last executing test programs: 58.644507088s ago: executing program 2 (id=2824): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x82, 0x499, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000080)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x8, 0x36c, &(0x7f00000023c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 58.554179322s ago: executing program 2 (id=2828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183000, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988a8", 0xe}, {&(0x7f0000000000)="f40c38d8", 0x4}], 0x2) 58.443104738s ago: executing program 2 (id=2831): epoll_create(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4004000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x104, 0x464, 0x800, 0x70bd2d, 0x25dfdbfd, "bc5efe9ba007ee027a4ab7bdfb24ff51ee5563f876dfba851952ee2a37f7fb937cf42dc55eb0872814eb602b12cd29832e2b1b0dd716b4afbfb3ef643f6524f33e6fe9987c238822af32b335125b96929d14af17da64f0ad0c0d41b41e91801b247c45095d2f7ea02290ea7012d042a5151f4979a96b59cbb6bd3654df3fa768042907c4d2c7a84b5e9e0541b859974a8820451d88f3d7272a7a16136de0957eb215ba8085b1b03d7de5256322253b6dcf2c50562e29eada317b6212546164462743fe7c2b4b7627156bc3d9c07ac3634e210cecafb7ccc465ce5fba2a7b47e4b4b00994ffb08929ace340e9ef1cbbc45ee636", ["", "", "", ""]}, 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2e, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmmsg$unix(r3, 0x0, 0x0, 0x4008890) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0x40001) listen(0xffffffffffffffff, 0xfde) 55.284652924s ago: executing program 2 (id=2859): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@tz_utc}, {@uni_xlate}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@flush}, {@shortname_win95}, {@shortname_win95}, {@shortname_lower}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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") socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 55.111248873s ago: executing program 2 (id=2865): socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x4, r0}, 0x10) 53.361574145s ago: executing program 2 (id=2875): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 53.322258657s ago: executing program 32 (id=2875): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 7.449920179s ago: executing program 4 (id=3479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000080)={'bridge_slave_1\x00'}) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) 6.182239575s ago: executing program 4 (id=3489): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/23, 0x17}, 0x7ffbc}], 0x1, 0xa2588f46f36f6ab5, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x80}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2400c004) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) 5.742722078s ago: executing program 1 (id=3493): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000000000000000}}, './file0\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0xa4b6, 0x1, 0xc}, 0xb, 0x4, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.688301161s ago: executing program 4 (id=3494): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.627263364s ago: executing program 1 (id=3496): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mlock(&(0x7f0000416000/0x1000)=nil, 0x1000) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x3a008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x102801, 0xb, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 5.626037324s ago: executing program 5 (id=3497): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8002c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x6, 0x31, 0x0) open$dir(0x0, 0x0, 0x28) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) eventfd(0x80000000) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2810008, &(0x7f0000000080), 0xff, 0x548, &(0x7f0000001300)="$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") 5.288481241s ago: executing program 5 (id=3498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1000000f, 0x1, 0xa251, 0x36}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.040045665s ago: executing program 5 (id=3499): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpgid(r0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.988981687s ago: executing program 1 (id=3500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_emit_ethernet(0x43, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xd, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xd, 0x0, @opaque="0300000070"}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback=r1, r0, 0x38, 0x2010, r1, @value=r3}, 0x20) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) socket$kcm(0xa, 0x922000000003, 0x11) 4.785466188s ago: executing program 0 (id=3504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0x2000000c}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc6c8e46fe", 0x14, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 4.772436448s ago: executing program 3 (id=3505): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x120) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, r4, 0x0, 0x3, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3d}, 0x60) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000000, 0x1, 0xfffffffffffffffd, 0x2, 0x1000007c, 0x1, 0x7}, 0x0, &(0x7f0000000040)={0x3fd, 0xfffffffffffffffe, 0x1f, 0x9, 0x0, 0x0, 0xbb}, 0x0, 0x0) close(r1) 4.74733324s ago: executing program 0 (id=3506): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000008680)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000c5f000/0x1000)=nil, 0x1000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xb0ec4000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 4.596475248s ago: executing program 0 (id=3507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.595887138s ago: executing program 3 (id=3508): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) 4.484717544s ago: executing program 3 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010025bd700000000000fc020000000000000000000000000000ff0100"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000180)={0x8, 0xff, 0x2, 0x8000, 0x10, "85bdcce51daec012"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001140)={0x8, 0x4e22, @private=0xa010100}, 0x10, 0x0}, 0x48d0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 4.124935913s ago: executing program 1 (id=3510): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x400, 0x32, 0xffff5cef, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x20009a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xcfc, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000003, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x6, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x8, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x1000009, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x100003, 0x2, 0x204, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x2de9, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x2, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x7, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0xff, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xb, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x10000f, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x80000003, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x9, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) 3.596716311s ago: executing program 0 (id=3511): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_pidfd_open(r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timer_settime(0x0, 0x0, &(0x7f0000000b80)={{}, {0x77359400}}, &(0x7f0000000bc0)) r2 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0xffc}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x24000000) close(r2) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 3.438370389s ago: executing program 3 (id=3512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70ad27, 0x80, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0x7, 0x6362, 0x5, 0xf7fffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x9, 0x8, 0x802, 0x7fffffffffffffff, 0x8826}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000814) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.643451811s ago: executing program 5 (id=3513): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2, 0x20010, r1, 0x8a000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401c, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b5c, 0xa902, 0x16, 0x0, 0x0) 2.643126231s ago: executing program 3 (id=3514): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) 2.642863321s ago: executing program 4 (id=3515): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) sendto$inet6(r3, 0x0, 0x0, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.560529546s ago: executing program 0 (id=3516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) write$binfmt_aout(r6, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000180)=r9, 0x12) sendto$inet6(r6, 0x0, 0x0, 0x8040, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.055430452s ago: executing program 1 (id=3517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.878063811s ago: executing program 1 (id=3518): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2ca, &(0x7f0000001440)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 1.824524134s ago: executing program 4 (id=3519): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) 1.71291617s ago: executing program 5 (id=3520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1.053128374s ago: executing program 0 (id=3521): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r1 = socket$kcm(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_io_uring_setup(0x360, &(0x7f00000004c0)={0x0, 0x77d0, 0x1, 0x1, 0x2b6, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104d, &(0x7f0000000300)="$eJzszzEOAUEYBeA3LBsaF1E7gws4z8Z1HMkBlFqFxMhgo1KKSL6vmGTezPuTP/zUOvOkzyKT531Ill32r9dL+Vgsp3Zuu6yOY9RGzJJpKf07qOfNtY5aL7XmVofHh93hi6sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN+4BwAA//90WBYL") syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 990.620587ms ago: executing program 3 (id=3522): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4a8d4cd8c16fb444}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) capset(0x0, 0x0) listen(0xffffffffffffffff, 0xfff) listen(r5, 0x7) socket$nl_route(0x10, 0x3, 0x0) 706.876562ms ago: executing program 5 (id=3523): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) close(0x3) setns(r1, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010102660046084f080100fbf60102030109021200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 4 (id=3524): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r0 = socket(0x10, 0x2, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): .956579][ T7744] EXT4-fs (loop3): mount failed [ 261.094594][ T28] audit: type=1400 audit(2000000116.600:546): avc: denied { connect } for pid=7757 comm="syz.4.1563" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.542887][ T7733] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 261.552022][ T7733] loop2: lost filesystem error report for type 5 error -117 [ 261.552612][ T7733] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.1553: data will be lost [ 261.571122][ T7733] EXT4-fs (loop2): 1 truncate cleaned up [ 261.584129][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.309699][ T7772] loop3: detected capacity change from 0 to 2048 [ 262.320995][ T7776] tipc: Enabling of bearer rejected, failed to enable media [ 262.358024][ T7772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.444696][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.524055][ T7792] tipc: Started in network mode [ 262.544480][ T7792] tipc: Node identity , cluster identity 4711 [ 262.570330][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 262.657446][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.150596][ T7841] loop3: detected capacity change from 0 to 1024 [ 263.150970][ T7841] EXT4-fs: Ignoring removed bh option [ 263.151002][ T7841] EXT4-fs: inline encryption not supported [ 263.161427][ T7841] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.171552][ T7841] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1600: lblock 2 mapped to illegal pblock 2 (length 1) [ 263.171670][ T7841] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.172102][ T7841] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 263.172140][ T7841] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.1600: Invalid inode table block 1 in block_group 0 [ 263.172168][ T7841] loop3: lost filesystem error report for type 5 error -117 [ 263.174291][ T7841] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 263.174312][ T7841] loop3: lost filesystem error report for type 5 error -117 [ 263.174821][ T7841] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.1600: mark_inode_dirty error [ 263.174921][ T7841] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.175122][ T7841] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 263.175143][ T7841] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1600: Failed to acquire dquot type 0 [ 263.175165][ T7841] loop3: lost filesystem error report for type 5 error -117 [ 263.175513][ T7841] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 263.175619][ T7841] loop3: lost filesystem error report for type 5 error -117 [ 263.176264][ T7841] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.1600: mark_inode_dirty error [ 263.176339][ T7841] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.176897][ T7841] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 263.176955][ T7841] EXT4-fs (loop3): 1 orphan inode deleted [ 263.177435][ T7841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.539413][ T7852] loop2: detected capacity change from 0 to 512 [ 263.555069][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.576768][ T7852] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.605319][ T28] audit: type=1400 audit(2000000118.949:547): avc: denied { append } for pid=7851 comm="syz.2.1604" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.657196][ T12] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.673818][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 263.688704][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 263.714034][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.725392][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.741027][ T3325] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 263.758061][ T3325] loop3: lost filesystem error report for type 5 error -117 [ 263.759478][ T3325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 263.777740][ T3325] loop3: lost filesystem error report for type 5 error -117 [ 263.777901][ T3325] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 263.812322][ T3325] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 263.908132][ T7875] xt_hashlimit: size too large, truncated to 1048576 [ 263.980855][ T28] audit: type=1400 audit(2000000119.295:548): avc: denied { connect } for pid=7883 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.147444][ T7887] loop2: detected capacity change from 0 to 512 [ 264.314946][ T7887] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 264.329838][ T7887] EXT4-fs (loop2): mount failed [ 265.269448][ T28] audit: type=1400 audit(2000000120.418:549): avc: denied { write } for pid=7919 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.118143][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.156087][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.182269][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.207050][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.234749][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.248332][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.265271][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.291988][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.305944][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.346531][ T7928] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 266.464521][ T7943] loop3: detected capacity change from 0 to 512 [ 266.487426][ T7943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.530648][ T7943] EXT4-fs (loop3): 1 truncate cleaned up [ 266.544651][ T7943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.070245][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.172673][ T28] audit: type=1400 audit(2000000122.290:550): avc: denied { bind } for pid=7952 comm="syz.1.