last executing test programs: 8m8.474303437s ago: executing program 32 (id=150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 7m58.391245031s ago: executing program 33 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) 7m56.026655195s ago: executing program 34 (id=357): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$usbfs(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x5, 0x30, 0xffffffffffffffff, 0x760b) 7m53.62734532s ago: executing program 35 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m32.058386111s ago: executing program 36 (id=836): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x50, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 7m1.550545225s ago: executing program 37 (id=1359): unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) r1 = semget$private(0x0, 0x2, 0x102) semop(r1, &(0x7f0000000000)=[{0x4, 0x7, 0x2000}, {0x4, 0x4}, {0x3, 0x40, 0x1000}], 0x3) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) unshare(0x8000000) 6m27.764084557s ago: executing program 38 (id=1814): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x0, 0xfff0}, {0x10, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m13.260299509s ago: executing program 39 (id=2055): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xff7f, 0x0, 0x4, 0x8001, 0x2, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xd) 5m35.052246518s ago: executing program 40 (id=2666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m30.375088304s ago: executing program 41 (id=2704): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) sendmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000002980)=ANY=[], 0x11e0}}], 0x1, 0x4000) 5m20.998907616s ago: executing program 42 (id=2826): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) llistxattr(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)=""/33, 0x21) 5m20.128313333s ago: executing program 43 (id=2840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) socket(0x10, 0x803, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000740)={0x7, 0x7}) 5m19.470399433s ago: executing program 44 (id=2852): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 5m1.143423403s ago: executing program 45 (id=3121): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 4m52.201411882s ago: executing program 46 (id=3273): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0xc, 0x7) write(r0, 0x0, 0x0) 3m55.680910652s ago: executing program 47 (id=4279): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4a38900be369c27b285c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb1961961edfa959b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713cc7e849b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c326e7a2f642ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3fbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f072a02578ab02b3209fe8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b357382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987b8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd", 0x1000}}, 0x1006) sendfile(r1, r0, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r1, 0x47d, 0xdf1c, 0x9, 0xfffffffffffff7f7}) 3m33.585330919s ago: executing program 48 (id=4609): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000280)="ae", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 3m31.361362578s ago: executing program 49 (id=4646): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c0400000000002c0012800b00010069703667726500001c0002800400120014000600fc0100ffff0000000000000000000000561ace433599eb288eae9a935ca18f874602555d58e61e8507347a2bcfdf7811e07fdd71c630885358b9fc2a26fa3d6add2cda8c411cb254f98b038d81c6f7d500888d498858d8e494071270f4c2c5368a4e590f75736bbfa741cf5f6a4709a0bd19744a3d3e9d436112c01ede9624cc272a15fdc611b6605f54f188b667717dc7c59aef1bcfcd8d4f8f8144a152d066c80c64f7ce57112d4f"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 3m13.236213913s ago: executing program 50 (id=4868): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) 3m5.27922073s ago: executing program 51 (id=4786): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"/322, @ANYRES8], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m59.172287641s ago: executing program 52 (id=5003): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000000a40)) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010000000008000100ac141400100016800c0001000000000000000fff080005000a000102060015000600000008000b000c"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m36.088591299s ago: executing program 53 (id=5369): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.946771937s ago: executing program 54 (id=5519): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r2, 0x21, {0x2, 0x0, 0x4}}, 0x18) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x3, {0x2, 0xff, 0x3}, 0x2}, 0x18) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3, {0x1, 0xff, 0x3}}, 0x18) 2m17.095116191s ago: executing program 55 (id=5615): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000400) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) 2m5.189520301s ago: executing program 56 (id=5830): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 2m3.444648746s ago: executing program 57 (id=5843): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000300)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 1m19.860170713s ago: executing program 58 (id=6491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x6, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x2, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m17.99716917s ago: executing program 3 (id=6516): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x2, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m17.962845182s ago: executing program 3 (id=6517): r0 = socket(0x29, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m17.349300781s ago: executing program 3 (id=6522): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 1m16.892749755s ago: executing program 3 (id=6528): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m16.763238159s ago: executing program 3 (id=6541): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/3, 0x3}, {0x0}, {&(0x7f0000000980)=""/152, 0x98}], 0x3}, 0x9}], 0x1, 0x0, 0x0) 1m16.448185309s ago: executing program 3 (id=6532): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4) 1m16.428558769s ago: executing program 59 (id=6532): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4) 1m15.540658467s ago: executing program 7 (id=6544): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x107, 0x0) getdents64(r1, 0x0, 0x0) 1m15.488617309s ago: executing program 7 (id=6545): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 1m15.460059829s ago: executing program 7 (id=6546): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791027fffff700001e500000000000009500000000660000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m15.374911312s ago: executing program 7 (id=6549): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000002180), &(0x7f0000000040)='./bus\x00', 0x2034459, 0x0, 0x1, 0x0, &(0x7f00000021c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0xa000, 0x50) getdents(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) getdents(r0, &(0x7f0000001fc0)=""/170, 0xaa) 1m15.084443961s ago: executing program 7 (id=6553): ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x404c894}, 0x40) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m14.49157331s ago: executing program 7 (id=6555): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.593541645s ago: executing program 8 (id=6616): gettid() getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, 0xfffffffffffffffe, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000d4) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002ebe55440b8071a406d190102030109022d0001ae052009090475b8032d2c260309050fa55d59430e020800100a0709050b001000400108"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) getpeername(r0, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80) 1m7.013352562s ago: executing program 8 (id=6621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x48810) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x55, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x1000, 0x7e, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2b, 0xe4, 0x6}}}}}]}}]}}, 0x0) 1m6.386145042s ago: executing program 8 (id=6625): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m6.098939491s ago: executing program 8 (id=6627): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x100000000000022d, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) 1m5.943557436s ago: executing program 8 (id=6630): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m5.533476418s ago: executing program 8 (id=6634): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 59.403756039s ago: executing program 60 (id=6555): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 56.153257411s ago: executing program 2 (id=6712): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 56.085521163s ago: executing program 2 (id=6713): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x100004, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) mount$bpf(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x3a84825, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200001000000000000000082100009c000000300000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket(0x10, 0x803, 0x0) 54.948908148s ago: executing program 2 (id=6727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10000014}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 54.822691742s ago: executing program 2 (id=6730): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 54.711984126s ago: executing program 2 (id=6741): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0xfffffffe, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.499150482s ago: executing program 2 (id=6732): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 54.460409034s ago: executing program 61 (id=6732): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 50.504711276s ago: executing program 62 (id=6634): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.584499709s ago: executing program 6 (id=7050): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0) 28.246693839s ago: executing program 6 (id=7052): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r0, 0x0, 0x0) 28.037128896s ago: executing program 6 (id=7054): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000a) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) 28.036674066s ago: executing program 6 (id=7055): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 27.994983687s ago: executing program 6 (id=7058): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 27.944311959s ago: executing program 6 (id=7059): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xd17, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000060, 0x0) 27.944231159s ago: executing program 63 (id=7059): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xd17, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000060, 0x0) 2.387933245s ago: executing program 0 (id=7547): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.355104736s ago: executing program 0 (id=7548): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0x2}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.291951718s ago: executing program 0 (id=7549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f00000000c0)="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", 0x508, 0x0, 0x0, 0x0) 2.21622498s ago: executing program 9 (id=7551): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x7cb0, &(0x7f0000000140)={0x0, 0xb71c, 0x10, 0x3, 0x38f}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffef8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 2.21611984s ago: executing program 0 (id=7552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa8daabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.161502212s ago: executing program 0 (id=7554): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) shmctl$SHM_LOCK(0x0, 0xb) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x408c072, 0xffffffffffffffff, 0xffffd000) 2.014492946s ago: executing program 5 (id=7559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noinit_itable}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000c140904"], 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 1.59332986s ago: executing program 1 (id=7562): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.453842144s ago: executing program 1 (id=7564): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.342278858s ago: executing program 1 (id=7565): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x40000000}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') io_uring_setup(0x2bf9, &(0x7f0000000200)={0x0, 0xd86, 0x20, 0x2, 0x317}) 1.307973569s ago: executing program 9 (id=7566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.293402309s ago: executing program 5 (id=7567): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0xffff, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 1.195144562s ago: executing program 9 (id=7569): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000380)) read(r0, 0x0, 0x2) 1.178853633s ago: executing program 1 (id=7570): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000003ac0)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040854) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 1.171427143s ago: executing program 9 (id=7571): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x10520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) 1.118397185s ago: executing program 4 (id=7572): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xa, 0x5, 0x2, 0x3, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_key={0x1, 0xfe84b3a254e2cdb9}]}, 0x18}}, 0x40004) 973.440929ms ago: executing program 5 (id=7573): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffff5}]}}]}, 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 958.70997ms ago: executing program 1 (id=7583): io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') getpid() lseek(r0, 0x289e0cb5, 0x0) 874.919072ms ago: executing program 9 (id=7574): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x2]}, 0x8) 669.849178ms ago: executing program 4 (id=7575): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x7f\fG\xa75\xd8aM!