last executing test programs: 2m30.119824512s ago: executing program 0 (id=91): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f0000000240)="3b826a86871d9a3d", 0x8, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m30.063704744s ago: executing program 0 (id=93): signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) 2m29.860935578s ago: executing program 0 (id=99): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m29.682644962s ago: executing program 0 (id=103): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1}]) 2m29.090165507s ago: executing program 0 (id=111): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m28.464747962s ago: executing program 0 (id=119): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4, 0x7f, 0x7, 0x20002}, {0x6, 0x0, 0xfd, 0xfffffffd}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r0], 0xfe33) 2m28.444923543s ago: executing program 32 (id=119): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4, 0x7f, 0x7, 0x20002}, {0x6, 0x0, 0xfd, 0xfffffffd}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r0], 0xfe33) 1m57.913231482s ago: executing program 1 (id=483): mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x180010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x20048090) 1m57.779214346s ago: executing program 1 (id=486): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e6c056d79444e600089f40767cf916", "00040200", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 1m57.658010329s ago: executing program 1 (id=488): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000010c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) 1m57.133806491s ago: executing program 1 (id=489): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$eJzs3d1rZGcZAPDnTGbysRudqL2oQutiC7tFNx9d2waR7grilQWlCt6tMTsbwk4ySzLpbkKRLP4BgogWvNErbwT/AEH2wnuLULD3YkVZdKugF9oj52M2HzvTZLOZzHby+8E75z3nvGee551JzndyAji1zkXElYgYiYgXIqJeTq+UJbaLkrV7//6bi1lJIk1f/3sSSTkta5aUJXO2XGy8GHS1vrl1Y6HZbKyV4zPtlZsz65tbF5dXFpYaS43VS5fmXp5/Zf6l+dlj6WfWr1e/+pef/PCXX3v1t1+49aerf7vw/SzfyXJ+px/HrfhMatln8UA1Itb6EWwARsr+1KLzAgDAkyzbx/9kRHwu3/+vRy3fm+ttdFc96Xt2AAAAwHFIL0/Gf5OIdJekunccAAAA+Gir5PfAJpXp8l6AyahUpqeLe3ifijOVZmu9/fnrrY3Va8W9slNRq1xfbjZmI87Vi/EkG597cEahGH8xn5eVZM89wD+uT+TzpxdbzWuDOOEBAAAAp9DZfcf//6oXx/8P+foAkgMAAACOz9SgEwAAAAD6zvE/AAAADL8jHP+P9iMPAAAAoC++8dprWUk7z7++9sbmxo3WGxevNdZvTK9sLE4vttZuTi+1WkvNdCxi5aD3a7ZaN78Yqxu3Z9qN9fbM+ubW1ZXWxmr76vKeR2ADAAAAJ+gTn737bhIR21+ayEtEpbi2P9JjAX8rAEOjcsh2afbyXn9zAU5Wr808MPyqHz7bbb4wxGrFIBl0HsDgHLQCGO/V4u2ImOhHRgAAwHE7/+m776bJ7uv/xUm/6s65AWBIHfb6PzB8elz/T+snnQhw4g64/g8MsZo7AOHUO/j6fw9v569XDo6Qpge+FwAA0FeTeUkq0+W1wMmo/CctxFTUkuvLzcZsRHw8Iv5Yr41l43P5kok/GgAAAAAAAAAAAAAAAAAAAAAAAACAQ0rTJNIjqB5pKQAAAGAQIip/Tcrnf52vPz+55+TA6E71gzRNb/3s9Z/eXmi31+YiRpN/1DtN2m+V01888dMXAAAAwC6dp/wXx+m1AWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLB6//6bi51yknHvfSUiprrFr8Z4PhyPWkSc+WcS1V3LJRExcgzxt+9EJZ7uFj/J0oqpMov98SsRMZFn8djx44D4z6Rp2jX+2ceODqfb3Wz9c+Wh37/RnRbdf/+rRbn8uPF7r/8qD9Z/I/vjV4v138cOGeMz7/x6Ztfot3eqY8X8avf1Tyd+0mP9+1y3YNWHJ333W1tbvXJLfxFxvuv2J9kTa6a9cnNmfXPr4vLKwlJjqbF66dLcy/OvzL80PztzfXmskb02G7NdY/zomd980Cv+vd9FnCnjd770tNywTBWDL5f9X9jf/+ezSq3XO+/43zu373+qqBatR3Y6eO/OaFx4rvv3/3Q+7Pr5//zfaS7fDmTzz5fbhGS7qEfEuU7jZ3/1h2d79v/OeFl79O//wsFdz73wzR/8+ZBNAYATsL65dWOh2Wys9bPyvVsRzbfSND3cUtle6eFDJBHbnSmVKCrZDtYx92IiInrM6h4rDvvOT/VM9b2JiP5/O0eqXH6UxunYI/2wJdtPQAdPUaVzHq0zZTT/gfz9dwa5XgIAAI7fzmHAoDMBAAAAAAAAAAAAAAAAAACA0+sk/sHY/pjbg+kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCH+n8AAAD///s2zRI=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m56.878011538s ago: executing program 1 (id=492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x8}, 0x10ecc8, 0x1224, 0x4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m56.412752389s ago: executing program 1 (id=504): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x20000000) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 1m56.388432859s ago: executing program 33 (id=504): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x20000000) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 1m49.890839057s ago: executing program 6 (id=558): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@abort}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@discard}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b5, &(0x7f0000000340)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10, 0x5, 0x0, 0x7, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={0x6, 0x3, 0x1, 0xfff, 0x1, 0x0, [{0x10000, 0x1, 0x406, '\x00', 0x304}]}) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/135}) 1m49.485863607s ago: executing program 6 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000}, 0x10}], 0x1}, 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m49.203008884s ago: executing program 6 (id=568): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m49.161674485s ago: executing program 6 (id=571): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000280)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2842, 0x0) 1m48.93167263s ago: executing program 6 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m48.902670131s ago: executing program 6 (id=578): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m33.467243635s ago: executing program 34 (id=578): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) socket$nl_generic(0x10, 0x3, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m31.384195895s ago: executing program 7 (id=602): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000a00), 0x40500, 0x0) unshare(0x6a040000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000040), r2, 0x0, 0x800000000fd, 0x2) 1m29.850912803s ago: executing program 7 (id=626): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x4009002) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m29.767568694s ago: executing program 7 (id=628): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) unshare(0x2c040480) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m29.475827182s ago: executing program 7 (id=632): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv0}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@barrier}, {@quota}]}, 0x3, 0x44b, &(0x7f00000001c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='1', 0x1) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x22) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1m28.981486354s ago: executing program 7 (id=638): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) 1m27.9060924s ago: executing program 7 (id=651): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) fchown(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m27.89940455s ago: executing program 35 (id=651): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) fchown(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6.387762255s ago: executing program 2 (id=1944): semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x400000000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x100805, 0x1, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 5.633184193s ago: executing program 4 (id=1961): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@nombcache}, {@nogrpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x43aa, 0xc0ca, 0x29, &(0x7f0000000100)={[0xf]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) 5.526910036s ago: executing program 2 (id=1962): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 5.078359757s ago: executing program 5 (id=1974): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001200970228bd70000000000007000000", @ANYRES64=r0, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) 5.055898218s ago: executing program 5 (id=1964): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 4.752436645s ago: executing program 4 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) 4.751927515s ago: executing program 4 (id=1969): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 4.669263077s ago: executing program 4 (id=1981): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) 4.575646529s ago: executing program 4 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000002100008500000083000000bf090000000000005509"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) 4.249881777s ago: executing program 4 (id=1975): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x20002800) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0/subsystem_vendor\x00', 0x41, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file2\x00'}) read(r1, 0x0, 0x0) socket(0x8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) syz_emit_ethernet(0xf5, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)={0x0, 0x3, [0x6b2, 0xfa8, 0x6de, 0x782]}) 4.249638327s ago: executing program 36 (id=1975): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x20002800) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0/subsystem_vendor\x00', 0x41, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file2\x00'}) read(r1, 0x0, 0x0) socket(0x8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) syz_emit_ethernet(0xf5, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)={0x0, 0x3, [0x6b2, 0xfa8, 0x6de, 0x782]}) 4.173198459s ago: executing program 3 (id=1978): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) socket$inet_udp(0x2, 0x2, 0x0) 3.72634022s ago: executing program 5 (id=1980): socket(0x400000000010, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x24020400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 3.72596221s ago: executing program 8 (id=1982): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000005"], 0x44}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 3.190363473s ago: executing program 5 (id=1983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) 3.190101823s ago: executing program 8 (id=1984): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.189664333s ago: executing program 2 (id=1985): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 3.189434583s ago: executing program 3 (id=1986): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) sendmmsg$inet_sctp(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="30000000000000008400000001000000fcff610800000000000100000600000040000000f7ffffff09000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000010000000070000001800000000000000840000000500000000000000a500000030000000000000008400000001000000ff01060004000000070000008100000080", @ANYRES32=0x0, @ANYBLOB], 0xa8, 0x20040041}], 0x1, 0x0) fallocate(r0, 0x20, 0x4000, 0x8000) 2.551136338s ago: executing program 5 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) close(r7) 2.550797688s ago: executing program 8 (id=1988): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891d, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:l\x14PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.550163868s ago: executing program 3 (id=1990): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 1.810890726s ago: executing program 5 (id=1991): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x2, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x20005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.810380416s ago: executing program 8 (id=1992): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000800)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000400)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000002400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "e92f90", 0x8, 0x11, 0xff, @private2, @private2, {[], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0xa4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x10, @desc3}) 1.805979846s ago: executing program 3 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 957.058557ms ago: executing program 8 (id=1994): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f000044a000/0x4000)=nil, 0x4000, 0x8, 0x40010, r0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000440)=""/172, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x7ffff6e7}, {{0x0, 0x0, 0x0}, 0x83}], 0x3fffdd0, 0x40000020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, &(0x7f0000000300)) 956.946397ms ago: executing program 2 (id=1995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a03000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 956.719837ms ago: executing program 3 (id=1996): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x112) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r3, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000a40)='./file7\x00', 0x0) getdents64(r2, 0x0, 0x0) 792.34µs ago: executing program 8 (id=1997): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003040)={0x4c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x38, 0x12, 0x0, 0x1, [@nested={0x34, 0xd5, 0x0, 0x1, [@nested={0x30, 0x10e, 0x0, 0x1, [@generic="ff9ad47e", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @generic="72851876fffd253718cb7b6366fbab0f25313afafd753f2ff61e4100a4ae10f2"]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x40000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 202.01µs ago: executing program 3 (id=1998): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 0s ago: executing program 2 (id=1999): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) kernel console output (not intermixed with test programs): removed [ 71.528763][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.541524][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.549255][ T5301] bridge_slave_0: entered allmulticast mode [ 71.556730][ T5301] bridge_slave_0: entered promiscuous mode [ 71.564841][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.572476][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.580932][ T5301] bridge_slave_1: entered allmulticast mode [ 71.588931][ T5301] bridge_slave_1: entered promiscuous mode [ 71.617778][ T5301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.630217][ T5301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.659352][ T5301] team0: Port device team_slave_0 added [ 71.667420][ T5301] team0: Port device team_slave_1 added [ 71.692186][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.700244][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.731778][ T5301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.746002][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.761628][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.819198][ T5301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.862303][ T5301] hsr_slave_0: entered promiscuous mode [ 71.869114][ T5301] hsr_slave_1: entered promiscuous mode [ 71.876181][ T5301] debugfs: 'hsr0' already exists in 'hsr' [ 71.913943][ T5301] Cannot create hsr debugfs directory [ 71.929476][ T5100] IPVS: stop unused estimator thread 0... [ 72.237644][ T23] IPVS: starting estimator thread 0... [ 72.287322][ T5394] loop2: detected capacity change from 0 to 128 [ 72.331771][ T5397] IPVS: using max 2208 ests per chain, 110400 per kthread [ 73.272269][ T5414] netlink: 'syz.2.530': attribute type 4 has an invalid length. [ 73.375415][ T5413] netlink: 'syz.2.530': attribute type 4 has an invalid length. [ 73.422865][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.430147][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.470895][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.481433][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.533339][ T5103] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.546678][ T5103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.566166][ T5103] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.580222][ T5103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.599348][ T5103] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.618109][ T5103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.627320][ T5103] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.636546][ T5103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.877594][ T5340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 73.892423][ T5301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.916329][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.937205][ T5301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.949556][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.961895][ T5301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.988166][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.014591][ T5301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 74.032498][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.104851][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.122513][ T5445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.536'. [ 74.139811][ T5301] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.175582][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.182729][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.217858][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.224998][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.242573][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.281184][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.536'. [ 74.375546][ T5461] netlink: 'syz.5.537': attribute type 1 has an invalid length. [ 74.413985][ T5461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.454247][ T5461] vlan2: entered allmulticast mode [ 74.468232][ T5461] bond1: entered allmulticast mode [ 74.516779][ T5461] bond1: (slave geneve2): making interface the new active one [ 74.537233][ T5461] geneve2: entered allmulticast mode [ 74.565304][ T5461] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 74.703300][ T5487] netlink: 128 bytes leftover after parsing attributes in process `syz.4.538'. [ 74.707504][ T5301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.715017][ T5418] loop2: detected capacity change from 0 to 512 [ 74.747039][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.985609][ T5418] EXT4-fs (loop2): filesystem is read-only [ 75.011080][ T5501] loop5: detected capacity change from 0 to 4096 [ 75.045726][ T5501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.082740][ T5301] veth0_vlan: entered promiscuous mode [ 75.138391][ T5301] veth1_vlan: entered promiscuous mode [ 75.212172][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.221401][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.244979][ T5301] veth0_macvtap: entered promiscuous mode [ 75.283576][ T5301] veth1_macvtap: entered promiscuous mode [ 75.325123][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.335168][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.370314][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.380059][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.400770][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.423756][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.623216][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 75.642839][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 76.667813][ T5579] loop6: detected capacity change from 0 to 1024 [ 76.712236][ T5579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.758817][ T5579] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.799928][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'. [ 76.808924][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 76.808941][ T28] audit: type=1400 audit(1785436679.590:745): avc: denied { create } for pid=5589 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 76.897379][ T5577] loop2: detected capacity change from 0 to 8192 [ 76.903757][ T28] audit: type=1400 audit(1785436679.590:746): avc: denied { write } for pid=5589 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 77.023354][ T5577] loop2: p3 p4[EZD] [ 77.027664][ T5577] loop2: p3 start 458783 is beyond EOD, truncated [ 77.035428][ T5301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.038663][ T5577] loop2: p4 size 100663296 extends beyond EOD, truncated [ 77.423661][ T5624] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.559117][ T28] audit: type=1326 audit(1785436680.350:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5635 comm="syz.2.576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f203273e019 code=0x0 [ 77.626011][ T28] audit: type=1400 audit(1785436680.330:747): avc: denied { connect } for pid=5629 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.702812][ T5646] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 77.738095][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.761512][ T5646] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.337432][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.344719][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.561573][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.604275][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.870826][ T5105] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.882404][ T5105] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.917432][ T5105] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.957841][ T5105] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.046227][ T5688] loop5: detected capacity change from 0 to 512 [ 79.087992][ T5688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.271865][ T5692] macvlan2: left promiscuous mode [ 79.280248][ T5688] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.316024][ T28] audit: type=1400 audit(1785436682.110:749): avc: denied { write } for pid=5687 comm="syz.5.590" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.370036][ T28] audit: type=1400 audit(1785436682.110:750): avc: denied { create } for pid=5687 comm="syz.5.590" name="mysys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.447636][ T5699] netlink: 76 bytes leftover after parsing attributes in process `syz.2.593'. [ 79.461058][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.470439][ T28] audit: type=1400 audit(1785436682.140:751): avc: denied { write } for pid=5687 comm="syz.5.590" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.542894][ T28] audit: type=1400 audit(1785436682.140:752): avc: denied { read write } for pid=5687 comm="syz.5.590" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.626140][ T5702] netlink: 'syz.5.594': attribute type 21 has an invalid length. [ 79.652652][ T28] audit: type=1400 audit(1785436682.140:753): avc: denied { open } for pid=5687 comm="syz.5.590" path="/76/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.698693][ T5702] netlink: 80 bytes leftover after parsing attributes in process `syz.5.594'. [ 79.714185][ T28] audit: type=1400 audit(1785436682.200:754): avc: denied { open } for pid=5696 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.722321][ T5702] netlink: 84 bytes leftover after parsing attributes in process `syz.5.594'. [ 85.697435][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 85.697453][ T28] audit: type=1400 audit(1785436688.490:756): avc: denied { write } for pid=5709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.749518][ T28] audit: type=1400 audit(1785436688.540:757): avc: denied { write } for pid=5720 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.483165][ T28] audit: type=1400 audit(1785436689.280:758): avc: denied { write } for pid=5723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.527015][ T28] audit: type=1400 audit(1785436689.320:759): avc: denied { write } for pid=5734 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.912962][ T28] audit: type=1400 audit(1785436689.710:760): avc: denied { write } for pid=5737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.956492][ T28] audit: type=1400 audit(1785436689.750:761): avc: denied { write } for pid=5748 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.898694][ T28] audit: type=1400 audit(1785436690.690:762): avc: denied { write } for pid=5751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.943282][ T28] audit: type=1400 audit(1785436690.740:763): avc: denied { write } for pid=5762 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.084625][ T28] audit: type=1400 audit(1785436695.880:764): avc: denied { write } for pid=5770 comm="syz.4.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.183646][ T5787] loop5: detected capacity change from 0 to 512 [ 93.202275][ T5787] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.601: inode has both inline data and extents flags [ 93.230262][ T5787] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.230530][ T5787] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.601: couldn't read orphan inode 15 (err -117) [ 93.251541][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 93.251564][ C1] EXT4-fs (loop5): initial error at time 1785436696: ext4_orphan_get:1399: inode 15 [ 93.251639][ C1] EXT4-fs (loop5): last error at time 1785436696: ext4_orphan_get:1399: inode 15 [ 93.277199][ T5787] loop5: lost filesystem error report for type 5 error -117 [ 93.278218][ T5787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.304248][ T28] audit: type=1400 audit(1785436696.100:765): avc: denied { write } for pid=5786 comm="syz.5.601" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.334588][ T28] audit: type=1400 audit(1785436696.100:766): avc: denied { read } for pid=5786 comm="syz.5.601" path="/79/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.357461][ T28] audit: type=1400 audit(1785436696.100:767): avc: denied { write } for pid=5786 comm="syz.5.601" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.361038][ T5787] loop5: detected capacity change from 512 to 64 [ 93.387661][ T5796] syz.5.601: attempt to access beyond end of device [ 93.387661][ T5796] loop5: rw=8390659, sector=506, nr_sectors = 2 limit=64 [ 93.402653][ T5796] EXT4-fs (loop5): discard request in group:0 block:252 count:1 failed with -5 [ 93.414783][ T5796] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: IO failure [ 93.423979][ T5796] syz.5.601: attempt to access beyond end of device [ 93.423979][ T5796] loop5: rw=8390659, sector=510, nr_sectors = 2 limit=64 [ 93.437841][ T5796] EXT4-fs (loop5): discard request in group:0 block:254 count:1 failed with -5 [ 93.446922][ T5796] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: IO failure [ 93.491541][ T3857] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -ENOMEM reading directory block [ 93.515209][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.533125][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.540870][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.548142][ T5774] bridge_slave_0: entered allmulticast mode [ 93.558031][ T5774] bridge_slave_0: entered promiscuous mode [ 93.567194][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.574553][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.582577][ T5774] bridge_slave_1: entered allmulticast mode [ 93.589430][ T5774] bridge_slave_1: entered promiscuous mode [ 93.607861][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.618837][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.640718][ T5774] team0: Port device team_slave_0 added [ 93.647611][ T5774] team0: Port device team_slave_1 added [ 93.666476][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.673839][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.726462][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.740713][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.752941][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.760078][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.786359][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.802649][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.828693][ T5774] hsr_slave_0: entered promiscuous mode [ 93.834828][ T5774] hsr_slave_1: entered promiscuous mode [ 93.840975][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 93.846736][ T5774] Cannot create hsr debugfs directory [ 93.855190][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.918295][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.954353][ T5774] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 93.963249][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.971343][ T5774] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 93.979903][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.988180][ T5774] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 93.997006][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.004912][ T5774] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.014255][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.058472][ T12] bridge_slave_1: left allmulticast mode [ 94.064196][ T12] bridge_slave_1: left promiscuous mode [ 94.069916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.077967][ T12] bridge_slave_0: left allmulticast mode [ 94.083666][ T12] bridge_slave_0: left promiscuous mode [ 94.089394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.129502][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 94.137718][ T12] geneve2 (unregistering): left allmulticast mode [ 94.152599][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.162622][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.172300][ T12] bond0 (unregistering): Released all slaves [ 94.181488][ T12] bond1 (unregistering): Released all slaves [ 94.217525][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.229993][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.239996][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.247125][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.259613][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.266738][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.281832][ T12] hsr_slave_0: left promiscuous mode [ 94.287586][ T12] hsr_slave_1: left promiscuous mode [ 94.295653][ T12] veth1_macvtap: left promiscuous mode [ 94.302250][ T12] veth0_macvtap: left promiscuous mode [ 94.307795][ T12] veth1_vlan: left promiscuous mode [ 94.314580][ T12] veth0_vlan: left promiscuous mode [ 94.327991][ T28] audit: type=1400 audit(1785436697.120:768): avc: denied { write } for pid=5813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.365113][ T28] audit: type=1400 audit(1785436697.140:769): avc: denied { write } for pid=5824 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.413957][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.423715][ T12] team0 (unregistering): Port device team_slave_0 removed [ 94.455587][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 94.566204][ T28] audit: type=1400 audit(1785436697.360:770): avc: denied { write } for pid=5829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.581587][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.613188][ T28] audit: type=1400 audit(1785436697.410:771): avc: denied { write } for pid=5849 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.651947][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 94.751672][ T5774] veth0_vlan: entered promiscuous mode [ 94.757216][ T28] audit: type=1400 audit(1785436697.550:772): avc: denied { write } for pid=5857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.782855][ T5774] veth1_vlan: entered promiscuous mode [ 94.789043][ T28] audit: type=1400 audit(1785436697.550:773): avc: denied { write } for pid=5874 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.799670][ T5774] veth0_macvtap: entered promiscuous mode [ 94.818363][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 94.826763][ T5774] veth1_macvtap: entered promiscuous mode [ 94.839504][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.850934][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.861060][ T5098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.869879][ T5098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.879676][ T5098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.889119][ T5098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.062992][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 95.758789][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.783763][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.818979][ T5892] bridge_slave_0: entered allmulticast mode [ 95.858209][ T5892] bridge_slave_0: entered promiscuous mode [ 95.888527][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.896306][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.903840][ T5892] bridge_slave_1: entered allmulticast mode [ 95.920510][ T5892] bridge_slave_1: entered promiscuous mode [ 95.942958][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.035908][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.157384][ T5892] team0: Port device team_slave_0 added [ 96.174857][ T5892] team0: Port device team_slave_1 added [ 96.263959][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.275502][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.303178][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.318866][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.337499][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.383852][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.487761][ T5892] hsr_slave_0: entered promiscuous mode [ 96.494076][ T5892] hsr_slave_1: entered promiscuous mode [ 96.499996][ T5892] debugfs: 'hsr0' already exists in 'hsr' [ 96.513613][ T5892] Cannot create hsr debugfs directory [ 96.678205][ T5976] netlink: 'syz.7.626': attribute type 4 has an invalid length. [ 96.700022][ T5976] netlink: 'syz.7.626': attribute type 4 has an invalid length. [ 97.025170][ T5892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.049333][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.071570][ T6010] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.073448][ T6014] loop7: detected capacity change from 0 to 512 [ 97.079526][ T5892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.139279][ T6014] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.160704][ T6014] EXT4-fs (loop7): 1 truncate cleaned up [ 97.170708][ T6014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.257686][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.292632][ T6010] sch_tbf: burst 593 is lower than device lo mtu (65550) ! [ 97.307420][ T5892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.334650][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.342657][ T5892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.356917][ T5892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.467836][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.525688][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.538522][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.545685][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.553809][ T5774] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 97.571492][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.578606][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.601212][ T5774] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.621067][ T5774] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.850244][ T6094] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 97.923858][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.125886][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 98.125904][ T28] audit: type=1400 audit(1785436700.920:807): avc: denied { write } for pid=3294 comm="syz-executor" name="130" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.164513][ T6131] 9p: Could not find request transport: Б [ 98.176633][ T28] audit: type=1400 audit(1785436700.920:808): avc: denied { remove_name } for pid=3294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.213166][ T28] audit: type=1400 audit(1785436700.950:809): avc: denied { write } for pid=3294 comm="syz-executor" name="130" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.279324][ T28] audit: type=1400 audit(1785436700.950:810): avc: denied { write } for pid=3294 comm="syz-executor" name="130" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.318323][ T28] audit: type=1400 audit(1785436700.950:811): avc: denied { write } for pid=3294 comm="syz-executor" name="130" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.389725][ T5892] veth0_vlan: entered promiscuous mode [ 98.415298][ T5892] veth1_vlan: entered promiscuous mode [ 98.427343][ T28] audit: type=1400 audit(1785436700.950:812): avc: denied { rmdir } for pid=3294 comm="syz-executor" name="130" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 98.465913][ T5892] veth0_macvtap: entered promiscuous mode [ 98.496935][ T5892] veth1_macvtap: entered promiscuous mode [ 98.516076][ T28] audit: type=1400 audit(1785436701.020:813): avc: denied { getopt } for pid=6137 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.527574][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.543598][ T5774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.585781][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.587121][ T6168] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.610142][ T28] audit: type=1400 audit(1785436701.070:814): avc: denied { write } for pid=6128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.646922][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.678440][ T28] audit: type=1400 audit(1785436701.170:815): avc: denied { write } for pid=6154 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.730432][ T5110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.761245][ T28] audit: type=1400 audit(1785436701.440:816): avc: denied { write } for pid=6162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.761915][ T5110] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818978][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.846184][ T5110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.855164][ T5110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.901595][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.986719][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.144820][ T49] bridge_slave_1: left allmulticast mode [ 99.154586][ T49] bridge_slave_1: left promiscuous mode [ 99.166926][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.213612][ T49] bridge_slave_0: left allmulticast mode [ 99.225702][ T49] bridge_slave_0: left promiscuous mode [ 99.239495][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.370447][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.386937][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.399505][ T49] bond0 (unregistering): Released all slaves [ 99.712989][ T49] hsr_slave_0: left promiscuous mode [ 99.720906][ T49] hsr_slave_1: left promiscuous mode [ 99.744739][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.758073][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.167599][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.175326][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.186576][ T49] veth1_macvtap: left promiscuous mode [ 100.192815][ T49] veth0_macvtap: left promiscuous mode [ 100.198549][ T49] veth1_vlan: left promiscuous mode [ 100.204171][ T49] veth0_vlan: left promiscuous mode [ 100.284572][ T49] team0 (unregistering): Port device team_slave_1 removed [ 100.294004][ T49] team0 (unregistering): Port device team_slave_0 removed [ 100.331462][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.473822][ T6263] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 100.589446][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'. [ 100.608399][ T6267] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 102.673001][ T6263] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 102.673918][ T6267] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 102.691701][ T6284] netlink: 830 bytes leftover after parsing attributes in process `syz.3.678'. [ 103.001518][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 103.104372][ T6313] team1: entered promiscuous mode [ 103.109717][ T6313] team1: entered allmulticast mode [ 103.115361][ T6313] 8021q: adding VLAN 0 to HW filter on device team1 [ 103.185627][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.223541][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.246197][ T6182] bridge_slave_0: entered allmulticast mode [ 103.261712][ T6182] bridge_slave_0: entered promiscuous mode [ 103.284776][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 103.319171][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.340611][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.359026][ T6182] bridge_slave_1: entered allmulticast mode [ 103.389806][ T6182] bridge_slave_1: entered promiscuous mode [ 103.447024][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.492244][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.663582][ T6182] team0: Port device team_slave_0 added [ 103.673121][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.703576][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.722057][ T6182] team0: Port device team_slave_1 added [ 103.724510][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 103.724524][ T28] audit: type=1400 audit(1785436706.520:830): avc: denied { write } for pid=6340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.810355][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.831187][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.833434][ T28] audit: type=1400 audit(1785436706.590:831): avc: denied { write } for pid=6362 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.872010][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.922196][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 103.974950][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.997855][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.057446][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.132804][ T28] audit: type=1400 audit(1785436706.930:832): avc: denied { write } for pid=6375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.198656][ T28] audit: type=1400 audit(1785436706.990:833): avc: denied { write } for pid=6389 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.251842][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 104.293664][ T6182] hsr_slave_0: entered promiscuous mode [ 104.330624][ T6182] hsr_slave_1: entered promiscuous mode [ 104.346168][ T6182] debugfs: 'hsr0' already exists in 'hsr' [ 104.352253][ T6182] Cannot create hsr debugfs directory [ 104.602880][ T6182] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 104.625276][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.639863][ T6182] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 104.667892][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.685315][ T6182] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 104.708574][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.723376][ T6182] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 104.738297][ T6182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.827044][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.856550][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.873638][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.880844][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.901731][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.908825][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.964519][ T6182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.178729][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.531648][ T6182] veth0_vlan: entered promiscuous mode [ 105.554340][ T6182] veth1_vlan: entered promiscuous mode [ 105.573895][ T6182] veth0_macvtap: entered promiscuous mode [ 105.611251][ T6182] veth1_macvtap: entered promiscuous mode [ 105.624942][ T5673] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 105.632952][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.642641][ T5673] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.661810][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.699665][ T5110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.709218][ T5110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.751151][ T5110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.771174][ T5110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.140064][ T6437] loop5: detected capacity change from 0 to 512 [ 106.224665][ T6467] loop8: detected capacity change from 0 to 512 [ 106.250559][ T6467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.265018][ T6467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.298295][ T6467] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.369688][ T6182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.373938][ T6437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.399123][ T6437] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 106.482851][ T6476] loop8: detected capacity change from 0 to 1024 [ 106.528461][ T6476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.544554][ T6476] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.585362][ T6476] xt_TCPMSS: Only works on TCP SYN packets [ 106.596302][ T28] audit: type=1400 audit(1785436709.400:834): avc: denied { remount } for pid=6475 comm="syz.8.