last executing test programs: 2m16.337756008s ago: executing program 32 (id=95): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 2m13.228369196s ago: executing program 33 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m0.360680558s ago: executing program 34 (id=322): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1m57.473790252s ago: executing program 6 (id=382): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 1m57.307183555s ago: executing program 35 (id=384): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_ethernet(0xd82, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 1m57.11079865s ago: executing program 6 (id=390): socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xbd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2217, 0x7721, 0x16, 0x0, 0x0) 1m57.08105437s ago: executing program 36 (id=390): socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xbd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2217, 0x7721, 0x16, 0x0, 0x0) 1m51.384820635s ago: executing program 37 (id=483): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x6b) pread64(r1, &(0x7f00000000c0)=""/23, 0x17, 0x1) 1m39.670781412s ago: executing program 38 (id=599): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="080935bde916"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 1m19.873441707s ago: executing program 39 (id=953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="f9", 0x1, 0x40, 0x0, 0x0) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) close(0x3) 1m11.501790511s ago: executing program 2 (id=1043): bpf$MAP_CREATE(0x0, 0x0, 0x50) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000009dd2e12a04000c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m11.407066293s ago: executing program 2 (id=1046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7fffffff}, &(0x7f00000002c0)=0x8) 1m11.341897774s ago: executing program 2 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x886c, 0x9, 0x349, 0x30000003, 0x80000005, 0x7, 0x6179, 0x3}) 1m11.253850356s ago: executing program 2 (id=1050): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0xc, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x7, 0x100]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100fbff}]) 1m10.821003576s ago: executing program 2 (id=1058): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) 1m10.539728722s ago: executing program 2 (id=1062): unshare(0x60600) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x3, 0x7, 0x0, 0x800, 0x9}, 0x0, 0x0, 0x0, 0x0) 1m10.484497583s ago: executing program 40 (id=1062): unshare(0x60600) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x3, 0x7, 0x0, 0x800, 0x9}, 0x0, 0x0, 0x0, 0x0) 1m3.964056506s ago: executing program 1 (id=1144): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xe}, 0x2000, 0x8b, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.734601501s ago: executing program 1 (id=1153): socket$inet(0x2, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m3.684300332s ago: executing program 1 (id=1156): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m3.379338289s ago: executing program 1 (id=1165): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m3.128621894s ago: executing program 1 (id=1168): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1m2.671347815s ago: executing program 1 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 1m2.668679695s ago: executing program 41 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 1m0.273210047s ago: executing program 6 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) unshare(0x2040400) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m0.13200773s ago: executing program 6 (id=1193): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 59.22230883s ago: executing program 6 (id=1211): getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 58.939334846s ago: executing program 6 (id=1216): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x900) 43.858918547s ago: executing program 42 (id=1216): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x900) 36.246145244s ago: executing program 7 (id=1482): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) 35.753520355s ago: executing program 7 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000c060101009bb2dab77954db5f00000a0900020073797a32000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) 35.683696937s ago: executing program 7 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 35.570026919s ago: executing program 7 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 35.54525256s ago: executing program 7 (id=1493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080) 34.942906163s ago: executing program 7 (id=1500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 34.942667143s ago: executing program 43 (id=1500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 13.964045604s ago: executing program 5 (id=1863): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 13.074557433s ago: executing program 5 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2a, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13.010878084s ago: executing program 5 (id=1875): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.967822486s ago: executing program 5 (id=1876): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$eJzs3E1oXEUcAPD/2yRN0g8ba622Vk2tYrCYtGm1PQhSUfCgIFZQjyEfJTZtpEnBlipbkHqUonfx6NWDV/VSxJPgtR4FKRTppa0grrzdt5/d3aTJJmvs7webnXnz3puZnTcv82aSDeC+NZz+SErhaxGxPSJyjTsMl95u37w4eefmxcnIFwon/kyKh91K45nsNLEli4zkInKfJtWEGgvnL5yamJubPpvFxxZPfzi2cP7C87MD2ZZjx44cPnT0xfEX7r1STfJL63Vrzyfze3e//v6VNyd7y9vLudXWo1OGY7hZUYqe6XRmXbatJpz0ttqrPmHzWhaIZRnIWqWv2P+3R0+0bLyIyK9jyYC1VigUCv2tk/OFRpfu2gJsWEl0uwRAd5R/0afPv+VXs4HAptrI9o4OQbrqxvHSA1Ba79vZK+LJ4sbyPEhfw/NtJw1HxHv5v75KX7FG8xAAALV+OF6Z/qkf/w2VVkb+Pnf15fT9gWzYNxQRD0bEjoh4KCJ2RsTDEbErIh6JiEcbzt8TEYU2+Q83xCv5Vxahctc7UM2WbhwfjJeyta3q+K+uAEM9WWxbRHnAPH0w+0xGoq9/ZnZu+lCbPH589dfPW6XVjv/SV5p/eSyYleN6b8ME3dTE4sSKK9zgxqWIPb2N9U96I5LKSkASEbsjYs8yzvdF9j5Us232uW/2ViJ99fsvXf+iQtN1tHZLFctU+Dri2VL756Ou/as5JnXrk6cnTk6fnD4zXlmfHBuIuemDYzMtS/PzL5ffapW2ZP2/+73xkNeOfn8i61mrl7b/5prrP8rrt9X6DyURSWW9dqHZWQba5nH5t89aPtOs9PrflLxTDJefSz+aWFw8eyhiU/LG3dvHq8eW4+l75Ev1H9nfvP/vyI5JP4nHIiK9iB+PiCei9ISYln1fRDwVEfvb1P+nV57+YOX1X1tp/aca7n+llq9r/+p6fatAkq0NNknqObXv2p0WN4/ltf+RYmgk2zJ1tdmZkrpbRKuSluc90i3/rPKzAwAAgI0iFxFba+aStkYuNzpamgPaGZtzc/MLiwdm5s+dmUrTIoaiLzczO1ec/yzNB/cl5fnPoZr4eEP8cDZv/GXPYDE+Ojk/N9XVmgNbin0+yY1GvNtT0/9Tf3Rmihn4L+vAOhqwQbXr/+kgfteVdSwMsK6W//v/6sdrWhBg3dX0/1b/4Z9v+ndfwIbn+R+oWvqLftwzYOMr6MtwX7un/n/AlwDC/0lvvF0J57paEmC9Gf/DfWnJ/+tfVaDQ3zxpIO7eOQban7AnVlaMwSZ5dSWQjqy6kvvgSo4qf5tCy30id28n7I/OtOnMKj+N/NmFk7s6fvEXsr+V73QLfrsu/bRZoCu3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI77NwAA///sotgS") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 12.707239971s ago: executing program 5 (id=1882): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x4, 0x6a}, 0x2c) 12.498973136s ago: executing program 5 (id=1888): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) unshare(0x400) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 12.498850046s ago: executing program 44 (id=1888): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) unshare(0x400) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 2.567284854s ago: executing program 8 (id=2063): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.480701076s ago: executing program 8 (id=2066): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2.166286172s ago: executing program 8 (id=2076): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r1, 0x309, 0x70bd27, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) 2.030653386s ago: executing program 8 (id=2081): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) 1.977719217s ago: executing program 8 (id=2084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.863219589s ago: executing program 8 (id=2086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 1.720347342s ago: executing program 0 (id=2088): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b1401"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.230868793s ago: executing program 9 (id=2102): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x101d0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) 1.230686603s ago: executing program 4 (id=2103): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230005) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(0x3) 1.040252387s ago: executing program 4 (id=2108): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 846.673031ms ago: executing program 0 (id=2111): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 846.072581ms ago: executing program 0 (id=2112): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 701.592195ms ago: executing program 0 (id=2113): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00001bf000/0x6000)=nil, 0x6000, 0x2, 0xc3032, 0xffffffffffffffff, 0x5f1d6000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) 701.346224ms ago: executing program 0 (id=2114): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)={0x1c, 0x2d, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpgid(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 642.790646ms ago: executing program 0 (id=2116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 363.043782ms ago: executing program 9 (id=2119): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4c6, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r0, 0x0, 0x9, 0x10001) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x4, 0x1000000000000}) 306.281913ms ago: executing program 9 (id=2120): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffff17cc040000000000007b0a00fe000000000f04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mount$9p_fd(0x0, 0x0, 0x0, 0x400, 0x0) 305.767573ms ago: executing program 3 (id=2131): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 250.828794ms ago: executing program 3 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}}}}}}}}, 0x0) 222.919525ms ago: executing program 9 (id=2122): setgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000080)='personality\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 219.653635ms ago: executing program 3 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x3, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x6}]}}}]}, 0x38}}, 0x4040000) 182.272836ms ago: executing program 4 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x6, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xf2ff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 180.000956ms ago: executing program 9 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 162.366956ms ago: executing program 3 (id=2126): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x37}, 0x28) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 131.127707ms ago: executing program 3 (id=2127): futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 93.222378ms ago: executing program 3 (id=2128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 92.363748ms ago: executing program 4 (id=2140): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1001000, &(0x7f0000000100), 0x4, 0xbda, &(0x7f0000000300)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 56.909959ms ago: executing program 9 (id=2130): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x6674, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, 0x0, 0xfe) 32.885149ms ago: executing program 4 (id=2132): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003980)='P', 0x1}], 0x1}}], 0x1, 0x4040084) 0s ago: executing program 4 (id=2133): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) kernel console output (not intermixed with test programs): bond1 (unregistering): Released all slaves [ 115.424429][ T7929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.449407][ T28] audit: type=1400 audit(1782926745.461:888): avc: denied { mounton } for pid=8826 comm="syz.6.1211" path="/2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 115.494482][ T28] audit: type=1400 audit(1782926745.501:889): avc: denied { write } for pid=8823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.566651][ T68] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.609438][ T68] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.705773][ T68] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.735652][ T68] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.758342][ T8835] loop8: detected capacity change from 0 to 512 [ 115.795228][ T8861] loop5: detected capacity change from 0 to 512 [ 115.813514][ T68] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.826127][ T8835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.839665][ T8835] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.854439][ T68] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.862544][ T8861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.881627][ T8861] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.936707][ T68] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.974953][ T68] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.022070][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.048652][ T7929] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.177678][ T8886] loop5: detected capacity change from 0 to 2048 [ 116.219805][ T8886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.311300][ T68] bridge_slave_1: left allmulticast mode [ 116.320806][ T68] bridge_slave_1: left promiscuous mode [ 116.326601][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.335830][ T68] bridge_slave_0: left allmulticast mode [ 116.341851][ T68] bridge_slave_0: left promiscuous mode [ 116.347613][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.490317][ T68] gretap0 (unregistering): left promiscuous mode [ 116.555819][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.575995][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.594813][ T68] bond0 (unregistering): Released all slaves [ 116.661728][ T68] veth1_to_team: left promiscuous mode [ 116.668459][ T68] veth0_to_hsr: left promiscuous mode [ 116.683141][ T68] hsr_slave_0: left promiscuous mode [ 116.699567][ T68] hsr_slave_1: left promiscuous mode [ 116.714721][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.733549][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.751483][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.766750][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.792567][ T68] veth1_macvtap: left promiscuous mode [ 116.798232][ T68] veth0_macvtap: left promiscuous mode [ 116.807282][ T68] veth1_vlan: left promiscuous mode [ 116.815714][ T68] veth0_vlan: left promiscuous mode [ 117.027086][ T68] team0 (unregistering): Port device team_slave_1 removed [ 117.056460][ T68] team0 (unregistering): Port device team_slave_0 removed [ 117.135074][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.146512][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.162935][ T8837] bridge_slave_0: entered allmulticast mode [ 117.172156][ T39] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.177588][ T8837] bridge_slave_0: entered promiscuous mode [ 117.198245][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 530 with error 28 [ 117.210992][ T39] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.210992][ T39] [ 117.221137][ T39] EXT4-fs (loop5): Total free blocks count 0 [ 117.228891][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.236354][ T39] EXT4-fs (loop5): Free/Dirty block details [ 117.242572][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.249820][ T39] EXT4-fs (loop5): free_blocks=4096 [ 117.255685][ T8837] bridge_slave_1: entered allmulticast mode [ 117.261998][ T39] EXT4-fs (loop5): dirty_blocks=560 [ 117.267960][ T8837] bridge_slave_1: entered promiscuous mode [ 117.274219][ T39] EXT4-fs (loop5): Block reservation details [ 117.282951][ T39] EXT4-fs (loop5): i_reserved_data_blocks=35 [ 117.298316][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 117.311490][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.328866][ T7929] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.370207][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.381900][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1232'. [ 117.420736][ T8837] team0: Port device team_slave_0 added [ 117.434759][ T8837] team0: Port device team_slave_1 added [ 117.507511][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.514565][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.559652][ T8977] loop8: detected capacity change from 0 to 1024 [ 117.566078][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.602344][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.602365][ T8977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.620882][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.683034][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.792761][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.838299][ T8837] hsr_slave_0: entered promiscuous mode [ 117.865423][ T8837] hsr_slave_1: entered promiscuous mode [ 117.892367][ T8837] debugfs: 'hsr0' already exists in 'hsr' [ 117.909787][ T8837] Cannot create hsr debugfs directory [ 118.019970][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 118.337601][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 118.635904][ T8837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.657569][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.666237][ T8837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.675507][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.684379][ T8837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.693186][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.701926][ T8837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.711130][ T8837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.769445][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.782311][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.791324][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.798489][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.810571][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.817740][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.005691][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.118434][ T8837] veth0_vlan: entered promiscuous mode [ 119.128411][ T8837] veth1_vlan: entered promiscuous mode [ 119.148093][ T8837] veth0_macvtap: entered promiscuous mode [ 119.156813][ T8837] veth1_macvtap: entered promiscuous mode [ 119.169183][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.181013][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.192489][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.201933][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.216347][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.225596][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.450934][ T9118] loop5: detected capacity change from 0 to 512 [ 119.475604][ T9118] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 119.510646][ T9123] loop7: detected capacity change from 0 to 1024 [ 119.575318][ T9123] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.638651][ T9123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.673521][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 119.673533][ T28] audit: type=1400 audit(1782926749.691:917): avc: denied { write } for pid=9122 comm="syz.7.1255" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.749941][ T4586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.811830][ T28] audit: type=1400 audit(1782926749.831:918): avc: denied { read } for pid=9150 comm="syz.7.1260" path="socket:[25390]" dev="sockfs" ino=25390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.951181][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1261'. [ 120.150800][ T9162] syzkaller0: entered promiscuous mode [ 120.159355][ T9162] syzkaller0: entered allmulticast mode [ 120.175269][ T9162] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 120.833234][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1273'. [ 120.865689][ T9188] netlink: 'syz.8.1275': attribute type 1 has an invalid length. [ 120.925630][ T9188] bond1: (slave geneve2): making interface the new active one [ 120.946412][ T9188] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 120.981795][ T3450] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.990306][ T3450] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.003254][ T3450] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.024069][ T3450] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.239075][ T28] audit: type=1400 audit(1782926751.251:919): avc: denied { write } for pid=9197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.323184][ T28] audit: type=1400 audit(1782926751.331:920): avc: denied { write } for pid=9219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.544651][ T9223] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 121.594239][ T9223] bond1 (unregistering): Released all slaves [ 121.724328][ T9236] loop0: detected capacity change from 0 to 512 [ 121.748904][ T9234] loop8: detected capacity change from 0 to 512 [ 121.765082][ T9236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.800066][ T9236] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.838390][ T9234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.884179][ T9234] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.897289][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.936445][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.322081][ T28] audit: type=1400 audit(1782926752.331:921): avc: denied { write } for pid=9255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.379947][ T28] audit: type=1400 audit(1782926752.381:922): avc: denied { write } for pid=9275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.481693][ T28] audit: type=1400 audit(1782926752.501:923): avc: denied { watch } for pid=9288 comm="syz.7.1303" path="/proc/420/task" dev="proc" ino=25919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 122.618812][ T28] audit: type=1400 audit(1782926752.631:924): avc: denied { write } for pid=9286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.700890][ T28] audit: type=1400 audit(1782926752.711:925): avc: denied { write } for pid=9307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.740886][ T9309] vhci_hcd vhci_hcd.4: invalid port number 255 [ 122.768722][ T9309] vhci_hcd vhci_hcd.4: invalid port number 255 [ 122.877254][ T28] audit: type=1326 audit(1782926752.891:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.5.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65b5e0de59 code=0x0 [ 123.919964][ T9344] mmap: syz.5.1317 (9344) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.967165][ T9347] xt_hashlimit: size too large, truncated to 1048576 [ 124.564425][ T9356] loop7: detected capacity change from 0 to 2048 [ 124.607479][ T9354] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 124.647515][ T9354] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 124.676259][ T9354] EXT4-fs (loop7): This should not happen!! Data will be lost [ 124.676259][ T9354] [ 124.695598][ T9354] EXT4-fs (loop7): Total free blocks count 0 [ 124.707083][ T9354] EXT4-fs (loop7): Free/Dirty block details [ 124.718365][ T9354] EXT4-fs (loop7): free_blocks=2415919504 [ 124.731924][ T9354] EXT4-fs (loop7): dirty_blocks=32 [ 124.744935][ T9354] EXT4-fs (loop7): Block reservation details [ 124.756826][ T9354] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 124.783433][ T9356] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 124.796077][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 124.796089][ T28] audit: type=1400 audit(1782926754.801:928): avc: denied { write } for pid=9354 comm="syz.7.1320" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.839484][ T9356] EXT4-fs (loop7): This should not happen!! Data will be lost [ 124.839484][ T9356] [ 124.864675][ T28] audit: type=1400 audit(1782926754.801:929): avc: denied { write } for pid=9354 comm="syz.7.1320" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.938765][ T4586] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.268979][ T9395] loop8: detected capacity change from 0 to 512 [ 125.296551][ T9395] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.323672][ T28] audit: type=1400 audit(1782926755.341:930): avc: denied { write } for pid=9394 comm="syz.8.1345" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.871875][ T9408] netlink: 'syz.5.1338': attribute type 8 has an invalid length. [ 125.884959][ T39] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 125.899757][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 125.936742][ T9408] veth1_to_team: entered promiscuous mode [ 125.960045][ T9408] gretap0: entered promiscuous mode [ 125.969330][ T9408] veth1_to_team: left promiscuous mode [ 125.976326][ T9408] gretap0: left promiscuous mode [ 126.044051][ T9411] netlink: 'syz.7.1340': attribute type 1 has an invalid length. [ 126.081331][ T9411] bond1: (slave geneve2): making interface the new active one [ 126.101240][ T9411] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.110483][ T3450] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.119163][ T49] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.144757][ T49] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.154447][ T49] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 126.358852][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 126.639316][ T9402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.002049][ T9558] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 128.028743][ T28] audit: type=1400 audit(1782926758.041:931): avc: denied { watch watch_reads } for pid=9560 comm="syz.5.1357" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 128.107496][ T9558] bond1: (slave geneve2): making interface the new active one [ 128.130061][ T9558] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 128.153016][ T9542] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 128.165293][ T9542] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 128.200546][ T9542] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 128.218324][ T9542] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 128.231953][ T9567] syzkaller1: entered promiscuous mode [ 128.247570][ T9567] syzkaller1: entered allmulticast mode [ 128.378616][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1377'. [ 128.391994][ T28] audit: type=1400 audit(1782926758.401:932): avc: denied { write } for pid=9572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.468013][ T28] audit: type=1400 audit(1782926758.481:933): avc: denied { mount } for pid=9593 comm="syz.8.1369" name="/" dev="hugetlbfs" ino=26926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 128.535094][ T28] audit: type=1400 audit(1782926758.511:934): avc: denied { open } for pid=9595 comm="syz.7.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.582608][ T9605] syzkaller1: entered promiscuous mode [ 128.594400][ T28] audit: type=1400 audit(1782926758.511:935): avc: denied { kernel } for pid=9595 comm="syz.7.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.620822][ T9605] syzkaller1: entered allmulticast mode [ 128.654405][ T28] audit: type=1400 audit(1782926758.511:936): avc: denied { tracepoint } for pid=9595 comm="syz.7.