\xe6\xe3\x05\xed.\x90\xae~\x93#*\xcc\xa0aZ-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xafg\xff\xbc3\xcd\xde\xe9F\xc2&b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\xc8z\xc4(\x12\xbc\xaa\x97_\xb8\xa9\xc1\x19ba\xbb\xf2\xe5H\xae\xa4\x05\xb6', 0x0) close(r0) 600.389151ms ago: executing program 5 (id=7576): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) preadv(r1, 0x0, 0x0, 0xa75, 0x3) 578.715492ms ago: executing program 4 (id=7577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) read(r1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) 544.608763ms ago: executing program 0 (id=7578): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000000)={0x80, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 488.519755ms ago: executing program 1 (id=7579): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 420.543586ms ago: executing program 4 (id=7580): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x840, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 419.498526ms ago: executing program 5 (id=7581): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0xf15, 0x4) 368.682818ms ago: executing program 5 (id=7582): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) semop(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), 0x0, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000600)) 28.379829ms ago: executing program 9 (id=7584): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x6}, 0xc18, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 27.776989ms ago: executing program 4 (id=7594): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000600)={r2, 0x1}, &(0x7f0000000640)=0x8) 0s ago: executing program 4 (id=7585): r0 = io_uring_setup(0xad4, 0x0) close(r0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000080)={r3, @in6={{0xa, 0x4, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r4}, &(0x7f0000000340)=0x8) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device eth1 [ 455.630407][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 455.787494][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 455.809352][T28113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 455.818669][T28113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.826962][T28113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 455.836294][T28113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.844867][T28113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 455.854028][T28113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.862824][T28113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.886501][T28113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.940033][T28113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.955533][T28113] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.966541][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.973691][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.987173][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.994288][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.022065][T28113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.033167][T28113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.218960][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 456.349239][T28113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.400743][T28249] xt_connbytes: Forcing CT accounting to be enabled [ 456.502739][T28113] veth0_vlan: entered promiscuous mode [ 456.519318][T28113] veth1_vlan: entered promiscuous mode [ 456.547937][T28259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.560589][T28113] veth0_macvtap: entered promiscuous mode [ 456.564021][T28113] veth1_macvtap: entered promiscuous mode [ 456.574384][T28113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.616630][T28113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.639798][ T9285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.648709][ T9285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.667178][ T9285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.690958][ T9285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.956355][T28269] loop2: detected capacity change from 0 to 128 [ 456.987672][T28269] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.008908][T28271] futex_wake_op: syz.6.6561 tries to shift op by 32; fix this program [ 457.056338][T28269] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.117843][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 457.117875][ T28] audit: type=1400 audit(1781955769.145:3167): avc: denied { write } for pid=28268 comm="syz.2.6560" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.130044][T28274] policy can only be matched on NF_INET_PRE_ROUTING [ 457.183613][T28274] unable to load match [ 457.232889][T28113] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.321359][T28279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.386749][T28279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.205575][T28276] net_ratelimit: 8 callbacks suppressed [ 458.205596][T28276] Set syz1 is full, maxelem 65536 reached [ 458.327982][T28299] loop6: detected capacity change from 0 to 128 [ 458.342880][T28299] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 458.368830][T28299] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.383637][T28299] ext2 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.408644][ T28] audit: type=1400 audit(1781955770.435:3168): avc: denied { write } for pid=28298 comm="syz.6.6570" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.488773][T25518] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.537156][T28312] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6575'. [ 458.656002][T28318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.675184][T28318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.542350][ T9285] Bluetooth: hci0: Frame reassembly failed (-84) [ 459.635725][T28330] loop4: detected capacity change from 0 to 256 [ 460.354849][T28343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.375610][T28343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.464647][T28350] tipc: Started in network mode [ 460.469708][T28350] tipc: Node identity d2e666fa97ff, cluster identity 4711 [ 460.479921][T28350] tipc: Enabled bearer , priority 0 [ 460.488189][T28350] syzkaller0: MTU too low for tipc bearer [ 460.494338][T28350] tipc: Disabling bearer [ 460.550886][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6593'. [ 460.705593][T28361] netlink: 'syz.2.6597': attribute type 1 has an invalid length. [ 460.752327][T28361] netlink: 'syz.2.6597': attribute type 10 has an invalid length. [ 460.770630][T28361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6597'. [ 460.795626][T28361] dummy0: entered promiscuous mode [ 460.931886][ T28] audit: type=1326 audit(1781955772.955:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 460.960575][ T28] audit: type=1326 audit(1781955772.955:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 460.987844][ T28] audit: type=1326 audit(1781955772.955:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.015240][ T28] audit: type=1326 audit(1781955772.955:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.046985][ T28] audit: type=1326 audit(1781955772.955:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.075526][ T28] audit: type=1326 audit(1781955772.955:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.101714][ T28] audit: type=1326 audit(1781955772.955:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.136359][T28342] Set syz1 is full, maxelem 65536 reached [ 461.139042][ T28] audit: type=1326 audit(1781955772.995:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28367 comm="syz.8.6600" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb588ce59 code=0x7ffc0000 [ 461.543450][T11669] Bluetooth: hci0: command 0x1003 tx timeout [ 461.543852][ T3801] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 461.777761][T28391] xt_connbytes: Forcing CT accounting to be enabled [ 461.992415][T28400] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 462.141976][T28402] syzkaller1: entered promiscuous mode [ 462.162489][T28402] syzkaller1: entered allmulticast mode [ 463.000692][T28411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.022061][T28411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.041910][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 463.041927][ T28] audit: type=1400 audit(1781955775.065:3191): avc: denied { getattr } for pid=28408 comm="syz.8.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 463.158208][T28420] loop4: detected capacity change from 0 to 2048 [ 463.239192][T28420] GPT:first_usable_lbas don't match. [ 463.250066][T28420] GPT:34 != 290 [ 463.259350][T28420] GPT: Use GNU Parted to correct GPT errors. [ 463.272152][T28420] loop4: p1 p2 p3 [ 463.572690][T28425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.601068][T28425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.898366][T28430] loop2: detected capacity change from 0 to 512 [ 463.934392][T28430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.959147][T28430] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6623: Invalid block bitmap block 0 in block_group 0 [ 463.989574][T28430] loop2: lost filesystem error report for type 5 error -117 [ 463.989829][T28430] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 463.997291][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 463.997314][ C1] EXT4-fs (loop2): initial error at time 1781955776: ext4_read_block_bitmap_nowait:483 [ 463.997340][ C1] EXT4-fs (loop2): last error at time 1781955776: ext4_read_block_bitmap_nowait:483 [ 464.070862][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.071023][T28430] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.6623: attempt to clear invalid blocks 983261 len 1 [ 464.096040][T28430] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 464.096260][T28430] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.6623: Invalid inode table block 0 in block_group 0 [ 464.118799][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.119016][T28430] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 464.136176][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.136331][T28430] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 464.160161][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.160692][T28430] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.6623: Invalid inode table block 0 in block_group 0 [ 464.183023][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.184725][T28430] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 464.202812][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.202970][T28430] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.6623: mark_inode_dirty error [ 464.228311][T28430] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 464.229320][T28430] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 464.265666][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.267107][T28430] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.6623: Invalid inode table block 0 in block_group 0 [ 464.293448][T28430] loop2: lost filesystem error report for type 5 error -117 [ 464.293666][T28430] EXT4-fs (loop2): 1 truncate cleaned up [ 464.307668][T28430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.345354][T28430] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.6623: Invalid inode table block 0 in block_group 0 [ 464.380676][T28113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.492017][T28442] loop8: detected capacity change from 0 to 512 [ 464.517116][T28442] EXT4-fs: Ignoring removed bh option [ 464.539550][T28442] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 464.570070][T28442] EXT4-fs (loop8): 1 truncate cleaned up [ 464.576826][T28442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.624691][T20196] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.662870][ T28] audit: type=1400 audit(1781955776.685:3192): avc: denied { remount } for pid=28449 comm="syz.8.6630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 465.137461][T16109] IPVS: starting estimator thread 0... [ 465.143735][T28464] IPVS: fo: FWM 3 0x00000003 - no destination available [ 465.223552][T28465] IPVS: using max 2064 ests per chain, 103200 per kthread [ 465.299414][T28469] loop4: detected capacity change from 0 to 512 [ 465.315247][T28469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 465.349406][T28469] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 465.379509][T28469] EXT4-fs (loop4): 1 truncate cleaned up [ 465.391605][T28469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.443598][ T28] audit: type=1400 audit(1781955777.475:3193): avc: denied { write } for pid=28468 comm="syz.4.6639" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.614229][T28475] loop2: detected capacity change from 0 to 2048 [ 465.669378][T28475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.722511][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.896917][T28475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.913531][T28475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.914716][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6646'. [ 466.187767][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6646'. [ 466.529888][T28113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.755745][T28500] loop4: detected capacity change from 0 to 512 [ 466.794857][T28500] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 466.818906][T28500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 466.844823][T28500] System zones: 1-12 [ 466.857340][T28500] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.6652: bad orphan inode 131072 [ 466.916149][T28509] netlink: 'syz.2.6656': attribute type 1 has an invalid length. [ 466.925646][T28500] loop4: lost filesystem error report for type 5 error -117 [ 466.926237][T28509] netlink: 'syz.2.6656': attribute type 2 has an invalid length. [ 466.933213][T28500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.994325][ T28] audit: type=1400 audit(1781955779.015:3194): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.063048][ T28] audit: type=1400 audit(1781955779.045:3195): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 467.087484][ T28] audit: type=1400 audit(1781955779.045:3196): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.111508][ T28] audit: type=1400 audit(1781955779.045:3197): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.138884][ T28] audit: type=1400 audit(1781955779.055:3198): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file7" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 467.139497][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.182258][ T28] audit: type=1400 audit(1781955779.055:3199): avc: denied { write } for pid=28499 comm="syz.4.6652" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.211498][ T28] audit: type=1400 audit(1781955779.055:3200): avc: denied { write } for pid=28499 comm="syz.4.6652" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 468.174835][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 468.174852][ T28] audit: type=1400 audit(1781955780.185:3208): avc: denied { write } for pid=28553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.234514][ T28] audit: type=1400 audit(1781955780.255:3209): avc: denied { write } for pid=28564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.413452][ T28] audit: type=1400 audit(1781955780.425:3210): avc: denied { write } for pid=28567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.466639][ T28] audit: type=1400 audit(1781955780.465:3211): avc: denied { write } for pid=28578 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.898849][T28594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6669'. [ 470.372382][T28613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.392489][T28613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.610292][T16115] IPVS: starting estimator thread 0... [ 470.703450][T28619] IPVS: using max 2592 ests per chain, 129600 per kthread [ 471.212610][T28632] loop6: detected capacity change from 0 to 164 [ 471.397916][ T28] audit: type=1400 audit(1781955783.408:3212): avc: denied { setopt } for pid=28639 comm="syz.2.6689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 471.415684][T28632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.491208][T28632] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.534273][T28652] loop2: detected capacity change from 0 to 512 [ 471.543024][T28654] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.551851][T28652] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.6690: inode has both inline data and extents flags [ 471.565602][T28652] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 471.565808][T28652] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6690: couldn't read orphan inode 15 (err -117) [ 471.575021][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 471.575040][ C0] EXT4-fs (loop2): initial error at time 1781955783: ext4_orphan_get:1399: inode 15 [ 471.575082][ C0] EXT4-fs (loop2): last error at time 1781955783: ext4_orphan_get:1399: inode 15 [ 471.612679][T28654] rock: directory entry would overflow storage [ 471.618898][T28654] rock: sig=0x4f50, size=4, remaining=3 [ 471.627636][T28652] loop2: lost filesystem error report for type 5 error -117 [ 471.628424][T28652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.652634][ T28] audit: type=1400 audit(1781955783.678:3213): avc: denied { write } for pid=28651 comm="syz.2.6690" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.655679][T28654] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 471.678902][T28632] rock: directory entry would overflow storage [ 471.696605][T28632] rock: sig=0x4f50, size=4, remaining=3 [ 471.720766][ T28] audit: type=1400 audit(1781955783.748:3214): avc: denied { write } for pid=28651 comm="syz.2.6690" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.743856][T28632] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 471.775696][T28113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.936978][T28668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 471.984863][T28638] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.992036][T28638] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.001540][T28638] bridge_slave_0: entered allmulticast mode [ 472.009997][T28638] bridge_slave_0: entered promiscuous mode [ 472.018050][T28638] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.025621][T28638] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.033250][T28638] bridge_slave_1: entered allmulticast mode [ 472.040079][T28638] bridge_slave_1: entered promiscuous mode [ 472.068463][T28638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.083463][T28638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.108581][T28638] team0: Port device team_slave_0 added [ 472.115659][T28638] team0: Port device team_slave_1 added [ 472.136943][T28638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.162045][T28638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.223468][T28638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.244297][T28638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.263625][T28638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.313486][T28638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.374779][T28638] hsr_slave_0: entered promiscuous mode [ 472.384083][T28638] hsr_slave_1: entered promiscuous mode [ 472.401077][T28638] debugfs: 'hsr0' already exists in 'hsr' [ 472.418155][T28638] Cannot create hsr debugfs directory [ 472.712260][ T28] audit: type=1400 audit(1781955784.738:3215): avc: denied { write } for pid=28681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.757545][ T28] audit: type=1400 audit(1781955784.768:3216): avc: denied { write } for pid=28692 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.916919][ T28] audit: type=1400 audit(1781955784.948:3217): avc: denied { write } for pid=28696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.958501][T28638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.992595][T28638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.036234][T28638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.059897][T28638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.089157][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6704'. [ 473.134099][T28733] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.6705'. [ 473.148580][T28733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6705'. [ 473.180128][T28732] loop4: detected capacity change from 0 to 128 [ 473.201866][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 473.201884][ T28] audit: type=1400 audit(1781955785.228:3219): avc: denied { write } for pid=28717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.279438][ T28] audit: type=1400 audit(1781955785.298:3220): avc: denied { write } for pid=28739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.309395][T28721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.336481][T28638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.357381][T28638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.372065][T28638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.388457][T28638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.405851][T28732] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 473.492454][ T28] audit: type=1400 audit(1781955785.518:3221): avc: denied { write } for pid=28741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.552398][T28638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.564330][ T28] audit: type=1400 audit(1781955785.578:3222): avc: denied { write } for pid=28758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.604531][T28638] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.622909][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.630057][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.653538][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.660646][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.755719][ T28] audit: type=1400 audit(1781955785.788:3223): avc: denied { write } for pid=28760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.811462][ T28] audit: type=1400 audit(1781955785.838:3224): avc: denied { write } for pid=28779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.854131][T28638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.973809][ T28] audit: type=1400 audit(1781955785.998:3225): avc: denied { write } for pid=28783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.036378][ T28] audit: type=1400 audit(1781955786.068:3226): avc: denied { write } for pid=28803 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.067277][T28638] veth0_vlan: entered promiscuous mode [ 474.130483][T28638] veth1_vlan: entered promiscuous mode [ 474.148418][T28811] loop2: detected capacity change from 0 to 256 [ 474.189266][T28638] veth0_macvtap: entered promiscuous mode [ 474.218468][T28638] veth1_macvtap: entered promiscuous mode [ 474.252980][T28638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.286353][T28638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.322266][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.345323][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.356690][ T28] audit: type=1400 audit(1781955786.388:3227): avc: denied { write } for pid=28807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.386991][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.403260][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.451420][ T28] audit: type=1400 audit(1781955786.448:3228): avc: denied { write } for pid=28828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.820226][T28835] loop2: detected capacity change from 0 to 164 [ 474.963558][T28835] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.108948][T28872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6717'. [ 475.137231][T28872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6717'. [ 