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.616522][ T6476] EXT4-fs (loop8): re-mounted 00000000-0000-0006-0000-000000000000. [ 106.640826][ T6182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.651594][ T6437] EXT4-fs (loop5): 1 truncate cleaned up [ 106.666206][ T6484] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 106.718294][ T6484] bond2: entered promiscuous mode [ 106.726629][ T6484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.747033][ T6487] ip6gretap1: entered promiscuous mode [ 106.750266][ T6437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.816628][ T6492] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 106.872955][ T6484] bond2: (slave bridge3): making interface the new active one [ 106.892475][ T6484] bridge3: entered promiscuous mode [ 106.899480][ T6484] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 106.910799][ T6494] team0: Device xfrm0 is of different type [ 106.927599][ T28] audit: type=1400 audit(1785436709.680:835): avc: denied { write } for pid=6436 comm="syz.5.707" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.968671][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.984934][ T6492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.993375][ T9] IPVS: starting estimator thread 0... [ 107.006341][ T6497] tipc: Started in network mode [ 107.011475][ T6497] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 107.018928][ T6497] tipc: Enabled bearer , priority 0 [ 107.032600][ T6498] bond3: (slave gretap2): making interface the new active one [ 107.041032][ T6498] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 107.064885][ T6502] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 107.080958][ T28] audit: type=1400 audit(1785436709.880:836): avc: denied { sys_module } for pid=6504 comm="syz.2.723" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.095089][ T6492] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 107.109720][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 107.121896][ T6503] IPVS: using max 2640 ests per chain, 132000 per kthread [ 107.145640][ T6492] dummy0: entered promiscuous mode [ 107.164229][ T6492] bond3: (slave dummy0): Releasing active interface [ 107.176984][ T6515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.506466][ T6524] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 107.624574][ T28] audit: type=1400 audit(1785436710.420:837): avc: denied { create } for pid=6526 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.020386][ T5679] tipc: Node number set to 11578026 [ 108.320058][ T28] audit: type=1400 audit(1785436711.110:838): avc: denied { create } for pid=6538 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.628848][ T6554] loop5: detected capacity change from 0 to 512 [ 108.665250][ T6554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.731559][ T6554] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.787354][ T28] audit: type=1400 audit(1785436711.580:839): avc: denied { bind } for pid=6553 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.809177][ T28] audit: type=1400 audit(1785436711.580:840): avc: denied { setopt } for pid=6553 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.937112][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.980662][ T28] audit: type=1400 audit(1785436711.780:841): avc: denied { cpu } for pid=6570 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.331940][ T28] audit: type=1400 audit(1785436712.120:842): avc: denied { bind } for pid=6587 comm="syz.8.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.372573][ T28] audit: type=1400 audit(1785436712.120:843): avc: denied { connect } for pid=6587 comm="syz.8.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.705807][ T28] audit: type=1400 audit(1785436713.500:844): avc: denied { write } for pid=6618 comm="syz.4.761" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.759737][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.5.762'. [ 110.851962][ T28] audit: type=1400 audit(1785436713.650:845): avc: denied { setopt } for pid=6628 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.890999][ T28] audit: type=1400 audit(1785436713.650:846): avc: denied { write } for pid=6628 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.943380][ T6633] sctp: [Deprecated]: syz.5.766 (pid 6633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.943380][ T6633] Use struct sctp_sack_info instead [ 110.959841][ T28] audit: type=1400 audit(1785436713.680:847): avc: denied { setopt } for pid=6628 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.178898][ T6647] netlink: 'syz.3.772': attribute type 39 has an invalid length. [ 111.412132][ T28] audit: type=1400 audit(1785436714.210:848): avc: denied { mounton } for pid=6658 comm="syz.3.777" path="/file0" dev="bpf" ino=15060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=file permissive=1 [ 111.478621][ T6666] netlink: 'syz.8.780': attribute type 10 has an invalid length. [ 111.498519][ T6666] netlink: 48 bytes leftover after parsing attributes in process `syz.8.780'. [ 111.668094][ T6678] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.785'. [ 111.717837][ T6684] netlink: 'syz.4.788': attribute type 39 has an invalid length. [ 112.027480][ T6699] loop8: detected capacity change from 0 to 2048 [ 112.071831][ T6699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.138761][ T6182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.820706][ T6728] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.165630][ T6748] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.812'. [ 113.457834][ T6766] loop8: detected capacity change from 0 to 512 [ 113.513867][ T6766] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 113.542986][ T6766] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.819: invalid indirect mapped block 32768 (level 2) [ 113.578959][ T6766] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.579131][ T6766] EXT4-fs (loop8): Remounting filesystem read-only [ 113.588357][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 113.588381][ C0] EXT4-fs (loop8): initial error at time 1785436716: ext4_free_branches:1023: inode 16 [ 113.588417][ C0] EXT4-fs (loop8): last error at time 1785436716: ext4_free_branches:1023: inode 16 [ 113.620894][ T6766] EXT4-fs (loop8): 1 orphan inode deleted [ 113.626670][ T6766] EXT4-fs (loop8): 1 truncate cleaned up [ 113.632807][ T6766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.693944][ T6182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.329769][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'. [ 114.384491][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 114.384530][ T28] audit: type=1400 audit(1785436717.180:854): avc: denied { write } for pid=6810 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.610161][ T28] audit: type=1400 audit(1785436717.390:855): avc: denied { write } for pid=6817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.686050][ T28] audit: type=1400 audit(1785436717.420:856): avc: denied { write } for pid=6836 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.745572][ T28] audit: type=1400 audit(1785436717.460:857): avc: denied { read write } for pid=6840 comm="syz.8.837" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.806972][ T6844] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 114.815467][ T28] audit: type=1400 audit(1785436717.460:858): avc: denied { open } for pid=6840 comm="syz.8.837" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.890699][ T28] audit: type=1400 audit(1785436717.580:859): avc: denied { read } for pid=6840 comm="syz.8.837" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.040466][ T6805] loop5: detected capacity change from 0 to 512 [ 115.184582][ T6805] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 115.205756][ T6805] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.829: invalid block [ 115.219376][ T6805] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 115.229364][ T6805] EXT4-fs (loop5): 1 truncate cleaned up [ 115.239634][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 115.240005][ C0] EXT4-fs (loop5): initial error at time 1785436718: ext4_get_branch:178: inode 13: block 1024 [ 115.240125][ C0] EXT4-fs (loop5): last error at time 1785436718: ext4_get_branch:178: inode 13: block 1024 [ 115.302143][ T6844] bond4: entered promiscuous mode [ 115.317706][ T6844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.385754][ T6805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.424572][ T6853] bond4: (slave bridge1): making interface the new active one [ 115.433133][ T6853] bridge1: entered promiscuous mode [ 115.440500][ T6853] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 115.538395][ T28] audit: type=1400 audit(1785436718.330:860): avc: denied { write } for pid=6862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.610532][ T28] audit: type=1400 audit(1785436718.390:861): avc: denied { setattr } for pid=6804 comm="syz.5.829" path="/33/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.679730][ T28] audit: type=1400 audit(1785436718.400:862): avc: denied { write } for pid=6877 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.705168][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.831490][ T6900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.843087][ T6900] team0: Failed to send port change of device bond1 via netlink (err -105) [ 115.854048][ T28] audit: type=1400 audit(1785436718.660:863): avc: denied { write } for pid=6887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.898770][ T6900] team0: Failed to send options change via netlink (err -105) [ 115.932593][ T6900] team0: Port device bond1 added [ 115.948421][ T6909] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.848'. [ 116.110424][ T6921] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.850'. [ 117.029095][ T6959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.862'. [ 117.378438][ T5098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 117.395571][ T5098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 117.423862][ T5098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 117.426605][ T6992] netlink: 3084 bytes leftover after parsing attributes in process `syz.8.871'. [ 117.453212][ T5098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 117.477257][ T6992] netlink: 'syz.8.871': attribute type 1 has an invalid length. [ 117.495290][ T6992] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.871'. [ 117.563203][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 117.756694][ T7002] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 117.773337][ T7002] bond2: entered promiscuous mode [ 117.790045][ T7002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.865811][ T7002] bond2: (slave bridge1): making interface the new active one [ 117.887829][ T7002] bridge1: entered promiscuous mode [ 117.894718][ T7002] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 118.233268][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.255059][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.273230][ T7015] tipc: Resetting bearer [ 118.301653][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.468215][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.503124][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.529658][ T7015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.556753][ T7015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.607530][ T7015] veth1_vlan: left promiscuous mode [ 118.649713][ T7015] veth0_vlan: left promiscuous mode [ 118.656617][ T7015] veth0_vlan: entered promiscuous mode [ 118.666217][ T7015] veth1_vlan: entered promiscuous mode [ 118.703978][ T7015] veth1_macvtap: left promiscuous mode [ 118.714769][ T7015] veth0_macvtap: left promiscuous mode [ 118.715700][ T7031] capability: warning: `syz.8.889' uses deprecated v2 capabilities in a way that may be insecure [ 118.721513][ T7015] veth0_macvtap: entered promiscuous mode [ 118.757702][ T7015] veth1_macvtap: entered promiscuous mode [ 118.767261][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.794552][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.804743][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.851683][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.863022][ T7015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.874106][ T7015] bond2: left promiscuous mode [ 118.879018][ T7015] bridge1: left promiscuous mode [ 118.894576][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.901774][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.954962][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.962208][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.025117][ T7025] bond0: (slave bond_slave_1): Releasing backup interface [ 119.038995][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.053704][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.083552][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.121768][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.715704][ T7059] loop5: detected capacity change from 0 to 1024 [ 119.740258][ T7059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.769458][ T7059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.789358][ T7059] EXT4-fs: inline encryption not supported [ 119.809017][ T7059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.940560][ T7059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.957919][ T7059] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.958865][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 119.958880][ T28] audit: type=1400 audit(1785436722.750:914): avc: denied { setattr } for pid=7068 comm="syz.4.903" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.006176][ T7056] loop2: detected capacity change from 0 to 512 [ 120.372028][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.942005][ T7056] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.899: ea_inode file size=458758 entry size=16777216 [ 121.376411][ T7056] ------------[ cut here ]------------ [ 121.385047][ T7056] EA inode 11 i_nlink=2 [ 121.385610][ T7056] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.2.899/7056 [ 121.413775][ T7056] Modules linked in: [ 121.421447][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.2.899 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.436056][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.449995][ T7056] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 121.471235][ T7056] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 121.496187][ T7056] RSP: 0000:ffffc90004c277f8 EFLAGS: 00010246 [ 121.507991][ T7056] RAX: ffff888103f4f2b0 RBX: ffff8881004a7360 RCX: ffffffff81c29d46 [ 121.518786][ T7056] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3630 [ 121.530092][ T7056] RBP: 000000000000000b R08: 00018881004a7313 R09: 0000000000000000 [ 121.539930][ T7056] R10: ffffc90004c27728 R11: 0001c90004c27728 R12: ffff8881004a7310 [ 121.548327][ T7056] R13: ffffffff871d3630 R14: ffff8881004a72c8 R15: 0000000000000001 [ 121.560967][ T7056] FS: 00007f20311976c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 121.573204][ T7056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.584186][ T7056] CR2: 00007f4fd156d000 CR3: 00000001058dc000 CR4: 00000000003506f0 [ 121.597116][ T7056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.608195][ T7056] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 121.618706][ T7056] Call Trace: [ 121.626336][ T7056] [ 121.634998][ T7056] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 121.645496][ T7056] ext4_xattr_delete_inode+0x6b5/0x790 [ 121.655207][ T7056] ext4_evict_inode+0xb18/0xdf0 [ 121.664986][ T7056] ? __pfx_ext4_evict_inode+0x10/0x10 [ 121.673363][ T7056] evict+0x2a5/0x510 [ 121.679237][ T7056] iput+0x430/0x5a0 [ 121.686547][ T7056] ext4_process_orphan+0x1a4/0x1c0 [ 121.694257][ T7056] ext4_orphan_cleanup+0x6a6/0xa10 [ 121.702446][ T7056] ext4_fill_super+0x33ab/0x3760 [ 121.709787][ T7056] ? set_blocksize+0x14c/0x270 [ 121.719736][ T7056] ? __pfx_ext4_fill_super+0x10/0x10 [ 121.728609][ T7056] get_tree_bdev_flags+0x291/0x300 [ 121.736237][ T7056] ? __pfx_ext4_fill_super+0x10/0x10 [ 121.745256][ T7056] get_tree_bdev+0x1f/0x30 [ 121.751277][ T7056] ext4_get_tree+0x1c/0x30 [ 121.758696][ T7056] vfs_get_tree+0x57/0x1d0 [ 121.766466][ T7056] do_new_mount+0x288/0x8d0 [ 121.776665][ T7056] path_mount+0x4ad/0xb90 [ 121.785375][ T7056] __se_sys_mount+0x28c/0x2e0 [ 121.793546][ T7056] __x64_sys_mount+0x67/0x80 [ 121.819064][ T7056] x64_sys_call+0x2d61/0x3020 [ 121.828116][ T7056] do_syscall_64+0x136/0x3c0 [ 121.836700][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.847617][ T7056] RIP: 0033:0x7f203273f28a [ 121.853636][ T7056] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.879045][ T7056] RSP: 002b:00007f2031196e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.890157][ T7056] RAX: ffffffffffffffda RBX: 00007f2031196ee0 RCX: 00007f203273f28a [ 121.902717][ T7056] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f2031196ea0 [ 121.912796][ T7056] RBP: 00002000000009c0 R08: 00007f2031196ee0 R09: 0000000000800718 [ 121.922497][ T7056] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 121.934564][ T7056] R13: 00007f2031196ea0 R14: 000000000000048d R15: 0000200000000200 [ 121.947395][ T7056] [ 121.951510][ T7056] ---[ end trace 0000000000000000 ]--- [ 121.986022][ T7056] EXT4-fs (loop2): 1 orphan inode deleted [ 122.146048][ T7056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.307095][ T7094] tipc: Started in network mode [ 122.320523][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 122.332282][ T7094] tipc: Node identity 2007ff, cluster identity 4711 [ 122.361435][ T7094] tipc: Node number set to 2099199 [ 122.504824][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.520727][ T28] audit: type=1400 audit(1785436725.320:915): avc: denied { write } for pid=7097 comm="syz.5.912" name="functions" dev="configfs" ino=5472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.543703][ T28] audit: type=1400 audit(1785436725.320:916): avc: denied { create } for pid=7097 comm="syz.5.912" name="gser.