsr_slave_1: entered promiscuous mode [ 703.678471][T13990] debugfs: 'hsr0' already exists in 'hsr' [ 703.684355][T13990] Cannot create hsr debugfs directory [ 703.719297][T14324] 9p: Bad value for 'wfdno' [ 703.798478][T14333] loop1: detected capacity change from 0 to 512 [ 703.829281][T14333] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 703.847843][T14333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.866454][T14333] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 703.989406][T13483] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 704.023237][T13483] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 704.062001][T13907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.075227][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.091398][T13907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.111862][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.145189][T13907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.168565][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.176599][T13907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 704.197316][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.284789][T13483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.295188][T12647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.392034][T12647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.475284][T13907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.494213][T12647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.569611][T12647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.610103][T13907] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.638137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.645328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.655970][T14396] loop4: detected capacity change from 0 to 4096 [ 704.693448][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.696759][T14396] EXT4-fs (loop4): can't read group descriptor 0 [ 704.700664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.718123][T13990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 704.732072][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.783354][T13990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 704.797862][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.805825][T13990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 704.814650][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.840339][T13990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 704.850236][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.861863][T14391] lo speed is unknown, defaulting to 1000 [ 704.888436][T12647] bridge_slave_1: left allmulticast mode [ 704.906630][T12647] bridge_slave_1: left promiscuous mode [ 704.912746][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.057473][T12647] bridge_slave_0: left allmulticast mode [ 705.085603][T12647] bridge_slave_0: left promiscuous mode [ 705.091698][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.308678][T12647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.319224][T12647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.330959][T12647] bond0 (unregistering): Released all slaves [ 705.372087][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.433780][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.480630][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.487831][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.553406][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.560578][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.637540][T12647] hsr_slave_0: left promiscuous mode [ 705.657474][T12647] hsr_slave_1: left promiscuous mode [ 705.677133][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.699353][T12647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.721307][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.738383][T12647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.763637][T12647] veth1_macvtap: left promiscuous mode [ 705.775128][T12647] veth0_macvtap: left promiscuous mode [ 705.786807][T12647] veth1_vlan: left promiscuous mode [ 705.799542][T12647] veth0_vlan: left promiscuous mode [ 705.996052][T12647] team0 (unregistering): Port device team_slave_1 removed [ 706.085434][T12647] team0 (unregistering): Port device team_slave_0 removed [ 706.148165][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 706.364328][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 706.364345][ T28] audit: type=1400 audit(1780860433.748:2534): avc: denied { setopt } for pid=14455 comm="syz.4.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.763251][T13907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.875231][ T28] audit: type=1400 audit(1780860434.258:2535): avc: denied { write } for pid=14444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.940881][T14391] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.964388][T14391] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.988112][T14391] bridge_slave_0: entered allmulticast mode [ 707.000160][ T28] audit: type=1400 audit(1780860434.388:2536): avc: denied { write } for pid=14488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.027624][T14391] bridge_slave_0: entered promiscuous mode [ 707.061011][T14391] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.098611][T14391] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.135907][T14391] bridge_slave_1: entered allmulticast mode [ 707.163899][T14391] bridge_slave_1: entered promiscuous mode [ 707.341234][T14391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.379795][T14391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.460655][ T28] audit: type=1400 audit(1780860434.848:2537): avc: denied { write } for pid=14492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.498853][T14391] team0: Port device team_slave_0 added [ 707.517977][T14391] team0: Port device team_slave_1 added [ 707.591036][ T28] audit: type=1400 audit(1780860434.978:2538): avc: denied { write } for pid=14515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.619249][T14391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.650720][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.739161][T14523] loop4: detected capacity change from 0 to 256 [ 707.747213][T14391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.785918][ T28] audit: type=1326 audit(1780860435.178:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.9.5344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd597a2ce59 code=0x0 [ 707.819964][T13907] veth0_vlan: entered promiscuous mode [ 707.886029][T14391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.901268][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.989899][T14391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.071041][T13907] veth1_vlan: entered promiscuous mode [ 708.255361][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.267693][T14391] hsr_slave_0: entered promiscuous mode [ 708.273926][T14391] hsr_slave_1: entered promiscuous mode [ 708.280903][T14391] debugfs: 'hsr0' already exists in 'hsr' [ 708.297897][T14391] Cannot create hsr debugfs directory [ 708.321147][T13907] veth0_macvtap: entered promiscuous mode [ 708.328404][ T28] audit: type=1326 audit(1780860435.718:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14538 comm="syz.9.5349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd597a2ce59 code=0x0 [ 708.356910][T13907] veth1_macvtap: entered promiscuous mode [ 708.369306][T13907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.378396][T13907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.410429][ T28] audit: type=1400 audit(1780860435.798:2541): avc: denied { write } for pid=14522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.478464][ T28] audit: type=1400 audit(1780860435.868:2542): avc: denied { write } for pid=14544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.503395][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.586696][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.624252][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.655683][ T5185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.669560][ T5185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.688837][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.704480][T14552] netlink: 'syz.4.5348': attribute type 12 has an invalid length. [ 708.840858][ T28] audit: type=1400 audit(1780860436.228:2543): avc: denied { write } for pid=14554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.900319][T13990] veth0_vlan: entered promiscuous mode [ 708.930458][T13990] veth1_vlan: entered promiscuous mode [ 708.952324][T14578] loop4: detected capacity change from 0 to 256 [ 708.978594][T14578] FAT-fs (loop4): Directory bread(block 64) failed [ 708.998162][T14578] FAT-fs (loop4): Directory bread(block 65) failed [ 709.011284][T14578] FAT-fs (loop4): Directory bread(block 66) failed [ 709.017239][T13990] veth0_macvtap: entered promiscuous mode [ 709.023702][T14578] FAT-fs (loop4): Directory bread(block 67) failed [ 709.030405][T14578] FAT-fs (loop4): Directory bread(block 68) failed [ 709.037423][T14391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 709.038805][T14578] FAT-fs (loop4): Directory bread(block 69) failed [ 709.051037][T14578] FAT-fs (loop4): Directory bread(block 70) failed [ 709.058381][T14578] FAT-fs (loop4): Directory bread(block 71) failed [ 709.062558][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 709.067254][T14578] FAT-fs (loop4): Directory bread(block 72) failed [ 709.078974][T14578] FAT-fs (loop4): Directory bread(block 73) failed [ 709.090074][T13990] veth1_macvtap: entered promiscuous mode [ 709.097242][T14391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 709.107176][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 709.118873][T14391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 709.131187][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 709.140550][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.154750][T14391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 709.183739][T14391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.209398][T14590] loop4: detected capacity change from 0 to 512 [ 709.223623][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.251482][T14590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.276731][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.302334][T14590] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.315659][ T361] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.335171][ T361] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.340630][T14590] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.5351: corrupted xattr block 33: overlapping e_value [ 709.344038][ T361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.368440][T14590] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 709.381596][T14590] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.5351: corrupted xattr block 33: overlapping e_value [ 709.397575][T14590] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.5351: corrupted xattr block 33: overlapping e_value [ 709.423257][T14590] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 709.433119][T14590] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.5351: Failed to acquire dquot type 0 [ 709.503108][T14391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.533469][T14626] loop8: detected capacity change from 0 to 256 [ 709.538098][T14391] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.552436][T13350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.552465][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.568558][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.586195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.593453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.610601][T14626] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 709.674232][T14635] loop4: detected capacity change from 0 to 128 [ 709.711195][T14635] vfat: Unknown parameter 'non0' [ 709.984857][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.058536][T14691] loop6: detected capacity change from 0 to 128 [ 710.077223][T14688] loop4: detected capacity change from 0 to 1024 [ 710.094003][T14691] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 710.111172][T14688] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 710.144427][T14688] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 710.162607][T14691] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 710.175628][T14688] EXT4-fs (loop4): invalid journal inode [ 710.205238][T14688] EXT4-fs (loop4): can't get journal size [ 710.233229][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 710.258095][T14391] veth0_vlan: entered promiscuous mode [ 710.270736][T14688] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 17104912: comm syz.4.5368: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 710.291188][T14688] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 710.292696][T14688] EXT4-fs (loop4): failed to initialize system zone (-117) [ 710.301922][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 710.301947][ C1] EXT4-fs (loop4): initial error at time 1780860437: ext4_map_blocks:791: inode 3: block 17104912 [ 710.301992][ C1] EXT4-fs (loop4): last error at time 1780860437: ext4_map_blocks:791: inode 3: block 17104912 [ 710.345477][T14391] veth1_vlan: entered promiscuous mode [ 710.363072][T14688] EXT4-fs (loop4): mount failed [ 710.370660][T14391] veth0_macvtap: entered promiscuous mode [ 710.409507][T14391] veth1_macvtap: entered promiscuous mode [ 710.425836][T14391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.452582][T14391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.471000][T14726] loop6: detected capacity change from 0 to 512 [ 710.479022][ T5180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.490277][T14726] EXT4-fs: Ignoring removed i_version option [ 710.497870][ T5180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.525489][T14726] EXT4-fs: Ignoring removed nobh option [ 710.534490][ T5180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.543868][ T5180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.565751][T14726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 710.584331][T14726] EXT4-fs (loop6): 1 truncate cleaned up [ 710.606554][T14726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.714488][T14739] syzkaller0: entered promiscuous mode [ 710.732398][T14739] syzkaller0: entered allmulticast mode [ 710.986957][T14758] loop4: detected capacity change from 0 to 128 [ 711.277712][T14758] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.348800][T14758] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.410657][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 711.410676][ T28] audit: type=1400 audit(1780860438.798:2557): avc: denied { write } for pid=14753 comm="syz.4.5382" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 711.439606][T13907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.503687][T13350] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.702214][T14787] loop6: detected capacity change from 0 to 512 [ 711.906017][T14787] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.5390: attempt to clear invalid blocks 2 len 1 [ 711.929071][T14800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.945079][T14787] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 711.945741][T14787] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 711.955028][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 711.955047][ C1] EXT4-fs (loop6): initial error at time 1780860439: ext4_clear_blocks:876: inode 13 [ 711.955077][ C1] EXT4-fs (loop6): last error at time 1780860439: ext4_clear_blocks:876: inode 13 [ 711.988760][T14787] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 712.005743][T14800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.023498][ T28] audit: type=1400 audit(1780860439.408:2558): avc: denied { write } for pid=14773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.075825][T14787] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5390: invalid indirect mapped block 1819239214 (level 0) [ 712.097357][ T28] audit: type=1400 audit(1780860439.458:2559): avc: denied { write } for pid=14803 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.123885][T14787] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 712.124207][T14787] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5390: invalid indirect mapped block 1819239214 (level 1) [ 712.151310][T14787] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 712.151879][T14787] EXT4-fs (loop6): 1 truncate cleaned up [ 712.167699][T14787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.181280][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 712.233273][T13907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.351516][ T28] audit: type=1400 audit(1780860439.738:2560): avc: denied { write } for pid=14806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.415542][ T28] audit: type=1400 audit(1780860439.798:2561): avc: denied { write } for pid=14819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.489767][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 712.611146][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5398'. [ 712.831969][ T28] audit: type=1400 audit(1780860440.218:2562): avc: denied { write } for pid=14824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.899196][ T28] audit: type=1400 audit(1780860440.288:2563): avc: denied { write } for pid=14849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.961394][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 713.380949][ T28] audit: type=1400 audit(1780860440.768:2564): avc: denied { write } for pid=14852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.466207][ T28] audit: type=1400 audit(1780860440.858:2565): avc: denied { write } for pid=14868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.505812][T14831] Can't find ip_set type hash:net,port,ne [ 713.800146][ T28] audit: type=1400 audit(1780860441.188:2566): avc: denied { write } for pid=14870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.221226][T14872] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5402'. [ 714.464884][T14911] tracefs: Bad value for 'gid' [ 714.475227][T14911] tracefs: Bad value for 'gid' [ 714.523163][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 714.546312][T14919] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5411'. [ 714.618400][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5412'. [ 714.678144][T14935] loop8: detected capacity change from 0 to 512 [ 714.709793][T14935] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5404: attempt to clear invalid blocks 2 len 1 [ 714.732864][T14935] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 714.735004][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 714.750669][ C1] EXT4-fs (loop8): initial error at time 1780860442: ext4_clear_blocks:876: inode 13 [ 714.755369][T14935] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 714.760228][ C1] EXT4-fs (loop8): last error at time 1780860442: ext4_clear_blocks:876: inode 13 [ 714.807905][T14935] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5404: invalid indirect mapped block 1819239214 (level 0) [ 714.821928][T14935] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 714.824972][T14935] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5404: invalid indirect mapped block 1819239214 (level 1) [ 714.864760][T14935] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 714.868287][T14935] EXT4-fs (loop8): 1 truncate cleaned up [ 714.896604][T14935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.920232][T14948] loop4: detected capacity change from 0 to 512 [ 714.968436][T14951] syzkaller0: entered promiscuous mode [ 714.976823][T14948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.992688][T13990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.003346][T14951] syzkaller0: entered allmulticast mode [ 715.035079][T14948] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 715.093656][T13350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.332433][T14973] loop4: detected capacity change from 0 to 4096 [ 715.354625][T14973] EXT4-fs: test_dummy_encryption option not supported [ 715.426941][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5426'. [ 715.587623][T14992] loop6: detected capacity change from 0 to 512 [ 715.613835][T14992] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.5428: attempt to clear invalid blocks 2 len 1 [ 715.663031][T14992] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 715.675008][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 715.690730][ C1] EXT4-fs (loop6): initial error at time 1780860443: ext4_clear_blocks:876: inode 13 [ 715.700289][ C1] EXT4-fs (loop6): last error at time 1780860443: ext4_clear_blocks:876: inode 13 [ 716.837033][T14992] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 716.899674][T14992] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5428: invalid indirect mapped block 1819239214 (level 0) [ 716.978897][T14992] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 716.979134][T14992] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5428: invalid indirect mapped block 1819239214 (level 1) [ 717.061998][T14992] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 717.164305][T14992] EXT4-fs (loop6): 1 truncate cleaned up [ 717.236609][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 