475.189998][ T9285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.202098][ T9285] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.237499][T28835] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.250463][ T9285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.273354][ T9285] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.305289][T28885] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 475.319428][ T9285] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.338558][ T9285] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.355099][T28885] rock: directory entry would overflow storage [ 475.384837][T28885] rock: sig=0x4f50, size=4, remaining=3 [ 475.421171][T28897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6721'. [ 475.423539][T28885] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 475.473849][T28835] rock: directory entry would overflow storage [ 475.555843][T28835] rock: sig=0x4f50, size=4, remaining=3 [ 475.563660][T28835] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 475.691387][T28923] loop4: detected capacity change from 0 to 2048 [ 475.729766][T28923] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.771001][T28923] EXT4-fs: Ignoring removed mblk_io_submit option [ 475.822279][T28923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.972246][T28947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.984052][T28947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.095853][ T9285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.118456][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.174443][ T9285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.197338][T26491] IPVS: starting estimator thread 0... [ 476.227748][T28958] netlink: 'syz.4.6735': attribute type 1 has an invalid length. [ 476.259158][ T9285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.283624][T28962] IPVS: using max 2400 ests per chain, 120000 per kthread [ 476.346608][ T9285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.563930][ T9285] bridge_slave_1: left allmulticast mode [ 476.573436][ T9285] bridge_slave_1: left promiscuous mode [ 476.581618][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.601208][ T9285] bridge_slave_0: left allmulticast mode [ 476.610446][ T9285] bridge_slave_0: left promiscuous mode [ 476.620197][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.769398][ T9285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.796985][ T9285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.815638][ T9285] bond0 (unregistering): Released all slaves [ 476.841389][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 476.932961][ T9285] hsr_slave_0: left promiscuous mode [ 476.952551][ T9285] hsr_slave_1: left promiscuous mode [ 476.966402][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.991032][ T9285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.012384][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.029628][ T9285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.062376][ T9285] veth1_macvtap: left promiscuous mode [ 477.078986][ T9285] veth0_macvtap: left promiscuous mode [ 477.095306][ T9285] veth1_vlan: left promiscuous mode [ 477.105974][ T9285] veth0_vlan: left promiscuous mode [ 477.278108][ T9285] team0 (unregistering): Port device team_slave_1 removed [ 477.300893][ T9285] team0 (unregistering): Port device team_slave_0 removed [ 477.415845][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 477.531979][T29047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.546059][T29047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.559022][T29051] loop0: detected capacity change from 0 to 2048 [ 477.585652][T29051] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.593124][T29051] EXT4-fs: Ignoring removed mblk_io_submit option [ 477.628703][T29051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.663973][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 477.682462][T28966] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.704881][T28966] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.727076][T28966] bridge_slave_0: entered allmulticast mode [ 477.748010][T28966] bridge_slave_0: entered promiscuous mode [ 477.771425][ T9285] IPVS: stop unused estimator thread 0... [ 477.780632][T28966] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.807786][T28966] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.821643][T28966] bridge_slave_1: entered allmulticast mode [ 477.830411][T28966] bridge_slave_1: entered promiscuous mode [ 477.830493][T28638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.849392][T28966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.863080][T28966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.949740][T28966] team0: Port device team_slave_0 added [ 477.964954][T28966] team0: Port device team_slave_1 added [ 478.042850][T28966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.077299][T28966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.105935][T29071] loop6: detected capacity change from 0 to 512 [ 478.144154][T28966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.165827][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 478.178265][T28966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.185487][T28966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.244704][T28966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.352625][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 478.417937][T29071] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 478.452566][T29071] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 478.478324][T29071] System zones: 0-1, 15-15, 18-18, 34-34 [ 478.493161][T29071] EXT4-fs (loop6): orphan cleanup on readonly fs [ 478.531884][T29071] __quota_error: 24 callbacks suppressed [ 478.532121][T29071] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 478.548822][T28966] hsr_slave_0: entered promiscuous mode [ 478.554311][T29071] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 478.582576][T28966] hsr_slave_1: entered promiscuous mode [ 478.585197][T29071] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 478.602253][T28966] debugfs: 'hsr0' already exists in 'hsr' [ 478.606981][T29071] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.6748: bad orphan inode 16 [ 478.621146][T28966] Cannot create hsr debugfs directory [ 478.638490][T29071] loop6: lost filesystem error report for type 5 error -117 [ 478.642039][T29071] ext4_test_bit(bit=15, block=18) = 1 [ 478.643588][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 478.643783][ C0] EXT4-fs (loop6): initial error at time 1781955790: ext4_orphan_get:1425 [ 478.643842][ C0] EXT4-fs (loop6): last error at time 1781955790: ext4_orphan_get:1425 [ 478.754570][T29071] is_bad_inode(inode)=0 [ 478.761986][T29071] NEXT_ORPHAN(inode)=0 [ 478.768416][T29071] max_ino=32 [ 478.787391][T29071] i_nlink=2 [ 478.825026][T29092] loop4: detected capacity change from 0 to 32768 [ 478.876998][T29092] loop4: p1 p3 < > [ 478.888196][T29071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.915708][T28966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.011906][T28966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.069404][T28966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.085326][T23929] udevd[23929]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 479.095535][T25518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.136501][T28966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.162254][T29102] loop6: detected capacity change from 0 to 512 [ 479.224411][T29102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.237059][T29102] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.261550][T28966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.295254][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.315201][T29114] xt_hashlimit: size too large, truncated to 1048576 [ 479.322273][T28966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.327735][T25518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.341524][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.349533][T28966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.362500][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.372469][T28966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.384636][T29117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6761'. [ 479.406400][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.509155][T28966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.534023][T28966] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.545378][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.552494][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.587165][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.594279][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.629764][T29134] loop4: detected capacity change from 0 to 512 [ 479.679574][T29134] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.6763: bit already cleared for inode 11 [ 479.707594][T29134] loop4: lost filesystem error report for type 5 error -117 [ 479.712796][T29134] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 479.723383][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 479.735305][ C0] EXT4-fs (loop4): initial error at time 1781955791: ext4_free_inode:356 [ 479.743782][ C0] EXT4-fs (loop4): last error at time 1781955791: ext4_free_inode:356 [ 479.747146][T29134] loop4: lost filesystem error report for type 5 error -117 [ 479.757630][T29134] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 479.774504][T29134] loop4: lost filesystem error report for type 5 error -117 [ 479.774889][T29134] EXT4-fs (loop4): 1 orphan inode deleted [ 479.792951][T29134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.848528][T28966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.903861][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.059476][T28966] veth0_vlan: entered promiscuous mode [ 480.077346][T28966] veth1_vlan: entered promiscuous mode [ 480.097410][T20196] syz_tun (unregistering): left allmulticast mode [ 480.105170][T20196] syz_tun (unregistering): left promiscuous mode [ 480.111603][T20196] bridge0: port 3(syz_tun) entered disabled state [ 480.134666][T28966] veth0_macvtap: entered promiscuous mode [ 480.161919][T28966] veth1_macvtap: entered promiscuous mode [ 480.189884][T28966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.216506][T28966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.242955][ T9285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.299670][ T9285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.332759][T29192] loop4: detected capacity change from 0 to 512 [ 480.375074][ T9285] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.395089][ T9285] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.408036][T29192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.427893][T29192] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.458191][ T28] audit: type=1400 audit(1781955792.488:3253): avc: denied { write } for pid=29189 comm="syz.4.6774" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.740110][T29191] loop6: detected capacity change from 0 to 512 [ 480.849030][T29191] EXT4-fs: inline encryption not supported [ 480.870133][T29191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.884913][T29191] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.983550][T29191] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 1 [ 481.011028][T29191] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 481.026102][T29191] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.6773: Failed to acquire dquot type 1 [ 481.043659][T29191] loop6: lost filesystem error report for type 5 error -5 [ 481.043989][T29191] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 481.056703][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 481.057061][ C0] EXT4-fs (loop6): initial error at time 1781955793: ext4_acquire_dquot:7041 [ 481.057281][ C0] EXT4-fs (loop6): last error at time 1781955793: ext4_acquire_dquot:7041 [ 481.164046][T29191] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.6773: corrupted inode contents [ 481.201381][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.215654][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.218250][T29191] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #12: comm syz.6.6773: mark_inode_dirty error [ 481.247166][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.273811][T29191] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.6773: corrupted inode contents [ 481.351573][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.354894][T29191] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.6773: mark_inode_dirty error [ 481.411449][T29213] loop4: detected