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 122.568985][ T7098] UDC core: g1: couldn't find an available UDC or it's busy [ 122.598564][ T28] audit: type=1400 audit(1785436725.370:917): avc: denied { write } for pid=7097 comm="syz.5.912" name="c.1" dev="configfs" ino=6324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.628981][ T28] audit: type=1400 audit(1785436725.370:918): avc: denied { create } for pid=7097 comm="syz.5.912" name="gser.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 122.659598][ T28] audit: type=1400 audit(1785436725.370:919): avc: denied { write } for pid=7097 comm="syz.5.912" name="c.1" dev="configfs" ino=6324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.733707][ T28] audit: type=1400 audit(1785436725.370:920): avc: denied { write } for pid=7097 comm="syz.5.912" name="UDC" dev="configfs" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 122.756553][ T28] audit: type=1400 audit(1785436725.370:921): avc: denied { open } for pid=7097 comm="syz.5.912" path="/51/config/usb_gadget/g1/UDC" dev="configfs" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 122.781837][ T28] audit: type=1400 audit(1785436725.450:922): avc: denied { connect } for pid=7099 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.846612][ T28] audit: type=1400 audit(1785436725.500:923): avc: denied { setopt } for pid=7104 comm="syz.8.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.965955][ T5679] IPVS: starting estimator thread 0... [ 123.060273][ T7123] IPVS: using max 2448 ests per chain, 122400 per kthread [ 123.174848][ T7140] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 123.194564][ T7140] ref_ctr increment failed for inode: 0x3d4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812b11a300 [ 123.246660][ T7139] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 123.257604][ T7139] ref_ctr decrement failed for inode: 0x3d4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88812b11a300 [ 123.272635][ T7139] uprobe: syz.2.930:7139 failed to unregister, leaking uprobe [ 124.241317][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 124.595264][ T5679] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.640396][ T5679] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.787417][ T7203] geneve2: entered promiscuous mode [ 124.966363][ T7185] loop2: detected capacity change from 0 to 512 [ 125.106600][ T7185] EXT4-fs: Ignoring removed oldalloc option [ 125.200219][ T7185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.385352][ T7185] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.426577][ T7185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 125.449466][ T7185] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.495559][ T7185] __quota_error: 7 callbacks suppressed [ 125.495576][ T7185] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 125.544253][ T7185] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.577726][ T7185] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 125.620911][ T7241] loop5: detected capacity change from 0 to 512 [ 125.636427][ T28] audit: type=1326 audit(1785436728.430:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.685399][ T7241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.710969][ T7241] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.739687][ T28] audit: type=1326 audit(1785436728.470:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.766895][ T7185] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.948: bg 0: block 40: padding at end of block bitmap is not set [ 125.786061][ T7185] loop2: lost filesystem error report for type 5 error -117 [ 125.788110][ T28] audit: type=1326 audit(1785436728.470:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.826198][ T28] audit: type=1326 audit(1785436728.470:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.831454][ T7185] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 125.851536][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 125.851559][ C0] EXT4-fs (loop2): initial error at time 1785436728: ext4_validate_block_bitmap:441 [ 125.851585][ C0] EXT4-fs (loop2): last error at time 1785436728: ext4_validate_block_bitmap:441 [ 125.851981][ T28] audit: type=1326 audit(1785436728.470:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.852054][ T28] audit: type=1326 audit(1785436728.470:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.852084][ T28] audit: type=1326 audit(1785436728.480:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.852114][ T28] audit: type=1326 audit(1785436728.480:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 125.852142][ T28] audit: type=1326 audit(1785436728.480:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.966" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdaf3e019 code=0x7ffc0000 [ 126.132178][ T7185] loop2: lost filesystem error report for type 5 error -117 [ 126.139556][ T7185] EXT4-fs (loop2): 1 truncate cleaned up [ 126.216176][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.296061][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.463949][ T7185] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.948: bad symlink. [ 126.483246][ T7269] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.948: bad symlink. [ 126.572584][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.948'. [ 126.599191][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.948'. [ 126.965025][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.440341][ T7295] netlink: 76 bytes leftover after parsing attributes in process `syz.8.994'. [ 127.912392][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 128.790678][ T7369] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1016'. [ 128.980147][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1023'. [ 129.026875][ T7384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7384 comm=syz.3.1023 [ 130.503154][ T28] kauditd_printk_skb: 8481 callbacks suppressed [ 130.503173][ T28] audit: type=1400 audit(1785436733.290:7429): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.520948][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.537817][ T3019] audit: audit_lost=665 audit_rate_limit=0 audit_backlog_limit=64 [ 130.546161][ T3019] audit: backlog limit exceeded [ 130.556735][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.563916][ T3019] audit: audit_lost=666 audit_rate_limit=0 audit_backlog_limit=64 [ 130.572421][ T3019] audit: backlog limit exceeded [ 130.576130][ T28] audit: type=1400 audit(1785436733.300:7430): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 130.602417][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.626970][ T3019] audit: audit_lost=667 audit_rate_limit=0 audit_backlog_limit=64 [ 131.415722][ T7493] netlink: 'syz.8.1066': attribute type 10 has an invalid length. [ 131.452093][ T7493] syz_tun: entered promiscuous mode [ 131.497480][ T7493] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.597851][ T7504] bond0: (slave syz_tun): Releasing backup interface [ 131.684078][ T7504] bridge0: port 3(syz_tun) entered blocking state [ 131.744227][ T7504] bridge0: port 3(syz_tun) entered disabled state [ 131.756443][ T7504] syz_tun: entered allmulticast mode [ 131.993695][ T7518] syzkaller0: entered promiscuous mode [ 132.006150][ T7518] syzkaller0: entered allmulticast mode [ 132.067540][ T7531] netlink: 'syz.4.1080': attribute type 20 has an invalid length. [ 132.096088][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 132.127380][ T7531] netlink: 'syz.4.1080': attribute type 20 has an invalid length. [ 132.132940][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.138647][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 132.181686][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.210240][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.238145][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.502876][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 134.108550][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.148202][ T7598] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.194439][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.330821][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.379720][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.430649][ T7598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.477384][ T7598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.553309][ T7598] veth1_vlan: left promiscuous mode [ 134.574769][ T7598] veth0_vlan: left promiscuous mode [ 134.611932][ T7598] veth0_vlan: entered promiscuous mode [ 134.636404][ T7598] veth1_vlan: entered promiscuous mode [ 134.675891][ T7598] veth1_macvtap: left promiscuous mode [ 134.700420][ T7598] veth0_macvtap: left promiscuous mode [ 134.704687][ T7610] netlink: 'syz.3.1111': attribute type 4 has an invalid length. [ 134.732773][ T7598] veth0_macvtap: entered promiscuous mode [ 134.757076][ T7611] netlink: 'syz.3.1111': attribute type 4 has an invalid length. [ 134.765261][ T7598] veth1_macvtap: entered promiscuous mode [ 134.809304][ T7598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.851964][ T7598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.865090][ T7598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.885386][ T7598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.915720][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.000130][ T7598] bond2: left promiscuous mode [ 135.021876][ T7598] bridge3: left promiscuous mode [ 135.063046][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.070161][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.095355][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.102494][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.146545][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.157794][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.168013][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.176988][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.216129][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.242591][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.260285][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.288029][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.313541][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.335182][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.378825][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.408295][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.510140][ T28] kauditd_printk_skb: 15199 callbacks suppressed [ 135.510158][ T28] audit: type=1400 audit(1785436738.300:22617): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.564312][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.574034][ T28] audit: type=1400 audit(1785436738.340:22618): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.600336][ T3019] audit: audit_lost=672 audit_rate_limit=0 audit_backlog_limit=64 [ 135.608558][ T3019] audit: backlog limit exceeded [ 135.614655][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.623163][ T3019] audit: audit_lost=673 audit_rate_limit=0 audit_backlog_limit=64 [ 135.623661][ T28] audit: type=1400 audit(1785436738.340:22619): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.639125][ T3019] audit: backlog limit exceeded [ 135.673399][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.039374][ T7652] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 136.727722][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1154'. [ 137.693616][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 137.716526][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 137.913883][ T7776] netlink: 'syz.4.1181': attribute type 10 has an invalid length. [ 137.956670][ T7776] bond1: (slave gretap1): Releasing backup interface [ 138.005115][ T7776] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 138.019180][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 138.060248][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 138.069853][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 138.080392][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 139.544956][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1208'. [ 139.594598][ T7852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7852 comm=syz.3.1208 [ 140.162729][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1214'. [ 140.248441][ T7866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7866 comm=syz.5.1214 [ 140.409370][ T7874] netlink: 'syz.5.1218': attribute type 1 has an invalid length. [ 140.520608][ T28] kauditd_printk_skb: 19712 callbacks suppressed [ 140.520624][ T28] audit: type=1400 audit(1785436743.320:42324): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.525165][ T7874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.527233][ T28] audit: type=1400 audit(1785436743.320:42325): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.576101][ T28] audit: type=1400 audit(1785436743.320:42326): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.589521][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.597597][ T28] audit: type=1400 audit(1785436743.320:42327): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.597630][ T28] audit: type=1400 audit(1785436743.320:42328): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.597712][ T28] audit: type=1400 audit(1785436743.320:42329): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.597740][ T28] audit: type=1400 audit(1785436743.320:42330): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.597807][ T28] audit: type=1400 audit(1785436743.320:42331): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.666290][ T3019] audit: audit_lost=677 audit_rate_limit=0 audit_backlog_limit=64 [ 140.689091][ T7874] bond1: (slave bond2): making interface the new active one [ 140.718250][ T7874] bond1: (slave bond2): Enslaving as an active interface with an up link [ 140.790331][ T7885] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 141.994478][ T7968] xt_connbytes: Forcing CT accounting to be enabled [ 142.004033][ T7968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.060811][ T7972] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1259'. [ 142.085522][ T7972] gretap0: entered promiscuous mode [ 142.111843][ T7972] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1259'. [ 142.125204][ T7972] 0ªî{X¹¦: renamed from gretap0 [ 142.132981][ T7972] 0ªî{X¹¦: left promiscuous mode [ 142.139035][ T7972] 0ªî{X¹¦: entered allmulticast mode [ 142.148557][ T7972] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 142.468547][ T7989] syzkaller0: entered promiscuous mode [ 142.475582][ T7989] syzkaller0: entered allmulticast mode [ 142.709136][ T8002] __nla_validate_parse: 1 callbacks suppressed [ 142.709156][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1272'. [ 142.738454][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1272'. [ 143.142950][ T8040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8040 comm=syz.4.1291 [ 143.160519][ T8040] netlink: 'syz.4.1291': attribute type 3 has an invalid length. [ 143.169351][ T8040] netlink: 'syz.4.1291': attribute type 3 has an invalid length. [ 143.933381][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 144.897332][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 144.908275][ T8147] netlink: 'syz.3.1334': attribute type 10 has an invalid length. [ 144.928134][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 144.946313][ T8147] geneve3: entered promiscuous mode [ 144.952088][ T8147] geneve3: entered allmulticast mode [ 144.961040][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.985025][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.010382][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.035437][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.092968][ T8052] syz.8.1294 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 145.151381][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.8.1294 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 145.151420][ T8052] Tainted: [W]=WARN [ 145.151429][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.151443][ T8052] Call Trace: [ 145.151450][ T8052] [ 145.151459][ T8052] __dump_stack+0x1d/0x30 [ 145.151485][ T8052] dump_stack_lvl+0x95/0xd0 [ 145.151545][ T8052] dump_stack+0x15/0x1b [ 145.151567][ T8052] dump_header+0x80/0x240 [ 145.151601][ T8052] oom_kill_process+0x295/0x350 [ 145.151641][ T8052] out_of_memory+0x981/0xbc0 [ 145.151673][ T8052] try_charge_memcg+0x621/0xa00 [ 145.151698][ T8052] charge_memcg+0x6d/0x120 [ 145.151760][ T8052] __mem_cgroup_charge+0x28/0xb0 [ 145.151792][ T8052] handle_mm_fault+0x1041/0x2da0 [ 145.151851][ T8052] ? _raw_spin_lock+0x52/0xa0 [ 145.152000][ T8052] __get_user_pages+0x129c/0x1f10 [ 145.152043][ T8052] __mm_populate+0x242/0x390 [ 145.152130][ T8052] __se_sys_mlockall+0x35e/0x3c0 [ 145.152155][ T8052] __x64_sys_mlockall+0x1f/0x30 [ 145.152179][ T8052] x64_sys_call+0xf90/0x3020 [ 145.152216][ T8052] do_syscall_64+0x136/0x3c0 [ 145.152241][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.152268][ T8052] RIP: 0033:0x7f41c65be019 [ 145.152287][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.152385][ T8052] RSP: 002b:00007f41c5017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 145.152411][ T8052] RAX: ffffffffffffffda RBX: 00007f41c6845fa0 RCX: 00007f41c65be019 [ 145.152428][ T8052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 145.152546][ T8052] RBP: 00007f41c665500c R08: 0000000000000000 R09: 0000000000000000 [ 145.152560][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.152578][ T8052] R13: 00007f41c6846038 R14: 00007f41c6845fa0 R15: 00007ffd102cfdb8 [ 145.152597][ T8052] [ 145.152606][ T8052] memory: usage 307200kB, limit 307200kB, failcnt 225 [ 145.407553][ T8052] memory+swap: usage 20692kB, limit 9007199254740988kB, failcnt 0 [ 145.415941][ T8052] kmem: usage 480kB, limit 9007199254740988kB, failcnt 0 [ 145.442560][ T8052] Memory cgroup stats for /syz8: [ 145.442846][ T8052] cache 8646656 [ 145.452370][ T8052] rss 11784192 [ 145.456655][ T8052] shmem 0 [ 145.459794][ T8052] mapped_file 8646656 [ 145.464191][ T8052] dirty 0 [ 145.467248][ T8052] writeback 0 [ 145.470824][ T8052] workingset_refault_anon 1304 [ 145.475761][ T8052] workingset_refault_file 0 [ 145.480610][ T8052] swap 12288 [ 145.483973][ T8052] swapcached 6782976 [ 145.515750][ T8052] pgpgin 50395 [ 145.522851][ T8052] pgpgout 45407 [ 145.530161][ T8052] pgfault 43844 [ 145.533750][ T28] kauditd_printk_skb: 16994 callbacks suppressed [ 145.533768][ T28] audit: type=1400 audit(1785436748.330:59154): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.551365][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.564863][ T8176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.574959][ T8052] pgmajfault 165 [ 145.578545][ T8052] inactive_anon 0 [ 145.590919][ T8052] active_anon 0 [ 145.593358][ T3019] audit: audit_lost=735 audit_rate_limit=0 audit_backlog_limit=64 [ 145.594617][ T28] audit: type=1400 audit(1785436748.330:59155): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.603001][ T3019] audit: backlog limit exceeded [ 145.623993][ T8052] inactive_file 0 [ 145.632310][ T8176] audit: audit_lost=736 audit_rate_limit=0 audit_backlog_limit=64 [ 145.648220][ T8052] active_file 0 [ 145.651827][ T8052] unevictable 20430848 [ 145.655993][ T8176] audit: backlog limit exceeded [ 145.669156][ T8052] hierarchical_memory_limit 314572800 [ 145.677558][ T8052] hierarchical_memsw_limit 9223372036854771712 [ 145.693858][ T28] audit: type=1400 audit(1785436748.330:59156): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.697063][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.717103][ T8052] total_cache 8646656 [ 145.733589][ T8052] total_rss 11784192 [ 145.741173][ T8052] total_shmem 0 [ 145.749904][ T8052] total_mapped_file 8646656 [ 145.758569][ T8052] total_dirty 0 [ 145.764592][ T8052] total_writeback 0 [ 145.772902][ T8052] total_workingset_refault_anon 1304 [ 145.784798][ T8052] total_workingset_refault_file 0 [ 145.794790][ T8052] total_swap 12288 [ 145.817687][ T8052] total_swapcached 6782976 [ 145.826749][ T8052] total_pgpgin 50395 [ 145.834082][ T8052] total_pgpgout 45407 [ 145.841225][ T8052] total_pgfault 43844 [ 145.850188][ T8052] total_pgmajfault 165 [ 145.858827][ T8052] total_inactive_anon 0 [ 145.894052][ T8052] total_active_anon 0 [ 145.905703][ T8052] total_inactive_file 0 [ 145.918557][ T8052] total_active_file 0 [ 145.940822][ T8052] total_unevictable 20430848 [ 145.952878][ T8052] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1294,pid=8048,uid=0 [ 146.008520][ T8052] Memory cgroup out of memory: Killed process 8052 (syz.8.1294) total-vm:96368kB, anon-rss:12744kB, file-rss:64520kB, shmem-rss:0kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 146.248922][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 147.560803][ T8252] netlink: 'syz.5.1379': attribute type 4 has an invalid length. [ 147.611405][ T8255] netlink: 'syz.5.1379': attribute type 4 has an invalid length. [ 147.906696][ T8276] netlink: 'syz.5.1391': attribute type 1 has an invalid length. [ 147.941066][ T8276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.997145][ T8276] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 148.060015][ T8276] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 148.111200][ T8276] netlink: 'syz.5.1391': attribute type 10 has an invalid length. [ 148.134208][ T8276] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1391'. [ 148.155889][ T8276] dummy0: entered promiscuous mode [ 148.164838][ T5100] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.182324][ T8276] bond3: (slave dummy0): Removing an active aggregator [ 148.206758][ T8276] bond3: (slave dummy0): Releasing backup interface [ 148.371695][ T8296] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.404197][ T8296] Cannot find add_set index 0 as target [ 149.310400][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 149.347261][ T8323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8323 comm=syz.2.1410 [ 150.543256][ T28] kauditd_printk_skb: 16036 callbacks suppressed [ 150.543273][ T28] audit: type=1400 audit(1785436753.340:74492): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.590209][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.590466][ T8363] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.608379][ T3019] audit: audit_lost=971 audit_rate_limit=0 audit_backlog_limit=64 [ 150.630190][ T28] audit: type=1400 audit(1785436753.350:74493): avc: denied { read write } for pid=5892 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.633943][ T8365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.654521][ T3019] audit: backlog limit exceeded [ 150.654609][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.683028][ T8366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.693150][ T8332] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.021485][ T8383] netlink: 'syz.8.1435': attribute type 1 has an invalid length. [ 151.030127][ T8375] netlink: 'syz.5.1431': attribute type 39 has an invalid length. [ 151.041055][ T8385] netlink: 'syz.4.1436': attribute type 4 has an invalid length. [ 151.103990][ T8383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.172714][ T8386] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.540877][ T8422] netlink: 'syz.8.1452': attribute type 13 has an invalid length. [ 151.561860][ T8422] netlink: 'syz.8.1452': attribute type 17 has an invalid length. [ 151.621077][ T8422] bridge0: port 3(syz_tun) entered blocking state [ 151.627586][ T8422] bridge0: port 3(syz_tun) entered forwarding state [ 151.921532][ T8437] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.944304][ T8437] syzkaller0: entered promiscuous mode [ 151.986863][ T8437] syzkaller0: entered allmulticast mode [ 152.554389][ T8484] syzkaller0: entered promiscuous mode [ 152.572141][ T8484] syzkaller0: entered allmulticast mode [ 152.685602][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 152.772433][ T8502] vlan4: entered allmulticast mode [ 152.787635][ T8502] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 152.814907][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 153.647528][ T8538] bridge_slave_0: left allmulticast mode [ 153.653607][ T8538] bridge_slave_0: left promiscuous mode [ 153.665621][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.719676][ T8538] bridge_slave_1: left allmulticast mode [ 153.727667][ T8538] bridge_slave_1: left promiscuous mode [ 153.733733][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.749846][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 153.768415][ T8538] bond0: (slave bond_slave_0): Releasing backup interface [ 153.799061][ T8538] bond0: (slave bond_slave_1): Releasing backup interface [ 153.825036][ T8538] team0: Port device team_slave_0 removed [ 153.858355][ T8538] team0: Port device team_slave_1 removed [ 153.891428][ T8538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.899115][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.920499][ T8538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.930031][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.947487][ T8538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.981514][ T8539] team0: Port device xfrm0 added [ 153.995746][ T8542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.043588][ T8543] dummy0: left promiscuous mode [ 154.066466][ T8543] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 154.413324][ T8576] x_tables: duplicate entry at hook 3 [ 154.681348][ T8594] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 154.702543][ T8594] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.723715][ T8594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.730993][ T8594] IPv6: NLM_F_CREATE should be set when creating new route [ 154.738280][ T8594] IPv6: NLM_F_CREATE should be set when creating new route [ 154.745514][ T8594] IPv6: NLM_F_CREATE should be set when creating new route [ 154.810473][ T8598] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 154.839826][ T8598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.883143][ T8594] vlan2: entered promiscuous mode [ 155.550201][ T28] kauditd_printk_skb: 16275 callbacks suppressed [ 155.550222][ T28] audit: type=1400 audit(1785436758.340:90183): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.558028][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.589954][ T3294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.597015][ T3294] audit: audit_lost=1169 audit_rate_limit=0 audit_backlog_limit=64 [ 155.605686][ T28] audit: type=1400 audit(1785436758.340:90184): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.617597][ T3019] audit: audit_lost=1170 audit_rate_limit=0 audit_backlog_limit=64 [ 155.627359][ T3294] audit: backlog limit exceeded [ 155.642618][ T3019] audit: backlog limit exceeded [ 155.662698][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.667658][ T28] audit: type=1400 audit(1785436758.340:90185): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.021959][ T8668] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 156.051506][ T8668] bond3: (slave bridge6): making interface the new active one [ 156.074431][ T8668] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 156.552385][ T8641] syz.4.1541 (8641) used greatest stack depth: 8432 bytes left [ 156.615695][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 157.460389][ T8712] dummy0: left promiscuous mode [ 157.549197][ T8712] team1: left promiscuous mode [ 157.554366][ T8712] team1: left allmulticast mode [ 157.575287][ T5103] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.587823][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.603561][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.614526][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.007490][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 160.143798][ T8816] syzkaller0: entered promiscuous mode [ 160.154764][ T8816] syzkaller0: entered allmulticast mode [ 160.560346][ T28] kauditd_printk_skb: 16109 callbacks suppressed [ 160.560363][ T28] audit: type=1400 audit(1785436763.350:106125): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.573690][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.616772][ T8856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.619388][ T3019] audit: audit_lost=1228 audit_rate_limit=0 audit_backlog_limit=64 [ 160.623850][ T28] audit: type=1400 audit(1785436763.360:106126): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.644050][ T3019] audit: backlog limit exceeded [ 160.662924][ T8856] audit: audit_lost=1229 audit_rate_limit=0 audit_backlog_limit=64 [ 160.671919][ T8856] audit: backlog limit exceeded [ 160.672959][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.678544][ T8856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.998779][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 163.405767][ T8967] syzkaller0: entered promiscuous mode [ 163.411901][ T8967] syzkaller0: entered allmulticast mode [ 163.415421][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1679'. [ 163.678922][ T8989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=8989 comm=syz.8.1688 [ 163.693007][ T8989] bridge0: port 4(team0) entered blocking state [ 163.699603][ T8989] bridge0: port 4(team0) entered disabled state [ 163.707105][ T8989] team0: entered allmulticast mode [ 163.713155][ T8989] team_slave_0: entered allmulticast mode [ 163.719294][ T8989] team_slave_1: entered allmulticast mode [ 163.725815][ T8989] bond1: entered allmulticast mode [ 163.734973][ T8989] team0: entered promiscuous mode [ 163.740545][ T8989] team_slave_0: entered promiscuous mode [ 163.747251][ T8989] team_slave_1: entered promiscuous mode [ 163.754553][ T8989] bond1: entered promiscuous mode [ 163.760585][ T8989] bridge0: port 4(team0) entered blocking state [ 163.766965][ T8989] bridge0: port 4(team0) entered forwarding state [ 164.174225][ T8996] netlink: 'syz.8.1691': attribute type 9 has an invalid length. [ 164.207730][ T8996] netlink: 'syz.8.1691': attribute type 7 has an invalid length. [ 164.234022][ T8996] netlink: 'syz.8.1691': attribute type 8 has an invalid length. [ 164.657041][ T9013] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1706'. [ 164.669638][ T9013] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 164.892034][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 164.904292][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.947026][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.971495][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 165.195604][ T9024] team1: entered promiscuous mode [ 165.201940][ T9024] team1: entered allmulticast mode [ 165.220529][ T9024] 8021q: adding VLAN 0 to HW filter on device team1 [ 165.267467][ T9029] team2: entered promiscuous mode [ 165.296612][ T9029] team2: entered allmulticast mode [ 165.329799][ T9029] 8021q: adding VLAN 0 to HW filter on device team2 [ 165.573147][ T28] kauditd_printk_skb: 16266 callbacks suppressed [ 165.573167][ T28] audit: type=1400 audit(1785436768.370:122263): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.593917][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.609311][ T9048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.619244][ T9049] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.626196][ T28] audit: type=1400 audit(1785436768.370:122264): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.630677][ T9048] audit: audit_lost=1274 audit_rate_limit=0 audit_backlog_limit=64 [ 165.672831][ T3019] audit: audit_lost=1275 audit_rate_limit=0 audit_backlog_limit=64 [ 165.687529][ T9049] audit: audit_lost=1276 audit_rate_limit=0 audit_backlog_limit=64 [ 165.689268][ T28] audit: type=1400 audit(1785436768.370:122265): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.695570][ T3019] audit: backlog limit exceeded [ 165.861427][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 165.882620][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 165.911601][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 165.921202][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 166.139813][ T9074] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 166.223358][ T9074] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.244052][ T9074] bond6: (slave bond7): making interface the new active one [ 166.261892][ T9074] bond6: (slave bond7): Enslaving as an active interface with an up link [ 166.608995][ T9084] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1725'. [ 166.720657][ T9094] option changes via remount are deprecated (pid=9093 comm=syz.8.1731) [ 167.106332][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 167.180548][ T9116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.279460][ T9122] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 167.359017][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1740'. [ 167.391894][ T9116] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 167.405746][ T9116] bond3 (unregistering): Released all slaves [ 167.610805][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 167.619997][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'. [ 168.699453][ T9179] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1762'. [ 169.935997][ T9215] bond0: entered promiscuous mode [ 169.950421][ T9215] bond_slave_0: entered promiscuous mode [ 169.962704][ T9215] bond_slave_1: entered promiscuous mode [ 169.976071][ T9215] gretap1: entered promiscuous mode [ 170.005878][ T9215] batadv0: entered promiscuous mode [ 170.028273][ T9215] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 170.066411][ T9215] bond0: left promiscuous mode [ 170.087378][ T9215] bond_slave_0: left promiscuous mode [ 170.114039][ T9215] bond_slave_1: left promiscuous mode [ 170.136654][ T9215] gretap1: left promiscuous mode [ 170.158002][ T9215] batadv0: left promiscuous mode [ 170.473643][ T9232] netlink: 'syz.4.1783': attribute type 30 has an invalid length. [ 170.581548][ T28] kauditd_printk_skb: 21931 callbacks suppressed [ 170.581563][ T28] audit: type=1400 audit(1785437029.379:142308): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.587232][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.588161][ T28] audit: type=1400 audit(1785437029.379:142309): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.609451][ T3019] audit: audit_lost=1906 audit_rate_limit=0 audit_backlog_limit=64 [ 170.639766][ T9244] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.645378][ T3019] audit: backlog limit exceeded [ 170.657670][ T5892] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.664405][ T5892] audit: audit_lost=1907 audit_rate_limit=0 audit_backlog_limit=64 [ 170.672450][ T5892] audit: backlog limit exceeded [ 170.683589][ T9247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 171.829273][ T9272] __nla_validate_parse: 3 callbacks suppressed [ 171.829293][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 171.940341][ T9274] futex_wake_op: syz.5.1801 tries to shift op by 144; fix this program [ 172.319842][ T9290] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 172.329872][ T9290] netlink: 'syz.2.1809': attribute type 2 has an invalid length. [ 172.493419][ T9302] syzkaller0: entered promiscuous mode [ 172.508420][ T9302] syzkaller0: entered allmulticast mode [ 173.047657][ T9316] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 173.086694][ T9316] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 175.590147][ T28] kauditd_printk_skb: 16713 callbacks suppressed [ 175.590166][ T28] audit: type=1400 audit(1785437034.391:158290): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.631698][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.646190][ T3019] audit: audit_lost=2153 audit_rate_limit=0 audit_backlog_limit=64 [ 175.664448][ T3019] audit: backlog limit exceeded [ 175.668874][ T9441] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.671279][ T28] audit: type=1400 audit(1785437034.391:158291): avc: denied { name_bind } for pid=9431 comm="syz.8.1867" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 175.700046][ T9441] audit: audit_lost=2154 audit_rate_limit=0 audit_backlog_limit=64 [ 175.708971][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.723565][ T9444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.725687][ T3019] audit: audit_lost=2155 audit_rate_limit=0 audit_backlog_limit=64 [ 176.467839][ T9457] syz.4.1878 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 176.507296][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.4.1878 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 176.507385][ T9457] Tainted: [W]=WARN [ 176.507394][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.507410][ T9457] Call Trace: [ 176.507417][ T9457] [ 176.507427][ T9457] __dump_stack+0x1d/0x30 [ 176.507458][ T9457] dump_stack_lvl+0x95/0xd0 [ 176.507480][ T9457] dump_stack+0x15/0x1b [ 176.507547][ T9457] dump_header+0x80/0x240 [ 176.507582][ T9457] oom_kill_process+0x295/0x350 [ 176.507717][ T9457] out_of_memory+0x981/0xbc0 [ 176.507757][ T9457] try_charge_memcg+0x621/0xa00 [ 176.507789][ T9457] __memcg_kmem_charge_page+0x199/0x3a0 [ 176.507878][ T9457] __alloc_frozen_pages_noprof+0x18a/0x350 [ 176.507933][ T9457] alloc_pages_mpol+0xa9/0x1d0 [ 176.507970][ T9457] alloc_pages_noprof+0x8f/0x140 [ 176.508061][ T9457] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 176.508132][ T9457] __kvmalloc_node_noprof+0x3a0/0x590 [ 176.508165][ T9457] ? futex_hash_allocate+0x192/0x920 [ 176.508191][ T9457] ? futex_hash_allocate+0x192/0x920 [ 176.508224][ T9457] ? futex_hash_allocate+0x192/0x920 [ 176.508321][ T9457] futex_hash_allocate+0x192/0x920 [ 176.508344][ T9457] ? cap_task_prctl+0x13f/0x6b0 [ 176.508595][ T9457] futex_hash_prctl+0xd8/0xf0 [ 176.508622][ T9457] __se_sys_prctl+0x4f4/0x13b0 [ 176.508656][ T9457] __x64_sys_prctl+0x67/0x80 [ 176.508688][ T9457] x64_sys_call+0x2533/0x3020 [ 176.508762][ T9457] do_syscall_64+0x136/0x3c0 [ 176.508792][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.508819][ T9457] RIP: 0033:0x7fef8d3ae019 [ 176.508903][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.508926][ T9457] RSP: 002b:00007fef8be07028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 176.508950][ T9457] RAX: ffffffffffffffda RBX: 00007fef8d635fa0 RCX: 00007fef8d3ae019 [ 176.508965][ T9457] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 176.508979][ T9457] RBP: 00007fef8d44500c R08: 0000000000000000 R09: 0000000000000000 [ 176.508993][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.509084][ T9457] R13: 00007fef8d636038 R14: 00007fef8d635fa0 R15: 00007ffcad9ca108 [ 176.509104][ T9457] [ 176.736033][ T9457] memory: usage 307200kB, limit 307200kB, failcnt 449 [ 176.758079][ T9457] memory+swap: usage 310172kB, limit 9007199254740988kB, failcnt 0 [ 176.780260][ T9457] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 176.798258][ T9457] Memory cgroup stats for /syz4: [ 176.798497][ T9457] cache 0 [ 176.813761][ T9457] rss 0 [ 176.834191][ T9457] shmem 0 [ 176.852702][ T9457] mapped_file 0 [ 176.866165][ T9457] dirty 0 [ 176.878871][ T9457] writeback 0 [ 176.889572][ T9457] workingset_refault_anon 1356 [ 176.909346][ T9457] workingset_refault_file 1112 [ 176.957969][ T9457] swap 3043328 [ 176.968483][ T9457] swapcached 37126144 [ 176.973015][ T9457] pgpgin 113483 [ 176.976631][ T9457] pgpgout 113482 [ 176.980740][ T9457] pgfault 117907 [ 176.984413][ T9457] pgmajfault 205 [ 176.988362][ T9457] inactive_anon 0 [ 176.992642][ T9457] active_anon 4096 [ 177.006937][ T9457] inactive_file 0 [ 177.011119][ T9457] active_file 0 [ 177.014799][ T9457] unevictable 0 [ 177.019049][ T9457] hierarchical_memory_limit 314572800 [ 177.022864][ T9484] syzkaller0: entered promiscuous mode [ 177.072337][ T9457] hierarchical_memsw_limit 9223372036854771712 [ 177.111810][ T9457] total_cache 0 [ 177.126849][ T9457] total_rss 0 [ 177.140169][ T9457] total_shmem 0 [ 177.149741][ T9457] total_mapped_file 0 [ 177.158765][ T9457] total_dirty 0 [ 177.165961][ T9457] total_writeback 0 [ 177.177145][ T9457] total_workingset_refault_anon 1356 [ 177.192847][ T9457] total_workingset_refault_file 1112 [ 177.206744][ T9457] total_swap 3043328 [ 177.228182][ T9457] total_swapcached 37126144 [ 177.230518][ T9502] netlink: 'syz.2.1897': attribute type 10 has an invalid length. [ 177.240107][ T9457] total_pgpgin 113483 [ 177.250517][ T9457] total_pgpgout 113482 [ 177.257605][ T9502] ipvlan0: entered promiscuous mode [ 177.262011][ T9457] total_pgfault 117907 [ 177.276863][ T9502] ipvlan0: entered allmulticast mode [ 177.278960][ T9457] total_pgmajfault 205 [ 177.291434][ T9502] veth0_vlan: entered allmulticast mode [ 177.316649][ T9502] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.319717][ T9457] total_inactive_anon 0 [ 177.350192][ T9502] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 177.370149][ T9457] total_active_anon 4096 [ 177.379412][ T9502] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 177.390695][ T9457] total_inactive_file 0 [ 177.403397][ T9457] total_active_file 0 [ 177.416405][ T9457] total_unevictable 0 [ 177.428777][ T9457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1878,pid=9456,uid=0 [ 177.469858][ T9457] Memory cgroup out of memory: Killed process 9456 (syz.4.1878) total-vm:94188kB, anon-rss:1236kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 177.471747][ T9511] xt_connbytes: Forcing CT accounting to be enabled [ 177.530835][ T9511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.682393][ T9517] netlink: 'syz.3.1903': attribute type 1 has an invalid length. [ 177.700813][ T9517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.735949][ T9517] bond8: (slave veth5): Enslaving as an active interface with a down link [ 177.763624][ T9517] bond5: (slave dummy0): Releasing backup interface [ 177.773991][ T9517] bond8: (slave dummy0): making interface the new active one [ 177.791222][ T9517] dummy0: entered promiscuous mode [ 177.796817][ T9517] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 177.806888][ T9522] syzkaller0: entered promiscuous mode [ 177.812712][ T9522] syzkaller0: entered allmulticast mode [ 177.847747][ T9530] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 177.865852][ T9530] team0: Device nlmon0 is of different type [ 178.121958][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 178.131451][ T9555] netlink: 'syz.5.1917': attribute type 10 has an invalid length. [ 178.140198][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1917'. [ 178.152488][ T9555] geneve2: entered promiscuous mode [ 178.157808][ T9555] geneve2: entered allmulticast mode [ 178.164080][ T5103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.178661][ T5103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.205841][ T5103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.215007][ T5103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.695402][ T9598] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 179.754786][ T9598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 179.826389][ T9600] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 179.842958][ T9604] netlink: 'syz.5.1939': attribute type 1 has an invalid length. [ 179.885141][ T9605] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 179.903580][ T9598] bond8: (slave dummy0): Releasing active interface [ 179.905678][ T9605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1937'. [ 179.925927][ T9598] dummy0: left promiscuous mode [ 179.952436][ T9598] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 179.980207][ T5103] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.996731][ T9604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.012236][ T9605] dummy0: entered promiscuous mode [ 180.018531][ T9605] bond9: (slave dummy0): Removing an active aggregator [ 180.026807][ T9605] bond9: (slave dummy0): Releasing backup interface [ 180.207476][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1947'. [ 180.238183][ T9628] bond4: entered promiscuous mode [ 180.252928][ T9628] bond4: entered allmulticast mode [ 180.589533][ T9656] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 180.603259][ T28] kauditd_printk_skb: 20363 callbacks suppressed [ 180.603276][ T28] audit: type=1400 audit(1785437039.401:177628): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.616467][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.639313][ T9657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.639530][ T28] audit: type=1400 audit(1785437039.401:177629): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.677865][ T9657] audit: audit_lost=2498 audit_rate_limit=0 audit_backlog_limit=64 [ 180.698513][ T9656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.706034][ T3019] audit: audit_lost=2499 audit_rate_limit=0 audit_backlog_limit=64 [ 180.709367][ T28] audit: type=1400 