last executing test programs: 19.968472922s ago: executing program 3 (id=142): lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), 0x0, 0x361, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0xf3, &(0x7f00000007c0)) socket$kcm(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x05\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}, 0x10e000, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0xa) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0x20000004) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r6 = memfd_create(0x0, 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r6, 0x0) 17.923515466s ago: executing program 3 (id=148): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 16.854089698s ago: executing program 3 (id=157): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x4fa9, 0x2, 0x7, 0x6, 0x10001, 0x2, 0x9, 0x0, 0x3, 0x7fff, 0x401, 0x9, 0xffffffffffff3d7a, 0x4}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010003000000000000000220000000000000000020000800"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.559634131s ago: executing program 3 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r5, 0x0) read(r5, &(0x7f0000001400)=""/4096, 0x1000) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 12.587182317s ago: executing program 3 (id=165): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getcwd(&(0x7f0000000140)=""/251, 0xfb) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x3, 0x3a, "5b9896ccd248cf40b6db7422cb9e9b2f1a4411324b3045705cd11c5448cedf0c154c21855f1d45e768ec4c94bfb6dd27b743288d5b1502553b1c"}) 11.670012967s ago: executing program 3 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a32000000000500040000000a0014000780050015000c0000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) 11.46638452s ago: executing program 32 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a32000000000500040000000a0014000780050015000c0000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) 7.88432916s ago: executing program 0 (id=205): getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x9a}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48018}, 0x4004004) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setown(r6, 0x8, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x25e9b6, &(0x7f0000000240)={[{@grpquota}, {@nogrpid}, {@resgid={'resgid', 0x3d, r0}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'grpquota'}}]}, 0x5, 0x510, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep25qN1GT2CH+fKTRvDcz9ff76sx79rPsF8DIuh4R+xExERGfRsRsdjyXbfFRe0uue3Jwf+Xw4P5KLlqtT/6RS88nx6Lr3ySuZY9ZjIgffCfix7nn4zZ29zaWq9XKdlafb9a25hu7e7fWa8trlbXKZrm8tLi08MHt98vn1ta3ahNZ6cuPf7//jZ8mac1kR7rbcZ7aTS8cxUmMR8T3LiLYEIxl7ZkYdiK8lHxEvB4Rb6f3/2yMpc8mAHCVtVqz0ZrtrgMAV10+nQPL5UvZXMBM5POlUnsO742YzlfrjebNu/WdzdX2XNlcFPJ316uVhWyucC4KuaS+mJaf1svH6rcj4rWI+PnkVFovrdSrq8N84QMAI+zasfH/35Pt8R8AuOKKw04AABg44z8AjB7jPwCMHuM/AIye9vg/New0AIAB8v4fAEZPz/Hf7wACwFX1/Y8/TrbWYfb716uf7e5s1D+7tVppbJRqOyullfr2VmmtXl9Lf7OndtLjVev1rcX3Yufe3De3Gs35xu7enVp9Z7N5J/1d7zuVQnrV/gBaBgD089pbj/6US0bkD6fSLbrWcigMNTPgouWHnQAwNGPDTgAYGp/yweg6w3t80wNwRfRYovcZxV5fEGq1Wq2LSwm4YDe+YP4fRlXX/L9vAcGIMf8Po8v8P4yuVit32jX/47QXAgCXmzl+oM/n/69n+99kHw78aPX4FQ8vMisAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC43Drr/5aytcBnIp8vlSJeiYi5KOTurlcrCxHxakT8cbIwmdQXh5wzAHBW+b/msvW/bsy+O/PMqTevHRUnIuInv/zkF/eWm83tP0RM5P452TnefJgdLw8+ewDgZJ1xOt13vZF/cnB/pbMNMp+/fTsiiu34hwcTcXgUfzzG030xChEx/a9cVm/Ldc1dnMX+g4j4fK/252ImnQNpr3x6PH4S+5WBxs8/Ez+fnmvvk/+Lz51DLjBqHiX9z0e97r98XE/3ve//YtpDnV27/5vNakkf+DR+p/8b69P/XT9tjPd+9912aer5cw8ivjgeab/b2ToROvFzfeK/e8r4f/7Sm2/3O9f6VcSN6B2/O9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jn+48Gf//w5qv9ziXtn+4Tv3hC+796yvb/+r+f/vArL4j/9Xd6xc/HGy+In4yJXztl/OXp3xb7nUvir/Zp/0nP/81Txn/8l73nlg0HAIansbu3sVytVrYV/k8LyeveS5DGYArJn+wlSKNn4VtnfZzk3dmLr0lexu/uTUTva372TnpLzx27qVutl8qnX49xHrNuwGVwdNNHxH+GnQwAAAAAAAAAAAAAANDTIL4dNew2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHX9LwAA//8Jbsc6") socket(0x40000000015, 0x5, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x3, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x11) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r8, 0x0, &(0x7f0000000040)) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.630127984s ago: executing program 2 (id=208): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004804) prlimit64(0x0, 0x7, &(0x7f0000000580)={0x1, 0x5b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000003f00000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 7.568678554s ago: executing program 2 (id=209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0xc0, r0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1002, 0x7, 0x7, 0x9, 0x5, 0x3, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 7.567958344s ago: executing program 2 (id=211): r0 = io_uring_setup(0xdb6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0xfffffffe, 0xfffffffd}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000080) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6e0775c40424ae2fa", 0x9, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) shutdown(r2, 0x1) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) 7.012718771s ago: executing program 0 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) preadv2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1, 0xc, 0xfffff801, 0x5) 3.400364582s ago: executing program 0 (id=215): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4cfff500030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a0007"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.301531002s ago: executing program 0 (id=216): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) (async) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x38, 0x4, 0x0, 0x1, 0xe0, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x1f, 0x11, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @rand_addr=0x64010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@empty, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0x9, "2101f3c7b577ae"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x8004}, {@empty, 0x9d9}, {@local, 0x8}, {@rand_addr=0x64010100, 0x1}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x7, 0x8d, [@multicast2]}]}}}}}) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_read_part_table(0x105f, &(0x7f00000011c0)="$eJzsz7FtwlAUBdBrR05i/URUrMIm1PSUTOAJYAoaNqFCzMAAsIGRZQs2AIpzqq//7n3SC2/VJuvV13eSKkmXMv6l+nlm6rLblEWTKrchtU3Sz5J+HDZJPTz2xymdcnpUL8Oq6znJX5L/Lr9p51MzqZeHV94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ/qHgAA//+qQg4Q") 3.262550882s ago: executing program 1 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) 3.223046413s ago: executing program 0 (id=218): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0xfdffa000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc050) unshare(0x6020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x400d4) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x20002, 0x1, 0x8, 0x4}, 0x5, 0x0, 0x2003, 0x1, 0xffff, 0x2, 0xf, 0xa, 0x6, 0x6, {0x7, 0x1ff, 0x249, 0x6, 0x2, 0x3}}}}]}, 0x78}}, 0x4000010) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.222855143s ago: executing program 4 (id=219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './cgroup', [], 0xa, "02750800"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x5, 0x50002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ff, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x1, 0x0, 0x5, 0x7b1, 0xb, 0x0, 0x0, 0x0, 0x10000000000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 3.222544233s ago: executing program 1 (id=220): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) 3.222276473s ago: executing program 2 (id=221): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 3.144773504s ago: executing program 1 (id=222): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0xffffffa4, @empty}, 0x0, {[0x7e1]}}, 0x5c) 3.133039044s ago: executing program 1 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x20000000000002b6, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x9, 0xa7, &(0x7f0000000080)="d024f5f75590ab4dfa", &(0x7f0000000400)=""/167, 0x10001, 0x0, 0x7b, 0x69, &(0x7f0000000580)="91e7f8712ca4273017909d7d1adea5f6217307ec8c31913b08b74f35b451fb9362b4652c6c775c57b2c2d05c872f92d3b84091b023fce51d2e846c30969c1feddf4d37bf350951c32cdd3e0f432bf61a878248fe6cb31a0c4e30ed47896747037f38fccd2fb525c21fda38aa72d5cb1abf25e6bc406fad3030ea5f", &(0x7f0000000600)="7925ea2e0f12eb8007adcfaf122590ac070561ac87999c210e009ac4bb3d59108722ea32368cefb95fc618ca39481522baab9e085c1abb9bfcafc4183fb0e965bea02f9eca2160c8e0bf0434035eb3d6189159ff7a4a86337d9cad2dc6c9b9bf313fed6413b757c4ad", 0x4, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008880) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008050}, 0x40) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4) socket(0xa, 0x2400000001, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a32"], 0xca}}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2fce]}, 0x8}) 3.131196894s ago: executing program 4 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) preadv2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1, 0xc, 0xfffff801, 0x5) 555.590994ms ago: executing program 1 (id=225): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_ext={0x1c, 0xb, &(0x7f0000000600)=ANY=[], 0x0, 0x1800, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x1, 0x4, 0x5, 0x3}, 0x10, 0x7aa4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001b00)=[{0x4, 0x4, 0x3, 0x7}, {0x2, 0x3, 0x9, 0x2}, {0x20000003, 0x1, 0xf, 0x2}, {0x1, 0x3, 0xf, 0x8}, {0x4, 0x5, 0x7, 0x8}], 0x10, 0x4}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) set_mempolicy(0x3, &(0x7f0000000140)=0x194e, 0x5) (async) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) ioperm(0x0, 0x7, 0x80006) (async) iopl(0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$ITER_CREATE(0x21, 0x0, 0x0) close(0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nombcache}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) (async) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 340.250596ms ago: executing program 1 (id=226): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000003c0)='./file1\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELSETELEM={0xb24, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xb08, 0x3, 0x0, 0x1, [{0xb04, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x228, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "a2af8f1921d0cc70fe3f45e202c0fe6630b9c70d0f29b406764e86bdbc744d0360f952fbd40189cfd7cfdda5e5a013bab712a1e7f3cf377bb37f5023b5d88b057664b28cde64"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "4731274610ced67c04339dafdcc7fb2959fd53f3cc54f7685e40b551cd41729807ea95a3a58cfa6ec932eda8bc86e54d36656b93cdfd19432e3e53a0bea1e3496581fb0dcd74de354e5c4fb40f2d547ebee2c2153b30c9b0e11d5f5e38bcf478e9465e041e89da083947e7735d594d4a2f8640fd674f853e4d3486ab72de2909927b6cd54a1f8356d580fa9b3320b78854773ee428f1b86f7ab712826c99679389c33160e7c4b71be67111624681510f271280c2297558d5551503db06"}, @NFTA_DATA_VALUE={0x30, 0x1, "ada43591e9f8ff82f19345f51fa9106365fea1baeabbdcc0365be140f5cbc18c043930412e5551c89958b15a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7fc, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x6bc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x6ac, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x100, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "7964b4d50ccf4e2714faf5c8d95ed7e8e929eb771a008e32094b286cbbd96e3f47664d6b51"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1bf53031f457a65c}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "e17ada30817160a9c0c6139cd76968c60f862540b2598099afa5711d90297600b1f508363fd7a9e4f54cb50037b7704a215325059d29cd7140a0dc8bfcf03aae701a4758534fec8d8de07ad6c2471cfe6171dd0470137b0375680b5b4a14271704ff07314d55d463c87c56f0594848865b08587f6dfa5f1ff02fab498374cb516007ebbffbe44dc05f83a21933c6ec13663a4deaa001f0cab0579975aeb4e6"}]}, @NFTA_BITWISE_XOR={0x104, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfe, 0x1, "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"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0x170, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "4c905248b30458de1b7ed08ba387d5403d2fa184b90b11b1b931276deb685eb66b6d172fcc394b17cb56bc1120d24445787fa232d2b8a0b3b6dac155bd85a6c27bc3fe56501ecf2644961feb1927e8f1fe812a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "e3878a09f3c499d0cbe5011f5024f8fa394122733dcbd67ebfe734e2af56d54c3cda474370ca51919ad96da4d96f0991757aad37a5c5bbe3768d31bdfa289dcf49e34463776ca9b5fcff"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0xe6a7d413133ab091}, @NFTA_BITWISE_DATA={0xf0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "d89ae930cf5e7009c07a5edb55e9816e5289005a9ae1559354c35569bc65e6babd0c983c0ea3b848858b261c8ee5833f26c87ccda8e7c7400707"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_XOR={0x21c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x59, 