capacity change from 0 to 128 [ 481.420626][T29213] EXT4-fs: Ignoring removed nobh option [ 481.460726][T29213] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 481.460996][T29213] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 481.464775][ T28] audit: type=1400 audit(1781955793.488:3254): avc: denied { write } for pid=29212 comm="syz.4.6778" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.573115][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.592656][T29172] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.632226][T29191] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.6773: corrupted inode contents [ 481.634080][T29172] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.652176][T29172] bridge_slave_0: entered allmulticast mode [ 481.658933][T29172] bridge_slave_0: entered promiscuous mode [ 481.659014][T27785] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.665818][T29172] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.681035][T29172] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.685560][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.688370][T29172] bridge_slave_1: entered allmulticast mode [ 481.696242][T29191] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 481.698576][T29172] bridge_slave_1: entered promiscuous mode [ 481.765018][T29191] loop6: lost filesystem error report for type 5 error -117 [ 481.785926][T29172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.797003][T29191] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #12: comm syz.6.6773: corrupted inode contents [ 481.824354][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.826509][T29172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.848198][T29191] EXT4-fs error (device loop6): ext4_truncate:4691: inode #12: comm syz.6.6773: mark_inode_dirty error [ 481.861372][T29172] team0: Port device team_slave_0 added [ 481.868507][T29172] team0: Port device team_slave_1 added [ 481.896446][T29172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.903859][T29172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.916639][T29191] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 481.930658][T29172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.931587][T29172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.931633][T29172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.931704][T29172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.952988][T29172] hsr_slave_0: entered promiscuous mode [ 481.997626][T29191] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 482.009760][T29172] hsr_slave_1: entered promiscuous mode [ 482.010308][T29172] debugfs: 'hsr0' already exists in 'hsr' [ 482.010324][T29172] Cannot create hsr debugfs directory [ 482.081425][T29191] loop6: lost filesystem error report for type 5 error -117 [ 482.098793][T29191] EXT4-fs (loop6): 1 truncate cleaned up [ 482.326955][T29191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.393461][ T28] audit: type=1400 audit(1781955794.368:3255): avc: denied { write } for pid=29237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.447520][ T28] audit: type=1400 audit(1781955794.408:3256): avc: denied { write } for pid=29248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.547029][T29172] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.567635][T29172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.593998][T29172] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.605302][T25518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.620626][ T28] audit: type=1400 audit(1781955794.648:3257): avc: denied { write } for pid=29250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.648853][T29172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.683222][T29172] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.688243][ T28] audit: type=1400 audit(1781955794.708:3258): avc: denied { write } for pid=29266 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.720756][T29172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.747058][T29172] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.761055][T29172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.862931][T29172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.890186][T29291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29291 comm=syz.5.6789 [ 482.892687][T29172] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.922421][T29291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6789'. [ 482.931850][ T28] audit: type=1400 audit(1781955794.958:3259): avc: denied { write } for pid=29272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.959531][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.966655][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.982258][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.989667][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.434367][T29172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.473469][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6799'. [ 483.565422][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 483.565437][ T28] audit: type=1400 audit(1781955795.598:3264): avc: denied { write } for pid=29358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.721228][ T28] audit: type=1400 audit(1781955795.748:3265): avc: denied { write } for pid=29364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.793959][ T28] audit: type=1400 audit(1781955795.818:3266): avc: denied { write } for pid=29381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.845327][T29172] veth0_vlan: entered promiscuous mode [ 483.862009][T29172] veth1_vlan: entered promiscuous mode [ 483.924834][T29399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.940727][T29172] veth0_macvtap: entered promiscuous mode [ 483.943072][T29399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.970133][T29172] veth1_macvtap: entered promiscuous mode [ 483.995345][ T28] audit: type=1400 audit(1781955796.018:3267): avc: denied { write } for pid=29389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.027176][T29172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.053182][T29172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.065483][ T28] audit: type=1400 audit(1781955796.098:3268): avc: denied { write } for pid=29409 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.107364][ T9285] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.116588][ T9285] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.149578][ T9285] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.164520][ T9285] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.357757][ T28] audit: type=1400 audit(1781955796.388:3269): avc: denied { write } for pid=29419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.430349][ T28] audit: type=1400 audit(1781955796.448:3270): avc: denied { write } for pid=29437 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.632316][T29418] loop0: detected capacity change from 0 to 512 [ 484.650407][ T28] audit: type=1400 audit(1781955796.678:3271): avc: denied { write } for pid=29439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.722270][ T28] audit: type=1400 audit(1781955796.738:3272): avc: denied { write } for pid=29461 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.898815][T29477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6818'. [ 484.950494][ T28] audit: type=1400 audit(1781955796.978:3273): avc: denied { write } for pid=29466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.030987][T29491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6821'. [ 485.095122][T29498] loop5: detected capacity change from 0 to 1024 [ 485.179348][T29418] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 485.219718][T29418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 485.222373][T29498] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 485.233553][T29418] System zones: 0-1, 15-15, 18-18, 34-34 [ 485.288427][T29418] EXT4-fs (loop0): orphan cleanup on readonly fs [ 485.310527][T29418] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 485.315724][T29498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.338292][T29418] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 485.357167][T29490] syzkaller0: entered promiscuous mode [ 485.360438][T29418] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.6808: bad orphan inode 16 [ 485.378174][T29490] syzkaller0: entered allmulticast mode [ 485.379355][T29418] loop0: lost filesystem error report for type 5 error -117 [ 485.389429][T29418] ext4_test_bit(bit=15, block=18) = 1 [ 485.397082][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 485.397149][ C0] EXT4-fs (loop0): initial error at time 1781955797: ext4_orphan_get:1425 [ 485.397691][ C0] EXT4-fs (loop0): last error at time 1781955797: ext4_orphan_get:1425 [ 485.442038][T29418] is_bad_inode(inode)=0 [ 485.448629][T29418] NEXT_ORPHAN(inode)=0 [ 485.456609][T29418] max_ino=32 [ 485.461709][T29418] i_nlink=2 [ 485.483804][T29418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.546406][T29520] loop9: detected capacity change from 0 to 512 [ 485.594041][T29520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.608133][T29525] xt_hashlimit: size too large, truncated to 1048576 [ 485.681882][T29520] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.793764][T16126] IPVS: starting estimator thread 0... [ 485.904312][T29541] IPVS: using max 2544 ests per chain, 127200 per kthread [ 485.982699][T28638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.148787][T29172] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.211374][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.730238][T29574] loop6: detected capacity change from 0 to 256 [ 487.682196][T29653] loop0: detected capacity change from 0 to 128 [ 487.759437][T29654] loop5: detected capacity change from 0 to 256 [ 487.827224][T29655] loop6: detected capacity change from 0 to 512 [ 487.859283][T29655] FAT-fs (loop6): Directory bread(block 199916) failed [ 487.869518][T29655] FAT-fs (loop6): Directory bread(block 199917) failed [ 487.877028][T29655] FAT-fs (loop6): Directory bread(block 199918) failed [ 487.884050][T29655] FAT-fs (loop6): Directory bread(block 199919) failed [ 487.890992][T29655] FAT-fs (loop6): Directory bread(block 199920) failed [ 487.898187][T29655] FAT-fs (loop6): Directory bread(block 199921) failed [ 487.905279][T29655] FAT-fs (loop6): Directory bread(block 199922) failed [ 487.912268][T29655] FAT-fs (loop6): Directory bread(block 199923) failed [ 487.981707][T29649] FAT-fs (loop6): Directory bread(block 199916) failed [ 487.988834][T29649] FAT-fs (loop6): Directory bread(block 199917) failed [ 491.457789][T16112] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 491.467198][T16112] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 491.478798][T29697] hid-generic 0000:0000:0000.000A: pid 29697 passed too short report [ 491.505764][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 491.505780][ T28] audit: type=1400 audit(1781955803.538:3285): avc: denied { write } for pid=29704 comm="syz.4.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 491.560972][T29701] fido_id[29701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 491.589994][ T28] audit: type=1400 audit(1781955803.618:3286): avc: denied { setopt } for pid=29704 comm="syz.4.