audit(1785437039.401:177630): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.714507][ T9658] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 180.748788][ T28] audit: type=1400 audit(1785437039.401:177631): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.749748][ T9657] audit: backlog limit exceeded [ 180.781713][ T28] audit: type=1400 audit(1785437039.401:177632): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.553871][ T9681] netlink: 'syz.8.1965': attribute type 12 has an invalid length. [ 181.890863][ T5105] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.930474][ T5105] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.961825][ T5105] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.987656][ T5105] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.927256][ T9713] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1980'. [ 183.993512][ T9731] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 184.015081][ T9731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.043322][ T9731] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 184.083472][ T9731] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 184.120260][ T5103] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.132077][ T9731] netlink: 'syz.2.1989': attribute type 10 has an invalid length. [ 184.141542][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1989'. [ 184.150937][ T9731] dummy0: entered promiscuous mode [ 184.159448][ T9731] bond4: (slave dummy0): Removing an active aggregator [ 184.166765][ T9731] bond4: (slave dummy0): Releasing backup interface [ 184.196756][ T5100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.208777][ T5100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.292543][ T5100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.317401][ T5100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.392388][ T5100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.402939][ T5100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.442826][ T5100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.453242][ T5100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.547095][ T5100] bridge_slave_1: left allmulticast mode [ 184.554983][ T5100] bridge_slave_1: left promiscuous mode [ 184.560966][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.568626][ T5100] bridge_slave_0: left allmulticast mode [ 184.574622][ T5100] bridge_slave_0: left promiscuous mode [ 184.580538][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.634687][ T5100] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 184.661106][ T5100] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 184.675270][ T5100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.685718][ T5100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.695352][ T5100] bond0 (unregistering): Released all slaves [ 184.707901][ T5100] bond1 (unregistering): Released all slaves [ 184.721839][ T5100] bond2 (unregistering): Released all slaves [ 184.746682][ T5100] bond3 (unregistering): Released all slaves [ 184.774660][ T5100] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 184.789147][ T5100] bond4 (unregistering): Released all slaves [ 184.807801][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 184.846901][ T5100] tipc: Disabling bearer [ 184.858556][ T5100] tipc: Left network mode [ 184.923115][ T5100] hsr_slave_0: left promiscuous mode [ 184.933466][ T5100] hsr_slave_1: left promiscuous mode [ 184.939376][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.948669][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.964924][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.972667][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.990645][ T5100] veth1_macvtap: left promiscuous mode [ 184.996168][ T5100] veth0_macvtap: left promiscuous mode [ 185.006508][ T5100] veth1_vlan: left promiscuous mode [ 185.016364][ T5100] veth0_vlan: left promiscuous mode [ 185.125313][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 185.135155][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 185.373379][ T5100] IPVS: stop unused estimator thread 0... [ 185.576593][ T9752] x_tables: duplicate entry at hook 3 [ 185.610272][ T28] kauditd_printk_skb: 28654 callbacks suppressed [ 185.610291][ T28] audit: type=1400 audit(1785437044.411:205176): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 185.647412][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.654173][ T3019] audit: audit_lost=2870 audit_rate_limit=0 audit_backlog_limit=64 [ 185.663182][ T3019] audit: backlog limit exceeded [ 185.668071][ T28] audit: type=1400 audit(1785437044.431:205177): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.692832][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.699698][ T3019] audit: audit_lost=2871 audit_rate_limit=0 audit_backlog_limit=64 [ 185.707736][ T3019] audit: backlog limit exceeded [ 185.720283][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.726960][ T28] audit: type=1400 audit(1785437044.431:205178): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.683641][ T9762] ================================================================== [ 186.691774][ T9762] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 186.698737][ T9762] [ 186.701080][ T9762] read-write to 0xffff88810019a5a4 of 4 bytes by task 9756 on cpu 1: [ 186.709161][ T9762] fifo_open+0x89/0x5b0 [ 186.713343][ T9762] do_dentry_open+0x49f/0xa60 [ 186.718832][ T9762] vfs_open+0x37/0x1e0 [ 186.722931][ T9762] path_openat+0x1b39/0x2000 [ 186.727557][ T9762] do_file_open_root+0x233/0x430 [ 186.732524][ T9762] file_open_root+0xfd/0x130 [ 186.737145][ T9762] do_handle_open+0x6e6/0x7c0 [ 186.741851][ T9762] __x64_sys_open_by_handle_at+0x44/0x50 [ 186.747507][ T9762] x64_sys_call+0x153d/0x3020 [ 186.752207][ T9762] do_syscall_64+0x136/0x3c0 [ 186.756820][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.762732][ T9762] [ 186.765066][ T9762] read to 0xffff88810019a5a4 of 4 bytes by task 9762 on cpu 0: [ 186.772619][ T9762] wait_for_partner+0xc9/0x1d0 [ 186.777395][ T9762] fifo_open+0x443/0x5b0 [ 186.781657][ T9762] do_dentry_open+0x49f/0xa60 [ 186.786362][ T9762] vfs_open+0x37/0x1e0 [ 186.790459][ T9762] path_openat+0x1b39/0x2000 [ 186.795089][ T9762] do_file_open+0x16c/0x290 [ 186.799620][ T9762] do_sys_openat2+0xa0/0x130 [ 186.804234][ T9762] __x64_sys_openat+0xf2/0x120 [ 186.809111][ T9762] x64_sys_call+0x1e39/0x3020 [ 186.813812][ T9762] do_syscall_64+0x136/0x3c0 [ 186.818436][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.824344][ T9762] [ 186.826674][ T9762] value changed: 0x00000001 -> 0x00000002 [ 186.832398][ T9762] [ 186.834735][ T9762] Reported by Kernel Concurrency Sanitizer on: [ 186.840903][ T9762] CPU: 0 UID: 0 PID: 9762 Comm: syz.3.1998 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 186.851779][ T9762] Tainted: [W]=WARN [ 186.855590][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.865656][ T9762] ================================================================== [ 187.593249][ T9766] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 187.644275][ T9766] syzkaller0: entered promiscuous mode [ 187.676717][ T9766] syzkaller0: entered allmulticast mode [ 187.739480][ T6182] bridge0: port 3(syz_tun) entered disabled state [ 187.761243][ T6182] syz_tun (unregistering): left allmulticast mode [ 187.807741][ T6182] syz_tun (unregistering): left promiscuous mode [ 187.823130][ T6182] bridge0: port 3(syz_tun) entered disabled state [ 187.881133][ T5100] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.975126][ T5100] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.062307][ T5100] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.123629][ T5100] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.224758][ T5100] team0: left allmulticast mode [ 188.229725][ T5100] team_slave_0: left allmulticast mode [ 188.250223][ T5100] team_slave_1: left allmulticast mode [ 188.255805][ T5100] bond1: left allmulticast mode [ 188.280592][ T5100] team0: left promiscuous mode [ 188.285422][ T5100] team_slave_0: left promiscuous mode [ 188.301727][ T5100] team_slave_1: left promiscuous mode [ 188.307334][ T5100] bond1: left promiscuous mode [ 188.322008][ T5100] bridge0: port 4(team0) entered disabled state [ 188.333269][ T5100] bridge_slave_1: left allmulticast mode [ 188.350180][ T5100] bridge_slave_1: left promiscuous mode [ 188.355924][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.366320][ T5100] bridge_slave_0: left allmulticast mode [ 188.372204][ T5100] bridge_slave_0: left promiscuous mode [ 188.377997][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.448023][ T5100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.458869][ T5100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.468973][ T5100] bond0 (unregistering): Released all slaves [ 188.476970][ T5100] team0: Port device bond1 removed [ 188.483565][ T5100] bond1 (unregistering): Released all slaves [ 188.493502][ T5100] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 188.503258][ T5100] bond2 (unregistering): Released all slaves [ 188.512452][ T5100] bond3 (unregistering): Released all slaves [ 188.522046][ T5100] bond4 (unregistering): Released all slaves [ 188.533834][ T5100] tipc: Left network mode [ 188.564118][ T5100] hsr_slave_0: left promiscuous mode [ 188.570545][ T5100] hsr_slave_1: left promiscuous mode [ 188.576409][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.585654][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.593441][ T5100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.601147][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.616023][ T5100] veth1_macvtap: left promiscuous mode [ 188.621602][ T5100] veth0_macvtap: left promiscuous mode [ 188.627164][ T5100] veth1_vlan: left promiscuous mode [ 188.632713][ T5100] veth0_vlan: left promiscuous mode [ 188.705920][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 188.715974][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 188.963392][ T5100] IPVS: stop unused estimator thread 0... [ 189.252665][ T5100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.311418][ T5100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.371829][ T5100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.431519][ T5100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.500292][ T5100] bridge_slave_1: left allmulticast mode [ 189.506463][ T5100] bridge_slave_1: left promiscuous mode [ 189.512347][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.521138][ T5100] bridge_slave_0: left allmulticast mode [ 189.526859][ T5100] bridge_slave_0: left promiscuous mode [ 189.532771][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.570158][ T5100] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 189.581161][ T5100] bond3 (unregistering): (slave gretap2): Releasing active interface [ 189.606781][ T5100] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 189.615089][ T5100] bridge1 (unregistering): left promiscuous mode [ 189.624396][ T5100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.635637][ T5100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.645392][ T5100] bond0 (unregistering): (slave team0): Releasing backup interface [ 189.654122][ T5100] bond0 (unregistering): Released all slaves [ 189.662406][ T5100] bond1 (unregistering): (slave bond2): Releasing backup interface [ 189.671328][ T5100] bond1 (unregistering): Released all slaves [ 189.680634][ T5100] bond2 (unregistering): Released all slaves [ 189.689809][ T5100] bond3 (unregistering): Released all slaves [ 189.698802][ T5100] bond4 (unregistering): Released all slaves [ 189.707759][ T5100] bond5 (unregistering): Released all slaves [ 189.720249][ T5100] bond6 (unregistering): (slave bond7): Releasing backup interface [ 189.728791][ T5100] bond6 (unregistering): Released all slaves [ 189.738411][ T5100] bond7 (unregistering): Released all slaves [ 189.748525][ T5100] bond8 (unregistering): (slave veth5): Releasing active interface [ 189.757444][ T5100] bond8 (unregistering): Released all slaves [ 189.766789][ T5100] bond9 (unregistering): (slave veth7): Releasing backup interface [ 189.775374][ T5100] bond9 (unregistering): Released all slaves [ 189.791592][ T5100] team0: Port device xfrm0 removed [ 189.801981][ T5100] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 189.823327][ T5100] bond0 (unregistering): Released all slaves [ 189.832360][ T5100] bond1 (unregistering): (slave bond2): Releasing backup interface [ 189.840640][ T5100] bond1 (unregistering): Released all slaves [ 189.849774][ T5100] bond2 (unregistering): Released all slaves [ 189.860204][ T5100] bond3 (unregistering): (slave veth5): Releasing backup interface [ 189.868562][ T5100] bond3 (unregistering): Released all slaves [ 189.880261][ T5100] bond4 (unregistering): Released all slaves [ 189.994331][ T5100] hsr_slave_0: left promiscuous mode [ 190.000022][ T5100] hsr_slave_1: left promiscuous mode [ 190.006214][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.014153][ T5100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.023957][ T5100] hsr_slave_0: left promiscuous mode [ 190.029815][ T5100] hsr_slave_1: left promiscuous mode [ 190.060634][ T49] smc: removing ib device syz0 [ 190.091298][ T5100] team0 (unregistering): Port device team_slave_1 removed [ 190.101742][ T5100] team0 (unregistering): Port device team_slave_0 removed [ 190.516181][ T5100] IPVS: stop unused estimator thread 0... [ 190.522683][ T5100] IPVS: stop unused estimator thread 0... [ 190.620234][ T28] kauditd_printk_skb: 42644 callbacks suppressed [ 190.620251][ T28] audit: type=1400 audit(1785437049.421:238902): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.627238][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 190.654548][ T3019] audit: audit_lost=5846 audit_rate_limit=0 audit_backlog_limit=64 [ 190.655832][ T28] audit: type=1400 audit(1785437049.421:238903): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.662506][ T3019] audit: backlog limit exceeded [ 190.662698][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 190.686301][ T28] audit: type=1400 audit(1785437049.421:238904): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.688812][ T3019] audit: audit_lost=5847 audit_rate_limit=0 audit_backlog_limit=64 [ 190.695256][ T28] audit: type=1400 audit(1785437049.421:238905): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.716539][ T3019] audit: backlog limit exceeded [ 195.631789][ T28] kauditd_printk_skb: 46281 callbacks suppressed [ 195.631809][ T28] audit: type=1400 audit(1785437054.431:285082): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.637990][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.644592][ T28] audit: type=1400 audit(1785437054.431:285083): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.659460][ T3019] audit: audit_lost=5883 audit_rate_limit=0 audit_backlog_limit=64 [ 195.666854][ T28] audit: type=1400 audit(1785437054.431:285084): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.687380][ T3019] audit: backlog limit exceeded [ 195.695350][ T28] audit: type=1400 audit(1785437054.431:285085): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.717245][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.722194][ T28] audit: type=1400 audit(1785437054.431:285086): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.743513][ T3019] audit: audit_lost=5884 audit_rate_limit=0 audit_backlog_limit=64