last executing test programs: 1m3.717460171s ago: executing program 0 (id=2587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000500)=0x1fdfff7, 0x4) 1m2.607323068s ago: executing program 0 (id=2597): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 1m0.789735482s ago: executing program 0 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@updpolicy={0x108, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {}, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}]}, @policy_type={0xa}]}, 0x108}}, 0x0) 1m0.720185354s ago: executing program 0 (id=2620): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x2ad, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsH3ehmaOMnCNKCGFBqI+pCmNqJhoxJyMRIRGx3bv0cxaUrBfULdOPOvbgpguCmC3GkyUybpgHTapza/H9Q5u05886c4cyEdwYy2b75/EG56FlFu6FY0igmbWhHyuxGgbFgGWvHk+q2oQvTXz/8f/3W7Su5fH5x2Zil3MrFrDFm9sybR09enH3XmL7xcvZ1QluZO9tfsh+3/tn6d/v7Srj1qmSb1Wq1Ya+6jlkreWXLmGuuY3uOKVU8p94wXf1Ft1qrtYxdWZtJ1eqO5xm70jJlp2UaVdOot4x9zy5VjGVZZialURM/ckZhc3nZzg1lMIjCVL/Gej1nx/t2Fjb/xKAAAMDJElX9f7/kmZJnKtUD9f3h+j+mI9T/0kjX/8dVi3oAGKrd+j8VXL8HUf8DAAAAAAAAAAAAAAAAAAAAAPA32PH9tO/76XAZ/iUkJSWF/0c9TgwH8z/aur64l5TcZ81Cs9BZdvpzRZXkytH8hPStfT4EOvHS5fzivGnL6K27HuSvNwtxJcL8UKZ//kIn33Tnr2tCqe79Z5XWXP/8bJ/8ZmFS58/5iWDPjiyl9f6uqnK11j6v9/OfLhhz6Wq+J3+qvR4AAAAAAKeBZfYcun9v91smfG1IT3+ncf/5gNI/eT7Qc389rv/GoztuAAAAAABGiTepsu26Tt1rPT7tQfj7B79lg1LUh5McdOVxSUHLq5MyF4MEMUm9XROHWvoH8V+b5c/SwetiLvLpPnbgx/fO1U8PO1fAIOlRfioBAAAAGIaw6B+LeiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIywQd8iFq5/nJeQde0uHs1RAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfDjwAAAP//5JwTUw==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m0.719709063s ago: executing program 0 (id=2621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000000101060000000000000000020000003400018014000180080001000a000002080002000a0000011c0002800500010011000000060002003930000006000300393000003400028014000180080001000a000001080002000a0000021c000280050001001100000006000200393000000600030039300000080003000000000808000700000003e8"], 0x8c}}, 0x0) 1m0.527820688s ago: executing program 0 (id=2623): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000080)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@time_offset={'time_offset', 0x3d, 0x505}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x2, 0x292, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m0.507242139s ago: executing program 32 (id=2623): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000080)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@rodir}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@time_offset={'time_offset', 0x3d, 0x505}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}]}, 0x2, 0x292, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.740051848s ago: executing program 4 (id=4297): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="b5", 0x1) 1.690451498s ago: executing program 4 (id=4299): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7}, 0xc) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 1.65678087s ago: executing program 4 (id=4302): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1.595677051s ago: executing program 4 (id=4308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xa, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.532361752s ago: executing program 4 (id=4313): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20) 1.490490194s ago: executing program 4 (id=4314): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001100)=""/216, 0xd8, 0x401) 1.190365711s ago: executing program 1 (id=4335): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="b5", 0x1) 1.147364732s ago: executing program 3 (id=4336): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000001c40)=""/4151, 0x1037}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000c00)=""/191, 0xbf}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f00000003c0)=""/17, 0x11}], 0x9}, 0x12020) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1.102091783s ago: executing program 1 (id=4338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.084762423s ago: executing program 1 (id=4340): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107678bfecb64da14096962db497a0299399ab6101c3b", 0x18}], 0x1}}], 0x1, 0x8040) 1.054776544s ago: executing program 5 (id=4343): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 998.300385ms ago: executing program 1 (id=4344): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01", 0x1) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@', 0x9) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) 851.540649ms ago: executing program 5 (id=4345): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, 0x0) 669.023733ms ago: executing program 5 (id=4346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010100}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) write$tun(r0, 0x0, 0x20) 506.132127ms ago: executing program 5 (id=4348): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x4016b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 475.303498ms ago: executing program 5 (id=4350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) 402.26853ms ago: executing program 2 (id=4351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 401.95578ms ago: executing program 5 (id=4352): r0 = socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv2(r2, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/60, 0x3c}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/253, 0xfd}, {&(0x7f0000003440)=""/30, 0x1e}], 0x7, 0x40000000, 0x1, 0x13) write$UHID_INPUT(r3, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c6", 0xa1) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x2, 0x7fff, 0x0, 'queue0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000680)={{r5, &(0x7f0000000040)='/\x00', 0x41, &(0x7f0000000400)={@_ha_fsid={[0x4, 0xfffffffb]}, {0xffff, 0x6, 0x2, 0x9}}, 0x4, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000600)=0x679}, {[0x2000000, 0x32, 0x5, 0x5]}, 0x40, 0x2e, &(0x7f0000000640)=""/46}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xb39}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x80}]}}]}, 0x4c}}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), 0xc) 333.346282ms ago: executing program 2 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 291.892513ms ago: executing program 3 (id=4354): mount$bind(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x1d0c, @ipv4={'\x00', '\xff\xff', @empty}, 0xf5c0}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) 238.739654ms ago: executing program 2 (id=4355): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 238.571914ms ago: executing program 3 (id=4356): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, 0x0) 173.597786ms ago: executing program 2 (id=4357): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc79f, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x150, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x56, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x50, 0x80, "316f74eeac053deb73fc"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 173.398606ms ago: executing program 3 (id=4358): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r1, 0x87, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) 134.236847ms ago: executing program 2 (id=4359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000efffffffffffffff0000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 59.978418ms ago: executing program 3 (id=4360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0xfff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) 59.637328ms ago: executing program 2 (id=4361): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 399.68µs ago: executing program 1 (id=4362): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0xa) 231.75µs ago: executing program 1 (id=4363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=4364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000001c40)=""/4151, 0x1037}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000c00)=""/191, 0xbf}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f00000003c0)=""/17, 0x11}], 0x9}, 0x12020) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 118.633432][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.644018][ T9909] loop1: detected capacity change from 0 to 512 [ 118.650607][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.657534][ T312] loop3: lost filesystem error report for type 5 error -117 [ 118.685978][ T9909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.717848][ T9909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.731482][ T9914] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2543'. [ 118.736250][ T9909] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.753849][ T28] audit: type=1400 audit(2000000004.769:380): avc: denied { write } for pid=9906 comm="syz.1.2544" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.789372][ T28] audit: type=1400 audit(2000000004.799:381): avc: denied { write open } for pid=9906 comm="syz.1.2544" path="/574/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.819128][ T28] audit: type=1400 audit(2000000004.799:382): avc: denied { write } for pid=9906 comm="syz.1.2544" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.840728][ T28] audit: type=1400 audit(2000000004.799:383): avc: denied { append } for pid=9906 comm="syz.1.2544" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.863057][ T28] audit: type=1400 audit(2000000004.799:384): avc: denied { ioctl } for pid=9906 comm="syz.1.2544" path="/574/bus/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.888679][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.968808][ T9927] syzkaller0: entered promiscuous mode [ 118.974349][ T9927] syzkaller0: entered allmulticast mode [ 119.098725][ T9934] loop4: detected capacity change from 0 to 256 [ 119.110219][ T9934] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 119.121021][ T9934] FAT-fs (loop4): Can't find a valid FAT filesystem [ 119.241259][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2557'. [ 119.266610][ T9945] syzkaller0: entered promiscuous mode [ 119.272197][ T9945] syzkaller0: entered allmulticast mode [ 119.405885][ T9957] syzkaller0: entered promiscuous mode [ 119.418215][ T9957] syzkaller0: entered allmulticast mode [ 119.460909][ T9963] loop4: detected capacity change from 0 to 256 [ 119.494718][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2565'. [ 119.541256][ T9968] loop2: detected capacity change from 0 to 512 [ 119.552574][ T9968] EXT4-fs: Ignoring removed i_version option [ 119.559133][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.574873][ T9968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.578721][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.596290][ T9974] loop1: detected capacity change from 0 to 512 [ 119.604726][ T9974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.621441][ T9968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.635316][ T9974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2570: bg 0: block 184: padding at end of block bitmap is not set [ 119.649697][ T9974] loop1: lost filesystem error report for type 5 error -117 [ 119.649804][ T9968] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.661936][ T9980] loop3: detected capacity change from 0 to 256 [ 119.667526][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 119.679855][ T9974] EXT4-fs (loop1): Remounting filesystem read-only [ 119.680219][ C0] EXT4-fs (loop1): initial error at time 2000000005: ext4_validate_block_bitmap:441 [ 119.687773][ T9974] EXT4-fs (loop1): 1 truncate cleaned up [ 119.696088][ C0] EXT4-fs (loop1): last error at time 2000000005: ext4_validate_block_bitmap:441 [ 119.712135][ T9974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.712327][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 119.724806][ T9974] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.745951][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 119.756486][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 119.766952][ T9980] FAT-fs (loop3): codepage cp850 not found [ 119.783816][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.809057][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.862787][ T9991] loop1: detected capacity change from 0 to 1024 [ 119.873377][ T9991] EXT4-fs: Ignoring removed orlov option [ 119.901175][ T9993] syzkaller0: entered promiscuous mode [ 119.907902][ T9991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.910670][ T9993] syzkaller0: entered allmulticast mode [ 119.947150][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.979762][T10000] loop2: detected capacity change from 0 to 512 [ 120.004470][T10000] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.009941][ T9998] syzkaller0: entered promiscuous mode [ 120.023192][T10000] EXT4-fs (loop2): 1 truncate cleaned up [ 120.029389][T10000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.032880][ T9998] syzkaller0: entered allmulticast mode [ 120.058489][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.115303][T10008] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.412703][T10017] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2585: Failed to acquire dquot type 0 [ 120.424123][T10017] loop4: lost filesystem error report for type 5 error -117 [ 120.426512][T10017] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, [ 120.433843][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 120.433858][ C1] EXT4-fs (loop4): initial error at time 2000000006: ext4_acquire_dquot:7041 [ 120.433877][ C1] EXT4-fs (loop4): last error at time 2000000006: ext4_acquire_dquot:7041 [ 120.465121][T10017] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 120.474456][T10017] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.2585: corrupted inode contents [ 120.486354][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.495195][T10017] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #13: comm syz.4.2585: mark_inode_dirty error [ 120.515828][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.516659][T10017] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.2585: corrupted inode contents [ 120.537734][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.540362][T10017] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.2585: mark_inode_dirty error [ 120.560709][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.561397][T10017] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.2585: corrupted inode contents [ 120.582426][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.583259][T10017] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 120.600945][T10017] loop4: lost filesystem error report for type 5 error -117 [ 120.602641][T10017] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #13: comm syz.4.2585: corrupted inode contents [ 120.621815][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.624434][T10017] EXT4-fs error (device loop4): ext4_truncate:4691: inode #13: comm syz.4.2585: mark_inode_dirty error [ 120.644723][T10017] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.646964][T10017] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 120.665125][T10017] loop4: lost filesystem error report for type 5 error -117 [ 120.668320][T10017] EXT4-fs (loop4): 1 truncate cleaned up [ 120.682218][T10017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.378793][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.411420][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.493074][T10041] syzkaller0: entered promiscuous mode [ 121.506006][T10041] syzkaller0: entered allmulticast mode [ 121.590173][T10044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.610696][T10044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.852896][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.893413][T10048] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.909759][T10048] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2595: bad orphan inode 131083 [ 121.926837][T10048] loop4: lost filesystem error report for type 5 error -117 [ 121.927346][T10048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.976100][T10052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2596'. [ 122.318547][T10066] syzkaller0: entered promiscuous mode [ 122.324617][T10066] syzkaller0: entered allmulticast mode [ 122.561538][T10070] ìÑw]H…ŒoÐ O…fè|{‡6¤P®cò°ÖGdbcŠ¹ô4qúAP¥’Ï¢)bîð€kži¨NåOK²XTa%™ˆK, priority 10 [ 126.207323][T10242] tipc: Disabling bearer [ 126.214986][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.243486][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.255924][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.273309][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.282193][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.340502][T10257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.349202][T10257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.361601][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.370932][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.878664][T10263] loop5: detected capacity change from 0 to 128 [ 126.898810][T10263] Invalid ELF header len 1 [ 126.926490][T10267] loop3: detected capacity change from 0 to 128 [ 126.954175][T10269] loop1: detected capacity change from 0 to 512 [ 126.982758][T10269] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.007037][T10269] EXT4-fs (loop1): 1 truncate cleaned up [ 127.026730][T10269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.126268][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.176665][T10293] loop3: detected capacity change from 0 to 256 [ 127.261002][T10293] FAT-fs (loop3): codepage cp863 not found [ 127.662267][T10313] EXT4-fs: inline encryption not supported [ 127.708899][T10313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.732541][T10313] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=800ec1a8, mo2=0002] [ 127.742831][T10313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.769940][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.916765][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 127.928455][T10332] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 127.967820][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.993435][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.000779][T10300] bridge_slave_0: entered allmulticast mode [ 128.013253][T10300] bridge_slave_0: entered promiscuous mode [ 128.028508][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.035744][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.043315][T10300] bridge_slave_1: entered allmulticast mode [ 128.050612][T10300] bridge_slave_1: entered promiscuous mode [ 128.087470][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.100938][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.137599][T10300] team0: Port device team_slave_0 added [ 128.144418][T10300] team0: Port device team_slave_1 added [ 128.200282][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.200297][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.200326][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.200968][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.200979][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.201003][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.433293][T10300] hsr_slave_0: entered promiscuous mode [ 128.451881][T10300] hsr_slave_1: entered promiscuous mode [ 128.461589][T10300] debugfs: 'hsr0' already exists in 'hsr' [ 128.475395][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2700'. [ 128.481558][T10300] Cannot create hsr debugfs directory [ 128.658410][T10300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.142394][T10378] set_capacity_and_notify: 1 callbacks suppressed [ 129.142462][T10378] loop4: detected capacity change from 0 to 1024 [ 129.156204][T10378] EXT4-fs: Ignoring removed oldalloc option [ 129.162168][T10378] EXT4-fs: Ignoring removed bh option [ 129.202144][T10378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.214382][T10378] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.397832][T10383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 129.440530][T10300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.569559][ C1] bridge0: port 3(ip6gretap0) entered forwarding state [ 129.576451][ C1] bridge0: topology change detected, propagating [ 129.634229][T10383] EXT4-fs (loop4): Remounting filesystem read-only [ 129.703295][T10300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.788237][T10300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.808145][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 129.808275][ T28] audit: type=1400 audit(2000000000.969:415): avc: denied { mmap_zero } for pid=10391 comm="syz.3.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 129.967651][T10300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.979477][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.980197][T10300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.982607][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.983309][T10300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.997010][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.998310][T10300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.000216][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.016648][T10406] FAULT_INJECTION: forcing a failure. [ 130.016648][T10406] name failslab, interval 1, probability 100, space 0, times 1 [ 130.016743][T10406] CPU: 1 UID: 0 PID: 10406 Comm: syz.3.2711 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.016776][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.016798][T10406] Call Trace: [ 130.016858][T10406] [ 130.016868][T10406] __dump_stack+0x1d/0x30 [ 130.016896][T10406] dump_stack_lvl+0x95/0xd0 [ 130.016939][T10406] dump_stack+0x15/0x1b [ 130.016964][T10406] should_fail_ex+0x25e/0x270 [ 130.017016][T10406] should_failslab+0x8c/0xb0 [ 130.017038][T10406] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 130.017115][T10406] ? do_getname+0x2e/0x1c0 [ 130.017203][T10406] ? do_getname+0x2e/0x1c0 [ 130.017234][T10406] do_getname+0x2e/0x1c0 [ 130.017259][T10406] getname_flags+0x1d/0x30 [ 130.017282][T10406] do_sys_openat2+0x6c/0x130 [ 130.017343][T10406] __x64_sys_openat+0xf2/0x120 [ 130.017401][T10406] x64_sys_call+0x1e39/0x3020 [ 130.017424][T10406] do_syscall_64+0x136/0x3c0 [ 130.017454][T10406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.017480][T10406] RIP: 0033:0x7fdf297dde99 [ 130.017500][T10406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.017593][T10406] RSP: 002b:00007fdf28237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.017617][T10406] RAX: ffffffffffffffda RBX: 00007fdf29a65fa0 RCX: 00007fdf297dde99 [ 130.017634][T10406] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 130.017649][T10406] RBP: 00007fdf29873eaf R08: 0000000000000000 R09: 0000000000000000 [ 130.017666][T10406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.017686][T10406] R13: 00007fdf29a66038 R14: 00007fdf29a65fa0 R15: 00007ffda5390928 [ 130.017710][T10406] [ 130.017744][ T28] audit: type=1400 audit(2000000001.189:416): avc: denied { mount } for pid=10400 comm="syz.3.2711" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 130.017805][ T28] audit: type=1400 audit(2000000001.189:417): avc: denied { mount } for pid=10400 comm="syz.3.2711" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.063378][ T28] audit: type=1400 audit(2000000001.239:418): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.063703][ T28] audit: type=1400 audit(2000000001.239:419): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 130.095577][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 130.171086][T10412] macsec1: entered promiscuous mode [ 130.171239][T10412] dummy0: entered promiscuous mode [ 130.171335][T10412] macsec1: entered allmulticast mode [ 130.171348][T10412] dummy0: entered allmulticast mode [ 130.176936][T10412] dummy0: left allmulticast mode [ 130.183102][ T3391] dummy0: left promiscuous mode [ 130.226517][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.263429][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.274563][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.274594][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.276392][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.276470][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.457130][T10416] syzkaller0: entered promiscuous mode [ 130.457212][T10416] syzkaller0: entered allmulticast mode [ 130.661186][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.668219][ T28] audit: type=1400 audit(2000000001.839:420): avc: denied { mount } for pid=10436 comm="syz.3.2719" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 130.668246][ T28] audit: type=1400 audit(2000000001.839:421): avc: denied { search } for pid=10436 comm="syz.3.2719" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.668387][ T28] audit: type=1400 audit(2000000001.839:422): avc: denied { search } for pid=10436 comm="syz.3.2719" name="usb_gadget" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.674045][T10437] loop3: detected capacity change from 0 to 512 [ 130.674381][T10437] EXT4-fs: test_dummy_encryption option not supported [ 130.718651][ T28] audit: type=1400 audit(2000000001.889:423): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 130.739281][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.849697][T10300] veth0_vlan: entered promiscuous mode [ 130.863781][ T28] audit: type=1326 audit(2000000002.039:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.4.2722" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a608dde99 code=0x0 [ 130.955572][T10300] veth1_vlan: entered promiscuous mode [ 131.190661][T10300] veth0_macvtap: entered promiscuous mode [ 131.198333][T10300] veth1_macvtap: entered promiscuous mode [ 131.210300][T10300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.219467][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.718939][T10468] loop4: detected capacity change from 0 to 1024 [ 131.746976][T10468] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 131.756868][T10468] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.767946][T10468] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: inode #32: comm syz.4.2726: iget: special inode unallocated [ 131.781966][T10468] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 131.782150][T10468] EXT4-fs (loop4): Remounting filesystem read-only [ 131.791370][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 131.791409][ C1] EXT4-fs (loop4): initial error at time 2000000002: ext4_get_journal_inode:5900: inode 32 [ 131.791489][ C1] EXT4-fs (loop4): last error at time 2000000002: ext4_get_journal_inode:5900: inode 32 [ 131.825359][T10468] EXT4-fs (loop4): no journal found [ 131.830709][T10468] EXT4-fs (loop4): can't get journal size [ 131.837370][T10468] EXT4-fs (loop4): filesystem is read-only [ 131.844420][T10468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.658934][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.666187][T10315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.676678][T10315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.709259][T10462] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.720525][T10475] loop3: detected capacity change from 0 to 256 [ 133.729864][T10475] vfat: Bad value for 'shortname' [ 133.741500][T10315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.751404][T10315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.800803][T10473] syzkaller0: entered promiscuous mode [ 133.806326][T10473] syzkaller0: entered allmulticast mode [ 133.817363][T10477] loop2: detected capacity change from 0 to 512 [ 133.849726][T10477] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2729: inode has both inline data and extents flags [ 133.863078][T10477] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.864484][T10477] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2729: couldn't read orphan inode 15 (err -117) [ 133.873875][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 133.873897][ C1] EXT4-fs (loop2): initial error at time 2000000005: ext4_orphan_get:1399: inode 15 [ 133.873929][ C1] EXT4-fs (loop2): last error at time 2000000005: ext4_orphan_get:1399: inode 15 [ 133.911363][T10477] loop2: lost filesystem error report for type 5 error -117 [ 133.913604][T10477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.928246][T10487] loop1: detected capacity change from 0 to 1024 [ 133.942799][T10487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.949434][T10487] EXT4-fs: Ignoring removed orlov option [ 134.127217][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.138569][T10487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.242832][T10487] EXT4-fs (loop1): shut down requested (2) [ 134.337076][T10300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.363687][T10496] syzkaller0: entered promiscuous mode [ 134.363793][T10496] syzkaller0: entered allmulticast mode [ 135.737808][T10518] syzkaller0: entered promiscuous mode [ 135.743470][T10518] syzkaller0: entered allmulticast mode [ 135.814230][T10524] syzkaller0: entered promiscuous mode [ 135.820069][T10524] syzkaller0: entered allmulticast mode [ 135.833146][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 135.833160][ T28] audit: type=1400 audit(2000000007.009:429): avc: denied { create } for pid=10536 comm="syz.2.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 135.900063][T10518] syzkaller0: create flow: hash 3365774812 index 2 [ 135.904685][ T28] audit: type=1400 audit(2000000007.039:430): avc: denied { sys_admin } for pid=10536 comm="syz.2.2746" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 135.930969][T10517] syzkaller0: delete flow: hash 3365774812 index 2 [ 135.961750][T10533] 0: reclassify loop, rule prio 0, protocol 03 [ 136.057344][ T28] audit: type=1400 audit(2000000007.229:431): avc: denied { write } for pid=10548 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.097269][ T28] audit: type=1400 audit(2000000007.239:432): avc: denied { bind } for pid=10548 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.148231][ T28] audit: type=1400 audit(2000000007.239:433): avc: denied { connect } for pid=10548 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.210391][ T28] audit: type=1400 audit(2000000007.239:434): avc: denied { accept } for pid=10548 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.248725][ T28] audit: type=1400 audit(2000000007.259:435): avc: denied { read } for pid=10550 comm="syz.5.2750" path="socket:[31498]" dev="sockfs" ino=31498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.418541][T10570] syzkaller0: entered promiscuous mode [ 136.418568][T10570] syzkaller0: entered allmulticast mode [ 136.599668][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.606927][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.643502][T10581] bridge0: entered allmulticast mode [ 136.757852][T10583] syzkaller0: entered promiscuous mode [ 136.771854][T10583] syzkaller0: entered allmulticast mode [ 137.059227][T10594] syzkaller0: entered promiscuous mode [ 137.070026][T10594] syzkaller0: entered allmulticast mode [ 137.304697][ T28] audit: type=1400 audit(2000000008.479:436): avc: denied { ioctl } for pid=10615 comm="syz.2.2773" path="socket:[30233]" dev="sockfs" ino=30233 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.394084][T10613] syzkaller0: entered promiscuous mode [ 137.419545][T10613] syzkaller0: entered allmulticast mode [ 137.787902][T10649] syzkaller0: entered promiscuous mode [ 137.796409][T10649] syzkaller0: entered allmulticast mode [ 137.943248][T10662] syzkaller0: entered promiscuous mode [ 137.948810][T10662] syzkaller0: entered allmulticast mode [ 137.968889][T10665] 0: reclassify loop, rule prio 0, protocol 03 [ 138.110211][T10675] syzkaller0: entered promiscuous mode [ 138.125899][T10675] syzkaller0: entered allmulticast mode [ 138.271132][T10691] loop4: detected capacity change from 0 to 1024 [ 138.278143][T10691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.311569][T10689] syzkaller0: entered promiscuous mode [ 138.317273][T10689] syzkaller0: entered allmulticast mode [ 138.324265][T10691] EXT4-fs: Ignoring removed orlov option [ 138.356693][T10691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.388069][T10691] EXT4-fs (loop4): shut down requested (2) [ 138.414361][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.577150][ T28] audit: type=1400 audit(2000000009.749:437): avc: denied { setopt } for pid=10711 comm="syz.4.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.705011][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.706112][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.718238][T10719] bridge0: entered allmulticast mode [ 138.889370][T10726] syzkaller0: entered promiscuous mode [ 138.894899][T10726] syzkaller0: entered allmulticast mode [ 139.129345][ T3297] cgroup: fork rejected by pids controller in /syz4 [ 139.237336][T10766] ÿÿÿÿÿÿ: renamed from vlan0 (while UP) [ 139.336280][ T312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.477023][ T312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.573575][T10792] loop3: detected capacity change from 0 to 1024 [ 140.018849][T10792] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 140.027971][T10792] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.2833: Failed to acquire dquot type 0 [ 140.039356][T10792] loop3: lost filesystem error report for type 5 error -117 [ 140.041556][T10792] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 140.063502][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 140.063519][ C1] EXT4-fs (loop3): initial error at time 2000000011: ext4_acquire_dquot:7041 [ 140.063538][ C1] EXT4-fs (loop3): last error at time 2000000011: ext4_acquire_dquot:7041 [ 140.087410][T10792] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.2833: corrupted inode contents [ 140.099267][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.104248][T10792] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #13: comm syz.3.2833: mark_inode_dirty error [ 140.124700][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.125933][T10792] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.2833: corrupted inode contents [ 140.147031][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.147972][T10792] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2833: mark_inode_dirty error [ 140.168439][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.169994][T10792] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.2833: corrupted inode contents [ 140.190948][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.191570][T10792] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 140.209280][T10792] loop3: lost filesystem error report for type 5 error -117 [ 140.210474][T10792] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.2833: corrupted inode contents [ 140.229690][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.230588][T10792] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.2833: mark_inode_dirty error [ 140.250809][T10792] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 140.252010][T10792] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 140.270144][T10792] loop3: lost filesystem error report for type 5 error -117 [ 140.272922][T10792] EXT4-fs (loop3): 1 truncate cleaned up [ 140.286781][T10792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.467895][T10808] syzkaller0: entered promiscuous mode [ 140.473544][T10808] syzkaller0: entered allmulticast mode [ 140.500289][ T312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.589370][ T312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.707508][T10819] syzkaller0: entered promiscuous mode [ 140.719347][T10819] syzkaller0: entered allmulticast mode [ 140.762095][T10819] syzkaller0: tun_net_xmit 1280 [ 140.775722][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.788709][T10819] syzkaller0: create flow: hash 3365774812 index 2 [ 140.808553][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.828342][T10778] bridge_slave_0: entered allmulticast mode [ 140.841969][T10778] bridge_slave_0: entered promiscuous mode [ 140.865653][T10818] syzkaller0: delete flow: hash 3365774812 index 2 [ 140.879845][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.887139][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.902444][T10778] bridge_slave_1: entered allmulticast mode [ 140.926065][T10778] bridge_slave_1: entered promiscuous mode [ 141.035235][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.068995][T10828] syzkaller0: entered promiscuous mode [ 141.075300][T10828] syzkaller0: entered allmulticast mode [ 141.089936][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.121712][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.141542][ T312] bridge_slave_1: left allmulticast mode [ 141.148227][ T312] bridge_slave_1: left promiscuous mode [ 141.184394][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.196744][ T312] bridge_slave_0: left allmulticast mode [ 141.202711][ T312] bridge_slave_0: left promiscuous mode [ 141.208430][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.218266][ T312] bond_slave_0: left promiscuous mode [ 141.224442][ T312] bond_slave_1: left promiscuous mode [ 141.292270][ T312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.303764][ T312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.314034][ T312] bond0 (unregistering): Released all slaves [ 141.322364][T10778] team0: Port device team_slave_0 added [ 141.362286][T10834] syzkaller0: entered promiscuous mode [ 141.367951][T10834] syzkaller0: entered allmulticast mode [ 141.376290][T10778] team0: Port device team_slave_1 added [ 141.401203][ T312] tipc: Left network mode [ 141.412086][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.419173][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.445243][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.471791][ T312] hsr_slave_0: left promiscuous mode [ 141.480276][ T312] hsr_slave_1: left promiscuous mode [ 141.488416][ T312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.509623][ T312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.528080][ T312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.530759][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 141.530772][ T28] audit: type=1400 audit(2000000012.699:438): avc: denied { read } for pid=10859 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.535878][ T312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.555784][ T28] audit: type=1400 