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 128.697920][ T28] audit: type=1400 audit(1782926758.521:937): avc: denied { write } for pid=9597 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.830891][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1379'. [ 128.895363][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1379'. [ 129.044128][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.051615][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.203331][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.215595][ T9623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.309900][ T9544] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.320329][ T9544] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.332352][ T9544] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.353049][ T9544] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.636816][ T9656] syzkaller1: entered promiscuous mode [ 129.642680][ T9656] syzkaller1: entered allmulticast mode [ 129.822537][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 129.822551][ T28] audit: type=1400 audit(1782926759.841:943): avc: denied { bind } for pid=9675 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.880269][ T9667] loop7: detected capacity change from 0 to 512 [ 129.891888][ T28] audit: type=1400 audit(1782926759.841:944): avc: denied { name_bind } for pid=9675 comm="syz.0.1392" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 129.940936][ T9681] xt_connbytes: Forcing CT accounting to be enabled [ 129.953764][ T28] audit: type=1400 audit(1782926759.841:945): avc: denied { node_bind } for pid=9675 comm="syz.0.1392" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 130.003244][ T9667] EXT4-fs mount: 4 callbacks suppressed [ 130.003288][ T9667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.031403][ T9667] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.035480][ T28] audit: type=1400 audit(1782926759.881:946): avc: denied { write } for pid=9677 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.136200][ T4586] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.157464][ T28] audit: type=1400 audit(1782926760.171:947): avc: denied { write } for pid=9685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.209047][ T28] audit: type=1400 audit(1782926760.221:948): avc: denied { write } for pid=9700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.570809][ T28] audit: type=1400 audit(1782926760.581:949): avc: denied { write } for pid=9706 comm="syz.0.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.667106][ T9716] loop5: detected capacity change from 0 to 4096 [ 130.696282][ T9716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.737817][ T28] audit: type=1400 audit(1782926760.751:950): avc: denied { write } for pid=9715 comm="syz.5.1400" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.789057][ T7929] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 130.804131][ T28] audit: type=1400 audit(1782926760.781:951): avc: denied { append } for pid=9715 comm="syz.5.1400" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.828168][ T28] audit: type=1400 audit(1782926760.801:952): avc: denied { write } for pid=7929 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.855837][ T7929] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 130.934386][ T9403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.944650][ T9544] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.983904][ T9544] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.081190][ T9544] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.180427][ T9544] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.212890][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.232241][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.239503][ T9717] bridge_slave_0: entered allmulticast mode [ 131.246335][ T9717] bridge_slave_0: entered promiscuous mode [ 131.253236][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.260412][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.267828][ T9717] bridge_slave_1: entered allmulticast mode [ 131.274730][ T9717] bridge_slave_1: entered promiscuous mode [ 131.303985][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.315726][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.382905][ T9717] team0: Port device team_slave_0 added [ 131.403871][ T9717] team0: Port device team_slave_1 added [ 131.436935][ T9544] bridge_slave_1: left allmulticast mode [ 131.442857][ T9544] bridge_slave_1: left promiscuous mode [ 131.448526][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.457540][ T9544] bridge_slave_0: left allmulticast mode [ 131.465577][ T9544] bridge_slave_0: left promiscuous mode [ 131.478962][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.562624][ T9544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.573039][ T9544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.583945][ T9544] bond0 (unregistering): Released all slaves [ 131.597080][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.604282][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.630624][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.643603][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.654371][ T9544] hsr_slave_0: left promiscuous mode [ 131.660025][ T9544] hsr_slave_1: left promiscuous mode [ 131.665850][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.673535][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.681155][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.688539][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.699354][ T9544] veth1_macvtap: left promiscuous mode [ 131.705340][ T9544] veth0_macvtap: left promiscuous mode [ 131.711032][ T9544] veth1_vlan: left promiscuous mode [ 131.717445][ T9544] veth0_vlan: left promiscuous mode [ 131.863373][ T9544] team0 (unregistering): Port device team_slave_1 removed [ 131.873931][ T9544] team0 (unregistering): Port device team_slave_0 removed [ 131.950714][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.968853][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.996489][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.045795][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1414'. [ 132.118531][ T9717] hsr_slave_0: entered promiscuous mode [ 132.124850][ T9717] hsr_slave_1: entered promiscuous mode [ 132.130743][ T9717] debugfs: 'hsr0' already exists in 'hsr' [ 132.137599][ T9717] Cannot create hsr debugfs directory [ 132.308193][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.330707][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.340685][ T9736] bridge_slave_0: entered allmulticast mode [ 132.347837][ T9736] bridge_slave_0: entered promiscuous mode [ 132.355873][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 132.408143][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.428784][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.464103][ T9736] bridge_slave_1: entered allmulticast mode [ 132.485244][ T9736] bridge_slave_1: entered promiscuous mode [ 132.553555][ T9736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.585940][ T9736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.625973][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.658457][ T9736] team0: Port device team_slave_0 added [ 132.667276][ T9820] loop0: detected capacity change from 0 to 32768 [ 132.684610][ T9736] team0: Port device team_slave_1 added [ 132.712921][ T9820] loop0: p1 p3 < > [ 132.714351][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.726315][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.762803][ T9736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.813865][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.824544][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.874020][ T9736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.985638][ T9736] hsr_slave_0: entered promiscuous mode [ 132.996125][ T7151] udevd[7151]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 132.998376][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 133.026408][ T9736] hsr_slave_1: entered promiscuous mode [ 133.059304][ T9736] debugfs: 'hsr0' already exists in 'hsr' [ 133.065261][ T9736] Cannot create hsr debugfs directory [ 133.088382][ T9859] loop8: detected capacity change from 0 to 1024 [ 133.112780][ T9859] EXT4-fs: Ignoring removed orlov option [ 133.132442][ T9859] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.147590][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 133.180266][ T9717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.204846][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.219488][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.248066][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 133.286727][ T9875] ip6erspan0: entered promiscuous mode [ 133.293664][ T9717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.303241][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.312326][ T9717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.323060][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.345911][ T9717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 133.356100][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.490381][ T9544] bridge_slave_1: left allmulticast mode [ 133.496135][ T9544] bridge_slave_1: left promiscuous mode [ 133.502385][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.512656][ T9544] bridge_slave_0: left allmulticast mode [ 133.518591][ T9544] bridge_slave_0: left promiscuous mode [ 133.533109][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.616670][ T9544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.633971][ T9544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.651279][ T9544] bond0 (unregistering): Released all slaves [ 133.713503][ T9544] hsr_slave_0: left promiscuous mode [ 133.719179][ T9544] hsr_slave_1: left promiscuous mode [ 133.736782][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.747998][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.787595][ T9544] team0 (unregistering): Port device team_slave_1 removed [ 133.798176][ T9544] team0 (unregistering): Port device team_slave_0 removed [ 133.907571][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.920110][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.935631][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.942748][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.967719][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.974815][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.994755][ T9717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.006109][ T9717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.173054][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.298118][ T9717] veth0_vlan: entered promiscuous mode [ 134.323012][ T9717] veth1_vlan: entered promiscuous mode [ 134.355868][ T9717] veth0_macvtap: entered promiscuous mode [ 134.369442][ T9717] veth1_macvtap: entered promiscuous mode [ 134.393685][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.424605][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.442158][ T3450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.457339][ T3450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.483228][ T3450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.502876][ T3450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.548653][ T9736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.586091][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.612672][ T9736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.643458][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.653916][ T9736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.694106][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.719269][ T9736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.752499][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.890113][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.937627][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.976970][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 134.977013][ T28] audit: type=1400 audit(1782926764.991:979): avc: denied { write } for pid=10062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.031361][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.038468][ T9546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.046136][ T28] audit: type=1400 audit(1782926765.051:980): avc: denied { write } for pid=10106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.061777][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.075050][ T9546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.225080][ T28] audit: type=1400 audit(1782926765.231:981): avc: denied { write } for pid=10111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.305377][ T9736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.318727][ T28] audit: type=1400 audit(1782926765.311:982): avc: denied { write } for pid=10144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.516436][T10200] vlan0: entered allmulticast mode [ 135.527712][T10200] bond0: entered allmulticast mode [ 135.539206][T10200] bond_slave_0: entered allmulticast mode [ 135.550939][T10200] bond_slave_1: entered allmulticast mode [ 135.556999][ T28] audit: type=1400 audit(1782926765.561:983): avc: denied { write } for pid=10183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.581888][T10200] dummy0: entered allmulticast mode [ 135.588922][T10200] bridge0: port 3(vlan0) entered blocking state [ 135.595671][T10200] bridge0: port 3(vlan0) entered disabled state [ 135.603870][T10200] vlan0: entered promiscuous mode [ 135.609829][T10200] bond0: entered promiscuous mode [ 135.615294][T10200] bond_slave_0: entered promiscuous mode [ 135.618457][ T28] audit: type=1400 audit(1782926765.631:984): avc: denied { write } for pid=10212 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.628327][T10200] bond_slave_1: entered promiscuous mode [ 135.652945][T10200] dummy0: entered promiscuous mode [ 135.658772][T10200] bridge0: port 3(vlan0) entered blocking state [ 135.665109][T10200] bridge0: port 3(vlan0) entered forwarding state [ 135.700874][T10209] bond0: (slave dummy0): Releasing backup interface [ 135.708300][T10209] dummy0: left promiscuous mode [ 135.714814][T10209] dummy0: left allmulticast mode [ 135.730488][T10209] bridge_slave_0: left allmulticast mode [ 135.736432][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.744640][ T28] audit: type=1400 audit(1782926765.761:985): avc: denied { write } for pid=10217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.769619][T10209] bridge_slave_1: left allmulticast mode [ 135.776800][T10209] bridge_slave_1: left promiscuous