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 491.626705][ T28] audit: type=1400 audit(1781955803.618:3287): avc: denied { write } for pid=29695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.697259][ T28] audit: type=1400 audit(1781955803.728:3288): avc: denied { write } for pid=29722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.926942][ T28] audit: type=1400 audit(1781955803.958:3289): avc: denied { write } for pid=29730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.016273][T29754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6901'. [ 492.039581][ T28] audit: type=1400 audit(1781955804.068:3290): avc: denied { write } for pid=29752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.270546][ T28] audit: type=1400 audit(1781955804.298:3291): avc: denied { write } for pid=29760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.357326][ T28] audit: type=1400 audit(1781955804.368:3292): avc: denied { write } for pid=29776 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.615182][ T28] audit: type=1400 audit(1781955804.648:3293): avc: denied { write } for pid=29780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.666440][T29787] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.673748][T29787] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.728044][ T28] audit: type=1400 audit(1781955804.758:3294): avc: denied { write } for pid=29799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.821616][T29787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.829723][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6908'. [ 492.844894][T29787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.880741][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6908'. [ 492.993714][ T9999] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.010061][ T9999] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.086253][ T9999] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.127179][ T9999] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.207872][T29756] loop0: detected capacity change from 0 to 1764 [ 493.308521][T29811] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6911'. [ 493.495829][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 493.962987][T29827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6917'. [ 494.077861][T29837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6921'. [ 494.112899][T29839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6922'. [ 494.112973][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6921'. [ 495.355507][T29871] loop5: detected capacity change from 0 to 164 [ 495.498106][T29871] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 495.536984][T29873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6936'. [ 495.546418][T29821] Bluetooth: hci0: command 0x1003 tx timeout [ 495.552488][ T3801] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 495.574473][T29871] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 495.592109][T29873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6936'. [ 495.638051][T29876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 495.661383][T29871] rock: directory entry would overflow storage [ 495.662568][T29876] rock: directory entry would overflow storage [ 495.682241][T29871] rock: sig=0x4f50, size=4, remaining=3 [ 495.692497][T29871] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 495.704428][T29876] rock: sig=0x4f50, size=4, remaining=3 [ 495.745788][T29876] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 495.769157][T29882] loop0: detected capacity change from 0 to 2048 [ 495.786368][T29882] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 495.836669][T29886] loop5: detected capacity change from 0 to 128 [ 495.874652][T29886] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 495.939709][ T2122] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 497.035300][T29950] __nla_validate_parse: 2 callbacks suppressed [ 497.035320][T29950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6964'. [ 497.054770][T29953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6965'. [ 497.175004][T29959] netlink: 'syz.4.6968': attribute type 4 has an invalid length. [ 497.203593][T29966] netlink: 'syz.6.6971': attribute type 4 has an invalid length. [ 497.205600][T29959] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6968'. [ 497.222071][T29966] netlink: 'syz.6.6971': attribute type 4 has an invalid length. [ 497.269689][T29968] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.291911][T29968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.299180][T29968] IPv6: NLM_F_CREATE should be set when creating new route [ 497.328352][T29975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.335709][T29975] IPv6: NLM_F_CREATE should be set when creating new route [ 497.355309][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 497.355327][ T28] audit: type=1326 audit(1781955809.388:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.441088][ T28] audit: type=1326 audit(1781955809.388:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.549180][ T28] audit: type=1326 audit(1781955809.388:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.581308][ T28] audit: type=1326 audit(1781955809.388:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.607383][ T28] audit: type=1326 audit(1781955809.388:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.622025][T29959] .`: renamed from bond0 (while UP) [ 497.637081][ T28] audit: type=1326 audit(1781955809.388:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.666737][ T28] audit: type=1326 audit(1781955809.388:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.692855][T29985] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6978'. [ 497.701878][ T28] audit: type=1326 audit(1781955809.388:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.728357][ T28] audit: type=1326 audit(1781955809.388:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1f72ebce59 code=0x7ffc0000 [ 497.754408][ T28] audit: type=1326 audit(1781955809.448:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.0.6974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f72e7d68e code=0x7ffc0000 [ 498.378812][T29988] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6980'. [ 498.411721][T29994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6979'. [ 498.676412][T30011] loop6: detected capacity change from 0 to 2048 [ 498.730424][T30011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.811242][T30010] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 498.817561][T30018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6991'. [ 498.826949][T30010] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 498.864189][T30010] EXT4-fs (loop6): This should not happen!! Data will be lost [ 498.864189][T30010] [ 498.879643][T30018] netlink: 'syz.5.6991': attribute type 7 has an invalid length. [ 498.887699][T30018] netlink: 'syz.5.6991': attribute type 8 has an invalid length. [ 498.895628][T30018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6991'. [ 498.907496][T30018] erspan0: entered promiscuous mode [ 498.917448][T30018] gretap0: entered promiscuous mode [ 498.919673][T30010] EXT4-fs (loop6): Total free blocks count 0 [ 498.927920][T30021] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6991'. [ 498.938180][T30018] erspan0: left promiscuous mode [ 498.943215][T30021] netlink: 'syz.5.6991': attribute type 7 has an invalid length. [ 498.952521][T30021] netlink: 'syz.5.6991': attribute type 8 has an invalid length. [ 498.960716][T30018] gretap0: left promiscuous mode [ 498.965853][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6991'. [ 498.971734][T30010] EXT4-fs (loop6): Free/Dirty block details [ 498.987119][T30021] erspan0: entered promiscuous mode [ 498.993976][T30021] gretap0: entered promiscuous mode [ 499.000629][T30010] EXT4-fs (loop6): free_blocks=4096 [ 499.006373][T30021] erspan0: left promiscuous mode [ 499.014732][T30010] EXT4-fs (loop6): dirty_blocks=32 [ 499.020020][T30021] gretap0: left promiscuous mode [ 499.023098][T30010] EXT4-fs (loop6): Block reservation details [ 499.031914][T30010] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 499.126027][T30027] loop9: detected capacity change from 0 to 164 [ 499.133342][T30027] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 499.144592][T30027] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 499.351959][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 4 with error 28 [ 499.381537][T25518] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 499.551351][T30045] netlink: 'syz.6.7000': attribute type 11 has an invalid length. [ 499.567032][T16109] IPVS: starting estimator thread 0... [ 499.673591][T30050] IPVS: using max 2496 ests per chain, 124800 per kthread [ 500.038545][T30061] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.046506][T30061] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.802679][T30107] netlink: 'syz.9.7026': attribute type 1 has an invalid length. [ 500.826366][T30107] netlink: 'syz.9.7026': attribute type 4 has an invalid length. [ 501.147035][T30124] program syz.5.7032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.451908][T30135] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.470840][T30135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.478194][T30135] IPv6: NLM_F_CREATE should be set when creating new route [ 501.504668][T30135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.511924][T30135] IPv6: NLM_F_CREATE should be set when creating new route [ 501.961322][T30162] IPv6: NLM_F_CREATE should be specified when creating new route [ 502.905147][T30187] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.917708][T30187] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.926499][T30187] bridge_slave_0: entered allmulticast mode [ 502.933331][T30187] bridge_slave_0: entered promiscuous mode [ 502.941134][T30187] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.967974][T30187] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.975323][T30187] bridge_slave_1: entered allmulticast mode [ 502.981948][T30187] bridge_slave_1: entered promiscuous mode [ 503.000767][T30187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.011517][T30187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.042445][T30187] team0: Port device team_slave_0 added [ 503.049287][T30187] team0: Port device team_slave_1 added [ 503.084700][T30207] syzkaller0: entered promiscuous mode [ 503.090259][T30207] syzkaller0: entered allmulticast mode [ 503.109820][T30187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.117085][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.143256][T30187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.162320][T30187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.169377][T30187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.195552][T30187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.225144][T30187] hsr_slave_0: entered promiscuous mode [ 503.231433][T30187] hsr_slave_1: entered promiscuous mode [ 503.237699][T30187] debugfs: 'hsr0' already exists in 'hsr' [ 503.243854][T30187] Cannot create hsr debugfs directory [ 503.330691][T30187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.341236][T30187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.376444][T30084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.421746][T30187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.452710][T30187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.574388][T30187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.596323][T30187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.688079][T30187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.701475][T30187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.833897][T30187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.845127][T30242] loop0: detected capacity change from 0 to 512 [ 503.874334][T30242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 503.914872][T30242] EXT4-fs (loop0): 1 truncate cleaned up [ 503.927392][T30242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.958540][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 503.958577][ T28] audit: type=1400 audit(1781955815.988:3325): avc: denied { write } for pid=30241 comm="syz.0.7077" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.061904][T30187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.078167][T30187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.108515][T30187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.111059][T28638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.125439][T30187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.137403][T30187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.176762][T30187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.190850][T30252] loop4: detected capacity change from 0 to 128 [ 504.202546][T30187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.227898][T30252] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 504.257489][T30187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.267251][T30252] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 504.268926][T30187] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.301579][ T28] audit: type=1400 audit(1781955816.338:3326): avc: denied { write } for pid=30251 comm="syz.4.7079" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.335844][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.342970][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.352326][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.359434][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.384658][T30187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.395283][T30187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.396783][T27785] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.473198][T30274] __nla_validate_parse: 34 callbacks suppressed [ 504.473216][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7084'. [ 504.557223][T30187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.685503][T30290] loop9: detected capacity change from 0 to 512 [ 504.726864][T30187] veth0_vlan: entered promiscuous mode [ 504.747188][T30290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 