0x1, "d9d357373c993b77a8917adaa646fafff6ab8281ddaa3c7553b807fabd54eb5796ba2d15eef38ddf8311fe20dca8fca989d08f26ac5f3762033d5c00350dcf14404b8471534b36ece581973bedef3f5e529d7972dd"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x19, 0x1, "289bb62922b1a3a0acf9013756dab0a7b3b1aad918"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "97c8b9fd8a0f18c43851edb4385b8c35c818c1aae6529e11eb80018154debb08aa6d3f33ec33365448b1eb4d413315ccc809c3373d6cb0f57ed57c897356ebb6070a153389a4a48fa3dfb0d1ff229294a6bf13587e08e72cf29348a7447c7d52f3c462d4b2d21eeecfcc6ce6e4960c2db5bc0344be90806384fbdfdf2489a2d82b7d5e37fbbdd6bacde78b79d14ceae278f5485d35fcd898dc498d9044838fb79721940093a3d62e2e96f443dd169cc1f2e69a39013c16bb64260c715c59fe3c545e3462bb878df0d0b2cd88debb8a9ed1f595015b1863b40fb1dd23e6632f404a6b5192b8761425d1e377443faa7c"}, @NFTA_DATA_VALUE={0x41, 0x1, "e2cc75240c1c7de609638286d5cd9ebe30955bfa2ebd77432f440dde24144af41f65035034866896d2d38e8330f05cf132b99718cb8a2d344bb53c9f40"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005018c00080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 288.150466ms ago: executing program 4 (id=227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6, 0x7fff0000}]}) getcwd(0x0, 0x0) 223.647397ms ago: executing program 4 (id=228): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 68.824279ms ago: executing program 0 (id=229): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001"], 0x20) sendto$inet6(r1, &(0x7f00000000c0)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c) r2 = dup(r0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x23, 0x6, 0x0, 0x0, 0x0, 0x63e3, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6ae7}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000480)=0x7, 0x4) sendto$packet(r2, 0x0, 0x0, 0x44011, 0x0, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @short}, 0x14) socket$unix(0x1, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 68.509419ms ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) 68.340089ms ago: executing program 4 (id=231): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x100000, 0x1}}, 0x40) 373.97µs ago: executing program 2 (id=232): r0 = io_uring_setup(0xdb6, &(0x7f0000000180)={0x0, 0x0, 0x80, 0xfffffffe, 0xfffffffd}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000080) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000840)="a6e0775c40424ae2fa", 0x9, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) shutdown(r2, 0x1) setresuid(0x0, 0xee00, 0x0) io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) 0s ago: executing program 4 (id=233): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000050000001200000008000700020000000800090003000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400200001000210425020000000000000076ff00", @ANYRES32=r4, @ANYBLOB="000000000018050020001280080001006772650014000280060010004e200000060010004e220000"], 0x40}}, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) kernel console output (not intermixed with test programs): [ 22.122677][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 22.122695][ T28] audit: type=1400 audit(1778514388.790:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.151854][ T28] audit: type=1400 audit(1778514388.810:123): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.195114][ T28] audit: type=1400 audit(1778514388.860:124): avc: denied { write } for pid=3261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.218090][ T28] audit: type=1400 audit(1778514388.880:125): avc: denied { write } for pid=3272 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 28.287481][ T28] audit: type=1400 audit(1778514394.950:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.310690][ T28] audit: type=1400 audit(1778514394.980:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.311461][ T3283] cgroup: Unknown subsys name 'net' [ 28.338992][ T28] audit: type=1400 audit(1778514395.010:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.438637][ T3283] cgroup: Unknown subsys name 'cpuset' [ 28.444795][ T3283] cgroup: Unknown subsys name 'rlimit' [ 28.554361][ T28] audit: type=1400 audit(1778514395.220:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.583944][ T28] audit: type=1400 audit(1778514395.220:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.604720][ T28] audit: type=1400 audit(1778514395.220:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.612892][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.625378][ T28] audit: type=1400 audit(1778514395.220:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.654488][ T28] audit: type=1400 audit(1778514395.230:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.654512][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.679729][ T28] audit: type=1400 audit(1778514395.230:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.711847][ T28] audit: type=1400 audit(1778514395.250:135): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.046918][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.054092][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.061288][ T3300] bridge_slave_0: entered allmulticast mode [ 30.068013][ T3300] bridge_slave_0: entered promiscuous mode [ 30.082207][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.089453][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.096567][ T3296] bridge_slave_0: entered allmulticast mode [ 30.103114][ T3296] bridge_slave_0: entered promiscuous mode [ 30.113996][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.121395][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.128603][ T3300] bridge_slave_1: entered allmulticast mode [ 30.135096][ T3300] bridge_slave_1: entered promiscuous mode [ 30.150225][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.157328][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.164579][ T3296] bridge_slave_1: entered allmulticast mode [ 30.170950][ T3296] bridge_slave_1: entered promiscuous mode [ 30.183617][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.190924][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.198108][ T3295] bridge_slave_0: entered allmulticast mode [ 30.204544][ T3295] bridge_slave_0: entered promiscuous mode [ 30.223490][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.230604][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.237757][ T3295] bridge_slave_1: entered allmulticast mode [ 30.244300][ T3295] bridge_slave_1: entered promiscuous mode [ 30.260134][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277113][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.292063][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.310787][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.329022][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.346921][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.354755][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.361895][ T3303] bridge_slave_0: entered allmulticast mode [ 30.368279][ T3303] bridge_slave_0: entered promiscuous mode [ 30.379867][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.389205][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.396340][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.403518][ T3301] bridge_slave_0: entered allmulticast mode [ 30.409858][ T3301] bridge_slave_0: entered promiscuous mode [ 30.420821][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.427980][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.435259][ T3303] bridge_slave_1: entered allmulticast mode [ 30.441637][ T3303] bridge_slave_1: entered promiscuous mode [ 30.448600][ T3300] team0: Port device team_slave_0 added [ 30.458348][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.465512][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.472805][ T3301] bridge_slave_1: entered allmulticast mode [ 30.479300][ T3301] bridge_slave_1: entered promiscuous mode [ 30.486498][ T3296] team0: Port device team_slave_0 added [ 30.496975][ T3300] team0: Port device team_slave_1 added [ 30.511541][ T3296] team0: Port device team_slave_1 added [ 30.525835][ T3295] team0: Port device team_slave_0 added [ 30.541313][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.555219][ T3295] team0: Port device team_slave_1 added [ 30.561195][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.568257][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.594173][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.606026][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.620788][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.634310][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.641345][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.667355][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.679037][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.692283][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.699416][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.725387][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.748081][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.755151][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.781260][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.796692][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.803769][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.829879][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.846028][ T3303] team0: Port device team_slave_0 added [ 30.852145][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859208][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.885481][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.897217][ T3301] team0: Port device team_slave_0 added [ 30.906880][ T3303] team0: Port device team_slave_1 added [ 30.920747][ T3301] team0: Port device team_slave_1 added [ 30.939889][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.946928][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.972993][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.004710][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.011739][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.037971][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.055065][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.062156][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.088153][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.101006][ T3300] hsr_slave_0: entered promiscuous mode [ 31.106892][ T3300] hsr_slave_1: entered promiscuous mode [ 31.123485][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.130560][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.156936][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.170250][ T3295] hsr_slave_0: entered promiscuous mode [ 31.176198][ T3295] hsr_slave_1: entered promiscuous mode [ 31.182069][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 31.187826][ T3295] Cannot create hsr debugfs directory [ 31.201701][ T3296] hsr_slave_0: entered promiscuous mode [ 31.207565][ T3296] hsr_slave_1: entered promiscuous mode [ 31.213407][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 31.219163][ T3296] Cannot create hsr debugfs directory [ 31.241286][ T3303] hsr_slave_0: entered promiscuous mode [ 31.247397][ T3303] hsr_slave_1: entered promiscuous mode [ 31.253352][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.259267][ T3303] Cannot create hsr debugfs directory [ 31.305528][ T3301] hsr_slave_0: entered promiscuous mode [ 31.311611][ T3301] hsr_slave_1: entered promiscuous mode [ 31.317466][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.323212][ T3301] Cannot create hsr debugfs directory [ 