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.247090][ T28] audit: type=1400 audit(2000000122.290:551): avc: denied { name_bind } for pid=7952 comm="syz.1.1648" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 267.329930][ T28] audit: type=1400 audit(2000000122.290:552): avc: denied { node_bind } for pid=7952 comm="syz.1.1648" saddr=::6000:0:0:0 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 267.434586][ T28] audit: type=1400 audit(2000000122.533:553): avc: denied { shutdown } for pid=7976 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.456172][ T28] audit: type=1400 audit(2000000122.533:554): avc: denied { connect } for pid=7976 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.484809][ T7979] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1659'. [ 267.573881][ T7972] loop2: detected capacity change from 0 to 512 [ 267.601780][ T7972] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 267.635685][ T7972] EXT4-fs (loop2): 1 truncate cleaned up [ 267.655098][ T7972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.708049][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.908084][ T8001] loop3: detected capacity change from 0 to 256 [ 268.551475][ T8009] loop2: detected capacity change from 0 to 512 [ 268.640265][ T8009] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 268.658753][ T8009] EXT4-fs (loop2): mount failed [ 269.412374][ T8027] tipc: Started in network mode [ 269.420778][ T8027] tipc: Node identity ac14140f, cluster identity 4711 [ 269.428082][ T8027] tipc: New replicast peer: 255.255.255.255 [ 269.434586][ T8027] tipc: Enabled bearer , priority 10 [ 269.652239][ T8048] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1687'. [ 270.445986][ T8053] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 270.510006][ T35] tipc: Node number set to 2886997007 [ 270.567046][ T8053] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 270.602838][ T8062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.674920][ T8053] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.684530][ T8073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.691383][ T8053] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 270.778930][ T8086] syz.1.1701 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 270.976313][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 271.023972][ T28] audit: type=1400 audit(2000000125.883:555): avc: denied { read } for pid=8088 comm="syz.3.1704" path="socket:[17271]" dev="sockfs" ino=17271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.453458][ T8102] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1707'. [ 272.663549][ T8118] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1711'. [ 272.755668][ T28] audit: type=1400 audit(2000000127.502:556): avc: denied { execute } for pid=8127 comm="syz.1.1718" name="file1" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.799626][ T28] audit: type=1400 audit(2000000127.502:557): avc: denied { execute_no_trans } for pid=8127 comm="syz.1.1718" path="/406/file1" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.133396][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.144179][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.015174][ T8147] loop3: detected capacity change from 0 to 4096 [ 274.024924][ T8164] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1731'. [ 274.035488][ T8147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.048481][ T8147] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 274.185813][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.118571][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 275.241438][ T8183] loop2: detected capacity change from 0 to 512 [ 275.282101][ T8183] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 275.334717][ T8183] EXT4-fs (loop2): 1 truncate cleaned up [ 275.358471][ T8183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.541937][ T8208] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1750'. [ 275.552456][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.729583][ T8211] loop2: detected capacity change from 0 to 512 [ 275.785683][ T8211] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 275.881648][ T8211] EXT4-fs (loop2): 1 truncate cleaned up [ 275.904009][ T8211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.178170][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.192702][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.716168][ T8246] loop2: detected capacity change from 0 to 512 [ 278.917244][ T8246] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 278.948260][ T8246] EXT4-fs (loop2): mount failed [ 279.139084][ T8272] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1769'. [ 280.089371][ T28] audit: type=1400 audit(2000000134.380:558): avc: denied { shutdown } for pid=8297 comm="syz.3.1778" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.405683][ T8329] loop2: detected capacity change from 0 to 128 [ 280.575630][ T8332] loop3: detected capacity change from 0 to 512 [ 280.670241][ T8332] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 280.688064][ T8332] EXT4-fs (loop3): mount failed [ 281.649182][ T8356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.420879][ T8406] loop3: detected capacity change from 0 to 2048 [ 282.445610][ T8406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.921959][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.664178][ T28] audit: type=1400 audit(2000000138.657:559): avc: denied { watch watch_reads } for pid=8424 comm="syz.3.1827" path="/324" dev="tmpfs" ino=1713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.104397][ T8454] loop2: detected capacity change from 0 to 512 [ 286.285714][ T8454] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 286.300580][ T8454] EXT4-fs (loop2): mount failed [ 286.313028][ T8458] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 286.342396][ T28] audit: type=1400 audit(2000000140.201:560): avc: denied { ioctl } for pid=8456 comm="syz.1.1840" path="socket:[18706]" dev="sockfs" ino=18706 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.112424][ T28] audit: type=1400 audit(2000000140.950:561): avc: denied { bind } for pid=8469 comm="syz.4.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.419743][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1855'. [ 287.458702][ T8497] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 287.827359][ T8511] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.1864' resets device [ 287.950538][ T8528] pimreg: tun_chr_ioctl cmd 1074025677 [ 288.067715][ T8528] pimreg: linktype set to 6 [ 288.307890][ T8537] loop3: detected capacity change from 0 to 512 [ 288.366436][ T8537] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.384222][ T8537] EXT4-fs (loop3): mount failed [ 289.371339][ T8577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1892'. [ 289.675255][ T8586] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1896'. [ 289.931503][ T28] audit: type=1400 audit(2000000143.589:562): avc: denied { block_suspend } for pid=8600 comm="syz.1.1903" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 289.988585][ T28] audit: type=1400 audit(2000000143.635:563): avc: denied { mount } for pid=8602 comm="syz.4.1904" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 290.035683][ T28] audit: type=1400 audit(2000000143.682:564): avc: denied { read } for pid=8605 comm="syz.3.1905" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.059541][ T28] audit: type=1400 audit(2000000143.682:565): avc: denied { open } for pid=8605 comm="syz.3.1905" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.085617][ T28] audit: type=1400 audit(2000000143.682:566): avc: denied { ioctl } for pid=8605 comm="syz.3.1905" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.222318][ T8614] loop2: detected capacity change from 0 to 512 [ 290.260465][ T8614] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 290.294749][ T8614] EXT4-fs (loop2): 1 truncate cleaned up [ 290.309638][ T8614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.383614][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.782286][ T8683] loop3: detected capacity change from 0 to 512 [ 291.797987][ T8683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.828624][ T8683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 291.867993][ T8683] System zones: 1-12 [ 291.884037][ T8683] EXT4-fs (loop3): 1 truncate cleaned up [ 291.904628][ T8683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.969971][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.033261][ T8712] program syz.3.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.079918][ T8717] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1951'. [ 292.206669][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 293.246295][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 293.514771][ T8786] pimreg: entered allmulticast mode [ 293.523939][ T28] audit: type=1326 audit(2000000146.948:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95bab2cdd9 code=0x7ffc0000 [ 293.548086][ T28] audit: type=1326 audit(2000000146.948:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f95bab2cdd9 code=0x7ffc0000 [ 293.555491][ T8786] pimreg: left allmulticast mode [ 293.572756][ T28] audit: type=1326 audit(2000000146.948:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95bab2cdd9 code=0x7ffc0000 [ 293.600040][ T28] audit: type=1326 audit(2000000146.967:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8787 comm="syz.3.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95bab2cdd9 code=0x7ffc0000 [ 294.449767][ T8804] loop3: detected capacity change from 0 to 512 [ 294.483796][ T8804] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 294.511536][ T28] audit: type=1400 audit(2000000147.874:571): avc: denied { mount } for pid=8817 comm="syz.4.1998" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 294.549342][ T8804] EXT4-fs (loop3): 1 truncate cleaned up [ 294.569567][ T8804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.610838][ T8825] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 294.663850][ T8831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2003'. [ 294.698771][ T8833] bond_slave_0: entered allmulticast mode [ 294.732512][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.754388][ T28] audit: type=1400 audit(2000000148.099:572): avc: denied { name_bind } for pid=8839 comm="syz.2.2010" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 295.314577][ T28] audit: type=1400 audit(2000000148.623:573): avc: denied { ioctl } for pid=8900 comm="syz.0.2036" path="socket:[20109]" dev="sockfs" ino=20109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.340426][ T8901] netlink: 'syz.0.2036': attribute type 9 has an invalid length. [ 295.349350][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 295.367943][ T8901] macvlan3: entered promiscuous mode [ 295.384066][ T8901] hsr0: entered promiscuous mode [ 295.396407][ T8901] macvlan3: entered allmulticast mode [ 295.406183][ T8901] hsr0: entered allmulticast mode [ 295.413152][ T8901] hsr_slave_0: entered allmulticast mode [ 295.423586][ T8901] hsr_slave_1: entered allmulticast mode [ 295.435194][ T8897] loop3: detected capacity change from 0 to 8192 [ 295.627201][ T8927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 295.633790][ T8927] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.675909][ T8927] vhci_hcd vhci_hcd.0: Device attached [ 295.682931][ T8928] vhci_hcd: connection closed [ 295.683097][ T30] vhci_hcd vhci_hcd.3: stop threads [ 295.700298][ T30] vhci_hcd vhci_hcd.3: release socket [ 295.712348][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 295.918239][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 295.985998][ T28] audit: type=1400 audit(2000000149.259:574): avc: denied { create } for pid=8946 comm="syz.0.