504.750758][T30187] veth1_vlan: entered promiscuous mode [ 504.775071][T30290] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.801528][T30290] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 504.814021][T30290] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 504.829866][T30290] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.7087: Failed to acquire dquot type 0 [ 504.843672][T30187] veth0_macvtap: entered promiscuous mode [ 504.859474][T30299] loop0: detected capacity change from 0 to 1024 [ 504.870007][T30187] veth1_macvtap: entered promiscuous mode [ 504.887330][T30299] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 504.896579][T30187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.909064][T30187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.922196][T30290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 504.940984][ T9285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.944089][T30299] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.7090: lblock 2 mapped to illegal pblock 2 (length 1) [ 504.956298][ T9285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.966922][T30299] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 504.972975][T30299] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 504.982089][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 504.982129][ C1] EXT4-fs (loop0): initial error at time 1781955816: ext4_map_blocks:791: inode 3: block 2 [ 504.982169][ C1] EXT4-fs (loop0): last error at time 1781955816: ext4_map_blocks:791: inode 3: block 2 [ 505.019424][ T9285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.020405][T30299] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.7090: lblock 0 mapped to illegal pblock 48 (length 1) [ 505.039798][ T9285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.044245][T30299] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 505.052555][T30299] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 505.070843][T30299] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.7090: Failed to acquire dquot type 0 [ 505.082826][T30299] loop0: lost filesystem error report for type 5 error -117 [ 505.083238][T30299] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 505.100254][T30299] loop0: lost filesystem error report for type 5 error -117 [ 505.103884][T30299] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.7090: mark_inode_dirty error [ 505.124203][T30299] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 505.124407][T30299] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 505.153286][T30299] EXT4-fs (loop0): 1 orphan inode deleted [ 505.164222][ T30] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.180253][T30299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.198386][ T30] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 505.198526][ T30] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 505.248350][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 505.380971][ T28] audit: type=1400 audit(1781955817.408:3327): avc: denied { write } for pid=30298 comm="syz.0.7090" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.444156][ T28] audit: type=1400 audit(1781955817.408:3328): avc: denied { create } for pid=30298 comm="syz.0.7090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 505.568015][T28638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.577399][ T12] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 505.616141][ T12] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 505.616285][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 505.659197][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 505.684238][ T12] loop0: lost filesystem error report for type 5 error -117 [ 505.684594][T28638] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 505.721460][T28638] loop0: lost filesystem error report for type 5 error -117 [ 505.721629][T28638] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 505.753093][T28638] loop0: lost filesystem error report for type 5 error -117 [ 505.754752][T28638] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 505.764668][T30330] bridge1: entered promiscuous mode [ 505.794883][T28638] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 506.005032][T30347] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7117'. [ 507.336738][T30393] loop1: detected capacity change from 0 to 1024 [ 507.365202][T30393] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 507.394778][T30393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.462164][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.114884][T30441] loop5: detected capacity change from 0 to 512 [ 508.152162][T30441] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 508.195545][T30441] EXT4-fs (loop5): 1 truncate cleaned up [ 508.201784][T30441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.385478][T26486] IPVS: starting estimator thread 0... [ 508.483988][T30452] IPVS: using max 2304 ests per chain, 115200 per kthread [ 508.579470][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.676733][T30469] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 509.230148][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7168'. [ 509.282941][T30505] loop0: detected capacity change from 0 to 1024 [ 509.305533][T30505] EXT4-fs: Ignoring removed oldalloc option [ 509.329740][T30505] EXT4-fs: Ignoring removed oldalloc option [ 509.344673][T30505] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 509.373328][T30505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.401321][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 509.401338][ T28] audit: type=1400 audit(1781955821.428:3333): avc: denied { write } for pid=30504 comm="syz.0.7170" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.510494][ T28] audit: type=1400 audit(1781955821.458:3334): avc: denied { write } for pid=30504 comm="syz.0.7170" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.579137][ T28] audit: type=1400 audit(1781955821.608:3335): avc: denied { ioctl } for pid=30514 comm="syz.1.7173" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 509.625034][T28638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.631960][T30517] xt_hashlimit: size too large, truncated to 1048576 [ 509.637844][ T28] audit: type=1400 audit(1781955821.648:3336): avc: denied { write } for pid=28638 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.666089][ T28] audit: type=1400 audit(1781955821.648:3337): avc: denied { write } for pid=28638 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.699191][ T28] audit: type=1400 audit(1781955821.648:3338): avc: denied { write } for pid=28638 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.726546][ T28] audit: type=1400 audit(1781955821.648:3339): avc: denied { unlink } for pid=28638 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 509.750783][ T28] audit: type=1400 audit(1781955821.648:3340): avc: denied { write } for pid=28638 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.776801][ T28] audit: type=1400 audit(1781955821.648:3341): avc: denied { write } for pid=28638 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.800964][ T28] audit: type=1400 audit(1781955821.648:3342): avc: denied { write } for pid=28638 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 510.038305][T30536] -1: renamed from syzkaller0 [ 510.900161][T30578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7198'. [ 510.994560][T30590] loop0: detected capacity change from 0 to 128 [ 511.004706][T30590] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 511.011247][T30593] loop1: detected capacity change from 0 to 128 [ 511.023908][T30590] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.048935][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.074340][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.094714][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.120693][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.124409][T28638] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 511.130401][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.186486][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.220872][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.256910][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.267570][T30593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 511.382033][T30593] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.390027][T30593] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.417566][T30600] loop0: detected capacity change from 0 to 512 [ 511.431328][T30600] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 511.454934][T30600] EXT4-fs: error: could not find journal device path [ 511.857369][T30593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.877563][T30593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.969798][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.005577][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.040670][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.075142][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.484455][T30636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=30636 comm=syz.9.7219 [ 512.841982][T30642] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.849179][T30642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.856557][T30642] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.863694][T30642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.875961][T30642] 8021q: adding VLAN 0 to HW filter on device .` [ 513.361893][T30670] syzkaller0: entered promiscuous mode [ 513.376424][T30670] syzkaller0: entered allmulticast mode [ 513.505848][T30677] netlink: 'syz.5.7235': attribute type 10 has an invalid length. [ 513.525912][T30677] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.552640][T30677] bond0: (slave team0): Enslaving as an active interface with an up link [ 513.636929][T30679] loop4: detected capacity change from 0 to 8192 [ 513.706945][T30679] loop4: p1 p2 p3 [ 513.711001][T30679] loop4: p1 size 67111168 extends beyond EOD, truncated [ 513.734723][T30679] loop4: p2 size 8388608 extends beyond EOD, truncated [ 513.764909][T30679] loop4: p3 start 4294901760 is beyond EOD, truncated [ 514.286382][T30724] loop5: detected capacity change from 0 to 128 [ 514.313099][T30724] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 514.332872][T30724] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.499661][T28966] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.575796][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 514.575812][ T28] audit: type=1400 audit(1781955826.608:3358): avc: denied { ioctl } for pid=30744 comm="syz.4.7260" path="socket:[94127]" dev="sockfs" ino=94127 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.644929][T30747] RDS: rds_bind could not find a transport for 8775:7300:0:0:e00::, load rds_tcp or rds_rdma? [ 514.730888][T30752] syz_tun: entered allmulticast mode [ 514.742442][T30750] syz_tun: left allmulticast mode [ 514.924609][T30765] loop5: detected capacity change from 0 to 512 [ 514.937579][T30765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 514.963644][T30765] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 514.998686][T30765] System zones: 1-12 [ 515.024101][T30765] EXT4-fs (loop5): 1 truncate cleaned up [ 515.037205][T30765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.162113][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.485333][T30791] netlink: 'syz.0.7279': attribute type 10 has an invalid length. [ 515.849238][T30802] loop1: detected capacity change from 0 to 4096 [ 515.888841][T30802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.937743][T30797] loop4: detected capacity change from 0 to 128 [ 515.958822][ T28] audit: type=1400 audit(1781955827.988:3359): avc: denied { write } for pid=30801 comm="syz.1.7284" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.059831][T30816] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 516.096247][ T28] audit: type=1400 audit(1781955828.128:3360): avc: denied { relabelto } for pid=30815 comm="syz.9.7291" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 516.157630][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.201304][ T28] audit: type=1400 audit(1781955828.128:3361): avc: denied { associate } for pid=30815 comm="syz.9.7291" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=543 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 516.245513][T30797] FAT-fs (loop4): error, clusters badly computed (1 != 163841) [ 516.259988][ T28] audit: type=1400 audit(1781955828.178:3362): avc: denied { read } for pid=30815 comm="syz.9.7291" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 516.260082][ T28] audit: type=1400 audit(1781955828.178:3363): avc: denied { open } for pid=30815 