31.496899][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.505598][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.513460][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.522168][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.530270][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.538782][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.549135][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.557485][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.581581][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.590249][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.598054][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.606773][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.614411][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.622604][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.637465][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.645852][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.669981][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.678528][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.686084][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.694519][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.708762][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.717234][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.725668][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.734155][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.757923][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.766353][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.774287][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.782762][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.790625][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.799467][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.813010][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.821357][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.856363][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.868418][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.877005][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.885197][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.894456][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.902664][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.911371][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.926706][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.934919][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.946288][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.964711][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.971782][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.986460][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.993751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.024537][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.046452][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.059152][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.068897][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.075978][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.090285][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.097460][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.107415][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.119238][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.141655][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.164068][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.171629][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.189376][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.199569][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.206684][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.221989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.229294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.242040][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.258713][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.265845][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.295661][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.310824][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.338828][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.346130][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.355837][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.363001][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.379316][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.575559][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.618156][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.660959][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.686012][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.698865][ T3296] veth0_vlan: entered promiscuous mode [ 32.727404][ T3296] veth1_vlan: entered promiscuous mode [ 32.769308][ T3296] veth0_macvtap: entered promiscuous mode [ 32.788454][ T3296] veth1_macvtap: entered promiscuous mode [ 32.810940][ T3300] veth0_vlan: entered promiscuous mode [ 32.822738][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.833729][ T3300] veth1_vlan: entered promiscuous mode [ 32.845654][ T3295] veth0_vlan: entered promiscuous mode [ 32.861037][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.878115][ T3301] veth0_vlan: entered promiscuous mode [ 32.886872][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.895852][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.906681][ T3295] veth1_vlan: entered promiscuous mode [ 32.913799][ T3301] veth1_vlan: entered promiscuous mode [ 32.920441][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.929772][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.947286][ T3303] veth0_vlan: entered promiscuous mode [ 32.975393][ T3300] veth0_macvtap: entered promiscuous mode [ 32.982507][ T3303] veth1_vlan: entered promiscuous mode [ 32.994775][ T3301] veth0_macvtap: entered promiscuous mode [ 33.002791][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.007043][ T3300] veth1_macvtap: entered promiscuous mode [ 33.026923][ T3295] veth0_macvtap: entered promiscuous mode [ 33.040964][ T3301] veth1_macvtap: entered promiscuous mode [ 33.051458][ T3295] veth1_macvtap: entered promiscuous mode [ 33.065161][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.076529][ T3303] veth0_macvtap: entered promiscuous mode [ 33.084429][ T3303] veth1_macvtap: entered promiscuous mode [ 33.096851][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.106218][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.123572][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.133022][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.157962][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.188727][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.197752][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.213351][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.224172][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.233003][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249245][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.259644][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.285546][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.379028][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 33.379056][ T28] audit: type=1400 audit(1778514399.990:159): avc: denied { prog_load } for pid=3502 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.482700][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566627][ T28] audit: type=1400 audit(1778514399.990:160): avc: denied { bpf } for pid=3502 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.694900][ T28] audit: type=1400 audit(1778514399.990:161): avc: denied { perfmon } for pid=3502 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.738367][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.774274][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.785361][ T28] audit: type=1400 audit(1778514399.990:162): avc: denied { prog_run } for pid=3502 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.805781][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.832550][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.853556][ T28] audit: type=1400 audit(1778514400.000:163): avc: denied { open } for pid=3502 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.873469][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.080304][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.089579][ T28] audit: type=1400 audit(1778514400.000:164): avc: denied { kernel } for pid=3502 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.125375][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.134711][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.145025][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.154008][ T28] audit: type=1400 audit(1778514400.000:165): avc: denied { write } for pid=3502 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.471006][ T3522] loop3: detected capacity change from 0 to 512 [ 34.480665][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.481318][ T3522] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 35.248649][ T28] audit: type=1400 audit(1778514400.020:166): avc: denied { name_bind } for pid=3502 comm="syz.4.5" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.248682][ T28] audit: type=1400 audit(1778514401.000:167): avc: denied { create } for pid=3518 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.248766][ T28] audit: type=1400 audit(1778514401.000:168): avc: denied { create } for pid=3518 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.541848][ T3522] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 35.542112][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.4: corrupted inode contents [ 35.542135][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.563620][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 35.563646][ C0] EXT4-fs (loop3): initial error at time 1778514402: mb_free_blocks:2049: inode 11: block 64 [ 35.563686][ C0] EXT4-fs (loop3): last error at time 1778514402: ext4_do_update_inode:5690: inode 11 [ 36.028621][ T3525] loop1: detected capacity change from 0 to 512 [ 36.579671][ T3522] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.4: mark_inode_dirty error [ 36.579773][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.599583][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'. [ 36.621829][ T3522] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4: invalid indirect mapped block 1 (level 1) [ 36.621861][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.749177][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.4: corrupted inode contents [ 36.749212][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.749446][ T3522] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 36.749469][ T3522] loop3: lost filesystem error report for type 5 error -117 [ 36.749578][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.4: corrupted inode contents [ 36.749676][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.749787][ T3522] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.4: mark_inode_dirty error [ 36.749808][ T3522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.749901][ T3522] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 36.749985][ T3522] loop3: lost filesystem error report for type 5 error -117 [ 36.750362][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 36.752196][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.886983][ T3535] loop4: detected capacity change from 0 to 512 [ 36.897156][ T3535] ======================================================= [ 36.897156][ T3535] WARNING: The mand mount option has been deprecated and [ 36.897156][ T3535] and is ignored by this kernel. Remove the mand [ 36.897156][ T3535] option from the mount to silence this warning. [ 36.897156][ T3535] ======================================================= [ 36.910815][ T3535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.919606][ T3535] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 36.930566][ T3537] loop2: detected capacity change from 0 to 1024 [ 37.184931][ T3539] loop0: detected capacity change from 0 to 512 [ 37.527361][ T3547] loop4: detected capacity change from 0 to 1764 [ 37.528197][ T3547] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 38.054046][ T3550] veth1_virt_wifi: entered promiscuous mode [ 38.204181][ T3550] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 38.405863][ T3547] syz.4.8 (3547) used greatest stack depth: 8696 bytes left [ 38.750617][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.885245][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 38.885261][ T28] audit: type=1400 audit(1778514405.550:268): avc: denied { create } for pid=3561 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.921834][ T3554] loop0: detected capacity change from 0 to 512 [ 38.953649][ T3554] EXT4-fs: Ignoring removed i_version option [ 38.965187][ T3564] loop2: detected capacity change from 0 to 2048 [ 39.023504][ T3564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.044125][ T28] audit: type=1400 audit(1778514405.580:269): avc: denied { connect } for pid=3561 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.086323][ T3554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.104898][ T3564] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.135115][ T3554] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.13: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 39.163866][ T28] audit: type=1400 