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 295.986802][ T8947] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 296.027347][ T8947] team0: Device wg1 is of different type [ 296.056960][ T8949] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2055'. [ 296.198697][ T8958] netlink: 'syz.4.2059': attribute type 2 has an invalid length. [ 296.218617][ T8958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2059'. [ 296.514905][ T8967] loop3: detected capacity change from 0 to 512 [ 296.561572][ T8967] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.639558][ T8967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.749351][ T8967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.795107][ T8967] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.047174][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.271640][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'. [ 297.293338][ T8993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.300755][ T8993] IPv6: NLM_F_CREATE should be set when creating new route [ 297.315018][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'. [ 297.353666][ T8993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.379027][ T8997] loop2: detected capacity change from 0 to 512 [ 297.446657][ T8997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.515183][ T8997] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.628616][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.951896][ T9020] loop2: detected capacity change from 0 to 512 [ 297.989592][ T9020] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 298.004589][ T9020] EXT4-fs (loop2): mount failed [ 298.045302][ T9012] loop3: detected capacity change from 0 to 512 [ 298.253303][ T9012] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 298.495397][ T9012] EXT4-fs (loop3): 1 truncate cleaned up [ 298.611824][ T9012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.168866][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.305579][ T9053] xt_hashlimit: size too large, truncated to 1048576 [ 299.383943][ T9060] –: renamed from vxcan1 (while UP) [ 299.621473][ T9064] loop3: detected capacity change from 0 to 512 [ 299.750761][ T9064] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 300.037462][ T9064] EXT4-fs (loop3): 1 truncate cleaned up [ 300.143952][ T9064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.162037][ T9080] veth1_to_bond: entered allmulticast mode [ 300.187730][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 300.302523][ T9080] veth1_to_bond (unregistering): left allmulticast mode [ 300.396124][ T9080] bond0: (slave bond_slave_1): Releasing backup interface [ 300.534199][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.682892][ T28] audit: type=1400 audit(2000000153.648:575): avc: denied { mounton } for pid=9088 comm="syz.4.2107" path="/388/bus" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.526516][ T9104] loop2: detected capacity change from 0 to 512 [ 301.585635][ T9104] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 301.600390][ T9104] EXT4-fs (loop2): mount failed [ 302.083590][ T28] audit: type=1400 audit(2000000154.958:576): avc: denied { create } for pid=9124 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 302.212770][ T28] audit: type=1400 audit(2000000155.052:577): avc: denied { read } for pid=9135 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.379425][ T9148] infiniband óyz1: RDMA CMA: cma_listen_on_dev, error -98 [ 302.447060][ T28] audit: type=1400 audit(2000000155.295:578): avc: denied { read } for pid=9151 comm="syz.0.2133" laddr=172.20.20.170 lport=62843 faddr=172.20.20.170 fport=20008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.027749][ T9169] loop2: detected capacity change from 0 to 1024 [ 303.034741][ T9169] EXT4-fs: Ignoring removed orlov option [ 303.052025][ T9169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.071565][ T9169] EXT4-fs error (device loop2): __ext4_new_inode:1285: comm syz.2.2142: failed to insert inode 12: doubly allocated? [ 303.084824][ T28] audit: type=1400 audit(2000000155.885:579): avc: denied { unlink } for pid=9168 comm="syz.2.2142" name="bus" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.116909][ T28] audit: type=1400 audit(2000000155.885:580): avc: denied { connect } for pid=9172 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.143369][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.443295][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2158'. [ 303.536059][ T9210] loop3: detected capacity change from 0 to 512 [ 303.608381][ T9210] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 303.623246][ T9210] EXT4-fs (loop3): mount failed [ 303.781508][ T9200] loop2: detected capacity change from 0 to 512 [ 303.802998][ T28] audit: type=1400 audit(2000000156.559:581): avc: denied { bind } for pid=9215 comm="syz.1.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.884052][ T9200] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 304.011244][ T9200] EXT4-fs (loop2): 1 truncate cleaned up [ 304.504021][ T9200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.608435][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.654502][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.673465][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.742726][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 307.250602][ T9271] IPVS: persistence engine module ip_vs_pe_€ not found [ 309.581260][ T9290] loop3: detected capacity change from 0 to 512 [ 310.458175][ T9290] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 310.473089][ T9290] EXT4-fs (loop3): mount failed [ 310.594060][ T9298] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 311.269249][ T9318] loop2: detected capacity change from 0 to 1024 [ 311.293576][ T9318] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 311.322036][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 311.348946][ T9318] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2198'. [ 311.374021][ T9318] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2198'. [ 311.383127][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 311.453137][ T9330] loop3: detected capacity change from 0 to 512 [ 311.486025][ T9330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.520185][ T9330] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.553529][ T28] audit: type=1400 audit(2000000163.820:582): avc: denied { bind } for pid=9344 comm="syz.4.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.604449][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.693679][ T9358] netlink: 'syz.0.2215': attribute type 21 has an invalid length. [ 311.800053][ T9367] pim6reg: entered allmulticast mode [ 311.988373][ T9382] loop2: detected capacity change from 0 to 512 [ 313.226071][ T9382] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 313.243439][ T9382] EXT4-fs (loop2): mount failed [ 315.459252][ T28] audit: type=1400 audit(2000000167.470:583): avc: denied { read } for pid=9410 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.645707][ T9404] loop3: detected capacity change from 0 to 512 [ 315.689938][ T9404] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 315.722441][ T9404] EXT4-fs (loop3): 1 truncate cleaned up [ 315.750497][ T9404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.755131][ T28] audit: type=1326 audit(2000000167.751:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.2248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd6d8cdd9 code=0x0 [ 315.854488][ T28] audit: type=1326 audit(2000000167.844:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 315.922959][ T28] audit: type=1326 audit(2000000167.872:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 315.972429][ T28] audit: type=1326 audit(2000000167.872:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 315.999656][ T28] audit: type=1326 audit(2000000167.872:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 316.006943][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.024630][ T28] audit: type=1326 audit(2000000167.872:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 316.056111][ T28] audit: type=1326 audit(2000000167.872:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 316.081683][ T28] audit: type=1326 audit(2000000167.872:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9438 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017da4cdd9 code=0x7ffc0000 [ 316.117035][ T9446] veth0_vlan: entered allmulticast mode [ 316.127756][ T9445] veth0_vlan: left allmulticast mode [ 316.723338][ T9467] 9p: Unknown access argument 18446744073709551615: -34 [ 317.195083][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 317.195102][ T28] audit: type=1400 audit(2000000169.098:597): avc: denied { mounton } for pid=9473 comm="syz.1.2263" path="/526/file0" dev="tmpfs" ino=2699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 317.279010][ T9485] loop2: detected capacity change from 0 to 128 [ 317.512512][ T9509] loop2: detected capacity change from 0 to 1024 [ 317.541617][ T9509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.564342][ T28] audit: type=1400 audit(2000000169.445:598): avc: denied { watch watch_reads } for pid=9508 comm="syz.2.2278" path="/434/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.620122][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.727443][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.737022][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.745325][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.753073][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.760574][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.768359][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.775956][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.783477][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.791226][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.799434][ T9529] loop2: detected capacity change from 0 to 512 [ 317.813286][ T10] hid-generic 0000:0000:000E.0002: unknown main item tag 0x0 [ 317.823602][ T9529] EXT4-fs: inline encryption not supported [ 317.858974][ T9529] EXT4-fs: inline encryption not supported [ 317.874074][ T10] hid-generic 0000:0000:000E.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 317.897999][ T9529] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.927925][ T9529] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 317.979829][ T9529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2286: bg 0: block 248: padding at end of block bitmap is not set [ 317.994992][ T9529] loop2: lost filesystem error report for type 5 error -117 [ 318.009370][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 318.023193][ C1] EXT4-fs (loop2): last error at time 2000000169: ext4_validate_block_bitmap:441 [ 318.061456][ T9529] Quota error (device loop2): write_blk: dquota write failed [ 318.078896][ T9543] loop3: detected capacity change from 0 to 512 [ 318.116811][ T9529] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 318.172268][ T9543] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 318.187356][ T9543] EXT4-fs (loop3): mount failed [ 318.232910][ T9529] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2286: Failed to acquire dquot type 1 [ 318.356420][ T9529] loop2: lost filesystem error report for type 5 error -28 [ 318.358053][ T9529] EXT4-fs (loop2): 1 truncate cleaned up [ 318.462645][ T9529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 318.937241][ T9529] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 319.147106][ T9569] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2299'. [ 319.836794][ T28] audit: type=1400 audit(2000000171.569:599): avc: denied { bind } for pid=9574 comm="syz.4.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.261190][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 320.871394][ T9529] syz.2.2286 (9529) used greatest stack depth: 7992 bytes left [ 321.046131][ T9584] loop3: detected capacity change from 0 to 512 [ 321.111606][ T9584] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 2: comm syz.3.2305: lblock 9 mapped to illegal pblock 2 (length 1) [ 321.180893][ T9584] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 321.181260][ T9584] ------------[ cut here ]------------ [ 321.190456][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 321.190480][ C0] EXT4-fs (loop3): initial error at time 2000000172: ext4_map_blocks:791: inode 11: block 2 [ 321.190546][ C0] EXT4-fs (loop3): last error at time 2000000172: ext4_map_blocks:791: inode 11: block 2 [ 321.222587][ T9584] EA inode 11 i_nlink=2 [ 321.222618][ T9584] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.2305/9584 [ 321.237640][ T9584] Modules linked in: [ 321.241733][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.3.2305 Not tainted syzkaller #0 PREEMPT(full) [ 321.251083][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.261289][ T9584] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 321.267911][ T9584] Code: 64 60 98 ff 4c 8d 2d 1d a5 7c 05 49 8d 7e 40 e8 14 1f b6 ff 49 8b 6e 40 4c 89 e7 e8 48 1a b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf 01 de 03 66 66 66 66 66 66 2e [ 321.287592][ T9584] RSP: 0018:ffffc90001e9f778 EFLAGS: 00010246 [ 321.293744][ T9584] RAX: ffff888103efacf8 RBX: ffff8881079ceab8 RCX: ffffffff81c0e588 [ 321.301793][ T9584] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff873d8a90 [ 321.309962][ T9584] RBP: 000000000000000b R08: 00018881079cea6b R09: 0000000000000000 [ 321.318131][ T9584] R10: ffffc90001e9f6a8 R11: 0001c90001e9f6a8 R12: ffff8881079cea68 [ 321.326274][ T9584] R13: ffffffff873d8a90 R14: ffff8881079cea20 R15: 0000000000000001 [ 321.334336][ T9584] FS: 00007f95b957f6c0(0000) GS:ffff8882ae6c9000(0000) knlGS:0000000000000000 [ 321.343376][ T9584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.350045][ T9584] CR2: 00007f58712d5000 CR3: 000000012f428000 CR4: 00000000003506f0 [ 321.358125][ T9584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.366160][ T9584] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 321.374286][ T9584] Call Trace: [ 321.377624][ T9584] [ 321.380598][ T9584] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 321.386600][ T9584] ? errseq_check+0x2c/0x50 [ 321.391315][ T9584] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 321.396902][ T9584] ? ext4_truncate+0x89f/0xa10 [ 321.401707][ T9584] ext4_evict_inode+0xb16/0xe30 [ 321.406660][ T9584] ? __pfx_ext4_evict_inode+0x10/0x10 [ 321.412186][ T9584] evict+0x2af/0x510 [ 321.416178][ T9584] ? __dquot_initialize+0x146/0x7c0 [ 321.421561][ T9584] iput+0x41a/0x580 [ 321.425481][ T9584] ext4_process_orphan+0x1a9/0x1c0 [ 321.430707][ T9584] ext4_orphan_cleanup+0x69c/0x9f0 [ 321.435880][ T9584] ext4_fill_super+0x3408/0x37c0 [ 321.440888][ T9584] ? set_blocksize+0x14c/0x270 [ 321.445712][ T9584] ? setup_bdev_super+0x30e/0x370 [ 321.450850][ T9584] ? __pfx_ext4_fill_super+0x10/0x10 [ 321.456211][ T9584] get_tree_bdev_flags+0x291/0x300 [ 321.461460][ T9584] ? __pfx_ext4_fill_super+0x10/0x10 [ 321.466821][ T9584] get_tree_bdev+0x1f/0x30 [ 321.471329][ T9584] ext4_get_tree+0x1c/0x30 [ 321.475808][ T9584] vfs_get_tree+0x57/0x1d0 [ 321.480344][ T9584] do_new_mount+0x288/0x8d0 [ 321.485172][ T9584] path_mount+0x4d0/0xbc0 [ 321.489609][ T9584] __se_sys_mount+0x28c/0x2e0 [ 321.494378][ T9584] ? restore_fpregs_from_fpstate+0x61/0x110 [ 321.500322][ T9584] __x64_sys_mount+0x67/0x80 [ 321.505056][ T9584] x64_sys_call+0x2d61/0x3020 [ 321.509960][ T9584] do_syscall_64+0x12c/0x3b0 [ 321.514645][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.520743][ T9584] RIP: 0033:0x7f95bab2e04a [ 321.525256][ T9584] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.544981][ T9584] RSP: 002b:00007f95b957ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.553478][ T9584] RAX: ffffffffffffffda RBX: 00007f95b957eee0 RCX: 00007f95bab2e04a [ 321.561547][ T9584] RDX: 0000200000000180 RSI: 0000200000000280 RDI: 00007f95b957eea0 [ 321.569580][ T9584] RBP: 0000200000000180 R08: 00007f95b957eee0 R09: 0000000000800718 [ 321.577591][ T9584] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000280 [ 321.585634][ T9584] R13: 00007f95b957eea0 R14: 00000000000004a4 R15: 0000200000001000 [ 321.593879][ T9584] [ 321.596942][ T9584] ---[ end trace 0000000000000000 ]--- [ 321.616997][ T9584] EXT4-fs (loop3): 1 orphan inode deleted [ 321.623379][ T9584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.822115][ T9591] loop2: detected capacity change from 0 to 512 [ 321.838674][ T9591] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 321.861366][ T9591] EXT4-fs (loop2): 1 truncate cleaned up [ 321.873788][ T9591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.880376][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.935740][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.002504][ T28] audit: type=1400 audit(2000000173.590:600): avc: denied { bind } for pid=9596 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.027400][ T28] audit: type=1400 audit(2000000173.600:601): avc: denied { ioctl } for pid=9597 comm="syz.1.2311" path="/533/file0" dev="tmpfs" ino=2735 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 322.153953][ T28] audit: type=1400 audit(2000000173.740:602): avc: denied { ioctl } for pid=9622 comm="syz.0.2322" path="socket:[21363]" dev="sockfs" ino=21363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.442518][ T9654] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2335'. [ 322.960453][ T9695] loop3: detected capacity change from 0 to 512 [ 322.971618][ T9695] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 323.004137][ T9695] EXT4-fs (loop3): 1 truncate cleaned up [ 323.010374][ T9695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.099082][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.390428][ T9728] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2367'. [ 323.447475][ T9726] loop3: detected capacity change from 0 to 512 [ 323.467261][ T9726] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 323.489585][ T9726] EXT4-fs (loop3): 1 truncate cleaned up [ 323.500134][ T9726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.875225][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.991225][ T28] audit: type=1400 audit(2000000175.452:603): avc: denied { read write } for pid=9750 comm="syz.2.2377" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.022053][ T28] audit: type=1400 audit(2000000175.490:604): avc: denied { open } for pid=9750 comm="syz.2.2377" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.037247][ T9742] loop3: detected capacity change from 0 to 512 [ 324.079769][ T9742] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 324.095978][ T28] audit: type=1400 audit(2000000175.490:605): avc: denied { ioctl } for pid=9750 comm="syz.2.2377" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.162351][ T9742] EXT4-fs (loop3): 1 truncate cleaned up [ 324.220809][ T9742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.240665][ T9762] 9pnet: p9_errstr2errno: server reported unknown error [ 324.348806][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.474703][ T9772] loop2: detected capacity change from 0 to 512 [ 324.528021][ T9772] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 324.546660][ T9772] EXT4-fs (loop2): mount failed [ 324.715270][ T9798] netlink: 'syz.3.2396': attribute type 1 has an invalid length. [ 324.727063][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2397'. [ 324.985929][ T9804] sctp: [Deprecated]: syz.3.2399 (pid 9804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.985929][ T9804] Use struct sctp_sack_info instead [ 325.447252][ T9827] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2406'. [ 326.555499][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 326.651048][ T9840] loop2: detected capacity change from 0 to 128 [ 326.766314][ T28] audit: type=1400 audit(2000000178.054:606): avc: denied { read } for pid=9837 comm="syz.3.2411" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.164612][ T9853] loop2: detected capacity change from 0 to 512 [ 327.173344][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 327.201705][ T9853] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 327.237706][ T9853] EXT4-fs (loop2): 1 truncate cleaned up [ 327.248224][ T9866] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2420'. [ 327.257987][ T9853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.386034][ T9872] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2423'. [ 327.407780][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.008197][ T9923] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2443'. [ 329.084287][ T28] audit: type=1400 audit(2000000180.225:607): avc: denied { watch watch_reads } for pid=9929 comm="syz.4.2446" path="/455/file0" dev="tmpfs" ino=2348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 329.212950][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'. [ 329.286838][ T9910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2437'. [ 329.862103][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 330.195760][ T28] audit: type=1400 audit(2000000181.264:608): avc: denied { listen } for pid=10006 comm="syz.0.2479" lport=34653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.206489][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 330.227382][ T28] audit: type=1400 audit(2000000181.264:609): avc: denied { accept } for pid=10006 comm="syz.0.2479" lport=34653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 330.248510][ T28] audit: type=1400 audit(2000000181.292:610): avc: denied { getopt } for pid=10006 comm="syz.0.2479" lport=34653 faddr=fc02:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 330.429233][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 330.955645][T10046] tipc: Enabled bearer , priority 10 [ 331.068982][ T28] audit: type=1400 audit(2000000182.087:611): avc: denied { mount } for pid=10063 comm="syz.4.2504" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 331.111931][T10067] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 331.157477][ T28] audit: type=1326 audit(2000000182.162:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.4.2507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f519ee3cdd9 code=0x0 [ 331.222794][T10074] syzkaller1: entered promiscuous mode [ 331.228514][T10074] syzkaller1: entered allmulticast mode [ 331.372949][ T28] audit: type=1400 audit(2000000182.368:613): avc: denied { write } for pid=10075 comm="syz.3.2509" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 331.464227][T10082] loop3: detected capacity change from 0 to 256 [ 331.480595][ T28] audit: type=1400 audit(2000000182.471:614): avc: denied { watch watch_reads } for pid=10081 comm="syz.3.2512" path="/455/file0/file0/file0" dev="loop3" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 331.602193][T10084] loop3: detected capacity change from 0 to 512 [ 331.651343][T10084] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 331.683639][T10084] EXT4-fs (loop3): 1 truncate cleaned up [ 331.697710][T10093] xt_hashlimit: size too large, truncated to 1048576 [ 331.698355][T10084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.765715][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.011292][T10117] loop3: detected capacity change from 0 to 512 [ 332.018832][ T3600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 332.025158][ T9972] Bluetooth: hci0: command 0x1003 tx timeout [ 332.054307][T10117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 332.064358][T10117] System zones: 0-2, 18-18, 34-34 [ 332.070635][T10117] EXT4-fs (loop3): 1 orphan inode deleted [ 332.084759][T10117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.097809][ T82] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 332.108018][ T82] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 332.121404][ T82] loop3: lost filesystem error report for type 5 error -117 [ 332.121521][T10117] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.143281][ T82] EXT4-fs (loop3): Remounting filesystem read-only [ 332.155592][T10117] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 332.157784][T10125] loop2: detected capacity change from 0 to 512 [ 332.166131][T10117] EXT4-fs: Cannot change quota options when quota turned on [ 332.201373][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.223938][T10125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 332.248886][T10125] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.299367][T10125] EXT4-fs (loop2): shut down requested (1) [ 332.305945][ T28] audit: type=1400 audit(2000000183.238:615): avc: denied { create } for pid=10124 comm="syz.2.2529" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 332.345478][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 332.389368][ T28] audit: type=1400 audit(2000000183.313:616): avc: denied { read } for pid=10147 comm="syz.2.2538" path="socket:[24339]" dev="sockfs" ino=24339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.449935][T10153] loop3: detected capacity change from 0 to 512 [ 332.472680][T10153] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 332.487081][T10153] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.2543: iget: bad i_size value: 12154757448730 [ 332.503083][T10153] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 332.503358][T10153] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2543: couldn't read orphan inode 13 (err -117) [ 332.512568][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 332.512609][ C0] EXT4-fs (loop3): initial error at time 2000000183: ext4_orphan_get:1397: inode 13 [ 332.512664][ C0] EXT4-fs (loop3): last error at time 2000000183: ext4_orphan_get:1397: inode 13 [ 332.549858][T10153] loop3: lost filesystem error report for type 5 error -117 [ 332.556548][T10153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.650699][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 332.692716][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.754507][T10182] loop3: detected capacity change from 0 to 1024 [ 332.777387][T10188] batadv_slave_1: entered promiscuous mode [ 332.788582][T10182] EXT4-fs: Ignoring removed bh option [ 332.795345][T10187] batadv_slave_1: left promiscuous mode [ 332.900383][T10192] loop2: detected capacity change from 0 to 512 [ 333.048036][T10192] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 333.064771][T10192] EXT4-fs (loop2): mount failed [ 333.081689][T10182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.198579][T10182] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.348595][T10182] EXT4-fs (loop3): shut down requested (1) [ 333.523956][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.431691][T10278] loop3: detected capacity change from 0 to 4096 [ 335.452312][T10278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.534961][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.769488][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 336.769507][ T28] audit: type=1400 audit(2000000187.421:619): avc: denied { listen } for pid=10338 comm="syz.4.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.050255][ T28] audit: type=1400 audit(2000000187.674:620): avc: denied { mounton } for pid=10333 comm="syz.2.2615" path="/proc/1137/task" dev="proc" ino=23313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 337.139642][T10340] loop2: detected capacity change from 0 to 32768 [ 337.225964][T10340] loop2: p1 p3 < > [ 337.471835][ T4478] udevd[4478]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 337.482309][ T9842] udevd[9842]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 337.789924][T10404] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2645'. [ 338.022138][T10424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2655'. [ 338.049757][T10426] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2656'. [ 338.811311][T10453] loop2: detected capacity change from 0 to 128 [ 338.824030][T10453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.850827][T10453] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.863998][ T28] audit: type=1400 audit(2000000189.377:621): avc: denied { read } for pid=10450 comm="syz.2.2666" path="/494/mnt/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.922036][T10453] support for the xor transformation has been removed. [ 338.945670][ T28] audit: type=1400 audit(2000000189.461:622): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 338.967170][ T3328] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.082821][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.362362][T10484] loop3: detected capacity change from 0 to 512 [ 340.376889][T10484] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.415960][T10484] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2678: iget: bad i_size value: 38620345925642 [ 340.451353][T10484] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 340.451543][T10484] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2678: couldn't read orphan inode 15 (err -117) [ 340.460886][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 340.460926][ C0] EXT4-fs (loop3): initial error at time 2000000190: ext4_orphan_get:1397: inode 15 [ 340.460958][ C0] EXT4-fs (loop3): last error at time 2000000190: ext4_orphan_get:1397: inode 15 [ 340.507950][T10484] loop3: lost filesystem error report for type 5 error -117 [ 340.508588][T10484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.534886][ T28] audit: type=1400 audit(2000000190.940:623): avc: denied { map } for pid=10483 comm="syz.3.2678" path="/481/bus/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 340.559395][T10484] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2678: bg 0: block 5: invalid block bitmap [ 340.591475][T10484] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 340.606843][T10484] EXT4-fs (loop3): This should not happen!! Data will be lost [ 340.606843][T10484] [ 340.627445][T10484] EXT4-fs (loop3): Total free blocks count 0 [ 340.647416][T10484] EXT4-fs (loop3): Free/Dirty block details [ 340.656334][T10484] EXT4-fs (loop3): free_blocks=0 [ 340.662339][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 340.671870][T10484] EXT4-fs (loop3): dirty_blocks=1 [ 340.677491][T10484] EXT4-fs (loop3): Block reservation details [ 340.683931][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 340.693199][T10484] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 340.699906][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 340.735903][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 340.748192][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.866308][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 341.475073][T10512] loop2: detected capacity change from 0 to 2048 [ 341.529326][T10512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.841147][T10521] loop3: detected capacity change from 0 to 512 [ 341.879043][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.897502][T10521] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 341.923383][T10521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 341.956298][T10521] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 341.989399][T10521] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 342.008752][T10521] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2691: Failed to acquire dquot type 1 [ 342.031033][T10521] loop3: lost filesystem error report for type 5 error -5 [ 342.031474][T10521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2691: bg 0: block 40: padding at end of block bitmap is not set [ 342.038703][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 342.038721][ C0] EXT4-fs (loop3): initial error at time 2000000192: ext4_acquire_dquot:7034 [ 342.038742][ C0] EXT4-fs (loop3): last error at time 2000000192: ext4_acquire_dquot:7034 [ 342.084472][T10521] loop3: lost filesystem error report for type 5 error -117 [ 342.084640][T10521] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 342.245380][T10521] loop3: lost filesystem error report for type 5 error -117 [ 342.245646][T10521] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.2691: data will be lost [ 342.271466][T10521] EXT4-fs (loop3): 1 truncate cleaned up [ 342.277947][T10521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.852251][T10540] loop2: detected capacity change from 0 to 512 [ 342.954710][T10540] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 342.972647][T10540] EXT4-fs (loop2): mount failed [ 343.028478][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.262638][ T28] audit: type=1400 audit(2000000193.495:624): avc: denied { execute } for pid=10553 comm="syz.3.2704" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.429494][T10560] loop3: detected capacity change from 0 to 512 [ 343.500972][T10560] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 343.518669][T10560] EXT4-fs (loop3): mount failed [ 343.788430][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 343.830501][T10584] netlink: 'syz.1.2716': attribute type 11 has an invalid length. [ 343.877784][ T82] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.886792][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 343.912452][ T82] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.938307][T10584] netlink: 'syz.1.2716': attribute type 11 has an invalid length. [ 343.965185][ T82] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.001094][ T82] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.249939][T10594] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2721'. [ 344.985612][ T3395] hid_parser_main: 7 callbacks suppressed [ 344.985705][ T3395] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 345.005673][ T3395] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.038387][T10622] loop2: detected capacity change from 0 to 512 [ 345.069927][T10622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.110967][T10622] EXT4-fs (loop2): 1 truncate cleaned up [ 345.128489][T10622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.228643][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.244628][T10635] xt_hashlimit: size too large, truncated to 1048576 [ 345.288178][ T28] audit: type=1400 audit(2000000195.385:625): avc: denied { write } for pid=10638 comm="syz.2.2734" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.590896][T10657] net_ratelimit: 12936 callbacks suppressed [ 345.590916][T10657] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.644666][T10660] loop3: detected capacity change from 0 to 128 [ 345.686882][ T28] audit: type=1400 audit(2000000195.759:626): avc: denied { remount } for pid=10659 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 345.736116][T10664] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2745'. [ 346.035023][T10680] loop7: detected capacity change from 0 to 7 [ 346.306941][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 346.676092][T10708] xfrm0 speed is unknown, defaulting to 1000 [ 346.716249][T10708] wg1 speed is unknown, defaulting to 1000 [ 346.781333][T10710] xfrm0 speed is unknown, defaulting to 1000 [ 346.791688][ T28] audit: type=1400 audit(2000000196.798:627): avc: denied { accept } for pid=10714 comm="syz.3.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 346.863344][T10710] wg1 speed is unknown, defaulting to 1000 [ 346.938474][T10723] loop3: detected capacity change from 0 to 512 [ 346.960106][T10723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.982899][T10723] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.037389][ T28] audit: type=1400 audit(2000000197.023:628): avc: denied { read write } for pid=10722 comm="syz.3.2765" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.093433][ T28] audit: type=1400 audit(2000000197.023:629): avc: denied { open } for pid=10722 comm="syz.3.2765" path="/507/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.107010][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.117056][ T28] audit: type=1400 audit(2000000197.060:630): avc: denied { create } for pid=10729 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 347.249849][T10748] xfrm0 speed is unknown, defaulting to 1000 [ 347.301837][T10748] wg1 speed is unknown, defaulting to 1000 [ 347.431516][T10766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2781'. [ 347.575324][T10779] xfrm0 speed is unknown, defaulting to 1000 [ 347.611374][T10779] wg1 speed is unknown, defaulting to 1000 [ 347.968422][T10790] xfrm0 speed is unknown, defaulting to 1000 [ 348.012963][T10790] wg1 speed is unknown, defaulting to 1000 [ 348.196934][T10795] xfrm0 speed is unknown, defaulting to 1000 [ 348.237280][T10795] wg1 speed is unknown, defaulting to 1000 [ 348.483486][T10801] xfrm0 speed is unknown, defaulting to 1000 [ 348.557584][T10801] wg1 speed is unknown, defaulting to 1000 [ 348.752013][T10819] xfrm0 speed is unknown, defaulting to 1000 [ 348.766280][T10821] bond0: (slave syz_tun): Releasing backup interface [ 348.781498][T10821] team0: Port device syz_tun added [ 348.811841][T10819] wg1 speed is unknown, defaulting to 1000 [ 348.891265][T10826] loop3: detected capacity change from 0 to 8192 [ 348.957687][T10829] syzkaller0: entered promiscuous mode [ 348.963335][T10829] syzkaller0: entered allmulticast mode [ 349.047939][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.057082][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.123379][T10833] kernel profiling enabled (shift: 2) [ 349.662344][T10690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.152073][T10872] loop2: detected capacity change from 0 to 512 [ 350.167241][T10872] EXT4-fs (loop2): 1 truncate cleaned up [ 350.175013][T10872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.190889][T10872] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.2824: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 350.234533][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.277852][T10886] syzkaller0: entered promiscuous mode [ 350.283498][T10886] syzkaller0: entered allmulticast mode [ 350.568040][T10908] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2837'. [ 351.876853][T10953] netlink: 'syz.4.2855': attribute type 4 has an invalid length. [ 351.896638][T10953] netlink: 'syz.4.2855': attribute type 4 has an invalid length. [ 353.438277][T10881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.541867][T10963] loop2: detected capacity change from 0 to 128 [ 353.559345][T10963] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 353.582262][T10963] tipc: Started in network mode [ 353.588738][T10963] tipc: Node identity 2d65642c73686f72002e, cluster identity 4711 [ 353.644004][ T3328] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 353.652235][ T3328] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 353.674464][T10974] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2864'. [ 354.689972][T10978] loop3: detected capacity change from 0 to 512 [ 354.698155][T10978] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.710773][T10978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.238188][T10978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.277509][T10978] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.291013][ T28] audit: type=1400 audit(2000000204.752:631): avc: denied { append } for pid=10975 comm="syz.3.2866" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.326844][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.341790][ T28] audit: type=1400 audit(2000000204.780:632): avc: denied { ioctl } for pid=10975 comm="syz.3.2866" path="/525/bus/file2" dev="loop3" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.404408][ T3890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.431983][T11001] netlink: 'syz.3.2872': attribute type 10 has an invalid length. [ 355.462795][T11001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.487339][T11001] team0: Port device netdevsim1 added [ 355.518442][ T3890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.605567][ T3890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.677044][ T3890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.748170][T11013] xfrm0 speed is unknown, defaulting to 1000 [ 355.776382][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 355.830609][ T28] audit: type=1400 audit(2000000205.258:633): avc: denied { watch watch_reads } for pid=11056 comm="syz.0.2890" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 355.912026][ T3890] bridge_slave_1: left allmulticast mode [ 355.919414][ T3890] bridge_slave_1: left promiscuous mode [ 355.929626][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.945697][ T3890] bridge_slave_0: left allmulticast mode [ 355.957146][ T3890] bridge_slave_0: left promiscuous mode [ 355.968142][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.186232][T11089] loop3: detected capacity change from 0 to 128 [ 356.206944][ T3890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.230870][ T3890] bond0 (unregistering): Released all slaves [ 356.256793][T11013] wg1 speed is unknown, defaulting to 1000 [ 356.266173][ T3046] 8021q: adding VLAN 0 to HW filter on device eth1 [ 356.293817][T11095] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2899'. [ 356.328313][ T3890] tipc: Left network mode [ 356.479970][ T3890] hsr_slave_0: left promiscuous mode [ 356.511670][ T3890] hsr_slave_1: left promiscuous mode [ 356.538375][ T3890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.586467][ T3890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.610247][ T3890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.638578][ T3890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.678006][ T3890] veth1_macvtap: left promiscuous mode [ 356.697966][ T3890] veth0_macvtap: left promiscuous mode [ 356.716399][ T3890] veth1_vlan: left promiscuous mode [ 356.735885][ T3890] veth0_vlan: left promiscuous mode [ 357.044104][ T3890] team0 (unregistering): Port device 72žÿ removed [ 357.059380][ T3890] team0 (unregistering): Port device team_slave_0 removed [ 357.143822][ T3046] 8021q: adding VLAN 0 to HW filter on device eth3 [ 357.176458][T11013] chnl_net:caif_netlink_parms(): no params data found [ 357.306749][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.314527][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.321964][T11013] bridge_slave_0: entered allmulticast mode [ 357.328771][T11013] bridge_slave_0: entered promiscuous mode [ 357.337203][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.354177][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.361747][T11013] bridge_slave_1: entered allmulticast mode [ 357.368484][T11013] bridge_slave_1: entered promiscuous mode [ 357.388503][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.400597][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.432385][T11013] team0: Port device team_slave_0 added [ 357.440671][T11013] team0: Port device team_slave_1 added [ 357.481272][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.495462][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.562202][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.588549][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.607774][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.668236][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.694498][ T3046] 8021q: adding VLAN 0 to HW filter on device eth2 [ 357.746375][T11013] hsr_slave_0: entered promiscuous mode [ 357.769277][T11013] hsr_slave_1: entered promiscuous mode [ 357.780289][T11013] debugfs: 'hsr0' already exists in 'hsr' [ 357.789093][T11013] Cannot create hsr debugfs directory [ 357.803123][ T3890] IPVS: stop unused estimator thread 0... [ 357.958235][T11013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.975808][T11013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.992347][T11013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.011142][T11013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.023982][T11013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.044509][T11013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.061967][T11013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.082385][T11013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.090998][ T3046] 8021q: adding VLAN 0 to HW filter on device eth4 [ 358.153845][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.171323][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.182908][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.190077][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.206407][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.213670][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.308912][T11013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.559878][T11013] veth0_vlan: entered promiscuous mode [ 358.571410][T11013] veth1_vlan: entered promiscuous mode [ 358.597275][T11013] veth0_macvtap: entered promiscuous mode [ 358.609490][T11013] veth1_macvtap: entered promiscuous mode [ 358.629499][T11013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.652669][T11013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.674390][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.686829][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.931258][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2923'. [ 359.009737][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.060136][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.098249][ T28] audit: type=1400 audit(2000000208.318:634): avc: denied { mounton } for pid=11013 comm="syz-executor" path="/root/syzkaller.R8pQQp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 359.135929][ T28] audit: type=1400 audit(2000000208.346:635): avc: denied { mount } for pid=11013 comm="syz-executor" name="/" dev="gadgetfs" ino=4779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 359.136500][T11255] bridge_slave_1: left allmulticast mode [ 359.181393][T11255] bridge_slave_1: left promiscuous mode [ 359.189247][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.206581][ T28] audit: type=1400 audit(2000000208.421:636): avc: denied { open } for pid=11261 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 359.227009][T11255] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 359.237558][T11262] netlink: 'syz.1.2928': attribute type 39 has an invalid length. [ 359.259918][ T28] audit: type=1400 audit(2000000208.449:637): avc: denied { kernel } for pid=11261 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 359.280147][T11268] loop5: detected capacity change from 0 to 128 [ 359.319209][ T28] audit: type=1400 audit(2000000208.449:638): avc: denied { tracepoint } for pid=11263 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 359.320491][T11268] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.339768][ T28] audit: type=1400 audit(2000000208.486:639): avc: denied { map } for pid=11263 comm="syz.3.2929" path="socket:[28006]" dev="sockfs" ino=28006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 359.378937][T11268] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.417404][T11013] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.434634][ T28] audit: type=1400 audit(2000000208.627:640): avc: denied { write } for pid=11277 comm="syz.3.