717.335088][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 717.335111][ T28] audit: type=1400 audit(1780860444.588:2574): avc: denied { write } for pid=14997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.377233][T14992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.473916][ T28] audit: type=1400 audit(1780860444.608:2575): avc: denied { write } for pid=15036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.526644][T13907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.578259][ T28] audit: type=1400 audit(1780860444.828:2576): avc: denied { write } for pid=15041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.647995][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 717.674250][ T28] audit: type=1400 audit(1780860444.958:2577): avc: denied { write } for pid=15054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.061743][ T28] audit: type=1400 audit(1780860445.448:2578): avc: denied { write } for pid=15058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.101423][T15070] loop6: detected capacity change from 0 to 1024 [ 718.230062][T15070] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 718.315241][T15070] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 718.330453][ T28] audit: type=1400 audit(1780860445.708:2579): avc: denied { write } for pid=15083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.370467][T15070] EXT4-fs (loop6): orphan cleanup on readonly fs [ 718.412110][T15070] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 718.462153][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 718.496549][T15070] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 718.681469][T15070] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 718.803020][T15070] EXT4-fs (loop6): 1 truncate cleaned up [ 718.846266][T15070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.926042][T15070] EXT4-fs (loop6): shut down requested (0) [ 718.934616][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5447'. [ 719.015588][T13907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.096795][T15102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.144693][ T28] audit: type=1400 audit(1780860446.528:2580): avc: denied { write } for pid=15092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.211380][T15102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.237021][ T28] audit: type=1400 audit(1780860446.618:2581): avc: denied { write } for pid=15110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.309997][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 720.243986][ T9418] IPVS: starting estimator thread 0... [ 720.314610][ T28] audit: type=1400 audit(1780860447.698:2582): avc: denied { listen } for pid=15140 comm="syz.9.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 720.360703][T15148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.375219][T15135] IPVS: using max 2256 ests per chain, 112800 per kthread [ 720.376892][T15148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.443797][T15154] syzkaller0: entered promiscuous mode [ 720.456400][T15154] syzkaller0: entered allmulticast mode [ 720.483723][T15158] loop2: detected capacity change from 0 to 2048 [ 720.526016][T15158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.676527][T14391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.825214][T15217] loop8: detected capacity change from 0 to 128 [ 721.869298][T15217] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 723.055872][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 723.055888][ T28] audit: type=1400 audit(1780860450.448:2593): avc: denied { write } for pid=15232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.229017][ T28] audit: type=1400 audit(1780860450.608:2594): avc: denied { write } for pid=15270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.344794][T15277] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 723.383817][T15277] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 723.715077][T15295] loop8: detected capacity change from 0 to 1024 [ 723.734357][T15295] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 724.015484][T15295] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 724.142502][T15295] EXT4-fs (loop8): orphan cleanup on readonly fs [ 724.231157][T15295] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 724.295970][ T28] audit: type=1400 audit(1780860451.688:2595): avc: denied { write } for pid=15283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.328403][T15295] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 724.740078][T15295] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 724.760752][T15295] EXT4-fs (loop8): 1 truncate cleaned up [ 724.773673][ T28] audit: type=1400 audit(1780860452.158:2596): avc: denied { write } for pid=15314 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.891044][T15295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.908660][T15295] EXT4-fs (loop8): shut down requested (0) [ 724.944026][T13990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.459351][ T28] audit: type=1400 audit(1780860452.848:2597): avc: denied { write } for pid=15327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.993745][T15362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.021624][ T28] audit: type=1400 audit(1780860453.408:2598): avc: denied { write } for pid=15363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.045353][T15362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.169205][ T28] audit: type=1400 audit(1780860453.558:2599): avc: denied { write } for pid=15368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.218633][ T28] audit: type=1400 audit(1780860453.608:2600): avc: denied { write } for pid=15379 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.257664][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 726.361605][ T28] audit: type=1400 audit(1780860453.748:2601): avc: denied { write } for pid=15382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.428088][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 726.567701][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 726.629626][T15411] loop6: detected capacity change from 0 to 512 [ 726.659195][T15411] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 726.685956][T15411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.712642][T15411] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 726.829725][T15428] loop8: detected capacity change from 0 to 512 [ 726.837509][T15428] EXT4-fs: Ignoring removed i_version option [ 726.867124][T15428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.894592][T15428] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 726.937289][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 727.219344][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 727.368278][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 727.519646][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 727.665919][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 727.802963][T13907] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 727.871236][T13907] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 727.900171][T13990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.028640][T15518] loop8: detected capacity change from 0 to 128 [ 728.049770][T15518] EXT4-fs: test_dummy_encryption option not supported [ 728.064019][T15518] selinux_netlink_send: 42 callbacks suppressed [ 728.064038][T15518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15518 comm=syz.8.5519 [ 728.262106][T13907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.340877][ T5180] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.364239][T15532] loop8: detected capacity change from 0 to 512 [ 728.397133][T15532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 728.440399][ T5180] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.486837][T15532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.515948][T15541] loop2: detected capacity change from 0 to 512 [ 728.533757][T15532] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.546484][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 728.546502][ T28] audit: type=1400 audit(1780860455.938:2620): avc: denied { write } for pid=15513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.598412][ T5180] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.644812][T15541] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 728.682041][T15541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.720960][ T28] audit: type=1400 audit(1780860456.018:2621): avc: denied { write } for pid=15531 comm="syz.8.5525" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 728.761930][ T5180] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.772606][T15541] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 728.854659][ T28] audit: type=1400 audit(1780860456.028:2622): avc: denied { map } for pid=15531 comm="syz.8.5525" path="/35/file2/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 729.004583][ T28] audit: type=1400 audit(1780860456.028:2623): avc: denied { execute } for pid=15531 comm="syz.8.5525" path="/35/file2/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 729.039700][T15551] bridge_slave_0: left allmulticast mode [ 729.063985][T15551] bridge_slave_0: left promiscuous mode [ 729.084688][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.143815][T15551] bridge_slave_1: left allmulticast mode [ 729.155722][ T28] audit: type=1400 audit(1780860456.108:2624): avc: denied { write } for pid=15546 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.195733][T15551] bridge_slave_1: left promiscuous mode [ 729.229779][T14391] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 729.245435][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.309420][T15551] bond0: (slave bond_slave_0): Releasing backup interface [ 729.321866][T14391] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 729.336396][ T28] audit: type=1400 audit(1780860456.218:2625): avc: denied { write } for pid=15540 comm="syz.2.5527" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.390485][T13990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.401348][T15551] bond0: (slave bond_slave_1): Releasing backup interface [ 729.419592][ T28] audit: type=1400 audit(1780860456.298:2626): avc: denied { write } for pid=15540 comm="syz.2.5527" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.456520][T15551] team0: Port device team_slave_0 removed [ 729.465288][ T28] audit: type=1400 audit(1780860456.618:2627): avc: denied { write } for pid=14391 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.498114][T15551] team0: Port device team_slave_1 removed [ 729.512282][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.522628][ T28] audit: type=1400 audit(1780860456.688:2628): avc: denied { write } for