audit(2000000012.699:439): avc: denied { read open } for pid=10859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.612674][ T312] veth1_macvtap: left promiscuous mode [ 141.625674][ T312] veth0_macvtap: left promiscuous mode [ 141.638280][ T312] veth1_vlan: left promiscuous mode [ 141.648503][ T312] veth0_vlan: left promiscuous mode [ 141.709913][ T28] audit: type=1400 audit(2000000012.699:440): avc: denied { getattr } for pid=10859 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.759968][ T28] audit: type=1400 audit(2000000012.929:441): avc: denied { write } for pid=10855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.783137][ T28] audit: type=1400 audit(2000000012.929:442): avc: denied { add_name } for pid=10855 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.125217][ T312] team0 (unregistering): Port device team_slave_1 removed [ 142.225685][ T312] team0 (unregistering): Port device team_slave_0 removed [ 142.540098][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.557614][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.649525][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.708178][T10778] hsr_slave_0: entered promiscuous mode [ 142.722147][T10778] hsr_slave_1: entered promiscuous mode [ 142.780643][ T28] audit: type=1400 audit(2000000013.949:443): avc: denied { write } for pid=10893 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.813748][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 142.880614][ T28] audit: type=1400 audit(2000000013.949:444): avc: denied { remove_name } for pid=10893 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=10312 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.011008][T10904] syzkaller0: entered promiscuous mode [ 143.033861][T10904] syzkaller0: entered allmulticast mode [ 143.545596][T10924] veth1_macvtap: left promiscuous mode [ 143.554547][T10924] macsec0: entered allmulticast mode [ 143.563937][ T28] audit: type=1400 audit(2000000014.749:445): avc: denied { write } for pid=10919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.613612][ T28] audit: type=1400 audit(2000000014.769:446): avc: denied { write } for pid=10936 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.662706][T10942] process 'syz.1.2875' launched '/dev/fd/4' with NULL argv: empty string added [ 143.684128][ T28] audit: type=1400 audit(2000000014.839:447): avc: denied { execute } for pid=10939 comm="syz.1.2875" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.855406][T10778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.917223][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.929832][T10778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.940389][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.954558][T10778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.992723][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.012083][T10778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.030784][T10974] loop1: detected capacity change from 0 to 1024 [ 144.060229][T10778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.122431][T10974] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2882: Failed to acquire dquot type 0 [ 144.133777][T10974] loop1: lost filesystem error report for type 5 error -117 [ 144.137506][T10974] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, [ 144.144818][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 144.144837][ C1] EXT4-fs (loop1): initial error at time 2000000015: ext4_acquire_dquot:7041 [ 144.144857][ C1] EXT4-fs (loop1): last error at time 2000000015: ext4_acquire_dquot:7041 [ 144.176128][T10974] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 144.185332][T10974] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.2882: corrupted inode contents [ 144.197186][T10974] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 144.197672][T10974] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #13: comm syz.1.2882: mark_inode_dirty error [ 144.218112][T10974] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 144.222405][T10974] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.2882: corrupted inode contents [ 144.243389][T10974] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 144.244057][T10974] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.2882: mark_inode_dirty error [ 144.264844][T10974] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.2882: corrupted inode contents [ 144.277146][T10974] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 144.285729][T10974] loop1: lost filesystem error report for type 5 error -117 [ 144.286204][T10974] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.2882: corrupted inode contents [ 144.312090][T10974] EXT4-fs error (device loop1): ext4_truncate:4691: inode #13: comm syz.1.2882: mark_inode_dirty error [ 144.323459][T10974] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 144.332425][T10974] loop1: lost filesystem error report for type 5 error -117 [ 144.335497][T10974] EXT4-fs (loop1): 1 truncate cleaned up [ 144.349287][T10974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.694305][T10778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.744468][T10778] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.783526][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.790630][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.840379][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.847531][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.199331][T10778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.375197][T11044] syzkaller0: entered promiscuous mode [ 145.393827][T11044] syzkaller0: entered allmulticast mode [ 145.555642][T10300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.617688][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.655006][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.678985][T11070] netlink: 'syz.2.2899': attribute type 29 has an invalid length. [ 145.689615][T11070] netlink: 'syz.2.2899': attribute type 29 has an invalid length. [ 145.702328][T11070] netlink: 'syz.2.2899': attribute type 29 has an invalid length. [ 145.753481][T10778] veth0_vlan: entered promiscuous mode [ 145.766127][T10778] veth1_vlan: entered promiscuous mode [ 145.793827][T10778] veth0_macvtap: entered promiscuous mode [ 145.815235][T10778] veth1_macvtap: entered promiscuous mode [ 145.844208][T10778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.856987][T10778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.861066][T11086] netlink: 'syz.2.2904': attribute type 2 has an invalid length. [ 145.878224][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.891005][ T312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.913280][ T312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.923858][ T312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.993261][T11088] syzkaller0: entered promiscuous mode [ 146.005093][T11088] syzkaller0: entered allmulticast mode [ 146.310643][T11122] syzkaller0: entered promiscuous mode [ 146.316428][T11126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2917'. [ 146.336292][T11122] syzkaller0: entered allmulticast mode [ 146.345384][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2917'. [ 146.397452][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2919'. [ 146.476505][ T6621] tipc: Resetting bearer [ 146.496632][ T6621] tipc: Disabling bearer [ 146.531979][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 146.532016][ T28] audit: type=1400 audit(2000000017.709:466): avc: denied { create } for pid=11143 comm="syz.5.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.598217][ T28] audit: type=1400 audit(2000000017.739:467): avc: denied { setopt } for pid=11143 comm="syz.5.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.603967][T11142] syzkaller0: entered promiscuous mode [ 146.619076][ T28] audit: type=1400 audit(2000000017.739:468): avc: denied { ioctl } for pid=11143 comm="syz.5.2924" path="socket:[33025]" dev="sockfs" ino=33025 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.634416][T11142] syzkaller0: entered allmulticast mode [ 146.656971][T11153] netlink: 'syz.5.2927': attribute type 21 has an invalid length. [ 146.666692][T11153] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2927'. [ 146.677938][ T416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.886711][T11157] netlink: 'syz.5.2928': attribute type 10 has an invalid length. [ 146.894809][T11157] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2928'. [ 146.906791][ T416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.952598][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.959751][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.966865][T11098] bridge_slave_0: entered allmulticast mode [ 146.973598][T11098] bridge_slave_0: entered promiscuous mode [ 146.981875][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.988952][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.996181][T11098] bridge_slave_1: entered allmulticast mode [ 147.004023][T11098] bridge_slave_1: entered promiscuous mode [ 147.045386][ T416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.048231][T11182] netlink: 'syz.4.2933': attribute type 29 has an invalid length. [ 147.072053][T11174] syzkaller0: entered promiscuous mode [ 147.077887][T11174] syzkaller0: entered allmulticast mode [ 147.089607][T11182] netlink: 'syz.4.2933': attribute type 29 has an invalid length. [ 147.105376][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.138114][ T416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.158986][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.198840][T11098] team0: Port device team_slave_0 added [ 147.238813][T11098] team0: Port device team_slave_1 added [ 147.264423][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.271443][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.297567][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.311860][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 147.321140][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 147.330337][T11201] netlink: 'syz.3.2943': attribute type 4 has an invalid length. [ 147.341013][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.347995][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.381187][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.405981][ T416] bridge_slave_1: left allmulticast mode [ 147.411928][ T416] bridge_slave_1: left promiscuous mode [ 147.417776][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.425814][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.464796][ T416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.474464][ T416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.484199][ T416] bond0 (unregistering): Released all slaves [ 147.524884][T11098] hsr_slave_0: entered promiscuous mode [ 147.531066][T11098] hsr_slave_1: entered promiscuous mode [ 147.536991][T11098] debugfs: 'hsr0' already exists in 'hsr' [ 147.542751][T11098] Cannot create hsr debugfs directory [ 147.548515][T11214] syzkaller0: entered promiscuous mode [ 147.554365][T11214] syzkaller0: entered allmulticast mode [ 147.562057][ T416] tipc: Left network mode [ 147.612642][ T416] hsr_slave_0: left promiscuous mode [ 147.618638][ T416] hsr_slave_1: left promiscuous mode [ 147.622708][ T28] audit: type=1400 audit(2000000018.789:469): avc: denied { write } for pid=11221 comm="syz.1.2949" path="socket:[34161]" dev="sockfs" ino=34161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.634391][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.655449][ T416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.701859][ T416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.710175][ T28] audit: type=1400 audit(2000000018.789:470): avc: denied { read } for pid=11221 comm="syz.1.