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 359.502984][T11278] loop3: detected capacity change from 0 to 512 [ 359.527868][T11278] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 359.584634][T11278] EXT4-fs (loop3): 1 truncate cleaned up [ 359.598964][T11295] netlink: 'syz.0.2936': attribute type 1 has an invalid length. [ 359.631919][T11295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.644585][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.681473][T11295] team0: Port device syz_tun removed [ 359.699279][T11295] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 359.701724][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.777777][T11306] loop3: detected capacity change from 0 to 2048 [ 359.836089][T11306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.922610][T11306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2938: bg 0: block 234: padding at end of block bitmap is not set [ 359.939306][T11306] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 117 [ 359.958707][T11306] EXT4-fs (loop3): This should not happen!! Data will be lost [ 359.958707][T11306] [ 360.011701][ T3325] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 360.034208][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 360.044575][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.341999][T11359] loop3: detected capacity change from 0 to 8192 [ 360.391448][T11359] loop3: p3 p4 < > [ 360.395778][T11359] loop3: p3 size 83886080 extends beyond EOD, truncated [ 360.511071][ T4478] udevd[4478]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 360.515008][ T9842] udevd[9842]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 360.603059][T11373] loop3: detected capacity change from 0 to 512 [ 360.642486][T11373] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 360.682114][T11373] EXT4-fs (loop3): 1 truncate cleaned up [ 360.717817][T11381] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2966'. [ 360.736041][T11373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.925309][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.347505][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2971'. [ 361.554363][T11409] l2tp_ppp: sess 2/0: no socket in recv [ 361.595353][T11412] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2975'. [ 362.375925][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 362.375943][ T28] audit: type=1326 audit(2000000211.378:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.402933][T11433] netlink: 'syz.3.2982': attribute type 4 has an invalid length. [ 362.421973][ T28] audit: type=1326 audit(2000000211.406:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.451444][ T28] audit: type=1326 audit(2000000211.406:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.475510][ T28] audit: type=1326 audit(2000000211.406:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.499329][ T28] audit: type=1326 audit(2000000211.406:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.570582][ T28] audit: type=1326 audit(2000000211.406:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.4.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ee3cdd9 code=0x7ffc0000 [ 362.927935][T11469] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2999'. [ 363.197990][T11475] loop5: detected capacity change from 0 to 512 [ 363.236841][T11475] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 363.262875][T11475] EXT4-fs (loop5): 1 truncate cleaned up [ 363.282473][T11475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.451039][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.696040][T11487] loop3: detected capacity change from 0 to 128 [ 363.722950][T11487] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.742526][T11487] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.762734][ T28] audit: type=1400 audit(2000000212.679:651): avc: denied { read } for pid=11486 comm="syz.3.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 363.811385][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.847154][T11496] loop3: detected capacity change from 0 to 128 [ 363.934990][T11496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.950843][T11496] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.057442][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.080399][T11516] loop5: detected capacity change from 0 to 4096 [ 364.088329][T11516] EXT4-fs: Ignoring removed bh option [ 364.111164][T11519] loop3: detected capacity change from 0 to 128 [ 364.123134][T11516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.142298][T11519] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 364.166107][T11519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.184859][T11519] ext2 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.242657][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.281347][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.349476][T11528] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3015'. [ 365.035671][T11543] xfrm0 speed is unknown, defaulting to 1000 [ 365.119785][T11543] wg1 speed is unknown, defaulting to 1000 [ 365.356284][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 365.383105][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 365.469121][T11573] xfrm0 speed is unknown, defaulting to 1000 [ 365.592550][T11573] wg1 speed is unknown, defaulting to 1000 [ 365.627400][ T28] audit: type=1400 audit(2000000214.428:652): avc: denied { setattr } for pid=11591 comm="syz.3.3041" path="pipe:[27641]" dev="pipefs" ino=27641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 365.662744][T11592] netlink: 'syz.3.3041': attribute type 5 has an invalid length. [ 365.768708][T11603] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3044'. [ 365.842361][ T3903] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 366.446732][ T28] audit: type=1400 audit(2000000215.186:653): avc: denied { create } for pid=11619 comm="syz.1.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 366.484897][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3048'. [ 366.551033][T11631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3051'. [ 367.132080][T11657] loop5: detected capacity change from 0 to 512 [ 367.171143][T11657] FAT-fs (loop5): Directory bread(block 199916) failed [ 367.179432][T11657] FAT-fs (loop5): Directory bread(block 199917) failed [ 367.188489][T11657] FAT-fs (loop5): Directory bread(block 199918) failed [ 367.196749][T11657] FAT-fs (loop5): Directory bread(block 199919) failed [ 367.204611][T11657] FAT-fs (loop5): Directory bread(block 199920) failed [ 367.212732][T11657] FAT-fs (loop5): Directory bread(block 199921) failed [ 367.222101][T11657] FAT-fs (loop5): Directory bread(block 199922) failed [ 367.230894][T11657] FAT-fs (loop5): Directory bread(block 199923) failed [ 367.478838][T11657] FAT-fs (loop5): FAT read failed (blocknr 128) [ 367.606629][T11669] loop5: detected capacity change from 0 to 4096 [ 367.617674][T11669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.672843][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.744724][T11680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.752015][T11680] IPv6: NLM_F_CREATE should be set when creating new route [ 368.930157][T11597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.004184][ T28] audit: type=1400 audit(2000000217.582:654): avc: denied { cmd } for pid=11721 comm="syz.4.3075" path="socket:[28783]" dev="sockfs" ino=28783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 369.160568][ T28] audit: type=1400 audit(2000000217.722:655): avc: denied { map } for pid=11737 comm="syz.4.3081" path="socket:[28671]" dev="sockfs" ino=28671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 369.234157][ T28] audit: type=1400 audit(2000000217.797:656): avc: denied { unmount } for pid=11746 comm="syz.4.3083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 369.283209][ T3903] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 369.324458][T11749] loop3: detected capacity change from 0 to 1764 [ 370.456582][ T28] audit: type=1400 audit(2000000218.939:657): avc: denied { attach_queue } for pid=11814 comm="syz.5.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 371.405297][T11872] loop5: detected capacity change from 0 to 512 [ 371.423086][T11872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.436895][T11872] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.524633][T11013] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 371.553795][T11013] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 371.715837][ T28] audit: type=1400 audit(2000000220.118:658): avc: denied { bind } for pid=11884 comm="syz.4.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.735304][ T28] audit: type=1400 audit(2000000220.118:659): avc: denied { listen } for pid=11884 comm="syz.4.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.897769][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.208480][T11903] xfrm0 speed is unknown, defaulting to 1000 [ 372.248192][T11903] wg1 speed is unknown, defaulting to 1000 [ 372.325016][T11903] chnl_net:caif_netlink_parms(): no params data found [ 372.349678][ T28] audit: type=1400 audit(2000000220.717:660): avc: denied { accept } for pid=11927 comm="syz.1.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 372.398374][T11741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.421116][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.432526][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.451736][T11903] bridge_slave_0: entered allmulticast mode [ 372.485272][T11903] bridge_slave_0: entered promiscuous mode [ 372.504470][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.517696][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.535048][T11903] bridge_slave_1: entered allmulticast mode [ 372.547356][T11903] bridge_slave_1: entered promiscuous mode [ 372.574989][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.585862][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.607212][T11903] team0: Port device team_slave_0 added [ 372.614210][T11903] team0: Port device team_slave_1 added [ 372.633577][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.647685][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.691432][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.712786][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.724213][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.775463][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.807226][T11903] hsr_slave_0: entered promiscuous mode [ 372.814224][T11903] hsr_slave_1: entered promiscuous mode [ 372.820303][T11903] debugfs: 'hsr0' already exists in 'hsr' [ 372.826109][T11903] Cannot create hsr debugfs directory [ 372.918682][T11903] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.963389][T11948] loop3: detected capacity change from 0 to 512 [ 373.006238][T11948] FAT-fs (loop3): Directory bread(block 199916) failed [ 373.017941][T11948] FAT-fs (loop3): Directory bread(block 199917) failed [ 373.027821][T11948] FAT-fs (loop3): Directory bread(block 199918) failed [ 373.038646][T11948] FAT-fs (loop3): Directory bread(block 199919) failed [ 373.050088][T11948] FAT-fs (loop3): Directory bread(block 199920) failed [ 373.059941][T11948] FAT-fs (loop3): Directory bread(block 199921) failed [ 373.068352][T11948] FAT-fs (loop3): Directory bread(block 199922) failed [ 373.077119][T11948] FAT-fs (loop3): Directory bread(block 199923) failed [ 373.165562][T11953] xfrm0 speed is unknown, defaulting to 1000 [ 373.249789][T11948] FAT-fs (loop3): FAT read failed (blocknr 128) [ 373.259323][T11903] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.302541][T11953] wg1 speed is unknown, defaulting to 1000 [ 373.346517][T11903] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.399826][T11903] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.667207][T11903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.684421][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.703295][T11903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.719401][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.734439][T11903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.750499][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.785620][T11903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.810643][T11903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.884227][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.905856][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.922329][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.929550][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.989401][ T3908] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.996595][ T3908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.049186][T11903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.061606][T12014] xfrm0 speed is unknown, defaulting to 1000 [ 374.189083][T12014] wg1 speed is unknown, defaulting to 1000 [ 374.200082][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.520277][T11903] veth0_vlan: entered promiscuous mode [ 374.535724][T11903] veth1_vlan: entered promiscuous mode [ 374.555009][T11903] veth0_macvtap: entered promiscuous mode [ 374.573278][T11903] veth1_macvtap: entered promiscuous mode [ 374.596845][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.615529][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.638366][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.657540][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.668312][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.688925][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.786227][T12082] cgroup: fork rejected by pids controller in /syz5 [ 376.555416][ T82] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.719017][T12125] xfrm0 speed is unknown, defaulting to 1000 [ 376.756864][T12125] wg1 speed is unknown, defaulting to 1000 [ 376.816358][T12125] chnl_net:caif_netlink_parms(): no params data found [ 376.857943][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.865138][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.872402][T12125] bridge_slave_0: entered allmulticast mode [ 376.879353][T12125] bridge_slave_0: entered promiscuous mode [ 376.886217][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.893405][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.900600][T12125] bridge_slave_1: entered allmulticast mode [ 376.907352][T12125] bridge_slave_1: entered promiscuous mode [ 376.926669][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.937267][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.957452][T12125] team0: Port device team_slave_0 added [ 376.964119][T12125] team0: Port device team_slave_1 added [ 