mode [ 135.782788][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.790175][ T28] audit: type=1400 audit(1782926765.801:986): avc: denied { write } for pid=10231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.815801][T10209] bond0: (slave bond_slave_0): Releasing backup interface [ 135.824246][T10209] bond_slave_0: left promiscuous mode [ 135.829864][T10209] bond_slave_0: left allmulticast mode [ 135.842206][T10209] bond0: (slave bond_slave_1): Releasing backup interface [ 135.851754][T10209] bond_slave_1: left promiscuous mode [ 135.857280][T10209] bond_slave_1: left allmulticast mode [ 135.875289][ T28] audit: type=1400 audit(1782926765.891:987): avc: denied { write } for pid=10233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.875298][T10209] team0: Port device team_slave_1 removed [ 135.912231][T10209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.918489][ T28] audit: type=1400 audit(1782926765.931:988): avc: denied { write } for pid=10244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.961244][ T9551] bridge0: port 3(vlan0) entered disabled state [ 136.068067][ T9736] veth0_vlan: entered promiscuous mode [ 136.077272][T10258] ipvlan0: entered promiscuous mode [ 136.083431][T10258] bridge0: port 1(ipvlan0) entered blocking state [ 136.090032][T10258] bridge0: port 1(ipvlan0) entered disabled state [ 136.097455][T10258] ipvlan0: entered allmulticast mode [ 136.103539][T10258] bridge0: entered allmulticast mode [ 136.116707][T10258] ipvlan0: left allmulticast mode [ 136.121900][T10258] bridge0: left allmulticast mode [ 136.145309][ T9736] veth1_vlan: entered promiscuous mode [ 136.161007][ T9736] veth0_macvtap: entered promiscuous mode [ 136.180283][ T9736] veth1_macvtap: entered promiscuous mode [ 136.199511][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.210336][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.226589][ T358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.235945][ T358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.258874][ T358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.272281][ T358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.340052][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1462'. [ 136.423398][T10277] loop5: detected capacity change from 0 to 1024 [ 136.436030][T10277] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.450648][T10277] EXT4-fs: Ignoring removed oldalloc option [ 136.478340][T10277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.504281][T10277] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.547085][T10277] netlink: 'syz.5.1463': attribute type 4 has an invalid length. [ 136.637748][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.953558][T10095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.111623][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 138.126008][T10332] loop5: detected capacity change from 0 to 512 [ 138.194760][T10332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.211129][T10332] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.379572][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.511383][T10308] veth1_macvtap: left allmulticast mode [ 138.599476][T10338] netlink: 'syz.7.1482': attribute type 4 has an invalid length. [ 138.620512][ T9538] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.647970][ T9538] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.668097][ T9538] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.691798][ T9538] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.721920][ T9538] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.745927][ T9538] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.761766][ T9538] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.770463][ T9538] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.039749][ T4586] team0: Port device syz_tun removed [ 139.109132][ T9538] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.123465][ T9538] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.135674][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1495'. [ 139.145487][ T9538] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.221215][ T9538] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.243197][ T9538] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.266532][T10386] loop0: detected capacity change from 0 to 1024 [ 139.274470][ T9538] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.295094][T10386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.313432][T10386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.329167][T10386] EXT4-fs: inline encryption not supported [ 139.341603][T10386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.350892][ T9538] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.366759][ T9538] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.387506][ T9538] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.407567][T10386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.432040][T10388] syzkaller1: entered promiscuous mode [ 139.435197][T10386] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.438559][T10388] syzkaller1: entered allmulticast mode [ 139.552208][ T9538] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.576778][ T9538] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.600697][ T9538] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 139.641450][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.724977][T10324] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 139.747126][T10324] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.779863][ T9538] bridge_slave_1: left allmulticast mode [ 139.792048][T10409] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 139.793769][ T9538] bridge_slave_1: left promiscuous mode [ 139.819735][T10409] SELinux: failed to load policy [ 139.828376][T10403] loop0: detected capacity change from 0 to 4096 [ 139.839688][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.841227][T10403] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 139.861439][ T9538] bridge_slave_0: left allmulticast mode [ 139.878767][ T9538] bridge_slave_0: left promiscuous mode [ 139.889544][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.006201][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 140.006214][ T28] audit: type=1400 audit(1782926770.021:1008): avc: denied { write } for pid=10426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.055258][ T9538] bond1 (unregistering): (slave geneve2): Releasing active interface [ 140.077436][ T9538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.087638][ T9538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.099067][ T9538] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 140.108541][ T9538] bond0 (unregistering): Released all slaves [ 140.121024][ T9538] bond1 (unregistering): Released all slaves [ 140.146028][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 140.209492][ T9538] hsr_slave_0: left promiscuous mode [ 140.216785][ T9538] hsr_slave_1: left promiscuous mode [ 140.222963][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.230394][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.239479][ T9538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.247006][ T9538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.258420][ T9538] veth1_macvtap: left promiscuous mode [ 140.264275][ T9538] veth0_macvtap: left promiscuous mode [ 140.345254][ T9538] team0 (unregistering): Port device team_slave_1 removed [ 140.357434][ T9538] team0 (unregistering): Port device team_slave_0 removed [ 140.495555][T10392] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.512312][T10392] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.519548][T10392] bridge_slave_0: entered allmulticast mode [ 140.531590][T10392] bridge_slave_0: entered promiscuous mode [ 140.546684][ T28] audit: type=1400 audit(1782926770.551:1009): avc: denied { write } for pid=10436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.551851][T10392] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.576973][T10392] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.585118][T10392] bridge_slave_1: entered allmulticast mode [ 140.591786][T10392] bridge_slave_1: entered promiscuous mode [ 140.615232][T10392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.625815][ T28] audit: type=1400 audit(1782926770.641:1010): avc: denied { write } for pid=10450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.627699][T10392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.675380][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 140.703376][T10392] team0: Port device team_slave_0 added [ 140.710712][T10392] team0: Port device team_slave_1 added [ 140.726386][T10392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.733560][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.759890][T10392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.771359][T10392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.778312][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.804223][T10392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.829910][T10392] hsr_slave_0: entered promiscuous mode [ 140.836142][T10392] hsr_slave_1: entered promiscuous mode [ 140.895402][ T28] audit: type=1400 audit(1782926770.911:1011): avc: denied { write } for pid=10454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.935424][ T28] audit: type=1400 audit(1782926770.951:1012): avc: denied { write } for pid=10466 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.968369][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 141.034230][ T28] audit: type=1400 audit(1782926771.051:1013): avc: denied { write } for pid=10469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.057538][ T28] audit: type=1400 audit(1782926771.071:1014): avc: denied { write } for pid=10480 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.065320][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 141.147997][ T28] audit: type=1400 audit(1782926771.161:1015): avc: denied { write } for pid=10484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.171346][ T28] audit: type=1400 audit(1782926771.181:1016): avc: denied { write } for pid=10495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.225614][ T28] audit: type=1400 audit(1782926771.241:1017): avc: denied { write } for pid=10497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.308797][T10392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.317805][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.326058][T10392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.336091][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.343738][T10392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.359723][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.367676][T10392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.376192][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.412153][T10392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.424382][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.435455][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.442588][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.455368][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.462570][ T9538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.578053][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.692973][T10392] veth0_vlan: entered promiscuous mode [ 141.701805][T10392] veth1_vlan: entered promiscuous mode [ 141.718072][T10392] veth0_macvtap: entered promiscuous mode [ 141.725761][T10392] veth1_macvtap: entered promiscuous mode [ 141.737167][T10392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.748750][T10392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.759808][ T358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.769649][ T358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.786312][ T358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.795664][ T358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.919074][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.926577][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.784774][T10620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.794977][T10620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.817892][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.829381][ T9551] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.844302][ T9551] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.869418][ T9551] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.883097][ T9551] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.892253][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 143.072918][T10811] loop0: detected capacity change from 0 to 1024 [ 143.107835][T10811] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.118921][T10811] EXT4-fs: Ignoring removed oldalloc option [ 143.159199][T10811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.171604][T10811] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.204371][T10811] netlink: 'syz.0.1521': attribute type 4 has an invalid length. [ 143.273515][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.341744][T10836] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 143.353414][T10836] bond1 (unregistering): Released all slaves [ 143.479769][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.547673][T10853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.558146][T10869] tmpfs: Bad value for 'mpol' [ 143.562722][T10853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.640385][ T9538] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.649785][ T9538] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.659748][ T9538] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.669535][ T9538] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.690581][T10869] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 143.720962][ T9538] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.725499][T10874] loop3: detected capacity change from 0 to 1024 [ 143.739288][T10874] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.744153][ T9538] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.784002][T10874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.797696][ T9538] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806937][ T9538] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 143.905298][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.947422][T10891] loop3: detected capacity change from 0 to 1024 [ 143.954467][T10891] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.969703][T10891] EXT4-fs: Ignoring removed oldalloc option [ 143.982768][T10891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.995294][T10891] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.012853][T10891] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 144.052632][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.053737][T10895] netlink: 'syz.0.1539': attribute type 3 has an invalid length. [ 144.069866][T10895] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1539'. [ 144.750341][T10935] SELinux: failed to load policy [ 144.989629][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1567'. [ 145.008592][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1567'. [ 145.026306][T10958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1567'. [ 145.144799][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 145.144822][ T28] audit: type=1400 audit(1782926775.161:1040): avc: denied { watch watch_reads } for pid=10973 comm="syz.8.1571" path="/283/file0" dev="tmpfs" ino=1492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.285286][T10985] loop8: detected capacity change from 0 to 1024 [ 145.302864][T10985] EXT4-fs: Ignoring removed bh option [ 145.325458][T10985] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.366238][ T28] audit: type=1400 audit(1782926775.381:1041): avc: denied { write } for pid=10984 comm="syz.8.1575" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.417426][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.526854][T10996] loop5: detected capacity change from 0 to 1024 [ 145.586177][T10996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.630157][ T28] audit: type=1400 audit(1782926775.641:1042): avc: denied { write } for pid=10995 comm="syz.5.1578" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.719791][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.943837][ T28] audit: type=1400 audit(1782926775.961:1043): avc: denied { write } for pid=11004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.010518][ T28] audit: type=1400 audit(1782926776.011:1044): avc: denied { write } for pid=11016 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.100827][T11026] loop4: detected capacity change from 0 to 1024 [ 146.111870][T11026] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.126349][T11026] EXT4-fs: Ignoring removed oldalloc option [ 146.167262][T11026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.190103][T11026] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.218548][T11026] netlink: 'syz.4.1585': attribute type 4 has an invalid length. [ 146.239878][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.247479][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.374438][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.386437][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.458918][T11037] syzkaller1: entered promiscuous mode [ 146.467921][T11037] syzkaller1: entered allmulticast mode [ 146.485167][ T9538] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.485790][T10392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.494309][ T9538] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.513741][ T9538] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.546214][ T9538] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.783130][ T28] audit: type=1400 audit(1782926776.801:1045): avc: denied { write } for pid=11045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.794713][T11047] loop5: detected capacity change from 0 to 512 [ 146.854917][ T28] audit: type=1400 audit(1782926776.861:1046): avc: denied { write } for pid=11060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.893632][T11047] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 1: comm syz.5.1590: invalid block [ 146.898225][T11052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.917408][T11052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.940831][T11047] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 146.943121][T11047] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1590: couldn't read orphan inode 11 (err -117) [ 146.952581][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 146.952621][ C1] EXT4-fs (loop5): initial error at time 1782926776: __ext4_iget:5533: inode 11: block 1 [ 146.952863][ C1] EXT4-fs (loop5): last error at time 1782926776: __ext4_iget:5533: inode 11: block 1 [ 146.995976][T11047] loop5: lost filesystem error report for type 5 error -117 [ 147.002581][T11047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.080317][ T28] audit: type=1400 audit(1782926777.091:1047): avc: denied { mac_admin } for pid=11046 comm="syz.5.1590" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.080447][T11047] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 147.120024][T11047] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 147.124627][ T28] audit: type=1400 audit(1782926777.131:1048): avc: denied { relabelto } for pid=11046 comm="syz.5.1590" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 147.193205][ T28] audit: type=1400 audit(1782926777.131:1049): avc: denied { write } for pid=11063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.220515][ T9736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.817005][T11155] loop3: detected capacity change from 0 to 1024 [ 147.883621][T11155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.944874][T11155] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 148.000161][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.130122][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 148.149786][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 148.150948][ T358] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.168127][ T358] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.196994][ T358] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.217399][T11212] VFS: Mount too revealing [ 148.228999][ T358] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.724439][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1621'. [ 148.745664][T11236] syz_tun: entered allmulticast mode [ 148.751589][T11233] syz_tun: left allmulticast mode [ 148.865823][T11242] SELinux: failed to load policy [ 148.916991][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.928218][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.949168][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.970850][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.127802][T11264] loop8: detected capacity change from 0 to 512 [ 149.137432][T11264] EXT4-fs: Ignoring removed bh option [ 149.143993][T11264] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 149.155260][T11264] EXT4-fs (loop8): 1 truncate cleaned up [ 149.182737][T11264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.255141][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.857236][ T42] Bluetooth: hci1: sending frame failed (-49) [ 149.864263][ T3777] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 149.963502][T11310] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1654'. [ 150.577942][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 150.577957][ T28] audit: type=1400 audit(1782926780.591:1089): avc: denied { create } for pid=11334 comm="syz.8.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.605687][ T28] audit: type=1400 audit(1782926780.601:1090): avc: denied { read } for pid=11334 comm="syz.8.1664" path="socket:[32370]" dev="sockfs" ino=32370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.652919][T11338] syzkaller0: entered promiscuous mode [ 150.658496][T11338] syzkaller0: entered allmulticast mode [ 150.742985][T11340] netlink: 165 bytes leftover after parsing attributes in process `syz.8.1666'. [ 150.795602][T11344] loop0: detected capacity change from 0 to 256 [ 150.814171][T11344] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.876220][T11348] loop0: detected capacity change from 0 to 128 [ 150.894746][ T28] audit: type=1400 audit(1782926780.911:1091): avc: denied { connect } for pid=11347 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.943071][ T28] audit: type=1400 audit(1782926780.911:1092): avc: denied { write } for pid=11347 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.109045][T11361] loop8: detected capacity change from 0 to 2048 [ 151.157060][T11361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.170203][T11361] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.186317][ T28] audit: type=1400 audit(1782926781.201:1093): avc: denied { write } for pid=11359 comm="syz.8.1676" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.234505][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.300849][ T4198] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.306964][ T3777] Bluetooth: hci0: command 0x1003 tx timeout [ 151.467904][ T28] audit: type=1400 audit(1782926781.481:1094): avc: denied { connect } for pid=11388 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.515831][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1686'. [ 151.888818][ T28] audit: type=1400 audit(1782926781.901:1095): avc: denied { create } for pid=11422 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.931629][ T28] audit: type=1400 audit(1782926781.931:1096): avc: denied { write } for pid=11422 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.030076][ T28] audit: type=1400 audit(1782926782.021:1097): avc: denied { write } for pid=11416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.117170][ T28] audit: type=1400 audit(1782926782.111:1098): avc: denied { write } for pid=11450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.187773][T11465] loop4: detected capacity change from 0 to 512 [ 152.212512][T11465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.246139][T11465] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.276522][T11472] syzkaller0: entered promiscuous mode [ 152.282987][T11472] syzkaller0: entered allmulticast mode [ 152.334863][T10392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.639408][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 153.298735][T11574] loop5: detected capacity change from 0 to 512 [ 153.358915][T11574] EXT4-fs: dax option not supported [ 153.792075][T11597] syzkaller1: entered allmulticast mode [ 153.830173][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.839580][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.926727][T11605] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1732'. [ 153.964411][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 153.973825][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 153.987874][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 153.997209][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 154.077894][T11609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1737'. [ 154.337661][T11635] loop4: detected capacity change from 0 to 512 [ 154.353161][T11635] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.1742: invalid block [ 154.364955][T11635] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.370560][T11635] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1742: couldn't read orphan inode 11 (err -117) [ 154.370823][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 154.370861][ C1] EXT4-fs (loop4): initial error at time 1782926784: __ext4_iget:5533: inode 11: block 1 [ 154.370950][ C1] EXT4-fs (loop4): last error at time 1782926784: __ext4_iget:5533: inode 11: block 1 [ 154.421248][T11635] loop4: lost filesystem error report for type 5 error -117 [ 154.423814][T11635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.509424][T11635] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 154.545994][T10392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.558225][T11641] loop5: detected capacity change from 0 to 1024 [ 154.566762][T11641] EXT4-fs: Ignoring removed orlov option [ 154.572731][T11641] EXT4-fs: Ignoring removed orlov option [ 154.578702][T11641] EXT4-fs: Ignoring removed orlov option [ 154.585060][T11641] EXT4-fs: inline encryption not supported [ 154.601962][T11641] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 154.625564][T11641] loop5: detected capacity change from 0 to 128 [ 154.634545][T11641] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.651122][T11641] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.716920][ T9536] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.851129][T11663] loop8: detected capacity change from 0 to 164 [ 154.866149][T11663] rock: directory entry would overflow storage [ 154.878307][T11663] rock: sig=0x5252, size=5, remaining=3 [ 155.112610][T11688] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1757'. [ 155.184467][T11673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.207848][T11673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.791611][T11746] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1765'. [ 156.070408][T11762] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 156.347774][T11783] netlink: 'syz.0.1782': attribute type 9 has an invalid length. [ 156.599019][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 156.599034][ T28] audit: type=1400 audit(1782926786.611:1115): avc: denied { write } for pid=11796 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 156.629864][T11801] loop0: detected capacity change from 0 to 512 [ 156.674096][T11801] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1788: invalid indirect mapped block 4294967295 (level 1) [ 156.700083][T11801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.700275][T11801] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1788: invalid indirect mapped block 4294967295 (level 1) [ 156.709479][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 156.709504][ C1] EXT4-fs (loop0): initial error at time 1782926786: ext4_free_branches:1023: inode 11 [ 156.709542][ C1] EXT4-fs (loop0): last error at time 1782926786: ext4_free_branches:1023: inode 11 [ 156.781070][T11801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.781348][T11801] EXT4-fs (loop0): 2 truncates cleaned up [ 156.807870][T11801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.814842][T11812] 8021q: VLANs not supported on ip_vti0 [ 156.878138][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.991165][ T28] audit: type=1400 audit(1782926787.011:1116): avc: denied { connect } for pid=11821 comm="syz.5.