pid=15552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.552882][T15551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.560506][ T28] audit: type=1400 audit(1780860456.808:2629): avc: denied { write } for pid=15564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.584374][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.592079][T15551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.625020][T15551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 729.824670][ T5180] bridge_slave_1: left allmulticast mode [ 729.831133][ T5180] bridge_slave_1: left promiscuous mode [ 729.846156][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.854266][ T5180] bridge_slave_0: left allmulticast mode [ 729.862335][ T5180] bridge_slave_0: left promiscuous mode [ 729.868402][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.889322][T14391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.991936][T15610] loop4: detected capacity change from 0 to 128 [ 730.093075][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5545'. [ 730.141220][ T5180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.161802][ T5180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.174378][ T5180] bond0 (unregistering): Released all slaves [ 730.429181][T15614] lo speed is unknown, defaulting to 1000 [ 731.063533][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.088164][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.107878][T15614] bridge_slave_0: entered allmulticast mode [ 731.131770][T15614] bridge_slave_0: entered promiscuous mode [ 731.224853][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.392047][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.106415][T15614] bridge_slave_1: entered allmulticast mode [ 732.113086][T15614] bridge_slave_1: entered promiscuous mode [ 732.130732][T15566] lo speed is unknown, defaulting to 1000 [ 732.162712][ T5180] hsr_slave_0: left promiscuous mode [ 732.227418][ T5180] hsr_slave_1: left promiscuous mode [ 732.252471][ T5180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.282090][ T5180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.309215][ T5180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.322019][ T5180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.343708][ T5180] veth1_macvtap: left promiscuous mode [ 732.353238][ T5180] veth0_macvtap: left promiscuous mode [ 732.364742][ T5180] veth1_vlan: left promiscuous mode [ 732.376199][ T5180] veth0_vlan: left promiscuous mode [ 732.514559][ T5180] team0 (unregistering): Port device team_slave_1 removed [ 732.538863][ T5180] team0 (unregistering): Port device team_slave_0 removed [ 732.615359][T15698] syz_tun: entered promiscuous mode [ 732.623093][T15698] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 732.651067][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.676756][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.701722][T15721] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5556'. [ 732.753481][T15614] team0: Port device team_slave_0 added [ 732.782797][T15614] team0: Port device team_slave_1 added [ 732.807052][T15725] syzkaller0: entered promiscuous mode [ 732.815377][T15725] syzkaller0: entered allmulticast mode [ 732.851627][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.865978][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5554'. [ 732.878211][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.925516][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.999509][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5561'. [ 733.031331][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.105487][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.224625][T15741] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 733.296535][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.431051][ T5180] IPVS: stop unused estimator thread 0... [ 733.571914][T15614] hsr_slave_0: entered promiscuous mode [ 733.618983][T15614] hsr_slave_1: entered promiscuous mode [ 733.684280][T15766] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5565'. [ 733.697108][T15614] debugfs: 'hsr0' already exists in 'hsr' [ 733.715216][T15614] Cannot create hsr debugfs directory [ 733.755453][ T5180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.886244][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5568'. [ 733.961493][ T5180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.973549][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 733.973607][ T28] audit: type=1400 audit(1780860461.358:2644): avc: denied { write } for pid=15767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.078724][ T28] audit: type=1400 audit(1780860461.438:2645): avc: denied { write } for pid=15794 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.353351][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 734.390966][ T5180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.427663][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.436967][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.450695][T15808] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5575'. [ 734.460599][T15566] bridge_slave_0: entered allmulticast mode [ 734.467543][T15566] bridge_slave_0: entered promiscuous mode [ 734.489263][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.503165][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.516950][T15566] bridge_slave_1: entered allmulticast mode [ 734.523745][T15566] bridge_slave_1: entered promiscuous mode [ 734.538611][ T5180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.069046][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.113751][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.288190][T15566] team0: Port device team_slave_0 added [ 735.313875][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5578'. [ 735.328746][T15566] team0: Port device team_slave_1 added [ 735.350393][ T28] audit: type=1400 audit(1780860462.738:2646): avc: denied { write } for pid=15816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.426626][ T5180] bridge_slave_1: left allmulticast mode [ 735.437216][ T5180] bridge_slave_1: left promiscuous mode [ 735.455180][ T28] audit: type=1400 audit(1780860462.838:2647): avc: denied { write } for pid=15836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.481335][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.508490][ T5180] bridge_slave_0: left allmulticast mode [ 735.522832][ T5180] bridge_slave_0: left promiscuous mode [ 735.536758][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.731313][ T5180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.741807][ T5180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.751777][ T5180] bond0 (unregistering): Released all slaves [ 735.767767][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.781836][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.811307][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.828790][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 735.839213][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.866394][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.892937][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.057175][T15814] lo speed is unknown, defaulting to 1000 [ 736.107339][ T5180] hsr_slave_0: left promiscuous mode [ 736.154002][ T5180] hsr_slave_1: left promiscuous mode [ 736.196521][ T5180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.233793][ T5180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.263996][ T5180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.279797][ T5180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.292321][ T5180] veth1_macvtap: left promiscuous mode [ 736.300074][ T5180] veth0_macvtap: left promiscuous mode [ 736.305788][ T5180] veth1_vlan: left promiscuous mode [ 736.311102][ T5180] veth0_vlan: left promiscuous mode [ 736.401196][ T5180] team0 (unregistering): Port device team_slave_1 removed [ 736.414341][ T5180] team0 (unregistering): Port device team_slave_0 removed [ 736.493747][T15858] lo: entered allmulticast mode [ 736.524947][T15566] hsr_slave_0: entered promiscuous mode [ 736.550164][T15566] hsr_slave_1: entered promiscuous mode [ 736.568587][T15566] debugfs: 'hsr0' already exists in 'hsr' [ 736.588572][T15566] Cannot create hsr debugfs directory [ 736.595094][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5586'. [ 736.897144][ T28] audit: type=1400 audit(1780860720.284:2648): avc: denied { write } for pid=15867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.962144][ T28] audit: type=1400 audit(1780860720.334:2649): avc: denied { write } for pid=15886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.015808][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 737.055355][T15614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 737.063995][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.089146][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.109149][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.126278][T15814] bridge_slave_0: entered allmulticast mode [ 737.140484][T15814] bridge_slave_0: entered promiscuous mode [ 737.158004][T15614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 737.168826][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.177009][T15614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 737.186676][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.285598][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.292844][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.300137][T15814] bridge_slave_1: entered allmulticast mode [ 737.306882][T15814] bridge_slave_1: entered promiscuous mode [ 737.329649][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.340719][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.362633][T15814] team0: Port device team_slave_0 added [ 737.371387][T15814] team0: Port device team_slave_1 added [ 737.390741][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.397836][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.424030][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.437713][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.444772][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.475290][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.506040][T15814] hsr_slave_0: entered promiscuous mode [ 737.512389][T15814] hsr_slave_1: entered promiscuous mode [ 737.518461][T15814] debugfs: 'hsr0' already exists in 'hsr' [ 737.524356][T15814] Cannot create hsr debugfs directory [ 737.658211][ T5180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.718550][ T5180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.768435][ T5180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.828149][ T5180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.012412][T15905] loop8: detected capacity change from 0 to 128 [ 738.053922][ T5180] bond0 (unregistering): Released all slaves [ 738.902666][T15614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.913712][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.059453][ T5180] hsr_slave_0: left promiscuous mode [ 739.067040][ T5180] hsr_slave_1: left promiscuous mode [ 739.078385][ T5180] veth1_macvtap: left promiscuous mode [ 739.083959][ T5180] veth0_macvtap: left promiscuous mode [ 739.092052][ T5180] veth1_vlan: left promiscuous mode [ 739.105162][ T5180] veth0_vlan: left promiscuous mode [ 739.290589][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5594'. [ 739.325066][ T28] audit: type=1400 audit(1780860722.704:2650): avc: denied { mount } for pid=15918 comm="syz.8.5595" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 739.352913][ T28] audit: type=1400 audit(1780860722.744:2651): avc: denied { unmount } for pid=13990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 739.387839][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.396669][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.407384][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.421384][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.433236][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.440430][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.460712][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.467846][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.529873][T15566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 739.540091][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.552957][T15614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.566966][T15566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 739.576922][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.584789][T15566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 739.594005][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.602572][T15566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 739.611656][T15566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.717377][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.747561][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.778819][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.785973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.798369][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.805526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.822669][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.851641][T15814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 739.861292][T15814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.876004][T15814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 739.885884][T15814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.900744][T15814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 739.914581][T15814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.934503][T15814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 739.958389][T15814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.048938][ T28] audit: type=1400 audit(1780860723.434:2652): avc: denied { write } for pid=15953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.119488][T15814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.135438][ T28] audit: type=1400 audit(1780860723.524:2653): avc: denied { write } for pid=15980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.160623][T15814] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.183507][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.190647][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.231355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.238487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.305133][T15614] veth0_vlan: entered promiscuous mode [ 740.329018][T15614] veth1_vlan: entered promiscuous mode [ 740.378698][T15614] veth0_macvtap: entered promiscuous mode [ 740.392350][ T28] audit: type=1400 audit(1780860723.774:2654): avc: denied { write } for pid=15989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.419995][T15614] veth1_macvtap: entered promiscuous mode [ 740.432987][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.450585][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.467655][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.489290][ T28] audit: type=1400 audit(1780860723.874:2655): avc: denied { write } for pid=16009 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.521433][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.539859][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.554579][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.576139][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.685903][T16027] loop3: detected capacity change from 0 to 512 [ 740.697252][T15566] veth0_vlan: entered promiscuous mode [ 740.722857][T15566] veth1_vlan: entered promiscuous mode [ 740.737164][T16027] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 740.785054][T16027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.827212][T15566] veth0_macvtap: entered promiscuous mode [ 740.855740][T16027] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.868869][T15566] veth1_macvtap: entered promiscuous mode [ 740.897285][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.906691][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.948907][ T28] audit: type=1400 audit(1780860724.264:2656): avc: denied { write } for pid=16014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.972936][ T28] audit: type=1400 audit(1780860724.304:2657): avc: denied { write } for pid=16025 comm="syz.3.5541" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 741.047178][T12737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.079445][T12737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.100898][ T28] audit: type=1400 audit(1780860724.394:2658): avc: denied { write } for pid=16025 comm="syz.3.5541" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 741.157222][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.190056][T12737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.218706][ T28] audit: type=1400 audit(1780860724.514:2659): avc: denied { write } for pid=16052 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.245924][T12737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.501880][T16077] loop0: detected capacity change from 0 to 512 [ 741.606878][T16077] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5612: corrupted inode contents [ 741.650335][T16077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 741.650554][T16077] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 741.659769][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 741.659793][ C1] EXT4-fs (loop0): initial error at time 1780860725: ext4_do_update_inode:5690: inode 15 [ 741.659832][ C1] EXT4-fs (loop0): last error at time 1780860725: ext4_do_update_inode:5690: inode 15 [ 741.707742][T16077] loop0: lost filesystem error report for type 5 error -117 [ 741.712720][T16077] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.5612: corrupted inode contents [ 741.739902][T16077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 741.743237][T16077] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.5612: mark_inode_dirty error [ 741.817938][T16077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 741.832696][T16077] EXT4-fs (loop0): 1 orphan inode deleted [ 741.851486][T15614] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 741.874125][T16077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.879311][T15814] veth0_vlan: entered promiscuous mode [ 741.893059][T15614] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 741.915252][T15814] veth1_vlan: entered promiscuous mode [ 741.951239][T15814] veth0_macvtap: entered promiscuous mode [ 741.968090][T15814] veth1_macvtap: entered promiscuous mode [ 741.981349][T15566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.003762][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.023997][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.044133][T12737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.061001][T12737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.081376][T12737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.097165][T12737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.711933][T16161] 9p: Bad value for 'rfdno' [ 742.937781][T16169] loop8: detected capacity change from 0 to 512 [ 742.956920][T16169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.988454][T16169] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.572965][T16169] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5625: corrupted xattr block 33: overlapping e_value [ 743.605480][T16169] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 743.630037][T16169] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5625: corrupted xattr block 33: overlapping e_value [ 743.657868][T16186] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5625: corrupted xattr block 33: overlapping e_value [ 743.683517][T16186] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 743.704375][T16169] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 743.828944][T13990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.500488][T16219] loop5: detected capacity change from 0 to 512 [ 744.586426][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.603902][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.020057][T16227] syz_tun: entered allmulticast mode [ 745.025877][T16227] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 745.034534][T16227] mroute: pending queue full, dropping entries [ 745.049169][T16219] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 745.060450][T16219] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 745.419704][T16219] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5629: inode #15: comm syz.5.5629: iget: illegal inode # [ 745.432744][T16219] loop5: lost filesystem error report for type 5 error -117 [ 745.432894][T16219] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5629: couldn't read orphan inode 15 (err -117) [ 745.440245][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 745.440278][ C1] EXT4-fs (loop5): initial error at time 1780860728: ext4_orphan_get:1397 [ 745.440322][ C1] EXT4-fs (loop5): last error at time 1780860728: ext4_orphan_get:1397 [ 745.491664][T16219] loop5: lost filesystem error report for type 5 error -117 [ 745.492328][T16219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.545950][T16236] loop0: detected capacity change from 0 to 2048 [ 745.552760][T16236] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.561272][T16236] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.568868][T16219] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.5629: path /3/bus: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 745.627860][T16236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.650795][T15814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.665601][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 745.665615][ T28] audit: type=1400 audit(1780860729.054:2678): avc: denied { write } for pid=16235 comm="syz.0.5633" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 745.700106][T16236] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5633: bg 0: block 234: padding at end of block bitmap is not set [ 745.728193][T16236] EXT4-fs (loop0): Remounting filesystem read-only [ 745.736453][ T28] audit: type=1400 audit(1780860729.084:2679): avc: denied { write } for pid=16214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.768736][T16236] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 745.802570][T15566] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.814025][ T28] audit: type=1400 audit(1780860729.164:2680): avc: denied { write } for pid=16248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.912562][T16255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.155947][ T28] audit: type=1400 audit(1780860729.544:2681): avc: denied { write } for pid=16266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.254065][ T28] audit: type=1400 audit(1780860729.634:2682): avc: denied { write } for pid=16277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.355228][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 746.534782][T16295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.553800][T16295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.892700][T16301] loop8: detected capacity change from 0 to 512 [ 746.990879][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 747.015131][ T28] audit: type=1400 audit(1780860730.294:2683): avc: denied { map } for pid=16292 comm="syz.5.5638" path="socket:[94376]" dev="sockfs" ino=94376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 747.073964][ T28] audit: type=1400 audit(1780860730.304:2684): avc: denied { write } for pid=16286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.125154][ T28] audit: type=1400 audit(1780860730.344:2685): avc: denied { write } for pid=16307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.195062][ T28] audit: type=1400 audit(1780860730.574:2686): avc: denied { write } for pid=16314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.251178][ T28] audit: type=1400 audit(1780860730.624:2687): avc: denied { write } for pid=16328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.281094][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 747.319024][T16301] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=884ec018, mo2=0002] [ 747.342328][T16301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.405161][T16301] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 747.521564][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.557349][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 747.566668][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.608664][T16350] loop0: detected capacity change from 0 to 4096 [ 747.641405][T16350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.661927][T13990] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 747.677606][T16350] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 747.700960][T13990] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 747.720531][T16350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.742454][T16350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.759647][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 747.812866][T15895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.840451][T15895] syz_tun (unregistering): left allmulticast mode [ 747.896107][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 747.958528][T16379] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.965864][T16379] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.036829][T16379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.056000][T16379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.098507][T12737] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.119885][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5651'. [ 748.129502][T16398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5651'. [ 748.129877][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 748.161226][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.173176][ T361] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.203642][T12737] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.226825][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.236151][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.255082][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.287014][T15566] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 748.301169][T15566] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 748.314546][T12737] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.389698][T12737] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.426688][T16393] lo speed is unknown, defaulting to 1000 [ 748.947393][T12737] bridge_slave_1: left allmulticast mode [ 748.964746][T12737] bridge_slave_1: left promiscuous mode [ 748.982352][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.015185][T12737] bridge_slave_0: left allmulticast mode [ 749.039316][T12737] bridge_slave_0: left promiscuous mode [ 749.056654][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.162492][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5662'. [ 749.182216][T16448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5662'. [ 749.219167][T16450] loop5: detected capacity change from 0 to 128 [ 749.236974][T16450] EXT4-fs: Ignoring removed i_version option [ 749.253445][T16450] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 749.270835][T12737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.281717][T12737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.292822][T16450] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 749.326886][T12737] bond0 (unregistering): Released all slaves [ 749.380032][T16450] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.5663: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 749.459226][T16427] lo speed is unknown, defaulting to 1000 [ 749.527103][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 749.553618][T15814] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 749.579343][T12737] hsr_slave_0: left promiscuous mode [ 749.625306][T12737] hsr_slave_1: left promiscuous mode [ 749.658468][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.698923][T12737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.753629][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.840105][T12737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.867006][T12737] veth1_macvtap: left promiscuous mode [ 749.872641][T12737] veth0_macvtap: left promiscuous mode [ 749.878540][T12737] veth1_vlan: left promiscuous mode [ 749.884315][T12737] veth0_vlan: left promiscuous mode [ 750.038834][T12737] team0 (unregistering): Port device team_slave_1 removed [ 750.053903][T12737] team0 (unregistering): Port device team_slave_0 removed [ 750.205614][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 750.712304][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 750.712340][ T28] audit: type=1400 audit(1780860734.094:2704): avc: denied { write } for pid=16525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.765767][T16393] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.776437][T16393] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.783680][T16393] bridge_slave_0: entered allmulticast mode [ 750.791733][T16393] bridge_slave_0: entered promiscuous mode [ 750.825841][T16393] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.845195][T16393] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.862084][T16393] bridge_slave_1: entered allmulticast mode [ 750.885782][T16393] bridge_slave_1: entered promiscuous mode [ 750.910936][T12737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.553444][T16474] lo speed is unknown, defaulting to 1000 [ 751.584311][ T28] audit: type=1400 audit(1780860734.964:2705): avc: denied { write } for pid=16537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.614420][T16393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.638234][T16393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.650638][ T28] audit: type=1400 audit(1780860735.044:2706): avc: denied { write } for pid=16559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 751.695568][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.702732][T16427] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.710276][T16427] bridge_slave_0: entered allmulticast mode [ 751.716888][T16427] bridge_slave_0: entered promiscuous mode [ 751.741434][T12737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.775814][T16393] team0: Port device team_slave_0 added [ 751.787616][T16393] team0: Port device team_slave_1 added [ 751.795092][T16427] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.802389][T16427] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.809903][T16427] bridge_slave_1: entered allmulticast mode [ 751.824827][T16427] bridge_slave_1: entered promiscuous mode [ 751.856191][T12737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.905090][T16393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.919949][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.975050][T16393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.985678][ T28] audit: type=1400 audit(1780860735.354:2707): avc: denied { write } for pid=16561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.025931][T16393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.034335][T16393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.066592][ T28] audit: type=1400 audit(1780860735.414:2708): avc: denied { write } for pid=16572 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.100871][T16393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.149975][T16427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.214274][ T28] audit: type=1400 audit(1780860735.594:2709): avc: denied { write } for pid=16575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.270605][ T28] audit: type=1400 audit(1780860735.644:2710): avc: denied { write } for pid=16592 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.305408][T12737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.337460][T16427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.354539][T16393] hsr_slave_0: entered promiscuous mode [ 752.361081][T16393] hsr_slave_1: entered promiscuous mode [ 752.367012][T16393] debugfs: 'hsr0' already