376.979769][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.986953][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.012951][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.024455][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.031543][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.057577][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.087115][T12125] hsr_slave_0: entered promiscuous mode [ 377.093664][T12125] hsr_slave_1: entered promiscuous mode [ 377.099724][T12125] debugfs: 'hsr0' already exists in 'hsr' [ 377.105517][T12125] Cannot create hsr debugfs directory [ 377.467705][T12039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.661125][T12152] loop3: detected capacity change from 0 to 512 [ 377.713077][T12152] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 377.734331][T12152] EXT4-fs (loop3): mount failed [ 377.892355][T12165] syz_tun: entered allmulticast mode [ 377.910173][T12164] syz_tun: left allmulticast mode [ 378.025563][ T82] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.273668][ T82] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.327098][ T82] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.451059][ T82] bridge_slave_1: left allmulticast mode [ 378.460452][ T82] bridge_slave_1: left promiscuous mode [ 378.468021][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.477728][ T82] bridge_slave_0: left allmulticast mode [ 378.493044][ T82] bridge_slave_0: left promiscuous mode [ 378.503441][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.721810][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.741503][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.753383][ T82] bond0 (unregistering): Released all slaves [ 378.789363][ T3046] 8021q: adding VLAN 0 to HW filter on device eth5 [ 378.918315][ T82] hsr_slave_0: left promiscuous mode [ 378.943369][ T82] hsr_slave_1: left promiscuous mode [ 378.955889][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.971621][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.989541][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.005293][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.032907][ T82] veth1_macvtap: left promiscuous mode [ 379.047398][ T82] veth0_macvtap: left promiscuous mode [ 379.068833][ T82] veth1_vlan: left promiscuous mode [ 379.080969][ T82] veth0_vlan: left promiscuous mode [ 379.172414][ T28] audit: type=1400 audit(2000000227.099:661): avc: denied { mount } for pid=12258 comm="syz.0.3220" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 379.174876][T12265] netlink: 'syz.1.3222': attribute type 1 has an invalid length. [ 379.314384][ T82] team0 (unregistering): Port device team_slave_1 removed [ 379.325833][ T82] team0 (unregistering): Port device team_slave_0 removed [ 379.417075][T12265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.491053][T12269] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 379.529256][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 379.637801][T12125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.667999][ T60] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 379.677310][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.709137][T12125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 379.895257][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.905368][T12125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 379.927959][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.949450][T12125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.973493][T12125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.091189][T12125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.111868][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.126200][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.133347][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.149990][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.157120][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.182695][T12125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.193837][T12125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.260055][T12125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.395535][T12125] veth0_vlan: entered promiscuous mode [ 380.403997][T12125] veth1_vlan: entered promiscuous mode [ 380.421165][T12125] veth0_macvtap: entered promiscuous mode [ 380.429062][T12125] veth1_macvtap: entered promiscuous mode [ 380.440484][T12125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.452282][T12125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.463297][ T3890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.472376][ T3908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.481950][ T3908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.491186][ T3908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.546422][T12384] xfrm0 speed is unknown, defaulting to 1000 [ 380.584509][T12384] wg1 speed is unknown, defaulting to 1000 [ 380.835963][T12405] loop5: detected capacity change from 0 to 8192 [ 381.022191][T12409] loop3: detected capacity change from 0 to 4096 [ 381.033926][T12409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.064959][ T28] audit: type=1400 audit(2000000228.868:662): avc: denied { append } for pid=12407 comm="syz.3.3259" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 381.102904][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.746172][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 381.771329][T12450] syzkaller0: entered promiscuous mode [ 381.788252][T12449] netlink: 996 bytes leftover after parsing attributes in process `syz.1.3273'. [ 381.799657][T12450] syzkaller0: entered allmulticast mode [ 381.819012][T12452] loop3: detected capacity change from 0 to 512 [ 381.873470][T12452] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 381.890334][T12452] EXT4-fs (loop3): mount failed [ 382.757499][ T28] audit: type=1400 audit(2000000230.459:663): avc: denied { cpu } for pid=12503 comm="syz.3.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 382.790785][T12504] loop3: detected capacity change from 0 to 128 [ 382.944456][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.959497][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.484796][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 383.494270][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 383.503699][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 383.513649][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 383.561964][T12537] syzkaller0: entered promiscuous mode [ 383.567729][T12537] syzkaller0: entered allmulticast mode [ 384.144840][T12583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3319'. [ 384.202590][T12585] netlink: 'syz.0.3320': attribute type 21 has an invalid length. [ 384.226166][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3320'. [ 384.288252][ T28] audit: type=1400 audit(2000000231.890:664): avc: denied { ioctl } for pid=12594 comm="syz.1.3323" path="socket:[31398]" dev="sockfs" ino=31398 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.055976][T12542] Set syz1 is full, maxelem 65536 reached [ 385.190862][T12623] Cannot find del_set index 4 as target [ 386.281056][T12660] syzkaller0: entered promiscuous mode [ 386.304186][T12660] syzkaller0: entered allmulticast mode [ 386.349289][ T28] audit: type=1400 audit(2000000233.818:665): avc: denied { relabelfrom } for pid=12659 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 386.404371][ T28] audit: type=1400 audit(2000000233.818:666): avc: denied { relabelto } for pid=12659 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 386.563804][T12672] xfrm0 speed is unknown, defaulting to 1000 [ 386.610948][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 386.689840][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 386.718951][T12677] xfrm0 speed is unknown, defaulting to 1000 [ 386.718957][T12672] wg1 speed is unknown, defaulting to 1000 [ 386.971451][T12677] wg1 speed is unknown, defaulting to 1000 [ 387.274681][T12693] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3352'. [ 387.518826][T12700] loop3: detected capacity change from 0 to 4096 [ 387.633078][T12657] Set syz1 is full, maxelem 65536 reached [ 387.714821][T12700] EXT4-fs: Ignoring removed bh option [ 387.871088][ T28] audit: type=1400 audit(2000000235.241:667): avc: denied { read } for pid=12704 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.986321][ T28] audit: type=1400 audit(2000000235.287:668): avc: denied { shutdown } for pid=12704 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.003155][T12707] syzkaller0: entered promiscuous mode [ 388.027934][T12700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.045849][T12707] syzkaller0: entered allmulticast mode [ 388.097054][T12700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.310347][T12700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.426688][T12700] team0: Port device netdevsim1 removed [ 388.446901][T12700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.497418][T12727] xfrm0 speed is unknown, defaulting to 1000 [ 388.520003][T12700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.587697][T12727] wg1 speed is unknown, defaulting to 1000 [ 388.608175][ T3890] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.627696][ T3890] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.646445][ T3890] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.664924][ T3890] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.679550][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.760883][T12742] syzkaller0: entered promiscuous mode [ 388.766522][T12742] syzkaller0: entered allmulticast mode [ 389.528623][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.537380][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.394103][ T28] audit: type=1400 audit(2000000237.599:669): avc: denied { create } for pid=12790 comm="syz.5.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.428022][ T28] audit: type=1400 audit(2000000237.627:670): avc: denied { bind } for pid=12790 comm="syz.5.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.478686][ T28] audit: type=1400 audit(2000000237.627:671): avc: denied { connect } for pid=12790 comm="syz.5.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.509605][T12795] loop5: detected capacity change from 0 to 1024 [ 390.540578][ T28] audit: type=1400 audit(2000000237.627:672): avc: denied { write } for pid=12790 comm="syz.5.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.541127][T12795] EXT4-fs: Ignoring removed i_version option [ 390.613838][T12795] EXT4-fs: inline encryption not supported [ 390.632150][T12795] EXT4-fs: Ignoring removed i_version option [ 390.653984][T12795] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (40042!=35945) [ 390.670291][T12795] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.701804][T12795] EXT4-fs (loop5): failed to initialize system zone (-117) [ 390.720604][T12795] EXT4-fs (loop5): mount failed [ 390.987113][T12804] syzkaller0: entered promiscuous mode [ 390.992690][T12804] syzkaller0: entered allmulticast mode [ 391.182131][ T28] audit: type=1400 audit(2000000238.338:673): avc: denied { sys_module } for pid=12808 comm="syz.1.3389" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.393924][T12832] netlink: 'syz.1.3397': attribute type 13 has an invalid length. [ 391.553015][T12845] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3401'. [ 392.199021][T12860] tipc: Enabling of bearer rejected, failed to enable media [ 392.436901][ T28] audit: type=1400 audit(2000000239.508:674): avc: denied { create } for pid=12862 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.899156][T12877] mmap: syz.0.3409 (12877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.002604][ T28] audit: type=1400 audit(2000000240.041:675): avc: denied { ioctl } for pid=12880 comm="syz.0.3410" path="socket:[35332]" dev="sockfs" ino=35332 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.068902][ T28] audit: type=1400 audit(2000000240.097:676): avc: denied { bind } for pid=12880 comm="syz.0.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.114647][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 393.121741][ T28] audit: type=1400 audit(2000000240.144:677): avc: denied { setopt } for pid=12880 comm="syz.0.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.164492][ T28] audit: type=1400 audit(2000000240.144:678): avc: denied { write } for pid=12880 comm="syz.0.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.148593][ T28] audit: type=1400 audit(2000000241.099:679): avc: denied { create } for pid=12901 comm="syz.1.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 394.240127][T12911] syzkaller0: entered promiscuous mode [ 394.245933][T12911] syzkaller0: entered allmulticast mode [ 394.253245][T12918] tipc: Enabling of bearer rejected, failed to enable media [ 394.325924][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3422'. [ 394.356490][T12924] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3433'. [ 394.615769][T12931] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3425'. [ 395.714415][T12940] tipc: Enabling of bearer rejected, failed to enable media [ 396.084940][T12958] syzkaller0: entered promiscuous mode [ 396.100943][T12958] syzkaller0: entered allmulticast mode [ 396.182123][T12960] loop5: detected capacity change from 0 to 512 [ 396.192380][T12960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 396.223300][T12960] EXT4-fs (loop5): 1 truncate cleaned up [ 396.237893][T12960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.266637][T12970] syzkaller0: entered promiscuous mode [ 396.278706][T12970] syzkaller0: entered allmulticast mode [ 396.432097][T12977] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3438'. [ 397.480265][T12986] syzkaller0: entered promiscuous mode [ 397.570868][T12986] syzkaller0: entered allmulticast mode [ 397.695118][T12125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.515123][T12996] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3444'. [ 398.640841][T13001] syzkaller0: entered promiscuous mode [ 398.658499][T13001] syzkaller0: entered allmulticast mode [ 399.413459][T13035] xfrm0 speed is unknown, defaulting to 1000 [ 399.583879][T13035] wg1 speed is unknown, defaulting to 1000 [ 399.713783][T13053] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3455'. [ 400.849456][T13094] syzkaller0: entered promiscuous mode [ 400.868404][T13094] syzkaller0: entered allmulticast mode [ 401.030317][T13111] syzkaller0: entered promiscuous mode [ 401.043340][ T28] audit: type=1400 audit(2000000247.565:680): avc: denied { setopt } for pid=13113 comm="syz.0.3473" lport=48848 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 401.135810][T13109] loop5: detected capacity change from 0 to 512 [ 401.156420][T13124] tipc: Enabling of bearer rejected, failed to enable media [ 401.231104][T13109] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 401.250618][T13109] EXT4-fs (loop5): mount failed [ 401.273075][ T28] audit: type=1400 audit(2000000247.780:681): avc: denied { read } for pid=13096 comm="syz.1.3467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 401.547845][T13139] loop5: detected capacity change from 0 to 512 [ 401.664791][ T28] audit: type=1400 audit(2000000248.117:682): avc: denied { connect } for pid=13141 comm="syz.4.