audit(1778514405.830:270): avc: denied { write } for pid=3563 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.203334][ T3560] loop1: detected capacity change from 0 to 512 [ 39.222092][ T3554] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.225647][ T3554] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.13: ea_inode dec ref err=-117 [ 39.235206][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 39.235304][ C1] EXT4-fs (loop0): initial error at time 1778514405: ext4_xattr_inode_update_ref:1037: inode 11 [ 39.235436][ C1] EXT4-fs (loop0): last error at time 1778514405: ext4_xattr_inode_update_ref:1037: inode 11 [ 39.310448][ T28] audit: type=1400 audit(1778514405.860:271): avc: denied { add_name } for pid=3563 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.368359][ T3560] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 39.381649][ T3526] udevd[3526]: incorrect ext4 checksum on /dev/loop1 [ 39.413049][ T3554] EXT4-fs (loop0): 1 orphan inode deleted [ 39.413170][ T28] audit: type=1400 audit(1778514405.860:272): avc: denied { create } for pid=3563 comm="syz.2.16" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.413275][ T28] audit: type=1400 audit(1778514405.860:273): avc: denied { read write } for pid=3563 comm="syz.2.16" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.413301][ T28] audit: type=1400 audit(1778514405.860:274): avc: denied { open } for pid=3563 comm="syz.2.16" path="/4/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.441864][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.502091][ T3562] loop3: detected capacity change from 0 to 512 [ 39.510588][ T3526] udevd[3526]: incorrect ext4 checksum on /dev/loop1 [ 39.537506][ T28] audit: type=1400 audit(1778514406.090:275): avc: denied { tracepoint } for pid=3571 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.612015][ T3562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.663055][ T3578] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.16: bg 0: block 345: padding at end of block bitmap is not set [ 39.679049][ T28] audit: type=1400 audit(1778514406.330:276): avc: denied { write } for pid=3563 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.707043][ T3562] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.762907][ T28] audit: type=1400 audit(1778514406.390:277): avc: denied { map_read map_write } for pid=3576 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.802463][ T3582] loop1: detected capacity change from 0 to 512 [ 39.840140][ T3582] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.840218][ T3582] ------------[ cut here ]------------ [ 39.840226][ T3582] EA inode 11 i_nlink=2 [ 39.840247][ T3582] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.18/3582 [ 39.840299][ T3582] Modules linked in: [ 39.840323][ T3582] CPU: 1 UID: 0 PID: 3582 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 39.840350][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 39.840364][ T3582] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 39.840404][ T3582] Code: 04 5f 98 ff 4c 8d 2d 7d 6c 5c 05 49 8d 7e 40 e8 84 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d5 d7 03 66 66 66 66 66 66 2e [ 39.840431][ T3582] RSP: 0018:ffffc900020af778 EFLAGS: 00010246 [ 39.840455][ T3582] RAX: ffff888104cd0b00 RBX: ffff88810061f2f8 RCX: ffffffff81c0d228 [ 39.840471][ T3582] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3e90 [ 39.840487][ T3582] RBP: 000000000000000b R08: 000188810061f2ab R09: 0000000000000000 [ 39.840502][ T3582] R10: ffffc900020af6a8 R11: 0001c900020af6a8 R12: ffff88810061f2a8 [ 39.840518][ T3582] R13: ffffffff871d3e90 R14: ffff88810061f260 R15: 0000000000000001 [ 39.840534][ T3582] FS: 00007f85c3ddd6c0(0000) GS:ffff8882ae9fb000(0000) knlGS:0000000000000000 [ 39.840573][ T3582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.840670][ T3582] CR2: 00007f6bce12d000 CR3: 000000011b5dc000 CR4: 00000000003506f0 [ 39.840692][ T3582] Call Trace: [ 39.840700][ T3582] [ 39.840711][ T3582] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 39.840828][ T3582] ? errseq_check+0x2c/0x50 [ 39.840892][ T3582] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 39.840981][ T3582] ? ext4_truncate+0x89f/0xa10 [ 39.841009][ T3582] ext4_evict_inode+0xb16/0xe30 [ 39.841037][ T3582] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.841153][ T3582] evict+0x2af/0x510 [ 39.841181][ T3582] ? __dquot_initialize+0x146/0x7c0 [ 39.841250][ T3582] iput+0x41a/0x580 [ 39.841316][ T3582] ext4_process_orphan+0x1a9/0x1c0 [ 39.841344][ T3582] ext4_orphan_cleanup+0x69c/0x9f0 [ 39.841388][ T3582] ext4_fill_super+0x3408/0x37c0 [ 39.841414][ T3582] ? set_blocksize+0x14c/0x270 [ 39.841440][ T3582] ? setup_bdev_super+0x30e/0x370 [ 39.841505][ T3582] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.841528][ T3582] get_tree_bdev_flags+0x291/0x300 [ 39.841589][ T3582] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.841613][ T3582] get_tree_bdev+0x1f/0x30 [ 39.841638][ T3582] ext4_get_tree+0x1c/0x30 [ 39.841733][ T3582] vfs_get_tree+0x57/0x1d0 [ 39.841764][ T3582] do_new_mount+0x288/0x8d0 [ 39.841798][ T3582] path_mount+0x4d0/0xbc0 [ 39.841908][ T3582] __se_sys_mount+0x28c/0x2e0 [ 39.841979][ T3582] __x64_sys_mount+0x67/0x80 [ 39.842036][ T3582] x64_sys_call+0x2d61/0x3020 [ 39.842064][ T3582] do_syscall_64+0x12c/0x3b0 [ 39.842094][ T3582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.842119][ T3582] RIP: 0033:0x7f85c53ce04a [ 39.842138][ T3582] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.842210][ T3582] RSP: 002b:00007f85c3ddce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.842234][ T3582] RAX: ffffffffffffffda RBX: 00007f85c3ddcee0 RCX: 00007f85c53ce04a [ 39.842250][ T3582] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f85c3ddcea0 [ 39.842266][ T3582] RBP: 00002000000009c0 R08: 00007f85c3ddcee0 R09: 0000000000800718 [ 39.842281][ T3582] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 39.842297][ T3582] R13: 00007f85c3ddcea0 R14: 000000000000048d R15: 0000200000000200 [ 39.842393][ T3582] [ 39.842401][ T3582] ---[ end trace 0000000000000000 ]--- [ 39.842498][ T3582] EXT4-fs (loop1): 1 orphan inode deleted [ 39.843082][ T3582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.864426][ T3581] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 39.903405][ T3578] EXT4-fs (loop2): Remounting filesystem read-only [ 39.903854][ T3585] loop4: detected capacity change from 0 to 1024 [ 39.904535][ T3564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16'. [ 39.964377][ T3585] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 40.376585][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.389236][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.493801][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.084626][ T3593] loop3: detected capacity change from 0 to 512 [ 42.337663][ T3593] EXT4-fs (loop3): 1 orphan inode deleted [ 42.400539][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.424780][ T3592] loop0: detected capacity change from 0 to 512 [ 42.442592][ T3593] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 42.477948][ T3596] netlink: 'syz.2.20': attribute type 27 has an invalid length. [ 42.522250][ T3596] netlink: 80 bytes leftover after parsing attributes in process `syz.2.20'. [ 42.645054][ T3592] EXT4-fs (loop0): 1 orphan inode deleted [ 42.682623][ T3592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.733163][ T3592] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 42.751028][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.966317][ T3606] loop2: detected capacity change from 0 to 512 [ 45.450534][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.457834][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.712386][ T3614] loop4: detected capacity change from 0 to 256 [ 48.077577][ T3613] loop1: detected capacity change from 0 to 512 [ 48.294295][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.304279][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.326997][ T3614] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.487671][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 48.487689][ T28] audit: type=1400 audit(1778514415.040:291): avc: denied { mount } for pid=3609 comm="syz.4.26" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.375312][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.462172][ T28] audit: type=1400 audit(1778514415.880:292): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 49.485736][ T65] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.487629][ T3632] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 49.502965][ T65] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.513255][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.520780][ T3632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 49.531203][ T65] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.540274][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.549331][ T3632] batadv0: entered promiscuous mode [ 49.554605][ T3632] batadv0: entered allmulticast mode [ 49.568539][ T3632] batman_adv: batadv0: Adding interface: bridge1 [ 49.575017][ T3632] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.600657][ T3632] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 49.629464][ T28] audit: type=1400 audit(1778514416.300:293): avc: denied { create } for pid=3619 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.684381][ T28] audit: type=1400 audit(1778514416.310:294): avc: denied { bind } for pid=3636 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.719934][ T3644] loop0: detected capacity change from 0 to 256 [ 49.747267][ T3646] loop1: detected capacity change from 0 to 512 [ 49.755335][ T28] audit: type=1400 audit(1778514416.320:295): avc: denied { write } for pid=3636 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.792919][ T28] audit: type=1400 audit(1778514416.330:296): avc: denied { setopt } for pid=3642 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.819003][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.837768][ T3646] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.868605][ T28] audit: type=1400 audit(1778514416.330:297): avc: denied { write } for pid=3642 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.876695][ T3646] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.33: iget: bad i_size value: 2533274857506816 [ 49.950346][ T3650] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.33: iget: bad i_size value: 2533274857506816 [ 50.018754][ T28] audit: type=1400 audit(1778514416.690:298): avc: denied { write } for pid=3645 comm="syz.1.33" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.041369][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 50.072096][ T28] audit: type=1400 audit(1778514416.690:299): avc: denied { write } for pid=3645 comm="syz.1.33" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.099289][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.118655][ T28] audit: type=1400 audit(1778514416.690:300): avc: denied { remove_name } for pid=3645 comm="syz.1.33" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.675548][ T3662] loop0: detected capacity change from 0 to 512 [ 50.682736][ T3662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.721983][ T3660] loop1: detected capacity change from 0 to 256 [ 50.791389][ T3662] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 50.799883][ T3662] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.36: corrupted in-inode xattr: e_value size too large [ 50.800039][ T3660] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.813755][ T3662] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.824365][ T3662] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.36: couldn't read orphan inode 15 (err -117) [ 50.833676][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.833708][ C0] EXT4-fs (loop0): initial error at time 1778514417: ext4_iget_extra_inode:5128: inode 15 [ 50.833755][ C0] EXT4-fs (loop0): last error at time 1778514417: ext4_iget_extra_inode:5128: inode 15 [ 50.871665][ T3662] loop0: lost filesystem error report for type 5 error -117 [ 50.872280][ T3662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.000911][ T3669] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 51.086481][ T3669] loop4: detected capacity change from 0 to 256 [ 51.118290][ T3669] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.158832][ T3620] Zero length message leads to an empty skb [ 51.165560][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.668553][ T3674] loop0: detected capacity change from 0 to 764 [ 52.943027][ T3683] loop2: detected capacity change from 0 to 1024 [ 53.620859][ T3689] loop0: detected capacity change from 0 to 