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.714928][ T416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.745684][ T416] veth0_macvtap: left promiscuous mode [ 147.754099][ T416] veth1_vlan: left promiscuous mode [ 147.759395][ T416] veth0_vlan: left promiscuous mode [ 147.838247][ T28] audit: type=1400 audit(2000000019.009:471): avc: denied { write } for pid=11226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.869354][ T28] audit: type=1400 audit(2000000019.009:472): avc: denied { write } for pid=11256 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.939078][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2961'. [ 147.948271][ T416] team0 (unregistering): Port device team_slave_1 removed [ 147.958831][ T416] team0 (unregistering): Port device team_slave_0 removed [ 148.005552][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 148.083382][T11276] syzkaller0: entered promiscuous mode [ 148.088921][T11276] syzkaller0: entered allmulticast mode [ 148.220278][ T28] audit: type=1400 audit(2000000019.399:473): avc: denied { write } for pid=11281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.294149][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.298097][ T28] audit: type=1400 audit(2000000019.449:474): avc: denied { write } for pid=11303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.186772][T11313] syzkaller0: entered promiscuous mode [ 149.212811][ T28] audit: type=1400 audit(2000000020.389:475): avc: denied { write } for pid=11316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.216875][T11313] syzkaller0: entered allmulticast mode [ 149.242873][T11332] netlink: 'syz.4.2977': attribute type 17 has an invalid length. [ 149.291854][T11332] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 149.316558][T11331] syzkaller0: entered promiscuous mode [ 149.323710][T11331] syzkaller0: entered allmulticast mode [ 149.342475][T11313] syzkaller0: create flow: hash 1283208857 index 2 [ 149.358843][T11312] syzkaller0: delete flow: hash 1283208857 index 2 [ 149.510124][T11098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.523717][T11098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.533098][T11098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.542059][T11098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.573977][T11098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.589275][T11098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.604014][T11098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.648032][T11098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.758430][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.789954][T11098] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.797293][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.797326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.813949][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.813981][T10797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.816673][T11396] syzkaller0: entered promiscuous mode [ 149.816690][T11396] syzkaller0: entered allmulticast mode [ 150.064064][T11434] syzkaller0: entered promiscuous mode [ 150.064082][T11434] syzkaller0: entered allmulticast mode [ 150.121195][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.207132][T11452] syzkaller0: entered promiscuous mode [ 150.219885][T11452] syzkaller0: entered allmulticast mode [ 150.280487][T11098] veth0_vlan: entered promiscuous mode [ 150.288615][T11098] veth1_vlan: entered promiscuous mode [ 150.307549][T11098] veth0_macvtap: entered promiscuous mode [ 150.320478][T11098] veth1_macvtap: entered promiscuous mode [ 150.361812][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.382123][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.397386][T11470] syzkaller0: entered promiscuous mode [ 150.403052][T11470] syzkaller0: entered allmulticast mode [ 150.404417][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.419133][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.419174][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.419206][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.542384][T11484] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.691932][T11495] syzkaller0: entered promiscuous mode [ 150.697988][T11502] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3022'. [ 150.712208][T11495] syzkaller0: entered allmulticast mode [ 150.773966][T11507] syzkaller0: entered promiscuous mode [ 150.780806][T11507] syzkaller0: entered allmulticast mode [ 150.796405][T11515] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3026'. [ 150.902519][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.977174][T11537] validate_nla: 6 callbacks suppressed [ 150.977210][T11537] netlink: 'syz.5.3035': attribute type 12 has an invalid length. [ 151.001974][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.091429][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.110864][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.122961][T11489] bridge_slave_0: entered allmulticast mode [ 151.138431][T11489] bridge_slave_0: entered promiscuous mode [ 151.164665][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.199966][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.222090][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.231746][T11489] bridge_slave_1: entered allmulticast mode [ 151.244192][T11489] bridge_slave_1: entered promiscuous mode [ 151.290812][T11556] syzkaller0: entered promiscuous mode [ 151.296398][T11556] syzkaller0: entered allmulticast mode [ 151.331928][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.368857][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.379807][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.405213][T11489] team0: Port device team_slave_0 added [ 151.416706][T11489] team0: Port device team_slave_1 added [ 151.454838][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.462831][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.502484][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.521831][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.531857][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.591526][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.632844][T11489] hsr_slave_0: entered promiscuous mode [ 151.644606][T11585] netlink: 'syz.5.3053': attribute type 10 has an invalid length. [ 151.654325][T11489] hsr_slave_1: entered promiscuous mode [ 151.661095][T11489] debugfs: 'hsr0' already exists in 'hsr' [ 151.666950][T11489] Cannot create hsr debugfs directory [ 151.717042][T11585] team0: Cannot enslave team device to itself [ 151.762851][ T12] bridge_slave_1: left allmulticast mode [ 151.780997][ T12] bridge_slave_1: left promiscuous mode [ 151.791793][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.815995][ T12] bridge_slave_0: left allmulticast mode [ 151.830233][ T12] bridge_slave_0: left promiscuous mode [ 151.849434][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.890200][ T12] bond_slave_0: left promiscuous mode [ 151.954690][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 151.954703][ T28] audit: type=1400 audit(2000000023.129:485): avc: denied { write } for pid=11602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.005192][ T28] audit: type=1400 audit(2000000023.169:486): avc: denied { write } for pid=11628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.073029][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.096652][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.107482][ T12] bond0 (unregistering): Released all slaves [ 152.132006][T11629] __nla_validate_parse: 1 callbacks suppressed [ 152.132034][T11629] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3065'. [ 152.149139][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.198974][T11635] syzkaller0: entered promiscuous mode [ 152.204639][T11635] syzkaller0: entered allmulticast mode [ 152.236272][ T12] tipc: Left network mode [ 152.284357][ T12] hsr_slave_0: left promiscuous mode [ 152.291898][ T12] hsr_slave_1: left promiscuous mode [ 152.297811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.314020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.383623][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.393948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.411895][ T12] veth1_macvtap: left promiscuous mode [ 152.421017][ T12] veth0_macvtap: left promiscuous mode [ 152.429313][ T12] veth1_vlan: left promiscuous mode [ 152.441375][ T12] veth0_vlan: left promiscuous mode [ 152.510741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.520252][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.563341][T11666] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3078'. [ 152.572455][T11666] tc_dump_action: action bad kind [ 152.615219][T11674] syzkaller0: entered promiscuous mode [ 152.624561][T11674] syzkaller0: entered allmulticast mode [ 152.645303][T11669] syzkaller0: entered promiscuous mode [ 152.654455][T11669] syzkaller0: entered allmulticast mode [ 152.713213][T11690] netlink: 'syz.4.3083': attribute type 2 has an invalid length. [ 152.724618][T11690] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3083'. [ 152.749453][ T28] audit: type=1400 audit(2000000023.919:487): avc: denied { write } for pid=11677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.791654][ T28] audit: type=1400 audit(2000000023.969:488): avc: denied { write } for pid=11695 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.833938][T11697] syzkaller0: entered promiscuous mode [ 152.846765][T11697] syzkaller0: entered allmulticast mode [ 152.958767][T11489] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.995989][T11489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.011313][T11489] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.034913][ T28] audit: type=1400 audit(2000000024.209:489): avc: denied { write } for pid=11703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.061851][T11489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.081282][T11489] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.096707][ T28] audit: type=1400 audit(2000000024.249:490): avc: denied { write } for pid=11722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.120735][T11489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.130207][T11489] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.144930][T11489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.196636][T11721] syzkaller0: entered promiscuous mode [ 153.208086][T11721] syzkaller0: entered allmulticast mode [ 153.276662][ T28] audit: type=1400 audit(2000000024.449:491): avc: denied { write } for pid=11728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.292755][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.306450][T11751] netlink: 'syz.5.3093': attribute type 2 has an invalid length. [ 153.319397][T11751] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3093'. [ 153.323955][T11744] syzkaller0: entered promiscuous mode [ 153.344114][ T28] audit: type=1400 audit(2000000024.519:492): avc: denied { write } for pid=11752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.353272][T11744] syzkaller0: entered allmulticast mode [ 153.374666][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.384028][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.391102][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.416936][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.424020][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.440435][ T28] audit: type=1400 audit(2000000024.619:493): avc: denied { name_bind } for pid=11756 comm="syz.1.3096" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 153.506185][ T28] audit: type=1400 audit(2000000024.619:494): avc: denied { name_connect } for pid=11756 comm="syz.1.3096" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 153.639058][T11489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.729274][T11489] veth0_vlan: entered promiscuous mode [ 153.738987][T11489] veth1_vlan: entered promiscuous mode [ 153.752869][T11489] veth0_macvtap: entered promiscuous mode [ 153.760431][T11489] veth1_macvtap: entered promiscuous mode [ 153.772158][T11489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.783811][T11489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.799459][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.808708][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.818403][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.827247][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.979988][T11818] syzkaller0: entered promiscuous mode [ 153.998028][T11818] syzkaller0: entered allmulticast mode [ 154.238969][T11842] syzkaller0: entered promiscuous mode [ 154.255175][T11842] syzkaller0: entered allmulticast mode [ 155.285921][T11900] syzkaller0: entered promiscuous mode [ 155.294699][T11900] syzkaller0: entered allmulticast mode [ 155.536851][T11924] syzkaller0: entered promiscuous mode [ 155.536873][T11924] syzkaller0: entered allmulticast mode [ 155.592339][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 155.678356][T11936] syzkaller0: entered promiscuous mode [ 155.685074][T11936] syzkaller0: entered allmulticast mode [ 155.782192][T11942] syzkaller0: entered promiscuous mode [ 155.788231][T11942] syzkaller0: entered allmulticast mode [ 155.940740][T11955] syzkaller0: entered promiscuous mode [ 155.940822][T11955] syzkaller0: entered allmulticast mode [ 156.012672][T11960] syzkaller0: entered promiscuous mode [ 156.018182][T11960] syzkaller0: entered allmulticast mode [ 156.188862][T11981] syzkaller0: entered promiscuous mode [ 156.194741][T11981] syzkaller0: entered allmulticast mode [ 156.410609][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3194'. [ 156.469293][T12009] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 156.490633][T12009] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3196'. [ 156.585669][T12022] syzkaller0: entered promiscuous mode [ 156.598372][T12022] syzkaller0: entered allmulticast mode [ 156.607751][T12027] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3203'. [ 156.679168][T12033] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3206'. [ 156.743194][T12039] netlink: 'syz.1.3210': attribute type 10 has an invalid length. [ 156.743236][T12039] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3210'. [ 156.969155][T12065] syzkaller0: entered promiscuous mode [ 156.976325][T12065] syzkaller0: entered allmulticast mode [ 157.062988][T12071] netlink: 'syz.4.3222': attribute type 10 has an invalid length. [ 157.307080][T12096] netlink: 'syz.4.3233': attribute type 10 has an invalid length. [ 157.315701][T12096] __nla_validate_parse: 1 callbacks suppressed [ 157.315791][T12096] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3233'. [ 157.704669][T12120] syzkaller0: entered promiscuous mode [ 157.710277][T12120] syzkaller0: entered allmulticast mode [ 157.931761][T12131] syzkaller0: entered promiscuous mode [ 157.949254][T12131] syzkaller0: entered allmulticast mode [ 157.969872][T12135] netlink: 'syz.1.3251': attribute type 10 has an invalid length. [ 157.977942][T12135] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3251'. [ 158.004040][T12150] syzkaller0: entered promiscuous mode [ 158.009715][T12150] syzkaller0: entered allmulticast mode [ 158.169552][T12161] syzkaller0: entered promiscuous mode [ 158.175943][T12161] syzkaller0: entered allmulticast mode [ 158.223176][T12173] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3270'. [ 158.232332][T12173] tc_dump_action: action bad kind [ 158.304197][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 158.304210][ T28] audit: type=1400 audit(2000000029.479:496): avc: denied { create } for pid=12180 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.462264][T12197] syzkaller0: entered promiscuous mode [ 158.467822][T12197] syzkaller0: entered allmulticast mode [ 158.533497][T12208] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3287'. [ 158.774341][T12235] syzkaller0: entered promiscuous mode [ 158.780418][T12235] syzkaller0: entered allmulticast mode [ 158.863184][T12243] syzkaller0: entered promiscuous mode [ 158.868914][T12243] syzkaller0: entered allmulticast mode [ 159.106706][T12279] syzkaller0: entered promiscuous mode [ 159.117867][T12279] syzkaller0: entered allmulticast mode [ 159.135890][T12286] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3319'. [ 159.146242][T12286] tc_dump_action: action bad kind [ 159.191986][ T28] audit: type=1400 audit(2000000030.369:497): avc: denied { setopt } for pid=12290 comm="syz.2.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.223343][T12288] syzkaller0: entered promiscuous mode [ 159.228844][T12288] syzkaller0: entered allmulticast mode [ 159.261419][T12295] syzkaller0: entered promiscuous mode [ 159.266979][T12295] syzkaller0: entered allmulticast mode [ 159.329478][T12305] syzkaller0: entered promiscuous mode [ 159.335215][T12305] syzkaller0: entered allmulticast mode [ 159.502811][T12323] syzkaller0: entered promiscuous mode [ 159.519945][T12323] syzkaller0: entered allmulticast mode [ 159.556348][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 159.618297][T12340] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3339'. [ 159.629916][T12340] tc_dump_action: action bad kind [ 159.684594][T12354] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3346'. [ 159.848464][T12387] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3356'. [ 159.857778][T12387] tc_dump_action: action bad kind [ 159.913419][T12393] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 159.924864][T12393] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3359'. [ 160.039285][T12408] syzkaller0: entered promiscuous mode [ 160.044871][T12408] syzkaller0: entered allmulticast mode [ 160.082604][T12421] syzkaller0: entered promiscuous mode [ 160.091109][T12421] syzkaller0: entered allmulticast mode [ 160.323653][T12446] syzkaller0: entered promiscuous mode [ 160.331866][T12446] syzkaller0: entered allmulticast mode [ 160.545820][T12464] syzkaller0: entered promiscuous mode [ 160.551394][T12464] syzkaller0: entered allmulticast mode [ 160.582244][T12470] syzkaller0: entered promiscuous mode [ 160.587797][T12470] syzkaller0: entered allmulticast mode [ 160.656258][T12481] syzkaller0: entered promiscuous mode [ 160.662028][T12481] syzkaller0: entered allmulticast mode [ 160.731479][T12487] tc_dump_action: action bad kind [ 160.804519][T12495] syzkaller0: entered promiscuous mode [ 160.813482][T12495] syzkaller0: entered allmulticast mode [ 160.924532][T12511] syzkaller0: entered promiscuous mode [ 160.930441][T12511] syzkaller0: entered allmulticast mode [ 161.493483][T12604] syzkaller0: entered promiscuous mode [ 161.505310][T12604] syzkaller0: entered allmulticast mode [ 161.543472][T12609] syzkaller0: entered promiscuous mode [ 161.549060][T12609] syzkaller0: entered allmulticast mode [ 161.946293][T12649] syzkaller0: entered promiscuous mode [ 161.956783][T12649] syzkaller0: entered allmulticast mode [ 162.189865][T12680] syzkaller0: entered promiscuous mode [ 162.195933][T12680] syzkaller0: entered allmulticast mode [ 162.320302][T12690] loop3: detected capacity change from 0 to 1024 [ 162.430654][T12690] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 162.439799][T12690] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 162.449379][T12690] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.3482: Failed to acquire dquot type 0 [ 162.460956][T12690] loop3: lost filesystem error report for type 5 error -117 [ 162.461934][T12690] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 162.483596][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 162.483611][ C1] EXT4-fs (loop3): initial error at time 2000000033: ext4_acquire_dquot:7041 [ 162.483645][ C1] EXT4-fs (loop3): last error at time 2000000033: ext4_acquire_dquot:7041 [ 162.507464][T12690] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3482: corrupted inode contents [ 162.519382][T12690] fserror_report: 4 callbacks suppressed [ 162.519473][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.528015][T12690] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #13: comm syz.3.3482: mark_inode_dirty error [ 162.548565][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.552501][T12690] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3482: corrupted inode contents [ 162.573546][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.574606][T12690] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.3482: mark_inode_dirty error [ 162.594933][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.595771][T12690] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3482: corrupted inode contents [ 162.616857][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.623911][T12690] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 162.641589][T12690] loop3: lost filesystem error report for type 5 error -117 [ 162.642690][T12690] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.3482: corrupted inode contents [ 162.661982][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.665575][T12690] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.3482: mark_inode_dirty error [ 162.685789][T12690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.686695][T12690] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 162.704727][T12690] loop3: lost filesystem error report for type 5 error -117 [ 162.706501][T12690] EXT4-fs (loop3): 1 truncate cleaned up [ 162.720471][T12690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.999680][T12701] syzkaller0: entered promiscuous mode [ 163.019233][T12701] syzkaller0: entered allmulticast mode [ 163.051016][ T28] audit: type=1400 audit(2000000034.219:498): avc: denied { write } for pid=12704 comm="syz.1.3494" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.078245][T12707] __nla_validate_parse: 7 callbacks suppressed [ 163.078258][T12707] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3495'. [ 163.429284][T12725] syzkaller0: entered promiscuous mode [ 163.453605][T12725] syzkaller0: entered allmulticast mode [ 163.480173][T12742] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3510'. [ 163.820836][T11489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.995669][T12780] syzkaller0: entered promiscuous mode [ 164.019006][T12780] syzkaller0: entered allmulticast mode [ 164.206355][T12802] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3536'. [ 164.302356][T12805] loop5: detected capacity change from 0 to 1024 [ 164.701774][T12817] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3542'. [ 165.191976][T12805] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 165.201085][T12805] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 165.210611][T12805] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3533: Failed to acquire dquot type 0 [ 165.221826][T12805] loop5: lost filesystem error report for type 5 error -117 [ 165.225989][T12805] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, [ 165.233297][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 165.233319][ C1] EXT4-fs (loop5): initial error at time 2000000036: ext4_acquire_dquot:7041 [ 165.233341][ C1] EXT4-fs (loop5): last error at time 2000000036: ext4_acquire_dquot:7041 [ 165.264537][T12805] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 165.273711][T12805] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3533: corrupted inode contents [ 165.285579][T12805] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.291688][T12805] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #13: comm syz.5.3533: mark_inode_dirty error [ 165.312170][T12805] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.312709][T12805] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3533: corrupted inode contents [ 165.333740][T12805] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.336769][T12805] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.3533: mark_inode_dirty error [ 165.358024][T12805] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3533: corrupted inode contents [ 165.370051][T12805] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 165.378592][T12805] loop5: lost filesystem error report for type 5 error -117 [ 165.378742][T12805] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3533: corrupted inode contents [ 165.398118][T12805] EXT4-fs error (device loop5): ext4_truncate:4691: inode #13: comm syz.5.3533: mark_inode_dirty error [ 165.430695][T12805] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 165.439644][T12805] loop5: lost filesystem error report for type 5 error -117 [ 165.443141][T12805] EXT4-fs (loop5): 1 truncate cleaned up [ 165.457153][T12805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.976905][T10117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.076337][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3556'. [ 166.169927][T12865] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3561'. [ 166.987933][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3604'. [ 167.093773][T12976] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3613'. [ 167.214724][T12993] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.3619'. [ 167.347984][T13005] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3624'. [ 167.812108][T13034] loop2: detected capacity change from 0 to 1024 [ 167.824249][T13034] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 167.824277][T13034] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 167.824298][T13034] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3633: Failed to acquire dquot type 0 [ 167.824324][T13034] loop2: lost filesystem error report for type 5 error -117 [ 167.825225][T13034] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 167.825361][T13034] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.3633: corrupted inode contents [ 167.825457][T13034] fserror_report: 4 callbacks suppressed [ 167.825469][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.825736][T13034] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #13: comm syz.2.3633: mark_inode_dirty error [ 167.825760][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.826147][T13034] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.3633: corrupted inode contents [ 167.826170][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.826506][T13034] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.3633: mark_inode_dirty error [ 167.826533][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.827061][T13034] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.3633: corrupted inode contents [ 167.827089][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.827478][T13034] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 167.827500][T13034] loop2: lost filesystem error report for type 5 error -117 [ 