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.766153][T13139] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 401.787483][T13139] EXT4-fs (loop5): mount failed [ 402.526926][T13180] tipc: Enabling of bearer rejected, failed to enable media [ 402.577879][T13184] loop3: detected capacity change from 0 to 512 [ 402.687727][ T28] audit: type=1400 audit(2000000249.109:683): avc: denied { name_bind } for pid=13186 comm="syz.4.3489" src=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 402.772913][T13184] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 402.822753][T13184] EXT4-fs (loop3): mount failed [ 402.917088][T13202] tipc: Enabling of bearer rejected, failed to enable media [ 402.937970][ T28] audit: type=1400 audit(2000000249.334:684): avc: denied { map } for pid=13203 comm="syz.3.3492" path="/proc/sys/net/ipv4/vs/sync_threshold" dev="proc" ino=6690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 403.200324][T13221] loop5: detected capacity change from 0 to 512 [ 403.224350][T13221] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.251007][T13221] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 403.296800][T13221] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3497: bg 0: block 248: padding at end of block bitmap is not set [ 403.337085][T13221] loop5: lost filesystem error report for type 5 error -117 [ 403.337358][T13221] Quota error (device loop5): write_blk: dquota write failed [ 403.344730][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 403.344750][ C0] EXT4-fs (loop5): last error at time 2000000249: ext4_validate_block_bitmap:441 [ 403.369608][T13221] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 403.379636][T13221] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3497: Failed to acquire dquot type 1 [ 403.391182][T13221] loop5: lost filesystem error report for type 5 error -28 [ 403.397241][T13221] EXT4-fs (loop5): 1 truncate cleaned up [ 403.419844][T13221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 403.489522][T12125] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 403.539173][T13228] tipc: Started in network mode [ 403.550049][T13228] tipc: Node identity beccd5871437, cluster identity 4711 [ 403.569654][T13228] tipc: Enabled bearer , priority 0 [ 403.588934][T13228] syzkaller0: entered promiscuous mode [ 403.604710][T13228] syzkaller0: entered allmulticast mode [ 403.627667][T13228] tipc: Resetting bearer [ 403.644694][T13227] tipc: Resetting bearer [ 403.659876][T13227] tipc: Disabling bearer [ 403.872746][T13238] syzkaller0: entered promiscuous mode [ 404.326336][T13261] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3509'. [ 405.484352][T13273] tipc: Started in network mode [ 405.529166][T13273] tipc: Node identity aef306660eb2, cluster identity 4711 [ 405.634659][T13273] tipc: Enabled bearer , priority 0 [ 405.662271][T13275] syzkaller0: entered promiscuous mode [ 405.687196][T13275] syzkaller0: entered allmulticast mode [ 405.727842][T13273] tipc: Resetting bearer [ 405.754637][T13272] tipc: Resetting bearer [ 405.780196][T13272] tipc: Disabling bearer [ 406.732966][T13286] tipc: Enabling of bearer rejected, failed to enable media [ 407.811124][T13302] SET target dimension over the limit! [ 407.901911][ T28] audit: type=1400 audit(2000000253.975:685): avc: denied { read } for pid=13303 comm="syz.3.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.992986][T13302] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3521'. [ 408.017040][ T28] audit: type=1400 audit(2000000254.041:686): avc: denied { write } for pid=1039 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35894 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 408.365044][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.487106][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.057715][ C1] ================================================================== [ 409.065878][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 409.073109][ C1] [ 409.075461][ C1] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 0: [ 409.083555][ C1] can_can_gw_rcv+0x863/0x870 [ 409.088269][ C1] can_rcv_filter+0xc3/0x480 [ 409.092909][ C1] can_receive+0x13e/0x190 [ 409.097370][ C1] can_rcv+0x17d/0x1f0 [ 409.101487][ C1] process_backlog+0x363/0x670 [ 409.106315][ C1] __napi_poll+0x61/0x300 [ 409.110688][ C1] net_rx_action+0x452/0x930 [ 409.115340][ C1] handle_softirqs+0xb9/0x280 [ 409.120135][ C1] do_softirq+0x45/0x60 [ 409.124322][ C1] __local_bh_enable_ip+0x70/0x80 [ 409.129411][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 409.134489][ C1] unix_release_sock+0x231/0x750 [ 409.139471][ C1] unix_release+0x58/0x80 [ 409.143841][ C1] sock_close+0x6b/0x150 [ 409.148133][ C1] __fput+0x29b/0x630 [ 409.152156][ C1] ____fput+0x1c/0x30 [ 409.156170][ C1] task_work_run+0x130/0x1a0 [ 409.160796][ C1] get_signal+0xdea/0xf20 [ 409.165155][ C1] arch_do_signal_or_restart+0x96/0x450 [ 409.170738][ C1] exit_to_user_mode_loop+0x6a/0x6f0 [ 409.176050][ C1] do_syscall_64+0x232/0x3b0 [ 409.180678][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.186610][ C1] [ 409.188954][ C1] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 1: [ 409.197052][ C1] can_can_gw_rcv+0x863/0x870 [ 409.201760][ C1] can_rcv_filter+0xc3/0x480 [ 409.206384][ C1] can_receive+0x13e/0x190 [ 409.210843][ C1] can_rcv+0x17d/0x1f0 [ 409.214955][ C1] process_backlog+0x363/0x670 [ 409.219771][ C1] __napi_poll+0x61/0x300 [ 409.224139][ C1] net_rx_action+0x452/0x930 [ 409.228769][ C1] handle_softirqs+0xb9/0x280 [ 409.233481][ C1] do_softirq+0x45/0x60 [ 409.237671][ C1] __local_bh_enable_ip+0x70/0x80 [ 409.242736][ C1] copy_fpstate_to_sigframe+0x30d/0x7c0 [ 409.248338][ C1] get_sigframe+0x34c/0x470 [ 409.252887][ C1] x64_setup_rt_frame+0xa7/0x4e0 [ 409.257865][ C1] arch_do_signal_or_restart+0x24b/0x450 [ 409.263546][ C1] exit_to_user_mode_loop+0x6a/0x6f0 [ 409.268871][ C1] do_syscall_64+0x232/0x3b0 [ 409.273502][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.279453][ C1] [ 409.281798][ C1] value changed: 0x00013ae8 -> 0x00013ae9 [ 409.287536][ C1] [ 409.289879][ C1] Reported by Kernel Concurrency Sanitizer on: [ 409.296074][ C1] CPU: 1 UID: 0 PID: 13307 Comm: syz.3.3522 Tainted: G W syzkaller #0 PREEMPT(full) [ 409.307051][ C1] Tainted: [W]=WARN [ 409.310873][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.320950][ C1] ================================================================== [ 409.892660][T13302] bond1: (slave macvlan2): Removing an active aggregator [ 409.953825][ T30] bond1: Warning: Found an uninitialized port [ 410.022922][T13302] bond1: (slave macvlan2): Releasing backup interface [ 412.278654][ C1] ================================================================== [ 412.286802][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 412.294032][ C1] [ 412.296380][ C1] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 0: [ 412.304472][ C1] can_can_gw_rcv+0x863/0x870 [ 412.309274][ C1] can_rcv_filter+0xc3/0x480 [ 412.313913][ C1] can_receive+0x13e/0x190 [ 412.318370][ C1] can_rcv+0x17d/0x1f0 [ 412.322485][ C1] process_backlog+0x363/0x670 [ 412.327301][ C1] __napi_poll+0x61/0x300 [ 412.331690][ C1] net_rx_action+0x452/0x930 [ 412.336319][ C1] handle_softirqs+0xb9/0x280 [ 412.341038][ C1] run_ksoftirqd+0x1c/0x30 [ 412.345493][ C1] smpboot_thread_fn+0x32a/0x510 [ 412.350463][ C1] kthread+0x22a/0x280 [ 412.354580][ C1] ret_from_fork+0x146/0x330 [ 412.359204][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.364039][ C1] [ 412.366385][ C1] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 1: [ 412.374470][ C1] can_can_gw_rcv+0x863/0x870 [ 412.379181][ C1] can_rcv_filter+0xc3/0x480 [ 412.383812][ C1] can_receive+0x13e/0x190 [ 412.388262][ C1] can_rcv+0x17d/0x1f0 [ 412.392367][ C1] process_backlog+0x363/0x670 [ 412.397177][ C1] __napi_poll+0x61/0x300 [ 412.401550][ C1] net_rx_action+0x452/0x930 [ 412.406196][ C1] handle_softirqs+0xb9/0x280 [ 412.410909][ C1] do_softirq+0x45/0x60 [ 412.415101][ C1] __local_bh_enable_ip+0x70/0x80 [ 412.420162][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 412.425147][ C1] addrconf_ifdown+0x3bb/0xf90 [ 412.429966][ C1] addrconf_notify+0x222/0x8f0 [ 412.434765][ C1] raw_notifier_call_chain+0x72/0x1a0 [ 412.440172][ C1] unregister_netdevice_many_notify+0xe2c/0x1650 [ 412.446555][ C1] unregister_netdevice_many+0x19/0x20 [ 412.452052][ C1] macvlan_device_event+0x4ba/0x4f0 [ 412.457290][ C1] raw_notifier_call_chain+0x72/0x1a0 [ 412.462704][ C1] unregister_netdevice_many_notify+0xe2c/0x1650 [ 412.469084][ C1] rtnl_dellink+0x43f/0x640 [ 412.473634][ C1] rtnetlink_rcv_msg+0x64b/0x720 [ 412.478623][ C1] netlink_rcv_skb+0x123/0x220 [ 412.483434][ C1] rtnetlink_rcv+0x1c/0x30 [ 412.487890][ C1] netlink_unicast+0x5a8/0x680 [ 412.492698][ C1] netlink_sendmsg+0x5c8/0x6f0 [ 412.497509][ C1] ____sys_sendmsg+0x563/0x5b0 [ 412.502421][ C1] ___sys_sendmsg+0x195/0x1e0 [ 412.507197][ C1] __x64_sys_sendmsg+0xd4/0x160 [ 412.512293][ C1] x64_sys_call+0x194c/0x3020 [ 412.517017][ C1] do_syscall_64+0x12c/0x3b0 [ 412.521647][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.527575][ C1] [ 412.529921][ C1] value changed: 0x0006be34 -> 0x0006be36 [ 412.535667][ C1] [ 412.538016][ C1] Reported by Kernel Concurrency Sanitizer on: [ 412.544215][ C1] CPU: 1 UID: 0 PID: 13302 Comm: syz.0.3521 Tainted: G W syzkaller #0 PREEMPT(full) [ 412.555197][ C1] Tainted: [W]=WARN [ 412.559028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 412.569117][ C1] ================================================================== [ 415.331645][T13302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.446518][T13302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.498182][ C0] ================================================================== [ 415.506343][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 415.513571][ C0] [ 415.515954][ C0] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 1: [ 415.524043][ C0] can_can_gw_rcv+0x863/0x870 [ 415.528775][ C0] can_rcv_filter+0xc3/0x480 [ 415.533418][ C0] can_receive+0x13e/0x190 [ 415.537865][ C0] can_rcv+0x17d/0x1f0 [ 415.541964][ C0] process_backlog+0x363/0x670 [ 415.546795][ C0] __napi_poll+0x61/0x300 [ 415.551174][ C0] net_rx_action+0x452/0x930 [ 415.555807][ C0] handle_softirqs+0xb9/0x280 [ 415.560540][ C0] do_softirq+0x45/0x60 [ 415.564734][ C0] __local_bh_enable_ip+0x70/0x80 [ 415.569801][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 415.574800][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 415.580148][ C0] batadv_tt_purge+0x2b/0x610 [ 415.584863][ C0] process_scheduled_works+0x4f0/0x9c0 [ 415.590368][ C0] worker_thread+0x58a/0x780 [ 415.595008][ C0] kthread+0x22a/0x280 [ 415.599124][ C0] ret_from_fork+0x146/0x330 [ 415.603751][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.608560][ C0] [ 415.610912][ C0] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 0: [ 415.619007][ C0] can_can_gw_rcv+0x863/0x870 [ 415.623726][ C0] can_rcv_filter+0xc3/0x480 [ 415.628357][ C0] can_receive+0x13e/0x190 [ 415.632821][ C0] can_rcv+0x17d/0x1f0 [ 415.636932][ C0] process_backlog+0x363/0x670 [ 415.641746][ C0] __napi_poll+0x61/0x300 [ 415.646129][ C0] net_rx_action+0x452/0x930 [ 415.650767][ C0] handle_softirqs+0xb9/0x280 [ 415.655573][ C0] do_softirq+0x45/0x60 [ 415.659766][ C0] __local_bh_enable_ip+0x70/0x80 [ 415.664840][ C0] __alloc_skb+0x658/0x690 [ 415.669320][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 415.674983][ C0] process_scheduled_works+0x4f0/0x9c0 [ 415.680506][ C0] worker_thread+0x58a/0x780 [ 415.685142][ C0] kthread+0x22a/0x280 [ 415.689244][ C0] ret_from_fork+0x146/0x330 [ 415.693864][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.698677][ C0] [ 415.701022][ C0] value changed: 0x000c661f -> 0x000c6620 [ 415.706786][ C0] [ 415.709132][ C0] Reported by Kernel Concurrency Sanitizer on: [ 415.715322][ C0] CPU: 0 UID: 0 PID: 3903 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.726472][ C0] Tainted: [W]=WARN [ 415.730299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.740385][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 415.747239][ C0] ================================================================== [ 416.049141][T13302] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 418.158433][T13302] bond0 (unregistering): Released all slaves [ 418.720851][ C0] ================================================================== [ 418.728979][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 418.736201][ C0] [ 418.738544][ C0] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 1: [ 418.746630][ C0] can_can_gw_rcv+0x863/0x870 [ 418.751351][ C0] can_rcv_filter+0xc3/0x480 [ 418.755974][ C0] can_receive+0x13e/0x190 [ 418.760460][ C0] can_rcv+0x17d/0x1f0 [ 418.764556][ C0] process_backlog+0x363/0x670 [ 418.769359][ C0] __napi_poll+0x61/0x300 [ 418.773818][ C0] net_rx_action+0x452/0x930 [ 418.778449][ C0] handle_softirqs+0xb9/0x280 [ 418.783157][ C0] do_softirq+0x45/0x60 [ 418.787338][ C0] __local_bh_enable_ip+0x70/0x80 [ 418.792397][ C0] wg_timers_any_authenticated_packet_traversal+0xdd/0x100 [ 418.799632][ C0] wg_packet_tx_worker+0xeb/0x330 [ 418.804696][ C0] process_scheduled_works+0x4f0/0x9c0 [ 418.810197][ C0] worker_thread+0x58a/0x780 [ 418.815348][ C0] kthread+0x22a/0x280 [ 418.819460][ C0] ret_from_fork+0x146/0x330 [ 418.824083][ C0] ret_from_fork_asm+0x1a/0x30 [ 418.828888][ C0] [ 418.831232][ C0] read-write to 0xffff8881500e9f80 of 4 bytes by interrupt on cpu 0: [ 418.839342][ C0] can_can_gw_rcv+0x863/0x870 [ 418.844065][ C0] can_rcv_filter+0xc3/0x480 [ 418.848686][ C0] can_receive+0x13e/0x190 [ 418.853137][ C0] can_rcv+0x17d/0x1f0 [ 418.857244][ C0] process_backlog+0x363/0x670 [ 418.862053][ C0] __napi_poll+0x61/0x300 [ 418.866424][ C0] net_rx_action+0x452/0x930 [ 418.871064][ C0] handle_softirqs+0xb9/0x280 [ 418.875776][ C0] do_softirq+0x45/0x60 [ 418.879985][ C0] __local_bh_enable_ip+0x70/0x80 [ 418.885056][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 418.890038][ C0] batadv_tt_purge+0x2cd/0x610 [ 418.894849][ C0] process_scheduled_works+0x4f0/0x9c0 [ 418.900365][ C0] worker_thread+0x58a/0x780 [ 418.905001][ C0] kthread+0x22a/0x280 [ 418.909095][ C0] ret_from_fork+0x146/0x330 [ 418.913724][ C0] ret_from_fork_asm+0x1a/0x30 [ 418.918530][ C0] [ 418.920900][ C0] value changed: 0x00121b70 -> 0x00121b71 [ 418.926626][ C0] [ 418.928979][ C0] Reported by Kernel Concurrency Sanitizer on: [ 418.935151][ C0] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.946033][ C0] Tainted: [W]=WARN [ 418.949858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.959938][ C0] Workqueue: bat_events batadv_tt_purge [ 418.965545][ C0] ==================================================================