512 [ 55.245501][ T3686] loop3: detected capacity change from 0 to 512 [ 55.445794][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.457338][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.639779][ T3686] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.132819][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 56.132837][ T28] audit: type=1400 audit(1778514422.800:355): avc: denied { ioctl } for pid=3691 comm="syz.2.43" path="socket:[5069]" dev="sockfs" ino=5069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.332572][ T3694] loop2: detected capacity change from 0 to 512 [ 56.660730][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.747684][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.162581][ T3303] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 57.240488][ T3699] FAULT_INJECTION: forcing a failure. [ 57.240488][ T3699] name failslab, interval 1, probability 0, space 0, times 1 [ 57.253406][ T3699] CPU: 0 UID: 0 PID: 3699 Comm: syz.2.45 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.253446][ T3699] Tainted: [W]=WARN [ 57.253454][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 57.253537][ T3699] Call Trace: [ 57.253545][ T3699] [ 57.253554][ T3699] __dump_stack+0x1d/0x30 [ 57.253584][ T3699] dump_stack_lvl+0x95/0xd0 [ 57.253604][ T3699] dump_stack+0x15/0x1b [ 57.253622][ T3699] should_fail_ex+0x263/0x280 [ 57.253652][ T3699] should_failslab+0x8c/0xb0 [ 57.253716][ T3699] kmem_cache_alloc_noprof+0x66/0x3f0 [ 57.253746][ T3699] ? io_submit_one+0xcf/0x1350 [ 57.253772][ T3699] io_submit_one+0xcf/0x1350 [ 57.253837][ T3699] __se_sys_io_submit+0xfb/0x280 [ 57.253863][ T3699] __x64_sys_io_submit+0x43/0x50 [ 57.253890][ T3699] x64_sys_call+0x19d5/0x3020 [ 57.253929][ T3699] do_syscall_64+0x12c/0x3b0 [ 57.253970][ T3699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.253990][ T3699] RIP: 0033:0x7fe09955cdd9 [ 57.254055][ T3699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.254075][ T3699] RSP: 002b:00007fe097f96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 57.254097][ T3699] RAX: ffffffffffffffda RBX: 00007fe0997d6090 RCX: 00007fe09955cdd9 [ 57.254113][ T3699] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007fe09a314000 [ 57.254129][ T3699] RBP: 00007fe097f96090 R08: 0000000000000000 R09: 0000000000000000 [ 57.254215][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.254227][ T3699] R13: 00007fe0997d6128 R14: 00007fe0997d6090 R15: 00007ffebda5d848 [ 57.254274][ T3699] [ 57.483747][ T315] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.493177][ T315] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.502401][ T315] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.517641][ T315] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.663409][ T28] audit: type=1400 audit(1778514424.330:356): avc: denied { ioctl } for pid=3704 comm="syz.1.49" path="socket:[5351]" dev="sockfs" ino=5351 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.691211][ T28] audit: type=1400 audit(1778514424.330:357): avc: denied { write } for pid=3704 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.710464][ T28] audit: type=1400 audit(1778514424.360:358): avc: denied { mount } for pid=3704 comm="syz.1.49" name="/" dev="rpc_pipefs" ino=5353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 57.752524][ T3711] capability: warning: `syz.3.48' uses 32-bit capabilities (legacy support in use) [ 57.812323][ T3711] loop3: detected capacity change from 0 to 512 [ 59.950975][ T3716] loop4: detected capacity change from 0 to 512 [ 60.013934][ T28] audit: type=1400 audit(1778514426.680:359): avc: denied { read write } for pid=3718 comm="syz.0.53" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.628677][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.636294][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.696496][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.713079][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.781057][ T315] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.950792][ T28] audit: type=1400 audit(1778514426.680:360): avc: denied { open } for pid=3718 comm="syz.0.53" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.986697][ T315] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.986792][ T315] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.986864][ T315] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.191303][ T3741] loop2: detected capacity change from 0 to 512 [ 63.264608][ T3750] loop1: detected capacity change from 0 to 512 [ 63.277907][ T3742] netlink: 'syz.3.54': attribute type 41 has an invalid length. [ 63.364652][ T3749] loop4: detected capacity change from 0 to 512 [ 63.746012][ T3750] EXT4-fs: Ignoring removed i_version option [ 63.818982][ T3738] Failed to initialize the IGMP autojoin socket (err -2) [ 63.965974][ T3749] EXT4-fs (loop4): 1 orphan inode deleted [ 63.983083][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.050509][ T3748] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 64.064055][ T3750] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.078170][ T3750] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.57: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 64.093211][ T3750] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.093447][ T3750] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.57: ea_inode dec ref err=-117 [ 64.102689][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.102709][ C1] EXT4-fs (loop1): initial error at time 1778514430: ext4_xattr_inode_update_ref:1037: inode 11 [ 64.102736][ C1] EXT4-fs (loop1): last error at time 1778514430: ext4_xattr_inode_update_ref:1037: inode 11 [ 64.168447][ T28] audit: type=1400 audit(1778514430.830:361): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.218815][ T3750] EXT4-fs (loop1): 1 orphan inode deleted [ 64.231101][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.455777][ T3760] loop0: detected capacity change from 0 to 512 [ 64.487199][ T3760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.500461][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.514784][ T28] audit: type=1326 audit(1778514431.180:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.517685][ T3755] loop3: detected capacity change from 0 to 256 [ 64.543538][ T28] audit: type=1326 audit(1778514431.180:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.553875][ T3760] EXT4-fs (loop0): 1 truncate cleaned up [ 64.580721][ T3760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.593713][ T28] audit: type=1326 audit(1778514431.180:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.619634][ T28] audit: type=1326 audit(1778514431.180:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.645019][ T28] audit: type=1326 audit(1778514431.210:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.670250][ T28] audit: type=1326 audit(1778514431.210:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.695856][ T28] audit: type=1326 audit(1778514431.220:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.728181][ T28] audit: type=1326 audit(1778514431.220:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.2.59" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 64.734792][ T3763] loop1: detected capacity change from 0 to 1024 [ 64.822953][ T3760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 64.833834][ T3763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.869962][ T3763] syzkaller0: entered promiscuous mode [ 64.875631][ T3763] syzkaller0: entered allmulticast mode [ 64.986493][ T3755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.069025][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 65.153596][ T3774] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 65.163387][ T3774] FAT-fs (loop3): Filesystem has been set read-only [ 65.218759][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.309184][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.319585][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.334312][ T3777] netlink: 'syz.1.64': attribute type 6 has an invalid length. [ 65.342688][ T3777] netlink: 168 bytes leftover after parsing attributes in process `syz.1.64'. [ 65.354275][ T3776] Failed to initialize the IGMP autojoin socket (err -2) [ 65.384998][ T3781] netlink: 'syz.4.66': attribute type 7 has an invalid length. [ 65.475130][ T3773] loop2: detected capacity change from 0 to 1024 [ 65.499874][ T3789] bond1: (slave bond_slave_1): Device is not our slave [ 65.506901][ T3789] bond1: option active_slave: invalid value (bond_slave_1) [ 65.629690][ T3773] EXT4-fs: quotafile must be on filesystem root [ 65.644207][ T3789] bond1 (unregistering): Released all slaves [ 65.889340][ T3797] loop1: detected capacity change from 0 to 512 [ 66.812711][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.820138][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.876078][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.887466][ T3797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.941047][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.950090][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.001171][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.017745][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 67.017764][ T28] audit: type=1400 audit(1778514433.630:434): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.083183][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.123404][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.141976][ T28] audit: type=1400 audit(1778514433.790:435): avc: denied { read } for pid=3806 comm="syz.4.75" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.568570][ T28] audit: type=1400 audit(1778514433.790:436): avc: denied { open } for pid=3806 comm="syz.4.75" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.598509][ T3810] loop3: detected capacity change from 0 to 512 [ 67.653198][ T3812] loop1: detected capacity change from 0 to 512 [ 67.665727][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.780491][ T3810] EXT4-fs (loop3): 1 orphan inode deleted [ 67.805473][ T3810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.841473][ T3810] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 67.896080][ T3812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.950935][ T28] audit: type=1400 audit(1778514433.790:437): avc: denied { ioctl } for pid=3806 comm="syz.4.75" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.021104][ T3820] loop4: detected capacity change from 0 to 512 [ 68.024133][ T3812] EXT4-fs (loop1): 1 truncate cleaned up [ 68.038881][ T3821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 68.047023][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.061152][ T3820] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.78: corrupted in-inode xattr: e_value size too large [ 68.095986][ T3820] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.096243][ T3820] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.78: couldn't read orphan inode 15 (err -117) [ 68.105542][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 68.105561][ C0] EXT4-fs (loop4): initial error at time 1778514434: ext4_iget_extra_inode:5128: inode 15 [ 68.105592][ C0] EXT4-fs (loop4): last error at time 1778514434: ext4_iget_extra_inode:5128: inode 15 [ 68.120176][ T3787] loop0: detected capacity change from 0 to 512 [ 68.139495][ T3820] loop4: lost filesystem error report for type 5 error -117 [ 68.152266][ T3787] EXT4-fs: Ignoring removed i_version option [ 68.152839][ T28] audit: type=1400 audit(1778514434.820:438): avc: denied { write } for pid=3811 comm="syz.1.76" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.195252][ T3787] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.219694][ T3787] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.68: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 68.225048][ T3812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 68.234997][ T3820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.256067][ T3787] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.257030][ T3787] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.68: ea_inode dec ref err=-117 [ 68.266468][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.266550][ C0] EXT4-fs (loop0): initial error at time 1778514434: ext4_xattr_inode_update_ref:1037: inode 11 [ 68.266634][ C0] EXT4-fs (loop0): last error at time 1778514434: ext4_xattr_inode_update_ref:1037: inode 11 [ 68.307246][ T28] audit: type=1400 audit(1778514434.960:439): avc: denied { mount } for pid=3825 comm="syz.2.80" name="/" dev="ramfs" ino=6360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.313162][ T3820] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.78: corrupted in-inode xattr: e_value size too large [ 68.345994][ T3787] EXT4-fs (loop0): 1 orphan inode deleted [ 68.365828][ T3787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.406452][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.453584][ T28] audit: type=1400 audit(1778514435.120:440): avc: denied { write } for pid=3818 comm="syz.4.78" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.483926][ T28] audit: type=1400 audit(1778514435.150:441): avc: denied { write } for pid=3786 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.504553][ T28] audit: type=1400 audit(1778514435.150:442): avc: denied { bind } for pid=3786 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.584194][ T3831] dummy0: entered promiscuous mode [ 69.049167][ T3835] loop1: detected capacity change from 0 to 512 [ 69.227591][ T3831] gretap0: entered promiscuous mode [ 69.262659][ T3835] EXT4-fs (loop1): 1 orphan inode deleted [ 69.308777][ T3835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.374258][ T3831] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 69.376540][ T3834] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 69.392294][ T3831] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 69.409634][ T3831] hsr1: entered allmulticast mode [ 69.416271][ T3831] dummy0: entered allmulticast mode [ 69.424565][ T3831] gretap0: entered allmulticast mode [ 69.475454][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.509429][ T3838] netlink: 'syz.0.82': attribute type 5 has an invalid length. [ 69.519320][ T3838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 69.520162][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.216705][ T3850] loop0: detected capacity change from 0 to 512 [ 71.972548][ T3858] loop4: detected capacity change from 0 to 512 [ 72.724247][ T28] audit: type=1400 audit(1778514439.390:443): avc: denied { execute } for pid=3861 comm="syz.4.90" path="/20/file1" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.173975][ T3852] loop2: detected capacity change from 0 to 512 [ 74.325292][ T3867] loop4: detected capacity change from 0 to 512 [ 74.359998][ T28] audit: type=1400 audit(1778514441.030:444): avc: denied { module_request } for pid=3868 comm="syz.0.92" kmod="net-pf-16-proto-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.377125][ T3867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.913702][ T3867] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 74.930918][ T3867] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.91: corrupted in-inode xattr: e_value size too large [ 74.947092][ T3867] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.951822][ T3867] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.91: couldn't read orphan inode 15 (err -117) [ 74.962376][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 74.962406][ C1] EXT4-fs (loop4): initial error at time 1778514441: ext4_iget_extra_inode:5128: inode 15 [ 74.962767][ C1] EXT4-fs (loop4): last error at time 1778514441: ext4_iget_extra_inode:5128: inode 15 [ 75.007442][ T3867] loop4: lost filesystem error report for type 5 error -117 [ 75.027478][ T28] audit: type=1326 audit(1778514441.510:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.032447][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.035373][ T28] audit: type=1326 audit(1778514441.510:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035416][ T28] audit: type=1326 audit(1778514441.510:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035499][ T28] audit: type=1326 audit(1778514441.510:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035606][ T28] audit: type=1326 audit(1778514441.510:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035641][ T28] audit: type=1326 audit(1778514441.510:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035666][ T28] audit: type=1326 audit(1778514441.520:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.035771][ T28] audit: type=1326 audit(1778514441.520:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.0.92" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 75.118880][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.123541][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.196597][ T3881] loop1: detected capacity change from 0 to 164 [ 75.318336][ T3881] iso9660: Bad value for 'map' [ 75.535136][ T3898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.590130][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.790197][ T3899] loop0: detected capacity change from 0 to 764 [ 75.811972][ T3899] iso9660: Unknown parameter '€' [ 75.915891][ T3897] rdma_rxe: Failed to create IPv4 UDP tunnel [ 75.932502][ T3898] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.050829][ T3898] batadv0: left promiscuous mode [ 76.124482][ T3898] batadv0: left allmulticast mode [ 76.399150][ T3898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.431428][ T3898] wireguard: wg0: Could not create IPv4 socket [ 77.167645][ T3680] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.270430][ T3898] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 77.528458][ T3899] Failed to initialize the IGMP autojoin socket (err -2) [ 77.547838][ T3907] loop4: detected capacity change from 0 to 512 [ 77.554372][ T3913] loop2: detected capacity change from 0 to 512 [ 77.665981][ T3907] EXT4-fs (loop4): 1 orphan inode deleted [ 77.672308][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.688895][ T3907] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 77.709584][ T3913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.737172][ T3913] EXT4-fs (loop2): 1 truncate cleaned up [ 77.750027][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.919221][ T3921] ipvlan2: entered promiscuous mode [ 77.929428][ T3921] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.944167][ T3921] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 77.957276][ T3921] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 77.994959][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 77.995007][ T28] audit: type=1400 audit(1778514444.450:549): avc: denied { write } for pid=3910 comm="syz.2.103" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.433927][ T3923] loop0: detected capacity change from 0 to 512 [ 78.592351][ T3923] EXT4-fs (loop0): 1 orphan inode deleted [ 78.624456][ T3923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.660789][ T3923] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 78.869805][ T3913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 78.992764][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.177241][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.177859][ T28] audit: type=1400 audit(1778514445.840:550): avc: denied { block_suspend } for pid=3931 comm="syz.3.109" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.651855][ T28] audit: type=1400 audit(1778514447.320:551): avc: denied { read } for pid=3939 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.695732][ T3947] loop1: detected capacity change from 0 to 512 [ 80.717299][ T3947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.755345][ T3947] EXT4-fs (loop1): 1 truncate cleaned up [ 80.844658][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.891383][ T28] audit: type=1326 audit(1778514447.530:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 80.963867][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 80.980330][ T28] audit: type=1326 audit(1778514447.530:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 81.010661][ T3954] loop3: detected capacity change from 0 to 512 [ 81.033560][ T3956] loop4: detected capacity change from 0 to 512 [ 81.040574][ T3954] EXT4-fs: Ignoring removed i_version option [ 81.078950][ T3956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.095315][ T3954] EXT4-fs (loop3): orphan cleanup on readonly fs [ 81.118156][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.129360][ T3954] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.114: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 81.145859][ T28] audit: type=1326 audit(1778514447.530:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 81.173642][ T3956] EXT4-fs (loop4): 1 truncate cleaned up [ 81.179566][ T3954] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.179691][ T3954] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.114: ea_inode dec ref err=-117 [ 81.188935][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.188960][ C1] EXT4-fs (loop3): initial error at time 1778514447: ext4_xattr_inode_update_ref:1037: inode 11 [ 81.189009][ C1] EXT4-fs (loop3): last error at time 1778514447: ext4_xattr_inode_update_ref:1037: inode 11 [ 81.230162][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.242515][ T28] audit: type=1326 audit(1778514447.530:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 81.284803][ T28] audit: type=1400 audit(1778514447.540:557): avc: denied { write } for pid=3946 comm="syz.1.113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.319027][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.328381][ T3954] EXT4-fs (loop3): 1 orphan inode deleted [ 81.335437][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.348208][ T28] audit: type=1326 audit(1778514447.540:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 81.379769][ T28] audit: type=1326 audit(1778514447.540:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.110" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833381cdd9 code=0x7ffc0000 [ 81.503369][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.606137][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.632951][ T3972] loop2: detected capacity change from 0 to 512 [ 81.663894][ T3972] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 81.729874][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 81.856776][ T3992] loop3: detected capacity change from 0 to 512 [ 81.982410][ T4002] loop4: detected capacity change from 0 to 1024 [ 81.984705][ T3992] EXT4-fs (loop3): 1 orphan inode deleted [ 81.998685][ T56] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 82.011339][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.021266][ T4005] loop2: detected capacity change from 0 to 512 [ 82.024813][ T3992] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.032627][ T4002] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 82.041910][ T4005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.181576][ T4005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 82.353608][ T3992] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 13: comm syz.3.129: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 82.402152][ T4005] System zones: 1-12 [ 82.421023][ T4005] EXT4-fs (loop2): 1 truncate cleaned up [ 82.442786][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.479619][ T4012] syz.0.134 uses obsolete (PF_INET,SOCK_PACKET) [ 83.680166][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 83.680218][ T28] audit: type=1400 audit(1778514450.350:648): avc: denied { bind } for pid=4004 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.128877][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.140395][ T3445] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.151347][ T3445] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 84.173348][ T28] audit: type=1400 audit(1778514450.830:649): avc: denied { getopt } for pid=4016 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.196606][ T3445] loop3: lost filesystem error report for type 5 error -117 [ 84.252490][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.484430][ T28] audit: type=1400 audit(1778514451.150:650): avc: denied { create } for pid=4035 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.381258][ T4036] set_capacity_and_notify: 1 callbacks suppressed [ 85.381359][ T4036] loop1: detected capacity change from 0 to 128 [ 85.543579][ T4050] loop4: detected capacity change from 0 to 512 [ 85.835233][ T4046] loop2: detected capacity change from 0 to 512 [ 85.899175][ T4043] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 86.136355][ T28] audit: type=1400 audit(1778514452.570:651): avc: denied { mac_admin } for pid=4030 comm="syz.3.142" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.201884][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.503697][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 86.539370][ T4050] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.565675][ T28] audit: type=1400 audit(1778514452.580:652): avc: denied { relabelto } for pid=4030 comm="syz.3.142" name="bus" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 86.598261][ T28] audit: type=1400 audit(1778514452.580:653): avc: denied { associate } for pid=4030 comm="syz.3.142" name="bus" dev="tmpfs" ino=149 