last executing test programs: 3m32.918292183s ago: executing program 32 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000500)={0x0, 0xc9f, 0x8, 0x103, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x4639, 0x8034, 0x0, 0x0, 0x0) 3m10.799632738s ago: executing program 33 (id=712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0x6, 0x4}, 0x36}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfb, 0xb2}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x6) 3m9.580404857s ago: executing program 34 (id=741): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3m0.68230705s ago: executing program 35 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000022f0fffffffff9ff0180c200000e88a8000081"], 0x3e) 1m59.275596867s ago: executing program 36 (id=2072): socket(0x28, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 1m58.108022715s ago: executing program 37 (id=2088): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0x1, 0x6}, 0xc00, 0x3ffffffc, 0x0, 0x2, 0x103fb, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000000009}, 0x0, 0x1, 0xffffffffffffffff, 0xb) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m50.434652559s ago: executing program 9 (id=2187): socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x40}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m49.553359687s ago: executing program 9 (id=2191): r0 = socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1) 1m48.625198257s ago: executing program 9 (id=2204): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x40, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xf, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 1m48.093544814s ago: executing program 9 (id=2211): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m47.984887457s ago: executing program 9 (id=2212): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m47.90041696s ago: executing program 9 (id=2214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 1m35.444635417s ago: executing program 38 (id=2185): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1}, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x323f, 0x1f480, 0x0, 0x398}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140), 0x0, 0x515, &(0x7f0000000c40)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 1m32.814046291s ago: executing program 39 (id=2214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 1m23.242674546s ago: executing program 5 (id=2511): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000400) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) 1m23.181373188s ago: executing program 5 (id=2525): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1}}], 0x48, 0x29ff1109601b30a4}, 0x0) 1m23.11997125s ago: executing program 5 (id=2517): unshare(0x62040200) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m22.888733667s ago: executing program 5 (id=2521): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000002c0)={0x8}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m22.409596272s ago: executing program 5 (id=2523): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/pids.max\x00', 0x2, 0x15) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m22.062561084s ago: executing program 5 (id=2530): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.061271324s ago: executing program 40 (id=2530): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.845670017s ago: executing program 6 (id=2780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001800), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r1) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x8c46a3ac7c5cbbd3, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0x1c}}, 0x4c0c0) 1m7.789156409s ago: executing program 6 (id=2781): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m7.642992504s ago: executing program 6 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK, @TCA_EM_IPT_NFPROTO={0x4, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1m7.543767477s ago: executing program 6 (id=2791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m7.284905015s ago: executing program 6 (id=2796): unshare(0x26020480) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffc9f, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x2000000000000000, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) 1m6.931786856s ago: executing program 6 (id=2807): r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setreuid(0xee01, 0xee01) creat(&(0x7f0000000000)='./file0\x00', 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 1m6.931689336s ago: executing program 41 (id=2807): r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setreuid(0xee01, 0xee01) creat(&(0x7f0000000000)='./file0\x00', 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) 57.119541239s ago: executing program 1 (id=3004): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 56.215439618s ago: executing program 1 (id=3013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e840", 0x32, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 55.994038825s ago: executing program 1 (id=3018): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mremap(&(0x7f0000862000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000c52000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 55.302317777s ago: executing program 1 (id=3036): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 55.168114471s ago: executing program 1 (id=3037): socket$inet6_udp(0xa, 0x2, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 54.5719469s ago: executing program 1 (id=3051): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x1aa) lseek(r1, 0x1, 0x0) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 54.540154321s ago: executing program 42 (id=3051): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x1aa) lseek(r1, 0x1, 0x0) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 39.808398421s ago: executing program 2 (id=3325): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 39.549471729s ago: executing program 2 (id=3329): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) unshare(0x60600) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f00000026c0)}, 0x10) 39.479939361s ago: executing program 2 (id=3330): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 38.606654459s ago: executing program 2 (id=3353): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 38.25271695s ago: executing program 2 (id=3367): getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x804718, &(0x7f00000002c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nouid32}, {@mblk_io_submit}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 37.94746326s ago: executing program 2 (id=3362): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0xc21, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0x7, 0xa4, 0x10, 0x1, 0x0, 0xf0, 0x28, 0x0, 0x0, 0xf3, 0x60}, 0xe) 37.947334s ago: executing program 43 (id=3362): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0xc21, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x5, 0x2, 0x7, 0xa4, 0x10, 0x1, 0x0, 0xf0, 0x28, 0x0, 0x0, 0xf3, 0x60}, 0xe) 1.682017156s ago: executing program 4 (id=3985): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x6}, 0xc18, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 1.414819365s ago: executing program 4 (id=3986): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x400}, 0x4408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.357178357s ago: executing program 4 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(r2, &(0x7f0000011b80)={0x0, 0x0, &(0x7f0000011a80)=[{&(0x7f0000010000)='G\"', 0x2}], 0x1}, 0x20008091) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.299669708s ago: executing program 4 (id=3995): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x8f40, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) 1.26730804s ago: executing program 7 (id=4000): r0 = getpid() r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10b000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000e00)={0x2, 0x1, 0x3ff, 0x2, 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 1.185073812s ago: executing program 7 (id=4003): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x400}, 0x4408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.184971422s ago: executing program 4 (id=4004): epoll_create1(0x80000) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x100361c, 0x1, 0x2, 0x1bf}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 1.136364833s ago: executing program 7 (id=4007): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x8f40, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x5734}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) 971.442509ms ago: executing program 7 (id=4016): socket$netlink(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x799}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 971.213309ms ago: executing program 0 (id=4017): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x830, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 859.752972ms ago: executing program 7 (id=4020): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0xee8, 0x5042) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) semop(0x0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) 845.736533ms ago: executing program 8 (id=4022): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x400000, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000440)) 586.883261ms ago: executing program 0 (id=4024): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 585.214341ms ago: executing program 8 (id=4034): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97"], 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="02", 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000002000)=0x5c) 565.770352ms ago: executing program 8 (id=4026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 548.853702ms ago: executing program 8 (id=4027): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4, 0x400, 0x0, 0x9}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) 539.933222ms ago: executing program 0 (id=4028): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) close_range(r0, 0xffffffffffffffff, 0x0) 519.106933ms ago: executing program 3 (id=4030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 462.359555ms ago: executing program 8 (id=4031): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) shmctl$SHM_LOCK(0x0, 0xb) 462.226195ms ago: executing program 8 (id=4032): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) socket$netlink(0x10, 0x3, 0xc) link(0x0, 0x0) 448.554535ms ago: executing program 3 (id=4033): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e22, @remote}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14, {0x2, 0x4e23, @private=0xa010100}, 'veth1_to_team\x00'}) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480)=0x67ef, 0x4) sendmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 380.143517ms ago: executing program 3 (id=4035): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 335.336629ms ago: executing program 4 (id=4036): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0xe}, {0x9, 0x2}]}, @struct={0x2}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 327.18309ms ago: executing program 3 (id=4037): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000100)=0x28) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c616c6c6fe08a775f7574696d653d30313737373737373737373737373737373737373737372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370b499d0cb476cc07157313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d30"], 0x6, 0x2e6, &(0x7f0000000780)="$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") lseek(0xffffffffffffffff, 0x3, 0x2) getdents(0xffffffffffffffff, 0x0, 0x51) 297.93684ms ago: executing program 0 (id=4038): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 172.933474ms ago: executing program 3 (id=4039): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 89.477397ms ago: executing program 3 (id=4040): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") 89.123837ms ago: executing program 0 (id=4041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c811}, 0x24000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80), 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) 425.68µs ago: executing program 0 (id=4042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='attr/exec\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=4043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', '', [], 0xa, "39d2af5aa271"}, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) kernel console output (not intermixed with test programs): active one [ 184.282374][T12030] ip6gre1: entered promiscuous mode [ 184.289960][T12030] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 184.326987][T12036] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.335578][T12034] loop3: detected capacity change from 1024 to 8 [ 184.359750][T12041] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2741'. [ 184.404523][T12036] EXT4-fs (loop2): 2 truncates cleaned up [ 184.410877][T12036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.484920][T10301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.512851][T12051] loop6: detected capacity change from 0 to 512 [ 184.565368][T12051] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 184.577372][T12051] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 184.588020][T12051] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2747: Corrupt directory, running e2fsck is recommended [ 184.607462][T12051] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 184.620371][T12059] loop4: detected capacity change from 0 to 764 [ 184.627531][T12051] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2747: corrupted in-inode xattr: e_name out of bounds [ 184.651952][T12051] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.653339][T12051] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2747: couldn't read orphan inode 15 (err -117) [ 184.662550][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 184.662583][ C1] EXT4-fs (loop6): initial error at time 1781778111: ext4_iget_extra_inode:5128: inode 15 [ 184.662609][ C1] EXT4-fs (loop6): last error at time 1781778111: ext4_iget_extra_inode:5128: inode 15 [ 184.691071][T12051] loop6: lost filesystem error report for type 5 error -117 [ 184.706797][T12051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.767646][T12062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.834416][T10995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.911272][T12074] EXT4-fs: Ignoring removed bh option [ 184.921088][T12074] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2752: corrupted in-inode xattr: e_value size too large [ 184.921180][T12074] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.923921][T12074] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2752: couldn't read orphan inode 15 (err -117) [ 184.923951][T12074] loop6: lost filesystem error report for type 5 error -117 [ 184.927043][T12074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.932424][T12074] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.2752: Unrecognised inode hash code 4 [ 184.932521][T12074] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2752: Corrupt directory, running e2fsck is recommended [ 184.960971][T10995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.999567][T12078] netlink: 'syz.6.2754': attribute type 1 has an invalid length. [ 185.099253][T12078] bond1: entered promiscuous mode [ 185.104686][T12078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.171276][T10301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.187985][T12078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.202782][T12078] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 185.213856][T12078] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 185.226833][T12078] bond1: (slave ip6gre1): making interface the new active one [ 185.234542][T12078] ip6gre1: entered promiscuous mode [ 185.242320][T12078] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 185.403129][T12089] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 185.462470][T12089] team0 (unregistering): Port device team_slave_0 removed [ 185.474477][T12089] team0 (unregistering): Failed to send options change via netlink (err -105) [ 185.483934][T12089] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 185.495281][T12089] team0 (unregistering): Port device team_slave_1 removed [ 185.675567][T12099] set_capacity_and_notify: 2 callbacks suppressed [ 185.675583][T12099] loop1: detected capacity change from 0 to 512 [ 185.730667][T12101] loop3: detected capacity change from 0 to 512 [ 185.743944][T12099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.765019][T12101] EXT4-fs: Ignoring removed nobh option [ 185.788438][T12099] EXT4-fs (loop1): 1 truncate cleaned up [ 185.790566][T12101] EXT4-fs: Ignoring removed orlov option [ 185.818441][T12099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.856891][T12097] loop6: detected capacity change from 0 to 512 [ 185.886512][T12097] EXT4-fs: Ignoring removed bh option [ 185.919601][T12097] EXT4-fs: inline encryption not supported [ 185.963058][T12097] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.011877][T12097] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.032593][T12097] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2763: bg 0: block 248: padding at end of block bitmap is not set [ 186.045063][T12115] loop4: detected capacity change from 0 to 256 [ 186.052689][T12097] loop6: lost filesystem error report for type 5 error -117 [ 186.054036][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 186.067794][ C0] EXT4-fs (loop6): last error at time 1781778113: ext4_validate_block_bitmap:441 [ 186.102156][T12097] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.2763: Failed to acquire dquot type 1 [ 186.124308][T12097] loop6: lost filesystem error report for type 5 error -28 [ 186.129405][T12097] EXT4-fs (loop6): 1 truncate cleaned up [ 186.145411][T10418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.152373][T12097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 186.181153][T12097] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.2763: Failed to acquire dquot type 1 [ 186.202206][T12115] Cannot find set identified by id 0 to match [ 186.283614][T12097] syz.6.2763 (12097) used greatest stack depth: 8128 bytes left [ 186.308590][T10995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 186.325855][T12123] loop1: detected capacity change from 0 to 4096 [ 186.326149][T12123] EXT4-fs: test_dummy_encryption option not supported [ 186.397852][T12134] netlink: 'syz.2.2778': attribute type 1 has an invalid length. [ 186.432381][T12134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.481311][T12143] loop1: detected capacity change from 0 to 512 [ 186.490705][T12134] veth0_virt_wifi: entered promiscuous mode [ 186.509014][T12143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.530146][T12134] bond3: (slave veth0_virt_wifi): making interface the new active one [ 186.531266][T12143] EXT4-fs (loop1): 1 truncate cleaned up [ 186.545250][T12134] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 186.568568][T12143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.600168][T12152] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2786'. [ 186.630662][T10418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.685961][T12162] loop6: detected capacity change from 0 to 1024 [ 186.691376][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2788'. [ 186.698032][T12162] EXT4-fs: Ignoring removed orlov option [ 186.720253][T12158] loop2: detected capacity change from 0 to 4096 [ 186.739985][T12158] EXT4-fs: Ignoring removed orlov option [ 186.761117][T12158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.772052][T12149] loop3: detected capacity change from 0 to 512 [ 186.773544][T12162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.786251][T12149] EXT4-fs: Ignoring removed bh option [ 186.799009][T12149] EXT4-fs: inline encryption not supported [ 186.825377][T12168] loop1: detected capacity change from 0 to 128 [ 186.860032][T12158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.888465][T12168] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.909869][T12168] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.914588][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 186.914605][ T28] audit: type=1400 audit(1781778113.861:2664): avc: denied { write } for pid=12161 comm="syz.6.2791" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.936321][T10301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.966102][T10995] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Out of memory [ 186.976030][T10418] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.983473][T10995] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz-executor: mark_inode_dirty error [ 187.030014][T10995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.047937][T12165] kmmpd-loop6: attempt to access beyond end of device [ 187.047937][T12165] loop6: rw=14337, sector=128, nr_sectors = 2 limit=8 [ 187.061693][T12165] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 187.360137][ T9394] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.408500][ T9394] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.461790][ T9394] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.534155][ T9394] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.546251][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 187.567331][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 187.637241][ T9394] bridge_slave_1: left allmulticast mode [ 187.642943][ T9394] bridge_slave_1: left promiscuous mode [ 187.648958][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.658504][ T9394] bridge_slave_0: left allmulticast mode [ 187.664400][ T9394] bridge_slave_0: left promiscuous mode [ 187.670319][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.723134][ T9394] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 187.733367][ T9394] ip6gre1 (unregistering): left promiscuous mode [ 187.798546][ T9394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.816334][ T9394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.833324][ T9394] bond0 (unregistering): Released all slaves [ 187.839968][ T28] audit: type=1400 audit(1781778114.791:2665): avc: denied { getopt } for pid=12240 comm="syz.2.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.872125][ T9394] bond1 (unregistering): Released all slaves [ 187.946787][T12248] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 187.946787][T12248] program syz.2.2818 not setting count and/or reply_len properly [ 187.967717][ T9394] hsr_slave_0: left promiscuous mode [ 187.969485][T12248] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 187.969485][T12248] program syz.2.2818 not setting count and/or reply_len properly [ 187.992992][T12248] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 187.992992][T12248] program syz.2.2818 not setting count and/or reply_len properly [ 188.014278][ T9394] hsr_slave_1: left promiscuous mode [ 188.021047][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.035232][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.046015][ T28] audit: type=1400 audit(1781778115.001:2666): avc: denied { create } for pid=12253 comm="syz.2.2821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 188.067123][ T28] audit: type=1400 audit(1781778115.031:2667): avc: denied { write } for pid=12253 comm="syz.2.2821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 188.089458][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.105834][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.133131][ T9394] veth1_macvtap: left promiscuous mode [ 188.147235][ T9394] veth0_macvtap: left promiscuous mode [ 188.156676][ T9394] veth1_vlan: left promiscuous mode [ 188.161987][ T9394] veth0_vlan: left promiscuous mode [ 188.171222][ T28] audit: type=1400 audit(1781778115.121:2668): avc: denied { write } for pid=12249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.203105][ T28] audit: type=1400 audit(1781778115.151:2669): avc: denied { write } for pid=12269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.317764][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 188.377779][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.398281][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.408143][T12276] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.415994][T12210] bridge_slave_0: entered allmulticast mode [ 188.422598][T12210] bridge_slave_0: entered promiscuous mode [ 188.428755][T12276] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.437926][T12210] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.446275][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.453594][T12210] bridge_slave_1: entered allmulticast mode [ 188.461431][T12210] bridge_slave_1: entered promiscuous mode [ 188.492263][T12210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.503277][T12210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.538360][T12210] team0: Port device team_slave_0 added [ 188.545423][T12210] team0: Port device team_slave_1 added [ 188.563945][ T28] audit: type=1400 audit(1781778115.511:2670): avc: denied { create } for pid=12279 comm="syz.3.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.590338][T12282] netlink: 'syz.4.2826': attribute type 8 has an invalid length. [ 188.591500][T12210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.598395][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 188.605729][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.640725][T12210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.653013][T12210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.660040][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.686398][T12210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.699945][T12282] veth1_to_team: entered promiscuous mode [ 188.707011][T12282] gretap0: entered promiscuous mode [ 188.713127][T12282] dummy0: entered promiscuous mode [ 188.718923][T12282] hsr1: entered promiscuous mode [ 188.751056][T12210] hsr_slave_0: entered promiscuous mode [ 188.757231][T12210] hsr_slave_1: entered promiscuous mode [ 188.769643][T12210] debugfs: 'hsr0' already exists in 'hsr' [ 188.775853][T12210] Cannot create hsr debugfs directory [ 188.898348][ T28] audit: type=1400 audit(1781778115.851:2671): avc: denied { watch_reads } for pid=12293 comm="syz.2.2831" path="/84/file1" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.977333][T12263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.078974][T12210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.098104][T12210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.129124][T12210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.178413][T12210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.187832][T12210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.195466][ T28] audit: type=1400 audit(1781778116.141:2672): avc: denied { write } for pid=12308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.226122][T12210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.233778][T12210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.268142][T12210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.288886][ T28] audit: type=1400 audit(1781778116.241:2673): avc: denied { write } for pid=12331 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.347492][T12335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 189.379128][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 189.412862][T12335] System zones: 1-12 [ 189.452759][T12335] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2842: error while reading EA inode 32 err=-116 [ 189.496656][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.524849][T12335] loop4: lost filesystem error report for type 5 error -117 [ 189.525078][T12335] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2842: error while reading EA inode 32 err=-116 [ 189.541128][T12210] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.544782][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 189.557785][ C0] EXT4-fs (loop4): initial error at time 1781778116: ext4_xattr_inode_iget:446 [ 189.566766][ C0] EXT4-fs (loop4): last error at time 1781778116: ext4_xattr_inode_iget:446 [ 189.589068][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.596185][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.625488][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.632668][ T7417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.803182][T12335] loop4: lost filesystem error report for type 5 error -117 [ 189.803403][T12335] EXT4-fs (loop4): 1 orphan inode deleted [ 189.823268][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 189.866064][T12335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.950874][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2842'. [ 189.960009][T12210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.073648][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.141367][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 190.183719][T12210] veth0_vlan: entered promiscuous mode [ 190.210168][T12210] veth1_vlan: entered promiscuous mode [ 190.239631][T12210] veth0_macvtap: entered promiscuous mode [ 190.258380][T12210] veth1_macvtap: entered promiscuous mode [ 190.287067][T12210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.304963][T12210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.336695][ T9394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.353448][ T9394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.377137][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.392851][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.058474][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.087799][T12473] set_capacity_and_notify: 2 callbacks suppressed [ 191.087816][T12473] loop1: detected capacity change from 0 to 128 [ 191.101762][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.142501][T12473] FAT-fs (loop1): Directory bread(block 32) failed [ 191.149285][T12473] FAT-fs (loop1): Directory bread(block 33) failed [ 191.155977][T12473] FAT-fs (loop1): Directory bread(block 34) failed [ 191.162488][T12473] FAT-fs (loop1): Directory bread(block 35) failed [ 191.169085][T12473] FAT-fs (loop1): Directory bread(block 36) failed [ 191.175675][T12473] FAT-fs (loop1): Directory bread(block 37) failed [ 191.182211][T12473] FAT-fs (loop1): Directory bread(block 38) failed [ 191.188752][T12473] FAT-fs (loop1): Directory bread(block 39) failed [ 191.195415][T12473] FAT-fs (loop1): Directory bread(block 40) failed [ 191.201938][T12473] FAT-fs (loop1): Directory bread(block 41) failed [ 191.229862][T12473] syz.1.2874: attempt to access beyond end of device [ 191.229862][T12473] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 191.982994][T12505] xt_hashlimit: size too large, truncated to 1048576 [ 192.048400][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 192.048451][ T28] audit: type=1400 audit(1781778119.001:2679): avc: denied { setopt } for pid=12504 comm="syz.3.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.351435][T12522] macvlan2: entered allmulticast mode [ 193.031364][T12577] loop1: detected capacity change from 0 to 512 [ 193.058794][T12577] EXT4-fs: Ignoring removed bh option [ 193.065777][T12577] EXT4-fs: inline encryption not supported [ 193.075022][T12577] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.108817][T12577] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 193.127320][T12577] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2914: bg 0: block 248: padding at end of block bitmap is not set [ 193.153456][T12577] loop1: lost filesystem error report for type 5 error -117 [ 193.155859][T12577] Quota error (device loop1): write_blk: dquota write failed [ 193.171079][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 193.171109][ C1] EXT4-fs (loop1): last error at time 1781778120: ext4_validate_block_bitmap:441 [ 193.197377][T12577] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 193.212979][T12599] netlink: 'syz.3.2921': attribute type 4 has an invalid length. [ 193.216763][T12577] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.2914: Failed to acquire dquot type 1 [ 193.232888][T12577] loop1: lost filesystem error report for type 5 error -28 [ 193.254597][T12577] EXT4-fs (loop1): 1 truncate cleaned up [ 193.278470][T12599] netlink: 'syz.3.2921': attribute type 4 has an invalid length. [ 193.289425][T12577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 193.347816][T12577] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 193.361764][T12577] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 193.373076][T12577] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.2914: Failed to acquire dquot type 1 [ 193.444234][T10418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 193.500012][ T28] audit: type=1326 audit(1781778120.451:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.2.2930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f404d886bd7 code=0x0 [ 194.081515][T12634] batadv_slave_1: entered promiscuous mode [ 194.109833][T12633] batadv_slave_1: left promiscuous mode [ 194.478718][T12644] loop1: detected capacity change from 0 to 1024 [ 194.506688][T12644] EXT4-fs: Ignoring removed bh option [ 194.517252][T12644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.537269][T12640] batadv1: entered promiscuous mode [ 194.542703][ T28] audit: type=1400 audit(1781778121.491:2681): avc: denied { write } for pid=12643 comm="syz.1.2942" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.542782][T12640] batadv1: entered allmulticast mode [ 194.615360][T10418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.741513][ T7417] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.054802][T12683] netlink: 'syz.0.2957': attribute type 3 has an invalid length. [ 195.062619][T12683] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2957'. [ 195.205559][ T28] audit: type=1400 audit(1781778122.151:2682): avc: denied { associate } for pid=12696 comm="syz.0.2962" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.243916][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 195.253903][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 195.292059][T12704] loop4: detected capacity change from 0 to 512 [ 195.303117][T12704] EXT4-fs: Ignoring removed bh option [ 195.309426][T12704] EXT4-fs: inline encryption not supported [ 195.316925][T12704] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.336487][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2967'. [ 195.340241][T12704] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.371429][T12704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2966: bg 0: block 248: padding at end of block bitmap is not set [ 195.385997][T12704] loop4: lost filesystem error report for type 5 error -117 [ 195.386501][T12704] Quota error (device loop4): write_blk: dquota write failed [ 195.401263][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 195.401293][ C1] EXT4-fs (loop4): last error at time 1781778122: ext4_validate_block_bitmap:441 [ 195.417423][T12704] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 195.427493][T12704] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.2966: Failed to acquire dquot type 1 [ 195.439832][T12704] loop4: lost filesystem error report for type 5 error -28 [ 195.440926][T12704] EXT4-fs (loop4): 1 truncate cleaned up [ 195.455348][T12704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.477849][T12704] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.2966: Failed to acquire dquot type 1 [ 195.501321][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 195.620231][T12720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12720 comm=syz.3.2972 [ 195.633377][T12720] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 195.653932][T12720] bond4: (slave bridge3): making interface the new active one [ 195.661988][T12720] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 196.139418][T12727] loop0: detected capacity change from 0 to 128 [ 196.146707][T12727] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 196.171390][T12727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.186761][T12727] ext2 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.490276][T12210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.570949][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 196.755943][T12759] tipc: Started in network mode [ 196.776925][T12759] tipc: Node identity ac14140f, cluster identity 4711 [ 196.784773][T12759] tipc: New replicast peer: 255.255.255.255 [ 196.797374][T12759] tipc: Enabled bearer , priority 10 [ 196.799132][ T5640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.809900][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 196.877822][T12773] netlink: 'syz.3.2992': attribute type 1 has an invalid length. [ 196.933854][T12773] gretap3: entered allmulticast mode [ 196.959848][T12773] bond5: (slave gretap3): making interface the new active one [ 196.980338][T12773] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 197.914349][ T3401] tipc: Node number set to 2886997007 [ 198.129043][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 198.185805][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 198.205314][T12842] erspan0: entered promiscuous mode [ 198.214661][T12842] macvtap1: entered promiscuous mode [ 198.223985][T12842] macvtap1: entered allmulticast mode [ 198.231079][T12842] erspan0: entered allmulticast mode [ 198.251386][T12842] erspan0: left allmulticast mode [ 198.261861][T12842] erspan0: left promiscuous mode [ 198.269967][T12842] macvtap1: left promiscuous mode [ 198.275912][T12842] macvtap1: left allmulticast mode [ 198.507031][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 198.507053][ T28] audit: type=1400 audit(1781778125.461:2688): avc: denied { write } for pid=12860 comm="syz.0.3026" path="socket:[37372]" dev="sockfs" ino=37372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.648161][T12864] syzkaller1: entered promiscuous mode [ 198.658714][T12864] syzkaller1: entered allmulticast mode [ 198.902311][ T28] audit: type=1400 audit(1781778125.851:2689): avc: denied { connect } for pid=12878 comm="syz.4.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.925769][ T28] audit: type=1400 audit(1781778125.881:2690): avc: denied { read } for pid=12878 comm="syz.4.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.977574][ T28] audit: type=1400 audit(1781778125.931:2691): avc: denied { write } for pid=12878 comm="syz.4.3034" path="socket:[37403]" dev="sockfs" ino=37403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.183426][T12893] loop2: detected capacity change from 0 to 512 [ 199.204384][T12893] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3040: bad orphan inode 13 [ 199.251550][T12893] loop2: lost filesystem error report for type 5 error -117 [ 199.252057][T12893] ext4_test_bit(bit=12, block=4) = 1 [ 199.259510][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 199.259528][ C0] EXT4-fs (loop2): initial error at time 1781778126: ext4_orphan_get:1425 [ 199.259546][ C0] EXT4-fs (loop2): last error at time 1781778126: ext4_orphan_get:1425 [ 199.312345][T12893] is_bad_inode(inode)=0 [ 199.316791][T12893] NEXT_ORPHAN(inode)=0 [ 199.320944][T12893] max_ino=32 [ 199.324428][T12893] i_nlink=1 [ 199.328079][T12893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.342340][T12893] EXT4-fs warning (device loop2): dx_probe:813: inode #2: comm syz.2.3040: Hash code is SIPHASH, but hash not in dirent [ 199.356156][T12893] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3040: Corrupt directory, running e2fsck is recommended [ 199.370570][T12893] EXT4-fs warning (device loop2): dx_probe:813: inode #2: comm syz.2.3040: Hash code is SIPHASH, but hash not in dirent [ 199.378893][ T28] audit: type=1400 audit(1781778126.321:2692): avc: denied { write } for pid=12892 comm="syz.2.3040" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.384726][T12893] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3040: Corrupt directory, running e2fsck is recommended [ 199.428497][ T1985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.450500][ T28] audit: type=1400 audit(1781778126.401:2693): avc: denied { write } for pid=12892 comm="syz.2.3040" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 199.481777][ T1985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.490140][ T28] audit: type=1400 audit(1781778126.401:2694): avc: denied { add_name } for pid=12892 comm="syz.2.3040" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 199.514770][T10301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.561760][ T1985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.587736][ T1985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.651563][ T1985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.666180][ T1985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.730024][T12925] pim6reg: entered allmulticast mode [ 199.737266][T12925] pim6reg: left allmulticast mode [ 199.766770][ T1985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.777391][ T1985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.860064][T12941] loop0: detected capacity change from 0 to 512 [ 199.883139][T12941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.905209][ T1985] bridge_slave_1: left allmulticast mode [ 199.911114][ T1985] bridge_slave_1: left promiscuous mode [ 199.919784][T12941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.933960][ T1985] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.942739][ T1985] bridge_slave_0: left allmulticast mode [ 199.944196][T12941] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.948810][ T1985] bridge_slave_0: left promiscuous mode [ 199.986392][ T1985] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.002729][T12941] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.3059: corrupted xattr block 32: overlapping e_value [ 200.019245][T12941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 200.028387][T12941] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.3059: corrupted xattr block 32: overlapping e_value [ 200.045030][T12941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 200.056209][T12941] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.3059: corrupted xattr block 32: overlapping e_value [ 200.070224][ T28] audit: type=1400 audit(1781778127.011:2695): avc: denied { read } for pid=12940 comm="syz.0.3059" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.098007][T12941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 200.108639][ T1985] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 200.118358][T12952] loop4: detected capacity change from 0 to 512 [ 200.125278][ T28] audit: type=1400 audit(1781778127.061:2696): avc: denied { open } for pid=12940 comm="syz.0.3059" path="/52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.169581][ T1985] ip6gre1 (unregistering): left promiscuous mode [ 200.191009][T12210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.201779][ T28] audit: type=1400 audit(1781778127.151:2697): avc: denied { watch watch_reads } for pid=12949 comm="syz.4.3062" path="/205/file0/file0" dev="loop4" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 200.228568][ T1985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.249595][ T1985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.259455][ T1985] bond0 (unregistering): Released all slaves [ 200.268106][ T1985] bond1 (unregistering): Released all slaves [ 200.354010][ T1985] hsr_slave_0: left promiscuous mode [ 200.361202][ T1985] hsr_slave_1: left promiscuous mode [ 200.367589][ T1985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.381348][T12969] loop0: detected capacity change from 0 to 512 [ 200.382178][ T1985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.403942][ T1985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.418635][ T1985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.442472][T12969] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3067: inode has both inline data and extents flags [ 200.457555][ T1985] veth1_macvtap: left promiscuous mode [ 200.463094][T12969] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.463206][ T1985] veth0_macvtap: left promiscuous mode [ 200.474039][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 200.484339][ C1] EXT4-fs (loop0): initial error at time 1781778127: ext4_orphan_get:1399: inode 15 [ 200.485060][ T1985] veth1_vlan: left promiscuous mode [ 200.493770][ C1] EXT4-fs (loop0): last error at time 1781778127: ext4_orphan_get:1399: inode 15 [ 200.499024][ T1985] veth0_vlan: left promiscuous mode [ 200.508752][T12969] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3067: couldn't read orphan inode 15 (err -117) [ 200.527355][T12969] loop0: lost filesystem error report for type 5 error -117 [ 200.527939][T12969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.553744][T12969] EXT4-fs (loop0): shut down requested (2) [ 200.615407][T12210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.700224][ T1985] team0 (unregistering): Port device team_slave_1 removed [ 200.893998][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 201.083347][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.092932][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.100548][T12928] bridge_slave_0: entered allmulticast mode [ 201.107251][T12928] bridge_slave_0: entered promiscuous mode [ 201.114414][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.121612][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.129153][T12928] bridge_slave_1: entered allmulticast mode [ 201.135774][T12928] bridge_slave_1: entered promiscuous mode [ 201.163412][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.189140][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.212029][T12928] team0: Port device team_slave_0 added [ 201.219042][T12928] team0: Port device team_slave_1 added [ 201.236771][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.238484][ T1985] IPVS: stop unused estimator thread 0... [ 201.243786][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.243810][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.290752][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.298149][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.324936][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.504620][T12928] hsr_slave_0: entered promiscuous mode [ 201.520852][T12928] hsr_slave_1: entered promiscuous mode [ 201.535987][T12928] debugfs: 'hsr0' already exists in 'hsr' [ 201.542213][T12928] Cannot create hsr debugfs directory [ 201.662193][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 201.860099][T12928] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.988358][T12928] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.049676][T13120] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3099'. [ 202.083177][T12928] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.249166][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 202.562876][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 202.596986][T12928] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.725037][T12928] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 202.735990][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.751344][T12928] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 202.777945][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.785891][T12928] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 202.788633][T13180] loop4: detected capacity change from 0 to 512 [ 202.802394][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.812338][T12928] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 202.822522][T13180] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3111: inode has both inline data and extents flags [ 202.836013][T13180] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.836216][T13180] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3111: couldn't read orphan inode 15 (err -117) [ 202.838084][T12928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.845363][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 202.845380][ C0] EXT4-fs (loop4): initial error at time 1781778129: ext4_orphan_get:1399: inode 15 [ 202.845407][ C0] EXT4-fs (loop4): last error at time 1781778129: ext4_orphan_get:1399: inode 15 [ 202.847518][T13180] loop4: lost filesystem error report for type 5 error -117 [ 202.890487][T13180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.930160][T13180] EXT4-fs (loop4): shut down requested (2) [ 202.966940][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.007892][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.031298][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.050102][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.057206][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.080741][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.087888][ T9399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.470839][ T9394] bond0: (slave bond_slave_0): interface is now down [ 203.477809][ T9394] bond0: (slave bond_slave_1): interface is now down [ 203.504258][ T7417] bond0: (slave bond_slave_0): interface is now down [ 203.511045][ T7417] bond0: (slave bond_slave_1): interface is now down [ 203.564784][ T7417] bond0: (slave bond_slave_0): interface is now down [ 203.578428][T13214] infiniband syz1: set active [ 203.589255][T13214] infiniband syz1: added bond0 [ 203.595949][ T7417] bond0: (slave bond_slave_1): interface is now down [ 203.615585][ T7417] bond0: now running without any active interface! [ 203.628393][T13214] RDS/IB: syz1: added [ 203.636341][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 203.636354][ T28] audit: type=1400 audit(1781778130.591:2713): avc: denied { write } for pid=13219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.672786][T13214] smc: adding ib device syz1 with port count 1 [ 203.729324][T13214] smc: ib device syz1 port 1 has no pnetid [ 203.777947][ T28] audit: type=1400 audit(1781778130.651:2714): avc: denied { write } for pid=13238 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.824619][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.953146][T13250] loop4: detected capacity change from 0 to 512 [ 203.986783][T13250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.061857][T13250] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.161732][T12928] veth0_vlan: entered promiscuous mode [ 204.170005][T12928] veth1_vlan: entered promiscuous mode [ 204.176743][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.203384][T12928] veth0_macvtap: entered promiscuous mode [ 204.221102][T12928] veth1_macvtap: entered promiscuous mode [ 204.278258][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.303538][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.350306][ T9046] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.377977][ T9046] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.400858][ T9046] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.434079][ T9046] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.451205][T13271] loop4: detected capacity change from 0 to 512 [ 204.473012][T13271] EXT4-fs: Ignoring removed orlov option [ 204.505848][T13271] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.524641][T13271] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3127: corrupted in-inode xattr: e_value size too large [ 204.561739][T13271] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.562993][T13271] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3127: couldn't read orphan inode 15 (err -117) [ 204.572256][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 204.572277][ C1] EXT4-fs (loop4): initial error at time 1781778131: ext4_iget_extra_inode:5128: inode 15 [ 204.572312][ C1] EXT4-fs (loop4): last error at time 1781778131: ext4_iget_extra_inode:5128: inode 15 [ 204.611942][T13271] loop4: lost filesystem error report for type 5 error -117 [ 204.613585][T13271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.649063][ T28] audit: type=1400 audit(1781778131.591:2715): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.679075][T13271] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 12: comm syz.4.3127: lblock 3 mapped to illegal pblock 12 (length 1) [ 204.737566][ T28] audit: type=1400 audit(1781778131.601:2716): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.785833][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.795718][ T28] audit: type=1400 audit(1781778131.601:2717): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.849948][ T28] audit: type=1400 audit(1781778131.631:2718): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.906109][ T28] audit: type=1400 audit(1781778131.631:2719): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.956946][ T28] audit: type=1400 audit(1781778131.631:2720): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.987456][ T28] audit: type=1400 audit(1781778131.631:2721): avc: denied { rename } for pid=13270 comm="syz.4.3127" name="bus" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.011174][ T28] audit: type=1400 audit(1781778131.631:2722): avc: denied { write } for pid=13270 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.109178][T13307] loop8: detected capacity change from 0 to 512 [ 205.117460][T13307] EXT4-fs: Ignoring removed bh option [ 205.141779][T13307] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3142: corrupted in-inode xattr: e_value size too large [ 205.156463][T13307] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.156793][T13307] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3142: couldn't read orphan inode 15 (err -117) [ 205.166137][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 205.166155][ C0] EXT4-fs (loop8): initial error at time 1781778132: ext4_iget_extra_inode:5128: inode 15 [ 205.166183][ C0] EXT4-fs (loop8): last error at time 1781778132: ext4_iget_extra_inode:5128: inode 15 [ 205.204508][T13307] loop8: lost filesystem error report for type 5 error -117 [ 205.207998][T13307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.239319][T13307] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.3142: Unrecognised inode hash code 4 [ 205.254133][T13307] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3142: Corrupt directory, running e2fsck is recommended [ 205.295391][T12928] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.509325][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3151'. [ 205.541472][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3151'. [ 205.657218][T13338] loop4: detected capacity change from 0 to 4096 [ 205.675245][T13338] EXT4-fs: Ignoring removed orlov option [ 205.682192][T13338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.695657][T13342] futex_wake_op: syz.2.3155 tries to shift op by 32; fix this program [ 205.709344][T13338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.840926][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.959768][T13356] loop4: detected capacity change from 0 to 512 [ 205.995042][T13356] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3160: error while reading EA inode 32 err=-116 [ 206.011459][T13356] loop4: lost filesystem error report for type 5 error -117 [ 206.011916][T13356] EXT4-fs (loop4): 1 orphan inode deleted [ 206.019321][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 206.019340][ C1] EXT4-fs (loop4): initial error at time 1781778132: ext4_xattr_inode_iget:446 [ 206.019365][ C1] EXT4-fs (loop4): last error at time 1781778132: ext4_xattr_inode_iget:446 [ 206.054670][T13356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.097869][T13356] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.3160: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 206.186657][T13359] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.3160: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 206.253221][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.260871][T13363] loop2: detected capacity change from 0 to 512 [ 206.281241][T13363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.359332][T10301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.696038][T13403] xt_hashlimit: size too large, truncated to 1048576 [ 206.746049][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 209.986225][T13441] uprobe: syz.2.3194:13441 failed to unregister, leaking uprobe [ 210.159965][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 210.159978][ T28] audit: type=1400 audit(1781778137.111:2730): avc: denied { remount } for pid=13489 