167.827784][T13034] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.3633: corrupted inode contents [ 167.827812][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.828158][T13034] EXT4-fs error (device loop2): ext4_truncate:4691: inode #13: comm syz.2.3633: mark_inode_dirty error [ 167.828186][T13034] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.828496][T13034] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 167.828517][T13034] loop2: lost filesystem error report for type 5 error -117 [ 167.829752][T13034] EXT4-fs (loop2): 1 truncate cleaned up [ 167.830196][T13034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.988174][ T28] audit: type=1400 audit(2000000039.169:499): avc: denied { mount } for pid=13043 comm="syz.5.3640" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.163276][ T28] audit: type=1400 audit(2000000039.339:500): avc: denied { unmount } for pid=10117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.267388][T13055] __nla_validate_parse: 3 callbacks suppressed [ 168.267408][T13055] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3644'. [ 168.353889][T13061] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3648'. [ 168.502652][T13076] syzkaller0: entered promiscuous mode [ 168.518717][T13076] syzkaller0: entered allmulticast mode [ 168.560230][T11098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.600117][T13078] syzkaller0: entered promiscuous mode [ 168.608317][T13078] syzkaller0: entered allmulticast mode [ 168.666380][T13089] netlink: 'syz.5.3660': attribute type 1 has an invalid length. [ 168.691876][T13089] netlink: 'syz.5.3660': attribute type 3 has an invalid length. [ 168.709973][T13089] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3660'. [ 168.728031][T13092] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3661'. [ 168.780801][T13097] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3663'. [ 168.952935][T13103] loop1: detected capacity change from 0 to 1024 [ 168.965050][T13103] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 168.974177][T13103] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 168.983694][T13103] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3666: Failed to acquire dquot type 0 [ 168.994896][T13103] loop1: lost filesystem error report for type 5 error -117 [ 168.996835][T13103] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, [ 169.004189][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 169.004212][ C1] EXT4-fs (loop1): initial error at time 2000000040: ext4_acquire_dquot:7041 [ 169.004239][ C1] EXT4-fs (loop1): last error at time 2000000040: ext4_acquire_dquot:7041 [ 169.035526][T13103] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 169.044739][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3666: corrupted inode contents [ 169.056596][T13103] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.058248][T13103] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #13: comm syz.1.3666: mark_inode_dirty error [ 169.078685][T13103] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.078912][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3666: corrupted inode contents [ 169.099981][T13103] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.100514][T13103] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.3666: mark_inode_dirty error [ 169.123605][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3666: corrupted inode contents [ 169.135681][T13103] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 169.144331][T13103] loop1: lost filesystem error report for type 5 error -117 [ 169.144628][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3666: corrupted inode contents [ 169.164196][T13103] EXT4-fs error (device loop1): ext4_truncate:4691: inode #13: comm syz.1.3666: mark_inode_dirty error [ 169.177575][T13103] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 169.186465][T13103] loop1: lost filesystem error report for type 5 error -117 [ 169.187102][T13103] EXT4-fs (loop1): 1 truncate cleaned up [ 169.200470][T13103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.288093][T10300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.478545][T13150] loop1: detected capacity change from 0 to 1024 [ 169.489911][T13150] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 169.499045][T13150] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 169.508495][T13150] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3687: Failed to acquire dquot type 0 [ 169.519782][T13150] loop1: lost filesystem error report for type 5 error -117 [ 169.520166][T13150] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 169.541882][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 169.541898][ C1] EXT4-fs (loop1): initial error at time 2000000040: ext4_acquire_dquot:7041 [ 169.541922][ C1] EXT4-fs (loop1): last error at time 2000000040: ext4_acquire_dquot:7041 [ 169.565897][T13150] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3687: corrupted inode contents [ 169.578444][T13150] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #13: comm syz.1.3687: mark_inode_dirty error [ 169.590738][T13150] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3687: corrupted inode contents [ 169.602761][T13150] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.3687: mark_inode_dirty error [ 169.614651][T13150] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3687: corrupted inode contents [ 169.628477][T13150] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 169.637041][T13150] loop1: lost filesystem error report for type 5 error -117 [ 169.637367][T13150] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #13: comm syz.1.3687: corrupted inode contents [ 169.656857][T13150] EXT4-fs error (device loop1): ext4_truncate:4691: inode #13: comm syz.1.3687: mark_inode_dirty error [ 169.668231][T13150] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 169.677110][T13150] loop1: lost filesystem error report for type 5 error -117 [ 169.677586][T13150] EXT4-fs (loop1): 1 truncate cleaned up [ 169.691026][T13150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.730461][T10300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.127497][T13207] syzkaller0: entered promiscuous mode [ 170.133567][T13207] syzkaller0: entered allmulticast mode [ 170.509048][T13241] loop5: detected capacity change from 0 to 1024 [ 170.517739][T13241] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 170.526840][T13241] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 170.536264][T13241] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3726: Failed to acquire dquot type 0 [ 170.547560][T13241] loop5: lost filesystem error report for type 5 error -117 [ 170.547993][T13241] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, [ 170.555338][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 170.555379][ C0] EXT4-fs (loop5): initial error at time 2000000041: ext4_acquire_dquot:7041 [ 170.555401][ C0] EXT4-fs (loop5): last error at time 2000000041: ext4_acquire_dquot:7041 [ 170.586740][T13241] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 170.596018][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3726: corrupted inode contents [ 170.609980][T13241] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #13: comm syz.5.3726: mark_inode_dirty error [ 170.621530][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3726: corrupted inode contents [ 170.635026][T13241] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.3726: mark_inode_dirty error [ 170.646485][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3726: corrupted inode contents [ 170.658480][T13241] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 170.667343][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.3726: corrupted inode contents [ 170.679361][T13241] EXT4-fs error (device loop5): ext4_truncate:4691: inode #13: comm syz.5.3726: mark_inode_dirty error [ 170.690704][T13241] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 170.699958][T13241] EXT4-fs (loop5): 1 truncate cleaned up [ 170.706757][T13241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.733973][T10117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.839092][T13262] syzkaller0: entered promiscuous mode [ 170.839119][T13262] syzkaller0: entered allmulticast mode [ 170.985906][T13275] syzkaller0: entered promiscuous mode [ 170.992057][T13275] syzkaller0: entered allmulticast mode [ 171.092627][T13290] syzkaller0: entered promiscuous mode [ 171.098146][T13290] syzkaller0: entered allmulticast mode [ 171.402085][ T28] audit: type=1400 audit(2000000042.579:501): avc: denied { create } for pid=13324 comm="syz.4.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.503227][T13335] netlink: 'syz.1.3771': attribute type 10 has an invalid length. [ 171.511188][T13335] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.3771'. [ 171.635356][T13351] syzkaller0: entered promiscuous mode [ 171.641413][T13351] syzkaller0: entered allmulticast mode [ 171.785145][T13367] netlink: 'syz.1.3786': attribute type 10 has an invalid length. [ 171.795336][T13367] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.3786'. [ 171.895793][T13381] syzkaller0: entered promiscuous mode [ 171.901422][T13381] syzkaller0: entered allmulticast mode [ 172.078825][T13402] syzkaller0: entered promiscuous mode [ 172.091293][T13402] syzkaller0: entered allmulticast mode [ 172.478594][T13458] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3830'. [ 172.794737][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3842'. [ 172.899714][T13182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.936176][ T28] audit: type=1400 audit(2000000044.109:502): avc: denied { getopt } for pid=13492 comm="syz.2.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.065319][T13510] netlink: 'syz.2.3854': attribute type 10 has an invalid length. [ 173.074816][T13510] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.3854'. [ 173.661084][ T28] audit: type=1400 audit(2000000044.839:503): avc: denied { ioctl } for pid=13594 comm="syz.5.3893" path="socket:[41737]" dev="sockfs" ino=41737 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.719465][T13603] __nla_validate_parse: 1 callbacks suppressed [ 173.719478][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.737232][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.747236][ T28] audit: type=1400 audit(2000000044.919:504): avc: denied { connect } for pid=13604 comm="syz.1.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.766934][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.783967][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.793027][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.802215][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.827530][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.836798][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 173.846369][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3897'. [ 174.180563][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'. [ 174.299138][T13652] syzkaller0: entered promiscuous mode [ 174.304734][T13652] syzkaller0: entered allmulticast mode [ 175.516525][T13788] syzkaller0: entered promiscuous mode [ 175.516543][T13788] syzkaller0: entered allmulticast mode [ 175.950486][T13815] syzkaller0: entered promiscuous mode [ 175.956117][T13815] syzkaller0: entered allmulticast mode [ 176.109903][T13516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.184620][T13822] syzkaller0: entered promiscuous mode [ 176.190281][T13822] syzkaller0: entered allmulticast mode [ 176.435488][T13862] syzkaller0: entered promiscuous mode [ 176.441209][T13862] syzkaller0: entered allmulticast mode [ 176.517237][T13875] loop2: detected capacity change from 0 to 1024 [ 176.527633][T13875] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 176.549729][T13875] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 176.568370][ T28] audit: type=1400 audit(2000000047.729:505): avc: denied { allowed } for pid=13878 comm="syz.5.