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 86.654709][ T28] audit: type=1326 audit(1778514452.830:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 86.783114][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.837916][ T4065] loop0: detected capacity change from 0 to 512 [ 86.892199][ T4065] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.919868][ T28] audit: type=1326 audit(1778514452.840:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 86.973540][ T4065] EXT4-fs (loop0): 1 truncate cleaned up [ 86.993632][ T4065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.027156][ T4067] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 87.036073][ T28] audit: type=1326 audit(1778514452.830:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.0.141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eb605cdd9 code=0x7ffc0000 [ 87.234276][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.464669][ T4075] loop4: detected capacity change from 0 to 512 [ 87.472047][ T4075] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.678590][ T4075] EXT4-fs (loop4): 1 truncate cleaned up [ 87.764985][ T4075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.981566][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 88.981583][ T28] audit: type=1326 audit(1778514455.650:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 89.247111][ T4089] loop3: detected capacity change from 0 to 256 [ 89.417673][ T28] audit: type=1326 audit(1778514456.080:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 90.008733][ T4095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 90.033093][ T4089] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.411146][ T28] audit: type=1326 audit(1778514456.080:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 90.436779][ T28] audit: type=1326 audit(1778514456.080:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 90.568647][ T4089] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 90.677682][ T4089] FAT-fs (loop3): Filesystem has been set read-only [ 90.685241][ T4089] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 90.969963][ T4096] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 91.066104][ T4096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.074182][ T28] audit: type=1326 audit(1778514456.080:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 91.102334][ T28] audit: type=1326 audit(1778514456.080:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 91.179499][ T4103] loop0: detected capacity change from 0 to 512 [ 91.188072][ T4099] ipvlan2: entered allmulticast mode [ 91.194271][ T4103] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 91.204309][ T28] audit: type=1326 audit(1778514456.080:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 91.593154][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.602473][ T4099] bond1: entered allmulticast mode [ 91.618665][ T4103] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 91.637592][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 91.644306][ C1] EXT4-fs (loop0): initial error at time 1778514458: mb_free_blocks:2049: inode 11: block 64 [ 91.655424][ C1] EXT4-fs (loop0): last error at time 1778514458: mb_free_blocks:2049: inode 11: block 64 [ 91.739295][ T3303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 91.756265][ T4103] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.163: corrupted inode contents [ 91.768132][ T28] audit: type=1326 audit(1778514456.080:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 91.796254][ T3303] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 91.812591][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.814087][ T4103] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #11: comm syz.0.163: mark_inode_dirty error [ 91.862272][ T28] audit: type=1326 audit(1778514456.080:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe09951d60e code=0x7ffc0000 [ 91.900152][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.900332][ T28] audit: type=1326 audit(1778514456.080:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09955cdd9 code=0x7ffc0000 [ 91.940151][ T4112] loop2: detected capacity change from 0 to 512 [ 91.946555][ T4103] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.163: invalid indirect mapped block 1 (level 1) [ 91.960061][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.970475][ T4107] syzkaller0: entered promiscuous mode [ 91.985389][ T4107] syzkaller0: entered allmulticast mode [ 91.994046][ T4112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.006161][ T4103] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.163: corrupted inode contents [ 92.007618][ T4114] loop4: detected capacity change from 0 to 256 [ 92.018296][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.025764][ T4103] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 92.026684][ T4112] EXT4-fs (loop2): 1 truncate cleaned up [ 92.037547][ T4103] loop0: lost filesystem error report for type 5 error -117 [ 92.050293][ T4103] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.163: corrupted inode contents [ 92.053453][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.062165][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.084013][ T4103] EXT4-fs error (device loop0): ext4_truncate:4690: inode #11: comm syz.0.163: mark_inode_dirty error [ 92.097234][ T4114] FAT-fs (loop4): IO charset cp1250 not found [ 92.104651][ T4103] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.112820][ T4103] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 92.131181][ T4103] loop0: lost filesystem error report for type 5 error -117 [ 92.135124][ T4103] EXT4-fs (loop0): 1 truncate cleaned up [ 92.148846][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.165836][ T4114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.164'. [ 92.178195][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.187818][ T4104] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 92.196053][ T4104] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 92.237971][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.970051][ T4136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.061941][ T4128] loop4: detected capacity change from 0 to 4096 [ 93.063656][ T4136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.096678][ T4128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.106840][ T4136] batman_adv: batadv0: Removing interface: bridge1 [ 93.117440][ T4124] loop2: detected capacity change from 0 to 512 [ 93.125345][ T4125] netlink: 'syz.4.168': attribute type 28 has an invalid length. [ 93.133120][ T4125] netlink: 'syz.4.168': attribute type 3 has an invalid length. [ 93.140887][ T4125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.168'. [ 93.154300][ T4124] EXT4-fs: Ignoring removed i_version option [ 93.184482][ T4124] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.195653][ T4124] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.171: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 93.197261][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.213515][ T4124] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.227589][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 93.240977][ T4124] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.171: ea_inode dec ref err=-117 [ 93.243352][ C0] EXT4-fs (loop2): initial error at time 1778514459: ext4_xattr_inode_update_ref:1037: inode 11 [ 93.243389][ C0] EXT4-fs (loop2): last error at time 1778514459: ext4_xattr_inode_update_ref:1037: inode 11 [ 93.288857][ T4144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.177'. [ 93.289442][ T4124] EXT4-fs (loop2): 1 orphan inode deleted [ 93.306613][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.386775][ T4141] Failed to initialize the IGMP autojoin socket (err -2) [ 93.406054][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.416952][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.426515][ T4155] loop1: detected capacity change from 0 to 512 [ 93.444083][ T4155] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.479280][ T4155] EXT4-fs (loop1): 1 truncate cleaned up [ 93.485850][ T4155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.498306][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.533564][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.547052][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 93.633477][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.654385][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.675981][ T4178] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 93.675981][ T4178] The task syz.0.184 (4178) triggered the difference, watch for misbehavior. [ 93.695064][ T4180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.189'. [ 93.745790][ T4183] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.775568][ T4190] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 93.794786][ T4186] loop1: detected capacity change from 0 to 1024 [ 93.827677][ T4190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.839040][ T4183] Failed to initialize the IGMP autojoin socket (err -2) [ 93.850089][ T4186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.882582][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.914756][ T4190] bond2: (slave veth3): Enslaving as an active interface with a down link [ 93.949174][ T12] bridge_slave_1: left allmulticast mode [ 93.955885][ T12] bridge_slave_1: left promiscuous mode [ 93.962063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.970272][ T12] bridge_slave_0: left allmulticast mode [ 93.976707][ T12] bridge_slave_0: left promiscuous mode [ 93.983228][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.092174][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.108419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.126925][ T12] bond0 (unregistering): Released all slaves [ 94.181347][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.199730][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.209091][ T4141] bridge_slave_0: entered allmulticast mode [ 94.215853][ T4141] bridge_slave_0: entered promiscuous mode [ 94.228445][ T12] hsr_slave_0: left promiscuous mode [ 94.244014][ T12] hsr_slave_1: left promiscuous mode [ 94.263008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.283945][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.302511][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.320905][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.331907][ T4227] loop1: detected capacity change from 0 to 2048 [ 94.349972][ T12] veth1_macvtap: left promiscuous mode [ 94.374802][ T12] veth0_macvtap: left promiscuous mode [ 94.383021][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.387858][ T12] veth1_vlan: left promiscuous mode [ 94.409245][ T4227] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.438121][ T12] veth0_vlan: left promiscuous mode [ 94.456461][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 94.456479][ T28] audit: type=1400 audit(1778514461.120:715): avc: denied { write } for pid=4226 comm="syz.1.197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.672678][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.197'. [ 94.811290][ T4236] loop4: detected capacity change from 0 to 512 [ 94.887919][ T4236] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.992416][ T4236] EXT4-fs (loop4): 1 truncate cleaned up [ 95.073825][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.102704][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.184692][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.287673][ T28] audit: type=1400 audit(1778514461.880:716): avc: denied { write } for pid=4234 comm="syz.4.199" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.433216][ T28] audit: type=1400 audit(1778514462.030:717): avc: denied { ioctl } for pid=4226 comm="syz.1.197" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x45e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.490163][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.514506][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.540656][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.559328][ T4141] bridge_slave_1: entered allmulticast mode [ 95.578403][ T4141] bridge_slave_1: entered promiscuous mode [ 95.672109][ T4141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.723924][ T4141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.833429][ T4141] team0: Port device team_slave_0 added [ 95.899097][ T4141] team0: Port device team_slave_1 added [ 95.962240][ T30] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 95.994482][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.021402][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.059799][ T30] EXT4-fs (loop1): Remounting filesystem read-only [ 96.080613][ T3445] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 96.136896][ T4141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.187009][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.212285][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.224556][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.305888][ T4253] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 96.322490][ T4250] loop4: detected capacity change from 0 to 32768 [ 96.337313][ T4141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.396171][ T4254] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.429104][ T4254] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.470081][ T4253] bond1: (slave gretap1): making interface the new active one [ 96.478477][ T4253] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 96.515601][ T28] audit: type=1400 audit(1778514463.180:718): avc: denied { create } for pid=4264 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.579031][ T28] audit: type=1400 audit(1778514463.240:719): avc: denied { setopt } for pid=4264 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.587888][ T4141] hsr_slave_0: entered promiscuous mode [ 96.637142][ T4141] hsr_slave_1: entered promiscuous mode [ 96.648410][ T4141] debugfs: 'hsr0' already exists in 'hsr' [ 96.657070][ T4141] Cannot create hsr debugfs directory [ 96.676362][ T4262] loop0: detected capacity change from 0 to 512 [ 96.729866][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.756606][ T4280] loop4: detected capacity change from 0 to 512 [ 96.775112][ T4283] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4283 comm=syz.1.207 [ 96.777294][ T4280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.792159][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.806756][ T28] audit: type=1400 audit(1778514463.470:720): avc: denied { setopt } for pid=4264 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.838439][ T4280] EXT4-fs (loop4): 1 truncate cleaned up [ 96.845493][ T4280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.864023][ T28] audit: type=1400 audit(1778514463.530:721): avc: denied { write } for pid=4278 comm="syz.4.210" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.930237][ T28] audit: type=1400 audit(1778514463.530:722): avc: denied { remove_name } for pid=4278 comm="syz.4.210" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.994927][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.017690][ T28] audit: type=1400 audit(1778514463.680:723): avc: denied { read } for pid=3019 comm="dhcpcd" name="n27" dev="tmpfs" ino=2360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.041451][ T28] audit: type=1400 audit(1778514463.710:724): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=2360 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.251042][ T4141] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 97.271676][ T4141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.286645][ T4141] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 97.307199][ T4141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.334169][ T4141] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 97.457694][ T4141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.465648][ T4141] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 97.482589][ T4289] loop4: detected capacity change from 0 to 512 [ 97.499810][ T4289] EXT4-fs: Ignoring removed i_version option [ 97.635004][ T4141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.821770][ T4289] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.460681][ T4289] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.212: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 99.648981][ T4141] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.465555][ T4289] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.467495][ T4289] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.212: ea_inode dec ref err=-117 [ 100.489687][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 100.489795][ C0] EXT4-fs (loop4): initial error at time 1778514467: ext4_xattr_inode_update_ref:1037: inode 11 [ 100.489980][ C0] EXT4-fs (loop4): last error at time 1778514467: ext4_xattr_inode_update_ref:1037: inode 11 [ 100.608423][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 100.608442][ T28] audit: type=1400 audit(1778514466.350:732): avc: denied { ioctl } for pid=4306 comm="syz.1.214" path="socket:[8462]" dev="sockfs" ino=8462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.643515][ T28] audit: type=1400 audit(1778514467.000:733): avc: denied { bind } for pid=4306 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.905432][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.912547][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.954400][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.961596][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.984384][ T4289] EXT4-fs (loop4): 1 orphan inode deleted [ 101.054038][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.100067][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.125743][ T4331] Failed to initialize the IGMP autojoin socket (err -2) [ 103.829101][ T4361] loop2: detected capacity change from 0 to 512 [ 103.839638][ T4363] loop1: detected capacity change from 0 to 128 [ 103.867171][ T4361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.927372][ T4141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.001840][ T4361] EXT4-fs (loop2): 1 truncate cleaned up [ 104.031167][ T4361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.086112][ T28] audit: type=1400 audit(1778514470.750:734): avc: denied { write } for pid=4359 comm="syz.2.221" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.205648][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.435434][ T3445] ================================================================== [ 104.443562][ T3445] BUG: KCSAN: data-race in alloc_pid / copy_process [ 104.450165][ T3445] [ 104.452490][ T3445] read-write to 0xffffffff86c5c3a8 of 4 bytes by task 4394 on cpu 1: [ 104.460555][ T3445] alloc_pid+0x6ca/0x950 [ 104.464812][ T3445] copy_process+0x11a5/0x2370 [ 104.469494][ T3445] kernel_clone+0x1a5/0x5e0 [ 104.474004][ T3445] __se_sys_clone3+0x1f5/0x230 [ 104.478777][ T3445] __x64_sys_clone3+0x31/0x40 [ 104.483475][ T3445] x64_sys_call+0x580/0x3020 [ 104.488072][ T3445] do_syscall_64+0x12c/0x3b0 [ 104.492670][ T3445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.498568][ T3445] [ 104.500895][ T3445] read to 0xffffffff86c5c3a8 of 4 bytes by task 3445 on cpu 0: [ 104.508621][ T3445] copy_process+0x1af1/0x2370 [ 104.513393][ T3445] kernel_clone+0x1a5/0x5e0 [ 104.517898][ T3445] user_mode_thread+0x9c/0xd0 [ 104.522591][ T3445] call_usermodehelper_exec_work+0x7a/0x160 [ 104.528494][ T3445] process_scheduled_works+0x4f0/0x9c0 [ 104.533965][ T3445] worker_thread+0x58a/0x780 [ 104.538567][ T3445] kthread+0x22a/0x280 [ 104.542647][ T3445] ret_from_fork+0x146/0x330 [ 104.547257][ T3445] ret_from_fork_asm+0x1a/0x30 [ 104.552049][ T3445] [ 104.554463][ T3445] value changed: 0x800000e1 -> 0x800000e2 [ 104.560352][ T3445] [ 104.562678][ T3445] Reported by Kernel Concurrency Sanitizer on: [ 104.568833][ T3445] CPU: 0 UID: 0 PID: 3445 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.580035][ T3445] Tainted: [W]=WARN [ 104.583848][ T3445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.593920][ T3445] Workqueue: events_unbound call_usermodehelper_exec_work [ 104.601187][ T3445] ================================================================== [ 104.763201][ T4400] netlink: 'syz.4.233': attribute type 27 has an invalid length. [ 104.763826][ T4400] netlink: 164 bytes leftover after parsing attributes in process `syz.4.233'. [ 104.797338][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 105.272317][ T4381] loop0: detected capacity change from 0 to 512 [ 105.306966][ T4381] EXT4-fs: Ignoring removed i_version option [ 105.309534][ T4141] veth0_vlan: entered promiscuous mode [ 105.338319][ T4381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.352910][ T4141] veth1_vlan: entered promiscuous mode [ 105.359040][ T4381] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.229: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 105.388530][ T4381] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.389916][ T4381] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.229: ea_inode dec ref err=-117 [ 105.399370][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 105.399420][ C0] EXT4-fs (loop0): initial error at time 1778514472: ext4_xattr_inode_update_ref:1037: inode 11 [ 105.399566][ C0] EXT4-fs (loop0): last error at time 1778514472: ext4_xattr_inode_update_ref:1037: inode 11 [ 105.406041][ T4141] veth0_macvtap: entered promiscuous mode [ 105.414683][ T4381] EXT4-fs (loop0): 1 orphan inode deleted [ 105.457403][ T4141] veth1_macvtap: entered promiscuous mode [ 105.459407][ T4381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.519081][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.542375][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.559663][ T4141] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.581337][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.590680][ T4141] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 105.591743][ T28] audit: type=1400 audit(1778514472.260:735): avc: denied { write } for pid=4407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.618220][ T4141] wireguard: wg0: Could not create IPv4 socket [ 105.670901][ T4141] wireguard: wg1: Could not create IPv4 socket [ 105.682092][ T28] audit: type=1400 audit(1778514472.350:736): avc: denied { write } for pid=4419 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.685536][ T4141] wireguard: wg2: Could not create IPv4 socket [ 105.726061][ T28] audit: type=1400 audit(1778514472.390:737): avc: denied { mounton } for pid=4141 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 105.828071][ T28] audit: type=1400 audit(1778514472.500:738): avc: denied { write } for pid=4423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.875207][ T28] audit: type=1400 audit(1778514472.500:739): avc: denied { write } for pid=4434 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.951018][ T28] audit: type=1400 audit(1778514472.620:740): avc: denied { write } for pid=4437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.997645][ T28] audit: type=1400 audit(1778514472.620:741): avc: denied { write } for pid=4448 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.072541][ T28] audit: type=1400 audit(1778514472.740:742): avc: denied { write } for pid=4451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.109758][ T28] audit: type=1400 audit(1778514472.740:743): avc: denied { write } for pid=4462 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.193169][ T28] audit: type=1400 audit(1778514472.860:744): avc: denied { write } for pid=4465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.239383][ T28] audit: type=1400 audit(1778514472.860:745): avc: denied { write } for pid=4476 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.719641][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 110.719702][ T28] audit: type=1400 audit(1778514477.390:840): avc: denied { write } for pid=5139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.749009][ T28] audit: type=1400 audit(1778514477.410:841): avc: denied { write } for pid=5150 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.823466][ T28] audit: type=1400 audit(1778514477.490:842): avc: denied { write } for pid=5153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.846582][ T28] audit: type=1400 audit(1778514477.510:843): avc: denied { write } for pid=5164 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.925700][ T28] audit: type=1400 audit(1778514477.590:844): avc: denied { write } for pid=5167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.948989][ T28] audit: type=1400 audit(1778514477.590:845): avc: denied { write } for pid=5178 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.029144][ T28] audit: type=1400 audit(1778514477.700:846): avc: denied { write } for pid=5181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.052244][ T28] audit: type=1400 audit(1778514477.700:847): avc: denied { write } for pid=5192 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.128414][ T28] audit: type=1400 audit(1778514477.800:848): avc: denied { write } for pid=5195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.151720][ T28] audit: type=1400 audit(1778514477.820:849): avc: denied { write } for pid=5206 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1