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 210.319598][ T28] audit: type=1400 audit(1781778137.271:2731): avc: denied { read } for pid=13504 comm="iou-wrk-13505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 210.378825][T13513] sctp: [Deprecated]: syz.0.3219 (pid 13513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.378825][T13513] Use struct sctp_sack_info instead [ 210.410346][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 210.413908][ T28] audit: type=1400 audit(1781778137.361:2732): avc: denied { watch } for pid=13517 comm="syz.0.3221" path="/83/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 210.422573][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3220'. [ 210.486650][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3223'. [ 210.519388][T13528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13528 comm=syz.3.3226 [ 210.533105][T13528] netlink: 'syz.3.3226': attribute type 1 has an invalid length. [ 210.863812][T13470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.887786][T13555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13555 comm=syz.8.3239 [ 210.906925][T13555] netlink: 'syz.8.3239': attribute type 1 has an invalid length. [ 210.979184][T13566] macvlan2: entered allmulticast mode [ 210.995561][T13566] bond0: entered allmulticast mode [ 211.002758][T13566] bond_slave_0: entered allmulticast mode [ 211.010867][T13566] bond_slave_1: entered allmulticast mode [ 211.018054][T13566] bond_slave_0: entered promiscuous mode [ 211.025473][T13566] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.035337][T13566] team0: Port device macvlan2 added [ 211.370120][T13604] cgroup: No subsys list or none specified [ 211.849273][T13639] xt_hashlimit: size too large, truncated to 1048576 [ 211.863747][T13640] cgroup: No subsys list or none specified [ 212.219596][T13670] cgroup: No subsys list or none specified [ 212.484202][ T28] audit: type=1400 audit(1781778139.431:2733): avc: denied { write } for pid=13689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.490378][T13702] netlink: 'syz.8.3294': attribute type 3 has an invalid length. [ 212.571350][ T28] audit: type=1400 audit(1781778139.521:2734): avc: denied { write } for pid=13709 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.577625][T13702] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3294'. [ 212.898638][T13727] cgroup: No subsys list or none specified [ 212.920680][T13730] xt_hashlimit: size too large, truncated to 1048576 [ 213.069477][ T28] audit: type=1400 audit(1781778140.021:2735): avc: denied { mounton } for pid=13741 comm="syz.8.3305" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.069485][T13742] VFS: Mount too revealing [ 213.359009][ T28] audit: type=1400 audit(1781778140.311:2736): avc: denied { write } for pid=13756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.416221][ T28] audit: type=1400 audit(1781778140.361:2737): avc: denied { write } for pid=13774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.616540][ T28] audit: type=1400 audit(1781778140.571:2738): avc: denied { write } for pid=13777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.684583][ T28] audit: type=1400 audit(1781778140.641:2739): avc: denied { write } for pid=13788 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.293164][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 214.324720][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 214.356655][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 214.366085][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.495372][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3326'. [ 215.027699][T13862] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3337'. [ 215.049110][T13864] cgroup: No subsys list or none specified [ 215.214057][T13875] batadv1: entered promiscuous mode [ 215.229494][T13875] batadv1: entered allmulticast mode [ 215.549994][T13887] tipc: Started in network mode [ 215.560253][T13887] tipc: Node identity ac14140f, cluster identity 4711 [ 215.581025][T13887] tipc: New replicast peer: 255.255.255.255 [ 215.588315][T13887] tipc: Enabled bearer , priority 10 [ 215.651851][T13900] cgroup: No subsys list or none specified [ 216.120927][T13919] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.250543][T13919] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.337122][ T7417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.348007][ T7417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.402451][T13919] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.422578][ T7417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.433168][ T7417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.483913][T13919] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.530019][ T7417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.540732][ T7417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.604680][ T3389] tipc: Node number set to 2886997007 [ 216.626766][ T7417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.637591][ T7417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.658936][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.680787][ T9399] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.703028][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.710189][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.717555][T13933] bridge_slave_0: entered allmulticast mode [ 216.724205][T13933] bridge_slave_0: entered promiscuous mode [ 216.737937][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.746408][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.753625][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.760913][T13933] bridge_slave_1: entered allmulticast mode [ 216.767495][T13933] bridge_slave_1: entered promiscuous mode [ 216.792931][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.803484][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.819994][ T1985] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.847474][T13933] team0: Port device team_slave_0 added [ 216.869434][ T7417] bridge_slave_1: left allmulticast mode [ 216.879874][ T7417] bridge_slave_1: left promiscuous mode [ 216.885732][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.897456][ T7417] bridge_slave_0: left allmulticast mode [ 216.903211][ T7417] bridge_slave_0: left promiscuous mode [ 216.909423][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.056011][ T7417] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 217.065267][ T7417] ip6gre1 (unregistering): left promiscuous mode [ 217.108995][ T9399] smc: removing ib device syz1 [ 217.116326][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.126786][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.136361][ T7417] bond0 (unregistering): Released all slaves [ 217.144126][ T7417] bond1 (unregistering): Released all slaves [ 217.153051][ T7417] bond2 (unregistering): Released all slaves [ 217.162903][ T7417] bond3 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 217.172967][ T7417] bond3 (unregistering): Released all slaves [ 217.181664][T13933] team0: Port device team_slave_1 added [ 217.207254][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.218481][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.245768][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.257290][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.264664][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.291732][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.351161][T13964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.362042][T13964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.419833][T13933] hsr_slave_0: entered promiscuous mode [ 217.431782][T13933] hsr_slave_1: entered promiscuous mode [ 217.437777][T13933] debugfs: 'hsr0' already exists in 'hsr' [ 217.443727][T13933] Cannot create hsr debugfs directory [ 217.500705][T13964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.511664][T13964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.532829][ T7417] hsr_slave_0: left promiscuous mode [ 217.538593][ T7417] hsr_slave_1: left promiscuous mode [ 217.544676][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.552176][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.559822][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.567258][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.577836][ T7417] veth1_macvtap: left promiscuous mode [ 217.583375][ T7417] veth0_macvtap: left promiscuous mode [ 217.588985][ T7417] veth1_vlan: left promiscuous mode [ 217.597370][ T7417] veth0_vlan: left promiscuous mode [ 217.732031][T13964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.743972][T13964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.756489][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 217.756501][ T28] audit: type=1400 audit(1781778144.711:2742): avc: denied { write } for pid=13967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.814559][ T28] audit: type=1400 audit(1781778144.761:2743): avc: denied { write } for pid=13978 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.846117][T13964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.856536][T13964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.868548][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 217.937708][ T1985] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.946065][ T1985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.957987][ T28] audit: type=1400 audit(1781778144.911:2744): avc: denied { write } for pid=13981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.965049][ T1985] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.989561][ T1985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.998474][ T1985] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.006839][ T1985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.015186][ T28] audit: type=1400 audit(1781778144.971:2745): avc: denied { write } for pid=13992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.037623][ T1985] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.045952][ T1985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.056562][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 218.126995][ T28] audit: type=1400 audit(1781778145.081:2746): avc: denied { write } for pid=13995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.150427][ T28] audit: type=1400 audit(1781778145.081:2747): avc: denied { write } for pid=14006 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.160109][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 218.246698][ T28] audit: type=1400 audit(1781778145.201:2748): avc: denied { write } for pid=14009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.271257][T13933] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.280457][ T28] audit: type=1400 audit(1781778145.241:2749): avc: denied { write } for pid=14020 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.294137][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.310839][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 218.318099][T13933] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.326805][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.334865][T13933] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.343760][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.353154][T13933] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.362248][T13933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.380432][ T28] audit: type=1400 audit(1781778145.331:2750): avc: denied { write } for pid=14022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.402138][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.418694][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.421580][ T28] audit: type=1400 audit(1781778145.371:2751): avc: denied { write } for pid=14039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.438427][T13933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.460512][T13933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.472779][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.479859][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.488693][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.495748][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.609102][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.730417][T13933] veth0_vlan: entered promiscuous mode [ 218.739309][T13933] veth1_vlan: entered promiscuous mode [ 218.758494][T13933] veth0_macvtap: entered promiscuous mode [ 218.767021][T13933] veth1_macvtap: entered promiscuous mode [ 218.779419][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.792448][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.811535][ T7417] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.820517][ T7417] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.835062][ T7417] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.843830][ T7417] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.902205][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3387'. [ 219.234222][T14135] loop4: detected capacity change from 0 to 512 [ 219.247200][T14135] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.331117][T14135] ------------[ cut here ]------------ [ 219.339198][T14135] EA inode 11 i_nlink=2 [ 219.339448][T14135] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.4.3378/14135 [ 219.357688][T14135] Modules linked in: [ 219.362250][T14135] CPU: 0 UID: 0 PID: 14135 Comm: syz.4.3378 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.372058][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.382517][T14135] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 219.389738][T14135] Code: f6 35 97 ff 49 8d 7e 40 4c 8d 2d 2b eb 5a 05 e8 26 07 b6 ff 49 8b 6e 40 4c 89 e7 e8 5a 02 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 61 2a d8 03 90 90 90 90 90 90 90 [ 219.410008][T14135] RSP: 0018:ffffc900030337f8 EFLAGS: 00010246 [ 219.417170][T14135] RAX: ffff888100bdad30 RBX: ffff88811af0e278 RCX: ffffffff81c23586 [ 219.425360][T14135] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d20a0 [ 219.433640][T14135] RBP: 000000000000000b R08: 000188811af0e22b R09: 0000000000000000 [ 219.444710][T14135] R10: ffffc90003033728 R11: 0001c90003033728 R12: ffff88811af0e228 [ 219.453358][T14135] R13: ffffffff871d20a0 R14: ffff88811af0e1e0 R15: 0000000000000001 [ 219.461858][T14135] FS: 00007fdc6521f6c0(0000) GS:ffff8882ae8de000(0000) knlGS:0000000000000000 [ 219.471468][T14135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.478635][T14135] CR2: 000055c51115b300 CR3: 0000000123b54000 CR4: 00000000003506f0 [ 219.488200][T14135] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 219.498158][T14135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 219.506818][T14135] Call Trace: [ 219.510478][T14135] [ 219.513828][T14135] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 219.520588][T14135] ext4_xattr_delete_inode+0x6b5/0x790 [ 219.526908][T14135] ext4_evict_inode+0xb18/0xdf0 [ 219.532138][T14135] ? __pfx_ext4_evict_inode+0x10/0x10 [ 219.537805][T14135] evict+0x2a5/0x510 [ 219.542060][T14135] ? iput+0x1ef/0x5a0 [ 219.546431][T14135] ? ext4_drop_inode+0xd/0x100 [ 219.551557][T14135] iput+0x430/0x5a0 [ 219.555728][T14135] ext4_process_orphan+0x1a4/0x1c0 [ 219.561248][T14135] ext4_orphan_cleanup+0x6a6/0xa10 [ 219.566708][T14135] ? ext4_fill_super+0x32dc/0x3780 [ 219.572438][T14135] ext4_fill_super+0x33d5/0x3780 [ 219.577788][T14135] ? set_blocksize+0x14c/0x270 [ 219.583068][T14135] ? __pfx_ext4_fill_super+0x10/0x10 [ 219.588828][T14135] get_tree_bdev_flags+0x291/0x300 [ 219.598178][T14135] ? __pfx_ext4_fill_super+0x10/0x10 [ 219.603770][T14135] get_tree_bdev+0x1f/0x30 [ 219.608847][T14135] ext4_get_tree+0x1c/0x30 [ 219.613798][T14135] vfs_get_tree+0x57/0x1d0 [ 219.618748][T14135] do_new_mount+0x288/0x8d0 [ 219.623677][T14135] path_mount+0x4ad/0xb90 [ 219.628459][T14135] __se_sys_mount+0x28c/0x2e0 [ 219.633467][T14135] ? restore_fpregs_from_fpstate+0x61/0x110 [ 219.640060][T14135] __x64_sys_mount+0x67/0x80 [ 219.645656][T14135] x64_sys_call+0x2d61/0x3020 [ 219.651038][T14135] do_syscall_64+0x136/0x3c0 [ 219.656548][T14135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.662908][T14135] RIP: 0033:0x7fdc667ce0ca [ 219.667915][T14135] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.689498][T14135] RSP: 002b:00007fdc6521ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.698397][T14135] RAX: ffffffffffffffda RBX: 00007fdc6521eee0 RCX: 00007fdc667ce0ca [ 219.706688][T14135] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fdc6521eea0 [ 219.715326][T14135] RBP: 00002000000009c0 R08: 00007fdc6521eee0 R09: 0000000000804718 [ 219.723838][T14135] R10: 0000000000804718 R11: 0000000000000246 R12: 0000200000000540 [ 219.732308][T14135] R13: 00007fdc6521eea0 R14: 000000000000048d R15: 00002000000002c0 [ 219.740918][T14135] [ 219.744338][T14135] ---[ end trace 0000000000000000 ]--- [ 219.756495][T14135] EXT4-fs (loop4): 1 orphan inode deleted [ 219.777943][T14135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.988437][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.165448][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3400'. [ 220.176560][T14205] batadv1: entered promiscuous mode [ 220.195198][T14205] batadv1: entered allmulticast mode [ 220.506337][T14258] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 220.650579][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3411'. [ 220.834543][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.845740][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.131805][T14313] batadv1: entered promiscuous mode [ 221.139250][T14313] batadv1: entered allmulticast mode [ 221.429758][T14358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.570674][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.650343][T14363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.664247][T14363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.988647][ T1985] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.002135][ T1985] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.026160][ T1985] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.034735][ T1985] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.117346][T14358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.145084][T14395] loop4: detected capacity change from 0 to 512 [ 222.168814][T14395] EXT4-fs: Ignoring removed oldalloc option [ 222.185124][T14395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.196744][T14395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.209380][T14393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.218694][T14393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.220688][T14395] ext4 filesystem being mounted at /282/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.261770][T14393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.269972][T14393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.484624][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3437'. [ 223.091746][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.109786][ T1985] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.120582][ T1985] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.129168][ T1985] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.143633][ T1985] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.162180][T14358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.179935][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3437'. [ 223.190092][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3437'. [ 223.253669][T14416] batadv0: entered promiscuous mode [ 223.265295][T14416] batadv0: entered allmulticast mode [ 223.424253][T14358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.509658][ T9394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.521796][ T9394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.536605][ T9394] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.546385][ T9394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.608917][T14444] syz_tun: entered allmulticast mode [ 223.624831][T14441] syz_tun: left allmulticast mode [ 223.685288][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 223.685305][ T28] audit: type=1400 audit(1781778150.641:2779): avc: denied { accept } for pid=14451 comm="syz.4.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.016352][T14467] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.208720][T14467] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.253526][T14477] batadv1: entered promiscuous mode [ 224.259437][T14477] batadv1: entered allmulticast mode [ 224.281210][T14467] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.371874][T14467] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.440063][ T49] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.457368][ T9399] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.472912][ T9399] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.492357][ T9394] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.582408][T14484] loop4: detected capacity change from 0 to 128 [ 224.645176][T14484] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.662394][T14484] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.665325][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3476'. [ 224.729232][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3476'. [ 224.749685][ T9266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.778963][T14506] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3476'. [ 225.030191][T14528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.045244][T14528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.237037][T14528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.268457][T14528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.399233][T14557] syz_tun: entered allmulticast mode [ 225.407578][T14552] syz_tun: left allmulticast mode [ 225.493780][T14564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.607942][T14564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.668357][T14573] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.3501'. [ 225.679968][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3501'. [ 225.723500][T14528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.734943][T14528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.827866][T14528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.838817][T14528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.950205][ T295] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.958818][ T295] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.970394][ T9399] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.978717][ T9399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.990365][ T9399] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.998779][ T9399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.011006][ T9394] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.019366][ T9394] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.230933][T14588] netlink: 'syz.4.3517': attribute type 4 has an invalid length. [ 226.252730][T14588] netlink: 'syz.4.3517': attribute type 4 has an invalid length. [ 226.343426][T14588] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.350679][T14588] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.366241][T14588] bond_slave_0: left promiscuous mode [ 226.426291][T14588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.439388][T14588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.497026][T14588] bond0: left allmulticast mode [ 226.502047][T14588] bond_slave_0: left allmulticast mode [ 226.508008][T14588] bond_slave_1: left allmulticast mode [ 226.544597][T14603] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3508'. [ 226.583744][T14592] batadv1: entered promiscuous mode [ 226.590548][T14592] batadv1: entered allmulticast mode [ 226.628950][ T9399] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.637433][ T9399] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.646088][ T9399] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.654744][ T9399] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.670020][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3508'. [ 226.679293][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3508'. [ 226.688966][ T9399] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.701177][ T9399] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.713923][ T9399] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.735563][ T9399] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.781737][T14612] loop7: detected capacity change from 0 to 1024 [ 226.793487][T14612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.815224][T14612] EXT4-fs (loop7): shut down requested (0) [ 226.823921][ T28] audit: type=1400 audit(1781778153.771:2780): avc: denied { write } for pid=14611 comm="syz.7.3522" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.962512][T14621] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 227.027917][T13933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.033211][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3519'. [ 227.131136][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3523'. [ 227.174840][T14631] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 227.528144][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.536535][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.547918][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.580642][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.590349][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.601945][T14663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.617382][T14663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.630672][T14663] veth1_vlan: left promiscuous mode [ 227.637240][T14663] veth0_vlan: left promiscuous mode [ 227.642938][T14663] veth0_vlan: entered promiscuous mode [ 227.651592][T14663] veth1_vlan: entered promiscuous mode [ 227.661117][T14663] veth1_macvtap: left promiscuous mode [ 227.679307][T14663] veth0_macvtap: left promiscuous mode [ 227.685581][T14663] veth0_macvtap: entered promiscuous mode [ 227.692410][T14663] veth1_macvtap: entered promiscuous mode [ 227.705808][T14663] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 227.718510][T14663] bond0: entered allmulticast mode [ 227.725290][T14663] bond_slave_0: entered allmulticast mode [ 227.731299][T14663] bond_slave_1: entered allmulticast mode [ 227.737157][T14663] bond_slave_0: entered promiscuous mode [ 227.742810][T14663] bond_slave_1: entered promiscuous mode [ 227.750834][T14663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.775947][T14663] 8021q: adding VLAN 0 to HW filter on device eth0 [ 227.785815][T14663] 8021q: adding VLAN 0 to HW filter on device eth1 [ 227.796891][T14663] 8021q: adding VLAN 0 to HW filter on device eth2 [ 227.805782][T14663] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.822282][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.829499][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.839018][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.846104][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.902406][ T9399] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.911402][ T9399] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.920041][ T9399] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.928493][ T9399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.962956][ T9399] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.974727][ T9399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.988276][ T9399] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.002436][ T9399] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.029736][T14685] loop7: detected capacity change from 0 to 512 [ 228.059092][T14685] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 228.077099][T14685] EXT4-fs (loop7): 1 truncate cleaned up [ 228.089012][T14685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.119208][ T28] audit: type=1400 audit(1781778155.071:2781): avc: denied { write } for pid=14684 comm="syz.7.3541" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.224656][T13933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.210528][T14705] loop7: detected capacity change from 0 to 512 [ 229.223081][T14705] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.258390][T14705] EXT4-fs (loop7): 1 orphan inode deleted [ 229.270965][T14705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.331509][T13933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.626670][T14751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.644736][T14751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.677161][T14751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.688072][T14751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.009739][ T28] audit: type=1400 audit(1781778156.961:2782): avc: denied { ioctl } for pid=14769 comm="syz.0.3587" path="socket:[43308]" dev="sockfs" ino=43308 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.077917][T14775] __nla_validate_parse: 7 callbacks suppressed [ 230.077935][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 230.100839][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3578'. [ 230.129823][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3578'. [ 230.321884][T14790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.330673][T14790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.352443][T14790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.360794][T14790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.449553][T14800] netlink: 'syz.3.3589': attribute type 1 has an invalid length. [ 230.468461][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3592'. [ 230.511845][T14800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.622292][T14814] loop7: detected capacity change from 0 to 512 [ 230.651449][T14814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.698681][T14814] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.711754][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3600'. [ 230.728614][ T28] audit: type=1400 audit(1781778157.681:2783): avc: denied { write } for pid=14813 comm="syz.7.3597" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.774795][T13933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.383859][T14845] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3608'. [ 232.253103][ T28] audit: type=1400 audit(1781778159.201:2784): avc: denied { write } for pid=14847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.276562][ T28] audit: type=1400 audit(1781778159.221:2785): avc: denied { write } for pid=14858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.405357][ T28] audit: type=1400 audit(1781778159.361:2786): avc: denied { write } for pid=14861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.428565][ T28] audit: type=1400 audit(1781778159.371:2787): avc: denied { write } for pid=14872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.585243][ T28] audit: type=1400 audit(1781778159.541:2788): avc: denied { write } for pid=14875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.608441][ T28] audit: type=1400 audit(1781778159.551:2789): avc: denied { write } for pid=14886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.058785][ T28] audit: type=1400 audit(1781778160.011:2790): avc: denied { write } for pid=14889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.082202][ T28] audit: type=1400 audit(1781778160.031:2791): avc: denied { write } for pid=14900 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.425847][T14904] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 235.454581][T14904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.463490][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 235.489849][T14904] bond1: (slave geneve2): making interface the new active one [ 235.508886][T14904] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 235.522733][T14914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.542027][T14922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14922 comm=syz.0.3615 [ 235.547466][T14914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.566500][T14914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.573959][T14914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.615539][T14922] netlink: 'syz.0.3615': attribute type 5 has an invalid length. [ 235.623483][T14918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3613'. [ 235.696114][T14934] sctp: [Deprecated]: syz.8.3621 (pid 14934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.696114][T14934] Use struct sctp_sack_info instead [ 235.745275][ T28] audit: type=1400 audit(1781778162.701:2792): avc: denied { unmount } for pid=14942 comm="syz.8.3626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.787270][T14949] netlink: 'syz.8.3627': attribute type 1 has an invalid length. [ 235.802462][T14949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.831303][T14949] bond1: (slave geneve2): making interface the new active one [ 235.846237][T14949] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 237.259876][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.267489][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.274968][T14973] bridge_slave_0: entered allmulticast mode [ 237.292158][T14973] bridge_slave_0: entered promiscuous mode [ 237.301630][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.309405][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.317109][T14973] bridge_slave_1: entered allmulticast mode [ 237.323810][T14973] bridge_slave_1: entered promiscuous mode [ 237.343537][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.360912][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.406180][T14973] team0: Port device team_slave_0 added [ 237.415357][T14973] team0: Port device team_slave_1 added [ 237.445292][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.452256][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.478393][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.493106][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.513732][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.557386][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.591269][T14973] hsr_slave_0: entered promiscuous mode [ 237.603096][T14973] hsr_slave_1: entered promiscuous mode [ 237.610280][T14973] debugfs: 'hsr0' already exists in 'hsr' [ 237.616493][T14973] Cannot create hsr debugfs directory [ 237.711595][T14973] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.789055][T14973] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.870052][T14973] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.906154][T14973] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.983384][T14973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 238.002024][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.009802][T14973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 238.031388][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.057385][T14973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 238.081784][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.095512][T14973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 238.114895][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.145755][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.152863][T14973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.160193][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.167378][T14973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.179619][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.188557][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.281631][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.302864][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.320863][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.327986][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.351221][ T1985] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.358343][ T1985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.655775][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.877937][T14973] veth0_vlan: entered promiscuous mode [ 238.890565][T14973] veth1_vlan: entered promiscuous mode [ 238.916161][T14973] veth0_macvtap: entered promiscuous mode [ 238.927677][T14973] veth1_macvtap: entered promiscuous mode [ 238.942133][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.962913][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.977934][ T9046] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.987196][ T9046] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.999613][ T9046] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.008664][ T9046] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.181653][T15096] sctp: [Deprecated]: syz.7.3636 (pid 15096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.181653][T15096] Use struct sctp_sack_info instead [ 239.311593][ T28] audit: type=1326 audit(1781778166.261:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.338158][ T28] audit: type=1326 audit(1781778166.261:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.364288][ T28] audit: type=1326 audit(1781778166.261:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.390104][ T28] audit: type=1326 audit(1781778166.261:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.416507][ T28] audit: type=1326 audit(1781778166.261:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.448158][ T28] audit: type=1326 audit(1781778166.261:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.474234][ T28] audit: type=1326 audit(1781778166.261:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.500322][ T28] audit: type=1326 audit(1781778166.261:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.530316][ T28] audit: type=1326 audit(1781778166.261:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.8.3672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2c6cce59 code=0x7ffc0000 [ 239.682766][T15119] loop7: detected capacity change from 0 to 512 [ 239.688589][T15129] sctp: [Deprecated]: syz.0.3680 (pid 15129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.688589][T15129] Use struct sctp_sack_info instead [ 239.712808][T15119] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.748316][T15119] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 239.770389][T15119] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3677: bg 0: block 248: padding at end of block bitmap is not set [ 239.787327][T15119] loop7: lost filesystem error report for type 5 error -117 [ 239.789350][T15119] EXT4-fs error (device loop7): ext4_acquire_dquot:7032: comm syz.7.3677: Failed to acquire dquot type 1 [ 239.797189][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 239.797260][ C1] EXT4-fs (loop7): last error at time 1781778166: ext4_validate_block_bitmap:441 [ 239.829407][T15119] loop7: lost filesystem error report for type 5 error -28 [ 239.833965][T15119] EXT4-fs (loop7): 1 truncate cleaned up [ 239.858280][T15119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 239.939609][T14973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 240.026101][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 240.208900][T15154] team1: entered promiscuous mode [ 240.234218][T15154] team1: entered allmulticast mode [ 240.242681][T15154] 8021q: adding VLAN 0 to HW filter on device team1 [ 240.252855][T15167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3695'. [ 240.497921][T15174] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.678725][T15174] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.896729][T15174] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.083936][T15174] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.108045][T15208] loop7: detected capacity change from 0 to 512 [ 241.136693][T15208] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.147482][T15208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 241.155594][T15208] System zones: 1-12 [ 241.159863][T15208] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.3710: bad orphan inode 131072 [ 241.192752][T15208] loop7: lost filesystem error report for type 5 error -117 [ 241.194057][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 241.198693][T15208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.201476][ C0] EXT4-fs (loop7): initial error at time 1781778168: ext4_orphan_get:1425 [ 241.228714][ C0] EXT4-fs (loop7): last error at time 1781778168: ext4_orphan_get:1425 [ 241.232421][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 241.232436][ T28] audit: type=1400 audit(1781778168.191:2840): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.316268][T14973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.347540][ T28] audit: type=1400 audit(1781778168.221:2841): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.386140][ T9394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.402174][ T9394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.409417][ T28] audit: type=1400 audit(1781778168.231:2842): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.453099][ T9394] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.474317][ T28] audit: type=1400 audit(1781778168.231:2843): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.505493][ T9394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.541334][T15220] loop7: detected capacity change from 0 to 128 [ 241.542468][ T28] audit: type=1400 audit(1781778168.231:2844): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file7" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.632167][ T28] audit: type=1400 audit(1781778168.231:2845): avc: denied { write } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.671824][T15220] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.687831][ T28] audit: type=1400 audit(1781778168.231:2846): avc: denied { write } for pid=15207 comm="syz.7.3710" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.724824][ T28] audit: type=1400 audit(1781778168.231:2847): avc: denied { rename } for pid=15207 comm="syz.7.3710" name="file0" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 241.747715][T15220] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.775686][ T3413] IPVS: starting estimator thread 0... [ 241.796462][ T28] audit: type=1400 audit(1781778168.231:2848): avc: denied { remove_name } for pid=15207 comm="syz.7.3710" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.843368][ T28] audit: type=1400 audit(1781778168.231:2849): avc: denied { rmdir } for pid=15207 