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.568821][T13875] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.4022: Failed to acquire dquot type 0 [ 176.607986][T13875] fserror_report: 2 callbacks suppressed [ 176.607999][T13875] loop2: lost filesystem error report for type 5 error -117 [ 176.621606][T13875] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 176.643448][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 176.643470][ C0] EXT4-fs (loop2): initial error at time 2000000047: ext4_acquire_dquot:7041 [ 176.643493][ C0] EXT4-fs (loop2): last error at time 2000000047: ext4_acquire_dquot:7041 [ 176.670209][T13875] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.4022: corrupted inode contents [ 176.682532][T13875] fserror_report: 18 callbacks suppressed [ 176.682547][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.699860][T13875] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #13: comm syz.2.4022: mark_inode_dirty error [ 176.745624][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.746761][T13875] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.4022: corrupted inode contents [ 176.768172][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.768404][T13875] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.4022: mark_inode_dirty error [ 176.789564][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.792097][T13875] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.4022: corrupted inode contents [ 176.813400][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.819795][T13875] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 176.837989][T13875] loop2: lost filesystem error report for type 5 error -117 [ 176.844908][T13875] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #13: comm syz.2.4022: corrupted inode contents [ 176.865283][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.866686][T13875] EXT4-fs error (device loop2): ext4_truncate:4691: inode #13: comm syz.2.4022: mark_inode_dirty error [ 176.887614][T13875] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.888406][T13875] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 176.906909][T13875] loop2: lost filesystem error report for type 5 error -117 [ 176.908157][T13875] EXT4-fs (loop2): 1 truncate cleaned up [ 176.921628][T13875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.952138][T11098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.157343][T13925] loop5: detected capacity change from 0 to 1024 [ 177.180360][T13925] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 177.180444][T13925] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 177.180460][T13925] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.4045: Failed to acquire dquot type 0 [ 177.180481][T13925] loop5: lost filesystem error report for type 5 error -117 [ 177.180853][T13925] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 177.180939][T13925] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.4045: corrupted inode contents [ 177.180959][T13925] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.181243][T13925] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #13: comm syz.5.4045: mark_inode_dirty error [ 177.181264][T13925] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.181441][T13925] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.4045: corrupted inode contents [ 177.181468][T13925] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.181556][T13925] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.4045: mark_inode_dirty error [ 177.181774][T13925] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.4045: corrupted inode contents [ 177.181865][T13925] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 177.181960][T13925] loop5: lost filesystem error report for type 5 error -117 [ 177.182161][T13925] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.4045: corrupted inode contents [ 177.182273][T13925] EXT4-fs error (device loop5): ext4_truncate:4691: inode #13: comm syz.5.4045: mark_inode_dirty error [ 177.182444][T13925] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 177.182460][T13925] loop5: lost filesystem error report for type 5 error -117 [ 177.182933][T13925] EXT4-fs (loop5): 1 truncate cleaned up [ 177.183430][T13925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.263828][T10117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.312860][T13933] syzkaller0: entered promiscuous mode [ 177.506015][T13933] syzkaller0: entered allmulticast mode [ 177.617014][T13955] loop3: detected capacity change from 0 to 1024 [ 177.655378][T13955] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 177.664761][T13955] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 177.676049][T13955] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.4057: Failed to acquire dquot type 0 [ 177.687390][T13955] loop3: lost filesystem error report for type 5 error -117 [ 177.689503][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 177.690438][T13955] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 177.696813][ C1] EXT4-fs (loop3): initial error at time 2000000048: ext4_acquire_dquot:7041 [ 177.696836][ C1] EXT4-fs (loop3): last error at time 2000000048: ext4_acquire_dquot:7041 [ 177.703253][T13955] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 177.710802][ C1] [ 177.742130][T13955] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.4057: corrupted inode contents [ 177.781812][T13955] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #13: comm syz.3.4057: mark_inode_dirty error [ 177.822240][T13955] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.4057: corrupted inode contents [ 177.851559][T13955] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.4057: mark_inode_dirty error [ 177.865079][T13955] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.4057: corrupted inode contents [ 177.888500][T13972] ip6gre1: entered promiscuous mode [ 177.894050][T13972] ip6gre1: entered allmulticast mode [ 177.898819][T13955] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 177.908044][T13955] loop3: lost filesystem error report for type 5 error -117 [ 177.908174][T13955] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.4057: corrupted inode contents [ 177.928238][T13972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.928676][T13955] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.4057: mark_inode_dirty error [ 177.947431][T13955] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 177.956402][T13955] loop3: lost filesystem error report for type 5 error -117 [ 177.956906][T13955] EXT4-fs (loop3): 1 truncate cleaned up [ 177.972953][T13955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.038753][T13978] syzkaller0: entered promiscuous mode [ 178.042359][T11489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.053348][T13978] syzkaller0: entered allmulticast mode [ 178.128906][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.138415][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.400887][T14013] syzkaller0: entered promiscuous mode [ 178.406557][T14013] syzkaller0: entered allmulticast mode [ 178.532412][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.543302][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.559711][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.757390][T14057] __nla_validate_parse: 15 callbacks suppressed [ 178.757471][T14057] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4103'. [ 178.770012][T14055] syzkaller0: entered promiscuous mode [ 178.778389][T14055] syzkaller0: entered allmulticast mode [ 178.919938][ T3436] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.927496][T14076] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4113'. [ 178.987658][ T28] audit: type=1400 audit(2000000050.159:506): avc: denied { create } for pid=14081 comm="syz.3.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 179.009031][T14084] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4117'. [ 179.037948][ T28] audit: type=1400 audit(2000000050.159:507): avc: denied { write } for pid=14081 comm="syz.3.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 179.186583][T14101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4125'. [ 179.248184][T14107] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 179.255274][T14105] syzkaller0: entered promiscuous mode [ 179.262842][T14105] syzkaller0: entered allmulticast mode [ 179.436012][T14127] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4138'. [ 179.490441][ T3436] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.507098][ T28] audit: type=1400 audit(2000000050.679:508): avc: denied { write } for pid=14136 comm="syz.4.4143" path="socket:[44642]" dev="sockfs" ino=44642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.577621][T14142] syzkaller0: entered promiscuous mode [ 179.599708][T14142] syzkaller0: entered allmulticast mode [ 179.691372][T14154] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4150'. [ 180.003080][T14187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4165'. [ 180.280101][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4171'. [ 180.455309][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4176'. [ 180.792852][T14233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4188'. [ 180.846755][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.857973][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.072851][T14258] 0: reclassify loop, rule prio 0, protocol 03 [ 181.426007][T14277] syz_tun: entered promiscuous mode [ 181.466338][T14279] syzkaller0: entered promiscuous mode [ 181.471905][T14279] syzkaller0: entered allmulticast mode [ 181.481153][T14277] syz_tun: left promiscuous mode [ 181.507016][T14281] 0: reclassify loop, rule prio 0, protocol 03 [ 181.655020][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.708558][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.809408][T14311] syzkaller0: entered promiscuous mode [ 181.815072][T14311] syzkaller0: entered allmulticast mode [ 181.865858][T14321] vhci_hcd vhci_hcd.3: default hub control req: 0206 v0102 i0000 l0 [ 181.866986][T14315] 0: reclassify loop, rule prio 0, protocol 03 [ 182.027213][T14344] syz_tun: entered promiscuous mode [ 182.039723][T14344] syz_tun: left promiscuous mode [ 182.617475][T14422] 0: reclassify loop, rule prio 0, protocol 03 [ 182.690012][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.442277][T14541] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 183.448822][T14541] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.492600][T14541] vhci_hcd vhci_hcd.0: Device attached [ 183.693046][ T28] audit: type=1400 audit(2000000054.749:509): avc: denied { read } for pid=14560 comm="syz.2.4342" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.779702][ T282] usb 10-1: SetAddress Request (2) to port 0 [ 183.785820][ T282] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 183.857754][ T28] audit: type=1400 audit(2000000054.749:510): avc: denied { open } for pid=14560 comm="syz.2.4342" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.985079][T14544] vhci_hcd: connection closed [ 184.434865][T10797] vhci_hcd vhci_hcd.4: stop threads [ 184.434918][T10797] vhci_hcd vhci_hcd.4: release socket [ 184.434946][T10797] vhci_hcd vhci_hcd.4: disconnect device [ 184.466150][ T28] audit: type=1400 audit(2000000055.639:511): avc: denied { connect } for pid=14596 comm="syz.3.4358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.504582][ T3289] ================================================================== [ 184.504613][ T3289] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 184.504645][ T3289] [ 184.504651][ T3289] write to 0xffff88810409fa0c of 4 bytes by task 3291 on cpu 1: [ 184.504669][ T3289] simple_unlink+0x54/0x80 [ 184.504690][ T3289] shmem_unlink+0x12d/0x140 [ 184.504718][ T3289] vfs_unlink+0x1c3/0x490 [ 184.504737][ T3289] filename_unlinkat+0x1dc/0x410 [ 184.504758][ T3289] __se_sys_unlink+0x2b/0xe0 [ 184.504779][ T3289] __x64_sys_unlink+0x1f/0x30 [ 184.504800][ T3289] x64_sys_call+0x2eb6/0x3020 [ 184.504824][ T3289] do_syscall_64+0x136/0x3c0 [ 184.504847][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.504865][ T3289] [ 184.504870][ T3289] read to 0xffff88810409fa0c of 4 bytes by task 3289 on cpu 0: [ 184.504884][ T3289] fill_mg_cmtime+0x5b/0x240 [ 184.504902][ T3289] generic_fillattr+0x24d/0x340 [ 184.504923][ T3289] shmem_getattr+0x181/0x200 [ 184.504949][ T3289] vfs_getattr_nosec+0x146/0x1e0 [ 184.504973][ T3289] vfs_getattr+0x48/0x60 [ 184.504997][ T3289] vfs_statx_path+0x28/0x140 [ 184.505021][ T3289] vfs_statx+0xc4/0x170 [ 184.505043][ T3289] vfs_fstatat+0x118/0x170 [ 184.505064][ T3289] __se_sys_newfstatat+0x55/0x3e0 [ 184.505085][ T3289] __x64_sys_newfstatat+0x55/0x70 [ 184.505107][ T3289] x64_sys_call+0x2c64/0x3020 [ 184.505130][ T3289] do_syscall_64+0x136/0x3c0 [ 184.505150][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.505170][ T3289] [ 184.505174][ T3289] value changed: 0x293e310b -> 0x2963f56d [ 184.505186][ T3289] [ 184.505190][ T3289] Reported by Kernel Concurrency Sanitizer on: [ 184.505208][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 184.505234][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.505250][ T3289] ================================================================== [ 188.929568][ T282] usb 10-1: device descriptor read/8, error -110 [ 189.039536][ T282] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 189.059613][ T282] usb 10-1: enqueue for inactive port 0 [ 189.065223][ T282] usb 10-1: enqueue for inactive port 0 [ 189.070787][ T282] usb 10-1: enqueue for inactive port 0 [ 190.090385][ T282] usb usb10-port1: attempt power cycle [ 191.649572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.909745][ T282] usb usb10-port1: unable to enumerate USB device