exists in 'hsr' [ 752.372777][T16393] Cannot create hsr debugfs directory [ 752.440512][T16601] loop5: detected capacity change from 0 to 512 [ 752.487105][T16427] team0: Port device team_slave_0 added [ 752.517141][T16601] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.5681: dx entry: limit 0 != root limit 125 [ 752.529050][T16601] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5681: Corrupt directory, running e2fsck is recommended [ 752.542950][T16601] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 8: comm syz.5.5681: lblock 11 mapped to illegal pblock 8 (length 1) [ 752.557258][T16601] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 752.564345][T16601] EXT4-fs (loop5): Remounting filesystem read-only [ 752.573493][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 752.573520][ C0] EXT4-fs (loop5): initial error at time 1780860735: ext4_map_blocks:791: inode 2: block 8 [ 752.573553][ C0] EXT4-fs (loop5): last error at time 1780860735: ext4_map_blocks:791: inode 2: block 8 [ 752.606598][T16601] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 752.626462][T16601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.772975][T16427] team0: Port device team_slave_1 added [ 752.916942][T16427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.924064][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.969719][T16427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.001320][T16427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.008579][T16427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.041528][T16427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.103049][T15814] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.187427][T16474] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.194657][T16474] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.202389][T16474] bridge_slave_0: entered allmulticast mode [ 753.209119][T16474] bridge_slave_0: entered promiscuous mode [ 753.216167][T16474] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.224292][ T28] audit: type=1400 audit(1780860736.544:2711): avc: denied { write } for pid=16596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.247917][T16474] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.261941][T16474] bridge_slave_1: entered allmulticast mode [ 753.270879][T16474] bridge_slave_1: entered promiscuous mode [ 753.282488][T12737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.294270][ T28] audit: type=1400 audit(1780860736.674:2712): avc: denied { write } for pid=16622 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.667301][ T28] audit: type=1400 audit(1780860737.054:2713): avc: denied { write } for pid=16631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.148874][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 754.287090][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 754.317493][T16474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.328302][T16474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.372684][T16427] hsr_slave_0: entered promiscuous mode [ 754.379200][T16427] hsr_slave_1: entered promiscuous mode [ 754.389302][T16427] debugfs: 'hsr0' already exists in 'hsr' [ 754.412352][T16427] Cannot create hsr debugfs directory [ 754.450922][T12737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.469277][T16474] team0: Port device team_slave_0 added [ 754.478306][T16700] syzkaller0: entered promiscuous mode [ 754.486501][T16700] syzkaller0: entered allmulticast mode [ 754.503033][T16474] team0: Port device team_slave_1 added [ 754.543618][T12737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.599923][T16474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.626706][T16474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.669540][T16706] loop5: detected capacity change from 0 to 2048 [ 754.702823][T16474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.746426][T16474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.760619][T16706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.776270][T16474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.805549][T16706] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.866231][T16474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.940369][T12737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.978727][T16720] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5691: bg 0: block 345: padding at end of block bitmap is not set [ 755.101620][T16720] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 154 with error 28 [ 755.218546][T16720] EXT4-fs (loop5): This should not happen!! Data will be lost [ 755.218546][T16720] [ 755.255083][T16720] EXT4-fs (loop5): Total free blocks count 0 [ 755.284743][T16720] EXT4-fs (loop5): Free/Dirty block details [ 755.292654][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 755.304856][T16474] hsr_slave_0: entered promiscuous mode [ 755.334736][T16720] EXT4-fs (loop5): free_blocks=0 [ 755.342656][T16474] hsr_slave_1: entered promiscuous mode [ 755.384150][T16474] debugfs: 'hsr0' already exists in 'hsr' [ 755.400179][T16720] EXT4-fs (loop5): dirty_blocks=160 [ 755.407838][T16474] Cannot create hsr debugfs directory [ 755.416368][T16720] EXT4-fs (loop5): Block reservation details [ 755.422472][T16720] EXT4-fs (loop5): i_reserved_data_blocks=10 [ 755.445936][T12737] bridge_slave_1: left allmulticast mode [ 755.451655][T12737] bridge_slave_1: left promiscuous mode [ 755.457508][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.461685][T12647] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 170 with max blocks 2 with error 28 [ 755.477659][T12737] bridge_slave_0: left allmulticast mode [ 755.478454][T15814] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 755.483470][T12737] bridge_slave_0: left promiscuous mode [ 755.500804][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.514086][T12737] bridge_slave_1: left allmulticast mode [ 755.524011][T16733] loop5: detected capacity change from 0 to 128 [ 755.532201][T12737] bridge_slave_1: left promiscuous mode [ 755.538042][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.565847][T12737] bridge_slave_0: left allmulticast mode [ 755.575063][T12737] bridge_slave_0: left promiscuous mode [ 755.585557][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.594331][T16733] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 755.606776][T16733] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 755.636024][T15814] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 755.653298][T16738] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5694'. [ 757.117913][T12737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.131227][T12737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.141288][T12737] bond0 (unregistering): Released all slaves [ 757.208034][T12737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.218211][T12737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.228022][T12737] bond0 (unregistering): Released all slaves [ 757.249089][T16754] syzkaller0: entered promiscuous mode [ 757.254661][T16754] syzkaller0: entered allmulticast mode [ 757.280538][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 757.280629][ T28] audit: type=1400 audit(1780860740.664:2724): avc: denied { audit_write } for pid=16767 comm="syz.9.5701" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 757.513776][T12737] hsr_slave_0: left promiscuous mode [ 757.523254][T12737] hsr_slave_1: left promiscuous mode [ 757.567392][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.602455][T12737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.634063][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.664754][T12737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.701908][T12737] hsr_slave_0: left promiscuous mode [ 757.717149][T12737] hsr_slave_1: left promiscuous mode [ 757.740661][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.773139][T12737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.831380][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.854353][T12737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.902283][T12737] veth1_macvtap: left promiscuous mode [ 757.918476][T12737] veth0_macvtap: left promiscuous mode [ 757.936349][T12737] veth1_vlan: left promiscuous mode [ 757.957252][T12737] veth0_vlan: left promiscuous mode [ 758.452920][T12737] veth1_macvtap: left promiscuous mode [ 758.463718][T12737] veth0_macvtap: left promiscuous mode [ 758.470127][T12737] veth1_vlan: left promiscuous mode [ 758.476199][T12737] veth0_vlan: left promiscuous mode [ 758.511131][ T28] audit: type=1400 audit(1780860741.894:2725): avc: denied { write } for pid=16774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.600547][ T28] audit: type=1400 audit(1780860741.984:2726): avc: denied { write } for pid=16815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.152219][ T28] audit: type=1400 audit(1780860742.534:2727): avc: denied { getattr } for pid=16820 comm="syz.9.5718" path="socket:[95561]" dev="sockfs" ino=95561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 759.557622][T12737] team0 (unregistering): Port device team_slave_1 removed [ 759.569292][T12737] team0 (unregistering): Port device team_slave_0 removed [ 759.650914][T12737] team0 (unregistering): Port device team_slave_1 removed [ 759.661404][T12737] team0 (unregistering): Port device team_slave_0 removed [ 759.707925][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 759.821333][T16393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 759.847704][T16393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.882509][T16393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 759.904579][T16393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.949215][T16393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 759.980168][T16393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 760.017545][T16393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 760.338347][T16393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.394472][T16845] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5724'. [ 760.930641][ T28] audit: type=1400 audit(1780860744.314:2728): avc: denied { write } for pid=16838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.273432][ T28] audit: type=1400 audit(1780860744.654:2729): avc: denied { write } for pid=16868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.341574][T16393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.350804][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 761.400529][T16393] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.430580][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.437730][T12647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.460463][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.467620][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.121210][T16474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 