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.043778][ T28] audit: type=1400 audit(1782926787.061:1117): avc: denied { ioctl } for pid=11821 comm="syz.5.1799" path="socket:[33527]" dev="sockfs" ino=33527 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.213283][ T28] audit: type=1400 audit(1782926787.231:1118): avc: denied { listen } for pid=11839 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.270813][ T28] audit: type=1400 audit(1782926787.251:1119): avc: denied { accept } for pid=11839 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.347039][T11846] syzkaller0: entered promiscuous mode [ 157.352860][T11846] syzkaller0: entered allmulticast mode [ 157.360078][T11846] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 157.809996][ T28] audit: type=1400 audit(1782926787.821:1120): avc: denied { sys_module } for pid=11866 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.901275][T11863] loop0: detected capacity change from 0 to 512 [ 157.939362][T11863] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 1: comm syz.0.1818: invalid block [ 157.976934][T11863] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.977511][T11863] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1818: couldn't read orphan inode 11 (err -117) [ 157.986842][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 157.986880][ C0] EXT4-fs (loop0): initial error at time 1782926787: __ext4_iget:5533: inode 11: block 1 [ 157.986972][ C0] EXT4-fs (loop0): last error at time 1782926787: __ext4_iget:5533: inode 11: block 1 [ 158.047711][T11863] loop0: lost filesystem error report for type 5 error -117 [ 158.052734][T11863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.121489][T11863] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 158.222018][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.317208][T11866] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.340159][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.358179][T11866] bridge_slave_0: entered allmulticast mode [ 158.382348][T11866] bridge_slave_0: entered promiscuous mode [ 158.405981][T11866] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.434166][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.461619][T11866] bridge_slave_1: entered allmulticast mode [ 158.476630][T11866] bridge_slave_1: entered promiscuous mode [ 158.536367][T11866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.568722][T11866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.600797][T11866] team0: Port device team_slave_0 added [ 158.607299][T11866] team0: Port device team_slave_1 added [ 158.649471][T11866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.664104][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.702814][T11866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.744971][ T28] audit: type=1400 audit(1782926788.761:1121): avc: denied { name_bind } for pid=11907 comm="syz.3.1831" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 158.778928][T11866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.792790][T11866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.822487][T11866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.897192][T11866] hsr_slave_0: entered promiscuous mode [ 158.903589][T11866] hsr_slave_1: entered promiscuous mode [ 158.909840][T11866] debugfs: 'hsr0' already exists in 'hsr' [ 158.917194][T11866] Cannot create hsr debugfs directory [ 158.947008][T11915] loop3: detected capacity change from 0 to 512 [ 158.967110][T11915] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.1834: invalid block [ 158.985013][T11915] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.985750][T11915] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1834: couldn't read orphan inode 11 (err -117) [ 158.995161][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 158.995192][ C1] EXT4-fs (loop3): initial error at time 1782926789: __ext4_iget:5533: inode 11: block 1 [ 158.995371][ C1] EXT4-fs (loop3): last error at time 1782926789: __ext4_iget:5533: inode 11: block 1 [ 159.034102][T11915] loop3: lost filesystem error report for type 5 error -117 [ 159.038439][T11915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.074563][T11915] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 159.140330][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.335976][T11866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.345500][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.353772][T11866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.362850][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.375715][T11866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.385727][T11939] loop3: detected capacity change from 0 to 256 [ 159.387015][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.394379][T11939] FAT-fs (loop3): Directory bread(block 1285) failed [ 159.400143][T11866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.412693][T11939] FAT-fs (loop3): Directory bread(block 1286) failed [ 159.425307][T11939] FAT-fs (loop3): Directory bread(block 1287) failed [ 159.427519][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.434382][T11866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.448338][T11939] FAT-fs (loop3): Directory bread(block 1288) failed [ 159.457966][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.464983][T11939] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 159.518999][T11866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.538874][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.551992][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.559085][ T9536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.575222][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.582322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.597108][T11953] loop3: detected capacity change from 0 to 164 [ 159.607201][T11953] rock: directory entry would overflow storage [ 159.615169][T11953] rock: sig=0x5252, size=5, remaining=3 [ 159.791689][T11866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.937487][T11866] veth0_vlan: entered promiscuous mode [ 159.954531][T11866] veth1_vlan: entered promiscuous mode [ 159.982767][T11866] veth0_macvtap: entered promiscuous mode [ 159.990255][T11866] veth1_macvtap: entered promiscuous mode [ 160.001117][T11866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.012869][T11866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.026536][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.036279][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.063076][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.091719][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.159951][T12008] loop8: detected capacity change from 0 to 4096 [ 160.171007][T12008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.191525][ T28] audit: type=1400 audit(1782926790.211:1122): avc: denied { write } for pid=12004 comm="syz.8.1854" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.222428][ T5065] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 160.234307][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.244256][ T5065] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.373924][ T28] audit: type=1400 audit(1782926790.391:1123): avc: denied { create } for pid=12033 comm="syz.5.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 160.392006][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 160.650398][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.674897][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.242929][T12154] loop4: detected capacity change from 0 to 512 [ 161.265887][T12156] loop3: detected capacity change from 0 to 1024 [ 161.273703][T12156] EXT4-fs: Ignoring removed orlov option [ 161.281183][T12156] EXT4-fs: Ignoring removed orlov option [ 161.287272][T12156] EXT4-fs: Ignoring removed orlov option [ 161.294564][T12156] EXT4-fs: inline encryption not supported [ 161.312609][T12156] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 161.313082][T12154] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.1872: corrupted xattr block 95: invalid header [ 161.336606][T12154] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.336830][T12154] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1872: bg 0: block 7: invalid block bitmap [ 161.346073][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 161.346105][ C1] EXT4-fs (loop4): initial error at time 1782926791: ext4_expand_extra_isize_ea:2810: inode 11 [ 161.346133][ C1] EXT4-fs (loop4): last error at time 1782926791: ext4_expand_extra_isize_ea:2810: inode 11 [ 161.400822][T12154] loop4: lost filesystem error report for type 5 error -117 [ 161.402103][T12154] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 161.423967][T12156] loop3: detected capacity change from 0 to 128 [ 161.437668][T12154] loop4: lost filesystem error report for type 5 error -117 [ 161.441923][T12154] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.1872: corrupted xattr block 95: invalid header [ 161.446225][T12156] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.461809][T12154] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.476187][T12154] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 161.497613][T12164] loop5: detected capacity change from 0 to 512 [ 161.497621][T12154] EXT4-fs (loop4): 1 orphan inode deleted [ 161.509760][T12156] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.520048][T12154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.554322][ T39] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.554732][T12164] EXT4-fs error (device loop5): ext4_quota_enable:7232: comm syz.5.1876: inode #262144: comm syz.5.1876: iget: illegal inode # [ 161.576604][T12164] loop5: lost filesystem error report for type 5 error -117 [ 161.578564][T12164] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.1876: Bad quota inode: 262144, type: 2 [ 161.585955][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 161.585980][ C1] EXT4-fs (loop5): initial error at time 1782926791: ext4_quota_enable:7232 [ 161.586005][ C1] EXT4-fs (loop5): last error at time 1782926791: ext4_quota_enable:7232 [ 161.621407][T12164] loop5: lost filesystem error report for type 5 error -117 [ 161.628448][T12164] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 161.654095][ T28] audit: type=1400 audit(1782926791.671:1124): avc: denied { write } for pid=12153 comm="syz.4.1872" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.676178][T12164] EXT4-fs (loop5): mount failed [ 161.705050][T11866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.833025][T12188] loop8: detected capacity change from 0 to 256 [ 161.848814][ T28] audit: type=1400 audit(1782926791.861:1125): avc: denied { read } for pid=12186 comm="syz.4.1885" path="socket:[35132]" dev="sockfs" ino=35132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.929234][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.984971][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.026580][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.036556][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.054096][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.122654][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.162654][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b200a00: rx timeout, send abort [ 162.226915][ T39] bridge_slave_1: left allmulticast mode [ 162.232769][ T39] bridge_slave_1: left promiscuous mode [ 162.238984][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.246874][ T39] bridge_slave_0: left allmulticast mode [ 162.253070][ T39] bridge_slave_0: left promiscuous mode [ 162.258861][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.322203][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.333931][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.344119][ T39] bond0 (unregistering): Released all slaves [ 162.396465][T12196] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.404137][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.413730][T12196] bridge_slave_0: entered allmulticast mode [ 162.420262][T12196] bridge_slave_0: entered promiscuous mode [ 162.427959][T12196] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.435206][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.442824][T12196] bridge_slave_1: entered allmulticast mode [ 162.449708][T12196] bridge_slave_1: entered promiscuous mode [ 162.458223][ T28] audit: type=1400 audit(1782926792.471:1126): avc: denied { write } for pid=12214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.482985][ T39] hsr_slave_0: left promiscuous mode [ 162.486068][ T28] audit: type=1400 audit(1782926792.501:1127): avc: denied { write } for pid=12227 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.510685][ T39] hsr_slave_1: left promiscuous mode [ 162.516742][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.524413][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.532283][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.539717][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.549929][ T39] veth1_macvtap: left promiscuous mode [ 162.555877][ T39] veth0_macvtap: left promiscuous mode [ 