comm="syz.7.3710" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.915633][T15236] IPVS: using max 2928 ests per chain, 146400 per kthread [ 241.931460][T14973] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.960236][T15291] loop4: detected capacity change from 0 to 512 [ 242.985985][T15291] EXT4-fs: Ignoring removed bh option [ 243.030076][T15291] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 243.049069][T15291] EXT4-fs (loop4): 1 truncate cleaned up [ 243.074614][T15291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.098059][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3746'. [ 243.167288][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.170755][T15304] team1: entered promiscuous mode [ 243.182317][T15304] team1: entered allmulticast mode [ 243.190159][T15304] 8021q: adding VLAN 0 to HW filter on device team1 [ 243.220092][T15308] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3748'. [ 243.269499][T15313] loop4: detected capacity change from 0 to 1024 [ 243.283317][T15313] EXT4-fs: Ignoring removed bh option [ 243.311598][T15313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.312765][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3749'. [ 243.324405][T15313] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.489012][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.936318][T15382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.955101][T15382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.006527][T15380] loop4: detected capacity change from 0 to 512 [ 245.025602][T15380] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.052526][T15380] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 245.083806][T15380] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3775: bg 0: block 248: padding at end of block bitmap is not set [ 245.110593][T15380] loop4: lost filesystem error report for type 5 error -117 [ 245.112162][T15380] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.3775: Failed to acquire dquot type 1 [ 245.120703][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 245.120730][ C0] EXT4-fs (loop4): last error at time 1781778172: ext4_validate_block_bitmap:441 [ 245.152483][T15380] loop4: lost filesystem error report for type 5 error -28 [ 245.194955][T15380] EXT4-fs (loop4): 1 truncate cleaned up [ 245.272818][T15380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 245.327378][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 245.623880][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3785'. [ 245.686650][T15411] team0: entered promiscuous mode [ 245.692354][T15411] team0: entered allmulticast mode [ 245.699568][T15411] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.747504][T15413] loop7: detected capacity change from 0 to 1024 [ 245.773183][T15413] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 245.785200][T15413] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.3787: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.799322][T15413] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.799458][T15413] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.3787: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.808593][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 245.808614][ C0] EXT4-fs (loop7): initial error at time 1781778172: ext4_map_blocks:791: inode 3: block 2 [ 245.808644][ C0] EXT4-fs (loop7): last error at time 1781778172: ext4_map_blocks:791: inode 3: block 2 [ 245.874509][T15413] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.874685][T15413] EXT4-fs error (device loop7): ext4_acquire_dquot:7032: comm syz.7.3787: Failed to acquire dquot type 0 [ 245.895357][T15413] loop7: lost filesystem error report for type 5 error -117 [ 245.895477][T15413] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 245.917564][T15413] loop7: lost filesystem error report for type 5 error -117 [ 245.917754][T15413] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.3787: mark_inode_dirty error [ 245.956651][T15413] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.956852][T15413] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 245.995529][T15413] EXT4-fs (loop7): 1 orphan inode deleted [ 246.005806][T15413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.018062][ T9394] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 246.040971][T15433] netlink: 'syz.0.3797': attribute type 11 has an invalid length. [ 246.049165][ T9394] EXT4-fs error (device loop7): ext4_release_dquot:7068: comm kworker/u8:18: Failed to release dquot type 0 [ 246.061127][T15433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3797'. [ 246.115759][T14973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.129682][T14973] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.142993][T14973] loop7: lost filesystem error report for type 5 error -117 [ 246.144195][T14973] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 246.162107][T14973] loop7: lost filesystem error report for type 5 error -117 [ 246.163161][T14973] EXT4-fs error (device loop7): ext4_quota_off:7316: inode #3: comm syz-executor: mark_inode_dirty error [ 246.190947][T14973] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 246.216810][T15448] io-wq is not configured for unbound workers [ 246.412570][T15453] syzkaller0: entered promiscuous mode [ 246.425274][T15453] syzkaller0: entered allmulticast mode [ 246.604784][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 246.604800][ T28] audit: type=1400 audit(1781778173.552:2855): avc: denied { create } for pid=15468 comm="syz.4.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 246.633414][T15475] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3816'. [ 247.292196][ T28] audit: type=1400 audit(1781778174.242:2856): avc: denied { read } for pid=15512 comm="syz.3.3831" path="socket:[47339]" dev="sockfs" ino=47339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 247.380362][ T3382] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 247.389663][ T3382] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.400712][T15519] hid-generic 0000:0000:0000.000D: pid 15519 passed too short report [ 247.451593][T15526] netlink: 'syz.3.3836': attribute type 11 has an invalid length. [ 247.463588][T15521] fido_id[15521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.477776][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3836'. [ 247.680476][T15535] netlink: 'syz.0.3840': attribute type 3 has an invalid length. [ 247.812490][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3846'. [ 247.843905][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3847'. [ 247.867641][ T28] audit: type=1400 audit(1781778174.822:2857): avc: denied { create } for pid=15552 comm="syz.8.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.894356][ T28] audit: type=1400 audit(1781778174.852:2858): avc: denied { connect } for pid=15552 comm="syz.8.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.915662][ T28] audit: type=1400 audit(1781778174.872:2859): avc: denied { setopt } for pid=15552 comm="syz.8.3848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.976174][T15555] netlink: 'syz.8.3849': attribute type 11 has an invalid length. [ 247.990454][T15555] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3849'. [ 248.282497][T15586] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 248.314146][ T28] audit: type=1400 audit(1781778175.262:2860): avc: denied { write } for pid=15583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.351828][T15597] loop7: detected capacity change from 0 to 8192 [ 248.358780][ T28] audit: type=1400 audit(1781778175.282:2861): avc: denied { write } for pid=15606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.403551][ T28] audit: type=1400 audit(1781778175.352:2862): avc: denied { write } for pid=15608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.426818][ T28] audit: type=1400 audit(1781778175.372:2863): avc: denied { write } for pid=15619 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.449381][T15597] loop7: p1 p2 p3 [ 248.453278][T15597] loop7: p1 size 67111168 extends beyond EOD, truncated [ 248.461062][T15597] loop7: p2 size 8388608 extends beyond EOD, truncated [ 248.468678][T15597] loop7: p3 start 4294901760 is beyond EOD, truncated [ 248.512725][T15627] netlink: 'syz.7.3866': attribute type 11 has an invalid length. [ 248.520816][T15627] __nla_validate_parse: 1 callbacks suppressed [ 248.520844][T15627] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3866'. [ 248.545803][T15120] udevd[15120]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 248.555394][T14915] udevd[14915]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 248.845626][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'. [ 248.943322][T15657] erspan0: entered promiscuous mode [ 249.001990][T15657] 8021q: adding VLAN 0 to HW filter on device eth0 [ 249.021073][T15657] 8021q: adding VLAN 0 to HW filter on device eth1 [ 249.032028][T15657] 8021q: adding VLAN 0 to HW filter on device eth2 [ 249.043046][T15657] 8021q: adding VLAN 0 to HW filter on device eth3 [ 249.611477][T15666] netlink: 'syz.4.3881': attribute type 11 has an invalid length. [ 249.627035][T15666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3881'. [ 249.850745][T15682] loop7: detected capacity change from 0 to 1024 [ 249.872496][T15682] EXT4-fs: Ignoring removed bh option [ 249.940879][T15682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.964813][ T28] audit: type=1400 audit(1781778176.912:2864): avc: denied { write } for pid=15681 comm="syz.7.3891" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.005336][T14973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.122535][T15713] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 250.207203][ T3410] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 250.215446][ T3410] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.225531][T15728] hid-generic 0000:0000:0000.000E: pid 15728 passed too short report [ 250.335222][T15740] loop4: detected capacity change from 0 to 1024 [ 250.345539][T15740] EXT4-fs: Ignoring removed bh option [ 250.377622][T15740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.436048][ T9266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.488785][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3918'. [ 250.547438][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3921'. [ 250.729484][T15773] netlink: 'syz.7.3937': attribute type 11 has an invalid length. [ 250.737997][T15773] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3937'. [ 250.871489][T15791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3931'. [ 251.041435][T15808] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 251.125154][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3938'. [ 251.168463][T15832] netlink: 'syz.3.3939': attribute type 11 has an invalid length. [ 251.177007][T15832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3939'. [ 251.694533][T15923] netlink: 'syz.3.3951': attribute type 3 has an invalid length. [ 251.953844][T15958] loop7: detected capacity change from 0 to 1024 [ 251.961689][T15958] EXT4-fs: Ignoring removed bh option [ 251.980646][T15958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.012507][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 252.012522][ T28] audit: type=1400 audit(1781778178.962:2866): avc: denied { write } for pid=15957 comm="syz.7.3965" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.118105][T14973] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.268723][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'. [ 253.273844][T16063] netlink: 'syz.8.4011': attribute type 3 has an invalid length. [ 254.276460][T16115] ================================================================== [ 254.284578][T16115] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 254.292381][T16115] [ 254.294684][T16115] write to 0xffffea0004309598 of 8 bytes by task 16110 on cpu 1: [ 254.302378][T16115] __filemap_remove_folio+0x201/0x2e0 [ 254.307734][T16115] filemap_remove_folio+0x6d/0x1d0 [ 254.312854][T16115] truncate_inode_folio+0x42/0x50 [ 254.317861][T16115] shmem_undo_range+0x27f/0xb60 [ 254.322691][T16115] shmem_fallocate+0x84e/0x8f0 [ 254.327434][T16115] vfs_fallocate+0x3ac/0x400 [ 254.332004][T16115] __x64_sys_fallocate+0x7a/0xd0 [ 254.336923][T16115] x64_sys_call+0x298e/0x3020 [ 254.341579][T16115] do_syscall_64+0x136/0x3c0 [ 254.346164][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.352041][T16115] [ 254.354342][T16115] read to 0xffffea0004309598 of 8 bytes by task 16115 on cpu 0: [ 254.361952][T16115] folio_mapping+0xa1/0xe0 [ 254.366348][T16115] evict_folios+0xdd7/0x37d0 [ 254.370917][T16115] try_to_shrink_lruvec+0x7ac/0xb40 [ 254.376098][T16115] shrink_lruvec+0x24e/0x1bc0 [ 254.380792][T16115] shrink_node+0x699/0x2080 [ 254.385299][T16115] do_try_to_free_pages+0x408/0xc90 [ 254.390734][T16115] try_to_free_mem_cgroup_pages+0x201/0x420 [ 254.396604][T16115] try_charge_memcg+0x375/0xa00 [ 254.401457][T16115] __memcg_kmem_charge_page+0x199/0x3a0 [ 254.407002][T16115] __alloc_frozen_pages_noprof+0x18a/0x350 [ 254.412800][T16115] alloc_pages_mpol+0xa9/0x1d0 [ 254.417600][T16115] alloc_pages_noprof+0x8f/0x140 [ 254.422516][T16115] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 254.428382][T16115] __kvmalloc_node_noprof+0x3d4/0x640 [ 254.433731][T16115] futex_hash_allocate+0x192/0x920 [ 254.439089][T16115] futex_hash_prctl+0xd8/0xf0 [ 254.443750][T16115] __se_sys_prctl+0x4f4/0x13c0 [ 254.448522][T16115] __x64_sys_prctl+0x67/0x80 [ 254.453090][T16115] x64_sys_call+0x2533/0x3020 [ 254.457748][T16115] do_syscall_64+0x136/0x3c0 [ 254.462318][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.468213][T16115] [ 254.470517][T16115] value changed: 0xffff888119201a60 -> 0x0000000000000000 [ 254.477596][T16115] [ 254.479985][T16115] Reported by Kernel Concurrency Sanitizer on: [ 254.486117][T16115] CPU: 0 UID: 0 PID: 16115 Comm: syz.8.4032 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 254.497027][T16115] Tainted: [W]=WARN [ 254.500802][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.510831][T16115] ==================================================================