762.143888][T16474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.174057][T16474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.182128][ T28] audit: type=1400 audit(1780860745.544:2730): avc: denied { write } for pid=16893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.211602][T16474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.233597][T16474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 762.252983][T16474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.262619][ T28] audit: type=1400 audit(1780860745.634:2731): avc: denied { write } for pid=16905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.288586][T16474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.313458][T16474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.337239][T16427] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 762.357637][T16427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.392082][T16427] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.420323][T16427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.452775][T16427] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.481755][T16427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.511255][T16427] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 762.535295][T16427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.596046][ T28] audit: type=1400 audit(1780860745.984:2732): avc: denied { write } for pid=16907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.651738][T16474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.662068][T16427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.678893][T16474] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.705470][T12647] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.709851][ T28] audit: type=1400 audit(1780860746.094:2733): avc: denied { write } for pid=16932 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.712704][T12647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.748642][T16427] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.758864][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.766061][ T5422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.798248][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.805408][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.823213][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.830361][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.910152][ T28] audit: type=1400 audit(1780860746.394:2734): avc: denied { getopt } for pid=16939 comm="syz.9.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 763.996526][T16393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.091343][ T28] audit: type=1400 audit(1780860747.474:2735): avc: denied { write } for pid=16938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.149280][T16474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.175035][ T28] audit: type=1400 audit(1780860747.554:2736): avc: denied { write } for pid=16983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.208552][T16427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.448954][T16427] veth0_vlan: entered promiscuous mode [ 764.456493][T16393] veth0_vlan: entered promiscuous mode [ 764.475180][T16393] veth1_vlan: entered promiscuous mode [ 764.492538][T16427] veth1_vlan: entered promiscuous mode [ 764.527625][T16393] veth0_macvtap: entered promiscuous mode [ 764.547786][T16393] veth1_macvtap: entered promiscuous mode [ 764.571294][T16393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.583997][T16393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.212506][T17044] loop7: detected capacity change from 0 to 256 [ 765.239007][T17044] vfat: Unknown parameter 'iocharsshortname' [ 765.310063][T17050] netlink: 'syz.9.5747': attribute type 7 has an invalid length. [ 765.342023][T17050] netlink: 'syz.9.5747': attribute type 8 has an invalid length. [ 765.490579][ T28] audit: type=1400 audit(1780860748.874:2737): avc: denied { write } for pid=16991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.520010][T16427] veth0_macvtap: entered promiscuous mode [ 765.527695][T16427] veth1_macvtap: entered promiscuous mode [ 765.748118][ T28] audit: type=1400 audit(1780860749.134:2738): avc: denied { write } for pid=17066 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.027403][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5755'. [ 766.522943][ T361] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.534005][ T361] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.676491][T12425] ================================================================== [ 766.684675][T12425] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 766.692178][T12425] [ 766.694527][T12425] read-write to 0xffff888124b09be0 of 8 bytes by task 17085 on cpu 1: [ 766.702744][T12425] inode_add_bytes+0x47/0xe0 [ 766.707379][T12425] __dquot_alloc_space+0x180/0x8a0 [ 766.712544][T12425] shmem_inode_acct_blocks+0x125/0x230 [ 766.718059][T12425] shmem_get_folio_gfp+0x5b2/0xd60 [ 766.723211][T12425] shmem_write_begin+0xfc/0x1f0 [ 766.728099][T12425] generic_perform_write+0x183/0x490 [ 766.733422][T12425] shmem_file_write_iter+0xc5/0xf0 [ 766.738763][T12425] __kernel_write_iter+0x319/0x590 [ 766.743917][T12425] dump_user_range+0xa73/0xd00 [ 766.748719][T12425] elf_core_dump+0x21a2/0x2330 [ 766.753531][T12425] coredump_write+0xabd/0xdb0 [ 766.758252][T12425] vfs_coredump+0x26dd/0x31e0 [ 766.762959][T12425] get_signal+0xd5c/0xf20 [ 766.767334][T12425] arch_do_signal_or_restart+0x96/0x480 [ 766.772918][T12425] irqentry_exit+0x145/0x5d0 [ 766.777548][T12425] asm_exc_page_fault+0x26/0x30 [ 766.782425][T12425] [ 766.784778][T12425] read to 0xffff888124b09be0 of 8 bytes by task 12425 on cpu 0: [ 766.792432][T12425] generic_fillattr+0x27d/0x340 [ 766.797346][T12425] shmem_getattr+0x181/0x200 [ 766.801979][T12425] vfs_getattr_nosec+0x146/0x1e0 [ 766.806946][T12425] vfs_getattr+0x48/0x60 [ 766.811217][T12425] vfs_statx_path+0x28/0x140 [ 766.815847][T12425] vfs_statx+0xc4/0x170 [ 766.820034][T12425] vfs_fstatat+0x118/0x170 [ 766.824516][T12425] __se_sys_newfstatat+0x55/0x3e0 [ 766.829570][T12425] __x64_sys_newfstatat+0x55/0x70 [ 766.834625][T12425] x64_sys_call+0x2c64/0x3020 [ 766.839336][T12425] do_syscall_64+0x12c/0x3b0 [ 766.844005][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.849948][T12425] [ 766.852288][T12425] value changed: 0x0000000000016bc8 -> 0x0000000000016bd0 [ 766.859419][T12425] [ 766.861766][T12425] Reported by Kernel Concurrency Sanitizer on: [ 766.867953][T12425] CPU: 0 UID: 0 PID: 12425 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 766.879106][T12425] Tainted: [W]=WARN [ 766.882928][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 766.893017][T12425] ================================================================== [ 766.950269][T16474] veth0_vlan: entered promiscuous mode [ 766.969521][T16474] veth1_vlan: entered promiscuous mode [ 767.000387][T16474] veth0_macvtap: entered promiscuous mode [ 767.015477][T16474] veth1_macvtap: entered promiscuous mode [ 767.181695][T16427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.208770][T16427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.234148][ T361] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.259941][ T361] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.291117][ T28] audit: type=1400 audit(1780860750.674:2739): avc: denied { write } for pid=17086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.317608][ T361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.326811][ T361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.343938][ T361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.373773][ T361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.438624][T16474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.465280][T16474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.476327][ T28] audit: type=1400 audit(1780860750.754:2740): avc: denied { write } for pid=17097 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.511667][ T5185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.522038][ T5185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.545251][ T5185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.556300][ T5185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.600998][ T28] audit: type=1400 audit(1780860750.984:2741): avc: denied { write } for pid=17099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.666825][ T28] audit: type=1400 audit(1780860751.044:2742): avc: denied { write } for pid=17112 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.798398][ T28] audit: type=1400 audit(1780860751.184:2743): avc: denied { write } for pid=17114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.853196][ T28] audit: type=1400 audit(1780860751.214:2744): avc: denied { write } for pid=17125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.937669][ T28] audit: type=1400 audit(1780860751.324:2745): avc: denied { write } for pid=17127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.974555][ T28] audit: type=1400 audit(1780860751.354:2746): avc: denied { write } for pid=17138 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.079481][ T28] audit: type=1400 audit(1780860751.464:2747): avc: denied { write } for pid=17140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.127569][ T28] audit: type=1400 audit(1780860751.494:2748): avc: denied { write } for pid=17151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.222760][ T28] audit: type=1400 audit(1780860751.604:2749): avc: denied { write } for pid=17153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.266541][ T28] audit: type=1400 audit(1780860751.654:2750): avc: denied { write } for pid=17164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.362097][ T28] audit: type=1400 audit(1780860751.744:2751): avc: denied { write } for pid=17166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.878564][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 769.207741][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 769.320447][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 769.426604][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 769.533113][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 769.649181][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 769.760262][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 770.399098][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29 [ 770.772924][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 770.980104][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 771.099436][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28