162.561418][ T39] veth1_vlan: left promiscuous mode [ 162.566775][ T39] veth0_vlan: left promiscuous mode [ 162.637350][ T39] team0 (unregistering): Port device team_slave_1 removed [ 162.648151][ T39] team0 (unregistering): Port device team_slave_0 removed [ 162.662720][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881249b8000: rx timeout, send abort [ 162.671065][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b200a00: abort rx timeout. Force session deactivation [ 162.733823][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.753695][T12196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.764101][T12196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.801111][T12237] loop0: detected capacity change from 0 to 4096 [ 162.807164][T12196] team0: Port device team_slave_0 added [ 162.815072][T12237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.815179][T12196] team0: Port device team_slave_1 added [ 162.856860][T12196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.864162][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.896131][T12196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.899912][ T28] audit: type=1400 audit(1782926792.911:1128): avc: denied { write } for pid=12236 comm="syz.0.1905" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.907668][T12196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.936210][T12196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.972967][T12196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.985123][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.030164][T12244] gre1: entered promiscuous mode [ 163.081752][T12196] hsr_slave_0: entered promiscuous mode [ 163.095381][T12196] hsr_slave_1: entered promiscuous mode [ 163.106486][T12196] debugfs: 'hsr0' already exists in 'hsr' [ 163.120634][T12248] loop0: detected capacity change from 0 to 1024 [ 163.133347][T12196] Cannot create hsr debugfs directory [ 163.143527][T12248] EXT4-fs: Ignoring removed orlov option [ 163.171050][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881249b8000: abort rx timeout. Force session deactivation [ 163.184386][ T28] audit: type=1400 audit(1782926793.201:1129): avc: denied { write } for pid=12250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.209946][T12248] EXT4-fs: Ignoring removed orlov option [ 163.219714][T12248] EXT4-fs: Ignoring removed orlov option [ 163.235624][T12248] EXT4-fs: inline encryption not supported [ 163.264733][T12248] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 163.274113][ T28] audit: type=1400 audit(1782926793.291:1130): avc: denied { write } for pid=12264 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.300396][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1899'. [ 163.326888][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.355983][T12248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.361206][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1899'. [ 163.391563][T12248] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.434832][ T9551] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.483117][ T28] audit: type=1400 audit(1782926793.501:1131): avc: denied { write } for pid=12273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.536377][ T28] audit: type=1400 audit(1782926793.551:1132): avc: denied { write } for pid=12288 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.574078][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.711405][T12296] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.741777][ T28] audit: type=1400 audit(1782926793.761:1133): avc: denied { write } for pid=12293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.813044][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 163.890368][T12196] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.900290][T12196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.912863][T12196] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.926945][T12196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.940043][T12196] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.949498][T12196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.958218][T12196] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.968593][T12196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.007324][T12196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.022103][T12196] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.031726][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.038807][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.051438][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.058520][ T9536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.166713][T12346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.211736][T12346] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1911: corrupted in-inode xattr: invalid ea_ino [ 164.230552][T12346] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.230795][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 164.232941][T12196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.240074][ C0] EXT4-fs (loop3): initial error at time 1782926794: ext4_iget_extra_inode:5180: inode 15 [ 164.263616][ C0] EXT4-fs (loop3): last error at time 1782926794: ext4_iget_extra_inode:5180: inode 15 [ 164.278286][T12346] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1911: couldn't read orphan inode 15 (err -117) [ 164.291112][T12346] loop3: lost filesystem error report for type 5 error -117 [ 164.294521][T12346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.347480][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.448140][T12196] veth0_vlan: entered promiscuous mode [ 164.474702][T12196] veth1_vlan: entered promiscuous mode [ 164.490696][T12196] veth0_macvtap: entered promiscuous mode [ 164.504636][T12196] veth1_macvtap: entered promiscuous mode [ 164.516058][T12196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.527345][T12417] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 164.528621][T12196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.553153][T12417] bond1: entered promiscuous mode [ 164.558549][T12417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.568730][ T9551] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.582208][T12417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.589442][T12417] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 164.600141][T12417] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 164.612001][T12417] bond1: (slave vti0): making interface the new active one [ 164.619296][T12417] vti0: entered promiscuous mode [ 164.626753][T12417] bond1: (slave vti0): Enslaving as an active interface with an up link [ 164.635463][ T9551] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.644466][ T9551] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.658714][ T9551] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.775060][T12451] set_capacity_and_notify: 3 callbacks suppressed [ 164.775075][T12451] loop4: detected capacity change from 0 to 256 [ 164.851619][T12451] futex_wake_op: syz.4.1920 tries to shift op by 35; fix this program [ 164.995725][T12480] loop3: detected capacity change from 0 to 2048 [ 165.046022][T12480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.105447][T12480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 165.161328][T12480] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 165.243067][T12480] EXT4-fs (loop3): This should not happen!! Data will be lost [ 165.243067][T12480] [ 165.268757][T12480] EXT4-fs (loop3): Total free blocks count 0 [ 165.300645][T12480] EXT4-fs (loop3): Free/Dirty block details [ 165.334346][T12480] EXT4-fs (loop3): free_blocks=4096 [ 165.347357][T12480] EXT4-fs (loop3): dirty_blocks=16 [ 165.368762][T12480] EXT4-fs (loop3): Block reservation details [ 165.395293][T12480] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 165.439743][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.623111][T12567] xt_hashlimit: size too large, truncated to 1048576 [ 165.671385][T10324] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 165.692539][T12578] loop0: detected capacity change from 0 to 1024 [ 165.702476][T10324] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.726490][T12578] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 165.765555][T12578] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 166.077968][T12578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.531527][ T8837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.565250][T12694] tipc: Started in network mode [ 166.570186][T12694] tipc: Node identity 82cd358aeda3, cluster identity 4711 [ 166.591193][T12705] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 166.605920][T12694] tipc: Enabled bearer , priority 0 [ 166.630107][T12705] bond2: entered promiscuous mode [ 166.639911][T12705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.816485][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 166.816498][ T28] audit: type=1400 audit(1782926796.831:1212): avc: denied { read } for pid=12725 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.844205][T12693] tipc: Disabling bearer [ 166.889000][T12715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.896423][T12715] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 166.907471][T12715] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 166.919468][T12715] bond2: (slave ip6gre1): making interface the new active one [ 166.927210][T12715] ip6gre1: entered promiscuous mode [ 166.939842][ T28] audit: type=1400 audit(1782926796.951:1213): avc: denied { ioctl } for pid=12728 comm="syz.9.1960" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.974883][T12715] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 167.050988][T12735] loop4: detected capacity change from 0 to 1024 [ 167.075818][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 167.096187][T12735] EXT4-fs: Ignoring removed orlov option [ 167.125740][T12735] EXT4-fs: Ignoring removed orlov option [ 167.136470][T12735] EXT4-fs: Ignoring removed orlov option [ 167.148319][T12735] EXT4-fs: inline encryption not supported [ 167.171188][T12735] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 167.201840][T12735] loop4: detected capacity change from 0 to 128 [ 167.208739][T12735] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.241794][T12735] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.284497][ T3470] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.679317][T12771] serio: Serial port ptm0 [ 167.705593][T12773] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 167.850204][ T28] audit: type=1400 audit(1782926797.861:1214): avc: denied { read } for pid=12778 comm="syz.4.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.992179][T12787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 169.045421][T12793] loop3: detected capacity change from 0 to 256 [ 169.095114][T12796] loop8: detected capacity change from 0 to 8192 [ 169.102456][T12796] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.177683][ T28] audit: type=1400 audit(1782926799.191:1215): avc: denied { connect } for pid=12800 comm="syz.3.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.246360][T12785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.258813][T12785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.378274][T12808] rdma_op ffff88811a396980 conn xmit_rdma 0000000000000000 [ 169.569894][T12817] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.621560][T12820] syzkaller0: entered promiscuous mode [ 169.627149][T12820] syzkaller0: entered allmulticast mode [ 169.852488][T12833] loop9: detected capacity change from 0 to 128 [ 169.876062][T12833] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.894111][T12833] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.934189][T12196] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.005932][T12843] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2006'. [ 170.032884][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 170.097083][ T28] audit: type=1400 audit(1782926800.111:1216): avc: denied { bind } for pid=12857 comm="syz.9.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.143722][T12856] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 170.228125][T12867] loop3: detected capacity change from 0 to 128 [ 170.268617][T12867] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.284990][T12867] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.302122][ T28] audit: type=1400 audit(1782926800.321:1217): avc: denied { write } for pid=12866 comm="syz.3.2018" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.326512][T12877] gretap0: entered promiscuous mode [ 170.333387][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2023'. [ 170.342931][T12877] gretap0: left promiscuous mode [ 170.353266][T12878] loop8: detected capacity change from 0 to 1024 [ 170.381633][T12878] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.405985][T12878] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.2022: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 170.434234][T12878] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 170.435717][T12878] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.2022: Bad quota inode: 3, type: 0 [ 170.444813][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 170.444834][ C0] EXT4-fs (loop8): initial error at time 1782926800: ext4_ext_check_inode:521: inode 3 [ 170.444871][ C0] EXT4-fs (loop8): last error at time 1782926800: ext4_ext_check_inode:521: inode 3 [ 170.482315][T12878] loop8: lost filesystem error report for type 5 error -117 [ 170.482508][T12878] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 170.485981][ T9717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.504423][T12878] EXT4-fs (loop8): mount failed [ 170.686289][T12898] netdevsim netdevsim9: Direct firmware load for .. failed with error -2 [ 170.707821][T12896] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 170.707821][T12896] program syz.3.2040 not setting count and/or reply_len properly [ 170.726775][ T28] audit: type=1400 audit(1782926800.721:1218): avc: denied { append } for pid=12895 comm="syz.3.2040" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.759459][T12900] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 170.774820][T12900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.803966][T12900] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 170.882770][T12914] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2037'. [ 171.153021][T12951] loop9: detected capacity change from 0 to 512 [ 171.169432][T12951] EXT4-fs: Ignoring removed bh option [ 171.194517][T12951] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.212014][T12951] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 171.227794][ T9553] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.234909][ T9553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.235693][T12951] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2053: Corrupt directory, running e2fsck is recommended [ 171.258531][T12951] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 171.268646][T12951] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.2053: corrupted in-inode xattr: e_name out of bounds [ 171.293155][T12951] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.293512][T12951] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2053: couldn't read orphan inode 15 (err -117) [ 171.302748][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 171.302768][ C1] EXT4-fs (loop9): initial error at time 1782926801: ext4_iget_extra_inode:5180: inode 15 [ 171.302794][ C1] EXT4-fs (loop9): last error at time 1782926801: ext4_iget_extra_inode:5180: inode 15 [ 171.341440][T12951] loop9: lost filesystem error report for type 5 error -117 [ 171.345634][T12951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.347080][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.367840][T12951] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.372619][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.385255][T12951] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 171.401596][T12951] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2053: Corrupt directory, running e2fsck is recommended [ 171.443194][T12957] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.451639][T12954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.457927][T12957] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 171.474566][T12954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.491146][T12957] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2053: Corrupt directory, running e2fsck is recommended [ 171.504897][T12951] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.505198][ T28] audit: type=1400 audit(1782926801.521:1219): avc: denied { write } for pid=12950 comm="syz.9.2053" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.516441][T12951] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 171.548808][T12951] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2053: Corrupt directory, running e2fsck is recommended [ 171.563761][T12957] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.576335][ T3470] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.594761][ T3470] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.608795][ T3470] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.619179][ T3470] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.629678][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.630526][T12962] loop3: detected capacity change from 0 to 512 [ 171.646629][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 171.675059][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 171.701762][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 171.715870][T12962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.729161][T12962] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.757018][ T28] audit: type=1400 audit(1782926801.771:1220): avc: denied { write } for pid=12960 comm="syz.3.2056" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.794106][ T28] audit: type=1400 audit(1782926801.801:1221): avc: denied { write } for pid=12971 comm="syz.4.2059" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.843754][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.887967][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2063'. [ 171.913924][T12986] netlink: 'syz.8.2063': attribute type 7 has an invalid length. [ 171.936532][T12986] netlink: 'syz.8.2063': attribute type 8 has an invalid length. [ 171.960887][T12988] loop0: detected capacity change from 0 to 8192 [ 171.984182][T12988] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.007918][T12988] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.029587][T12988] FAT-fs (loop0): Filesystem has been set read-only [ 172.048581][T12988] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.077387][T12997] loop8: detected capacity change from 0 to 512 [ 172.090587][T12997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.108097][T12997] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2066: corrupted in-inode xattr: invalid ea_ino [ 172.137896][T12997] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.138372][T12997] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2066: couldn't read orphan inode 15 (err -117) [ 172.147651][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 172.147691][ C1] EXT4-fs (loop8): initial error at time 1782926802: ext4_iget_extra_inode:5180: inode 15 [ 172.147821][ C1] EXT4-fs (loop8): last error at time 1782926802: ext4_iget_extra_inode:5180: inode 15 [ 172.185931][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 172.185946][ T28] audit: type=1400 audit(1782926802.181:1224): avc: denied { bind } for pid=13014 comm="syz.3.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.187086][T12997] loop8: lost filesystem error report for type 5 error -117 [ 172.223085][T12997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.283925][ T4870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.329731][T13024] loop0: detected capacity change from 0 to 512 [ 172.340200][T13024] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.353277][T13024] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 172.453850][T13028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.484087][T13039] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 172.523283][T13041] loop9: detected capacity change from 0 to 512 [ 172.537438][T13041] EXT4-fs error (device loop9): __ext4_iget:5533: inode #11: block 1: comm syz.9.2085: invalid block [ 172.549415][T13041] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.550044][T13041] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2085: couldn't read orphan inode 11 (err -117) [ 172.559335][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 172.559365][ C1] EXT4-fs (loop9): initial error at time 1782926802: __ext4_iget:5533: inode 11: block 1 [ 172.559494][ C1] EXT4-fs (loop9): last error at time 1782926802: __ext4_iget:5533: inode 11: block 1 [ 172.603263][T13041] loop9: lost filesystem error report for type 5 error -117 [ 172.606642][ T3470] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.608455][T13041] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.616220][ T28] audit: type=1400 audit(1782926802.631:1225): avc: denied { create } for pid=13045 comm="syz.8.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.648365][T13041] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, [ 172.652647][ T28] audit: type=1400 audit(1782926802.641:1226): avc: denied { ioctl } for pid=13045 comm="syz.8.2086" path="socket:[37425]" dev="sockfs" ino=37425 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.686746][T13041] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 172.709275][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.762900][T13052] loop9: detected capacity change from 0 to 512 [ 172.773598][T13052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.785467][T13052] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.2089: corrupted in-inode xattr: invalid ea_ino [ 172.791175][T13054] __nla_validate_parse: 1 callbacks suppressed [ 172.791190][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2088'. [ 172.801484][T13052] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.815460][T13052] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2089: couldn't read orphan inode 15 (err -117) [ 172.824679][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 172.824739][ C0] EXT4-fs (loop9): initial error at time 1782926802: ext4_iget_extra_inode:5180: inode 15 [ 172.824841][ C0] EXT4-fs (loop9): last error at time 1782926802: ext4_iget_extra_inode:5180: inode 15 [ 172.863813][T13052] loop9: lost filesystem error report for type 5 error -117 [ 172.864922][T13052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.918152][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.944635][T13062] EXT4-fs: Ignoring removed i_version option [ 172.951744][T13062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.963134][T13062] EXT4-fs (loop4): 1 truncate cleaned up [ 172.969230][T13062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.983957][ T28] audit: type=1400 audit(1782926803.001:1227): avc: denied { write } for pid=13060 comm="syz.4.2093" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.021705][ T28] audit: type=1400 audit(1782926803.041:1228): avc: denied { getopt } for pid=13066 comm="syz.9.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.105786][T13072] netlink: 'syz.3.2097': attribute type 4 has an invalid length. [ 173.114911][T11866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.451810][T13095] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.729156][ T28] audit: type=1400 audit(1782926803.741:1229): avc: denied { bind } for pid=13099 comm="syz.3.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.749223][ T28] audit: type=1400 audit(1782926803.741:1230): avc: denied { shutdown } for pid=13109 comm="syz.0.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.770287][ T28] audit: type=1400 audit(1782926803.741:1231): avc: denied { read } for pid=13109 comm="syz.0.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.855239][ T30] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 173.958903][T13112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.054823][T13126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.069876][T13126] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.086679][ T28] audit: type=1400 audit(1782926804.101:1232): avc: denied { write } for pid=13125 comm="syz.9.2119" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.098827][T13126] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2119: bg 0: block 255: padding at end of block bitmap is not set [ 174.138604][ T28] audit: type=1400 audit(1782926804.151:1233): avc: denied { write } for pid=13125 comm="syz.9.2119" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.162777][T12196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.372830][T13154] EXT4-fs: Ignoring removed i_version option [ 174.407343][T13154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.431009][T13154] EXT4-fs (loop3): 1 truncate cleaned up [ 174.437465][T13154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.537742][T13154] ================================================================== [ 174.545855][T13154] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 174.553237][T13154] [ 174.555560][T13154] read-write to 0xffff88810731ffd8 of 8 bytes by interrupt on cpu 1: [ 174.563628][T13154] __xa_clear_mark+0xf5/0x1e0 [ 174.568298][T13154] __folio_end_writeback+0xf4/0x360 [ 174.573505][T13154] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 174.579770][T13154] folio_end_writeback+0x1c/0x70 [ 174.584724][T13154] ext4_finish_bio+0x454/0x770 [ 174.589491][T13154] ext4_end_bio+0x281/0x3a0 [ 174.594007][T13154] bio_endio+0x35b/0x3f0 [ 174.598253][T13154] blk_update_request+0x338/0x710 [ 174.603290][T13154] blk_mq_end_request+0x26/0x50 [ 174.608151][T13154] lo_complete_rq+0x98/0x130 [ 174.612746][T13154] blk_done_softirq+0x77/0xb0 [ 174.617435][T13154] handle_softirqs+0xb9/0x280 [ 174.622105][T13154] run_ksoftirqd+0x1c/0x30 [ 174.626526][T13154] smpboot_thread_fn+0x32a/0x510 [ 174.631478][T13154] kthread+0x221/0x270 [ 174.635546][T13154] ret_from_fork+0x146/0x330 [ 174.640145][T13154] ret_from_fork_asm+0x1a/0x30 [ 174.645000][T13154] [ 174.647325][T13154] read to 0xffff88810731ffd8 of 8 bytes by task 13154 on cpu 0: [ 174.654957][T13154] xas_find_marked+0x211/0x650 [ 174.659750][T13154] filemap_get_folios_tag+0xf7/0x400 [ 174.665056][T13154] file_write_and_wait_range+0x20c/0x2f0 [ 174.670683][T13154] mmb_fsync_noflush+0x48/0x140 [ 174.675524][T13154] ext4_sync_file+0x1f2/0x6d0 [ 174.680184][T13154] __x64_sys_fdatasync+0x83/0xe0 [ 174.685108][T13154] x64_sys_call+0x2d1f/0x3020 [ 174.689767][T13154] do_syscall_64+0x136/0x3c0 [ 174.690986][ T4198] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.694342][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.694365][T13154] [ 174.700474][ T3777] Bluetooth: hci0: command 0x1003 tx timeout [ 174.706296][T13154] value changed: 0x003ffffff0000000 -> 0x003fffff00000000 [ 174.706310][T13154] [ 174.706314][T13154] Reported by Kernel Concurrency Sanitizer on: [ 174.706340][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.3.2128 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.739524][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.749573][T13154] ================================================================== [ 174.791318][ T9717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.050468][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 178.050482][ T28] audit: type=1400 audit(1782926808.061:1243): avc: denied { write } for pid=13206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.080388][ T28] audit: type=1400 audit(1782926808.081:1244): avc: denied { write } for pid=13217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1