comm="syz.9.7291" path="/102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 516.260127][ T28] audit: type=1400 audit(1781955828.208:3364): avc: denied { unlink } for pid=29172 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 516.343852][T30823] __nla_validate_parse: 135 callbacks suppressed [ 516.343872][T30823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7292'. [ 516.343893][T30823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7292'. [ 516.575929][T30797] FAT-fs (loop4): Filesystem has been set read-only [ 516.595798][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.609657][T30797] FAT-fs (loop4): error, clusters badly computed (2 != 163842) [ 516.618792][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.618951][T30797] FAT-fs (loop4): error, clusters badly computed (3 != 163843) [ 516.637358][T30797] FAT-fs (loop4): error, clusters badly computed (4 != 163844) [ 516.645042][T30797] FAT-fs (loop4): error, clusters badly computed (5 != 163845) [ 516.652979][T30845] loop5: detected capacity change from 0 to 256 [ 516.684721][T30797] FAT-fs (loop4): error, clusters badly computed (6 != 163846) [ 516.697376][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.702163][T30797] FAT-fs (loop4): error, clusters badly computed (7 != 163847) [ 516.726911][T30797] FAT-fs (loop4): error, clusters badly computed (8 != 163848) [ 516.730290][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.754747][T30797] FAT-fs (loop4): error, clusters badly computed (9 != 163849) [ 516.764528][T30797] FAT-fs (loop4): error, clusters badly computed (10 != 163850) [ 516.820443][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.832514][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.034960][T30832] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.042104][T30832] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.063751][T30832] bridge_slave_0: entered allmulticast mode [ 517.074563][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7308'. [ 517.080787][T30832] bridge_slave_0: entered promiscuous mode [ 517.086594][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7308'. [ 517.097785][T30832] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.109348][T30832] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.117153][T30832] bridge_slave_1: entered allmulticast mode [ 517.123976][T30832] bridge_slave_1: entered promiscuous mode [ 517.150235][ T12] bridge_slave_1: left allmulticast mode [ 517.156037][ T12] bridge_slave_1: left promiscuous mode [ 517.161908][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.192766][ T12] bridge_slave_0: left allmulticast mode [ 517.198564][ T12] bridge_slave_0: left promiscuous mode [ 517.205057][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.303175][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.306898][T30890] loop1: detected capacity change from 0 to 512 [ 517.319142][ T28] audit: type=1400 audit(1781955829.348:3365): avc: denied { bind } for pid=30887 comm="syz.9.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 517.340336][T30890] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.355683][T30890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.365207][T30890] EXT4-fs (loop1): 1 orphan inode deleted [ 517.371727][T30890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.384638][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.395674][ T12] bond0 (unregistering): Released all slaves [ 517.416230][T30832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.426690][T30832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.429500][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.484145][T30832] team0: Port device team_slave_0 added [ 517.511751][T30832] team0: Port device team_slave_1 added [ 517.556826][T30832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.568162][T30832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.595513][T30832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.615767][T30832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.639229][ T28] audit: type=1400 audit(1781955829.668:3366): avc: denied { write } for pid=30900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.664499][T30832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.697277][T30832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.724241][ T28] audit: type=1400 audit(1781955829.758:3367): avc: denied { write } for pid=30918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.889906][ T12] hsr_slave_0: left promiscuous mode [ 517.900296][ T12] hsr_slave_1: left promiscuous mode [ 517.907392][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.929978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.939708][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.948171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.971890][ T12] veth1_macvtap: left promiscuous mode [ 517.977917][ T12] veth0_macvtap: left promiscuous mode [ 517.985883][ T12] veth1_vlan: left promiscuous mode [ 518.017489][ T12] veth0_vlan: left promiscuous mode [ 518.029472][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7327'. [ 518.081125][T30938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7327'. [ 518.187108][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7327'. [ 518.223991][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.236463][ T12] team0 (unregistering): Port device team_slave_0 removed [ 518.321946][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 518.405736][T30954] io-wq is not configured for unbound workers [ 518.430296][T30832] hsr_slave_0: entered promiscuous mode [ 518.458725][T30832] hsr_slave_1: entered promiscuous mode [ 518.470195][T30832] debugfs: 'hsr0' already exists in 'hsr' [ 518.476317][T30832] Cannot create hsr debugfs directory [ 518.660838][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 518.786654][ T12] IPVS: stop unused estimator thread 0... [ 519.024065][T30832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 519.039195][T31030] loop4: detected capacity change from 0 to 4096 [ 519.052369][T30832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.085802][T30832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 519.098676][T31030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.132310][T30832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.147018][T30832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 519.163228][T30832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.175008][T30832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.204209][T30832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 519.218646][T31052] netlink: 'syz.9.7349': attribute type 10 has an invalid length. [ 519.236615][T31052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.245338][T31052] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 519.260170][T31060] loop1: detected capacity change from 0 to 512 [ 519.296037][T31052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.307762][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.325180][T31052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.348384][T31052] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 519.372586][T31052] bond0 (unregistering): Released all slaves [ 519.417042][T30832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.444977][T30832] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.471643][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.478897][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.512964][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.520096][ T2122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.542551][T31086] loop1: detected capacity change from 0 to 512 [ 519.568184][T31086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.610770][T31086] xt_hashlimit: size too large, truncated to 1048576 [ 519.809747][T30832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.839269][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.906479][T31121] loop4: detected capacity change from 0 to 256 [ 519.915002][T31121] vfat: Unknown parameter 'nnonumtail' [ 519.963825][T31121] loop4: detected capacity change from 0 to 1024 [ 520.007747][T31121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.037430][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 520.037447][ T28] audit: type=1400 audit(1781955832.068:3380): avc: denied { write } for pid=31120 comm="syz.4.7363" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.052067][T30832] veth0_vlan: entered promiscuous mode [ 520.081199][T30832] veth1_vlan: entered promiscuous mode [ 520.101089][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.111944][T30832] veth0_macvtap: entered promiscuous mode [ 520.124792][T30832] veth1_macvtap: entered promiscuous mode [ 520.152327][T30832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.165252][T30832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.183001][ T2122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.205524][T31146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31146 comm=syz.1.7371 [ 520.228706][ T2122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.248497][ T2122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.273081][T31142] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7370'. [ 520.293172][ T2122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.992059][T31200] netlink: 'syz.4.7393': attribute type 2 has an invalid length. [ 521.067292][T31207] netlink: 'syz.4.7393': attribute type 2 has an invalid length. [ 521.216377][T31218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7400'. [ 521.272807][T31220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7402'. [ 521.428835][ T28] audit: type=1400 audit(1781955833.458:3381): avc: denied { mount } for pid=31241 comm="syz.9.7410" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 521.551166][T31249] program syz.1.7411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.984157][T31274] __nla_validate_parse: 1 callbacks suppressed [ 521.984178][T31274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7421'. [ 522.447137][T31313] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.7436'. [ 522.493276][T31317] syzkaller0: entered promiscuous mode [ 522.498899][T31317] syzkaller0: entered allmulticast mode [ 522.555915][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7439'. [ 522.613650][T31325] loop0: detected capacity change from 0 to 512 [ 522.695366][T31325] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.7440: inode has both inline data and extents flags [ 522.733819][T31325] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 522.733982][T31325] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7440: couldn't read orphan inode 15 (err -117) [ 522.755110][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 522.755135][ C0] EXT4-fs (loop0): initial error at time 1781955834: ext4_orphan_get:1399: inode 15 [ 522.755167][ C0] EXT4-fs (loop0): last error at time 1781955834: ext4_orphan_get:1399: inode 15 [ 522.806224][T31325] loop0: lost filesystem error report for type 5 error -117 [ 522.806784][T31325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.809043][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7449'. [ 522.856121][ T28] audit: type=1400 audit(1781955834.888:3382): avc: denied { write } for pid=31324 comm="syz.0.7440" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 522.963575][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7451'. [ 522.981097][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7451'. [ 522.981260][T30832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.006618][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7451'. [ 523.198636][T31375] loop0: detected capacity change from 0 to 512 [ 523.230435][T31375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 523.286620][T31375] EXT4-fs (loop0): 1 truncate cleaned up [ 523.309286][T31375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.380761][ T28] audit: type=1400 audit(1781955835.408:3383): avc: denied { write } for pid=31374 comm="syz.0.7461" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.717345][T30832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.414124][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7480'. [ 524.424035][T31422] netlink: 'syz.4.7480': attribute type 7 has an invalid length. [ 524.432060][T31422] netlink: 'syz.4.7480': attribute type 8 has an invalid length. [ 524.440514][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7480'. [ 524.461750][ T28] audit: type=1400 audit(1781955836.488:3384): avc: denied { getopt } for pid=31418 comm="syz.5.7479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.795361][T31434] loop5: detected capacity change from 0 to 512 [ 524.796727][T31435] syz_tun: entered allmulticast mode [ 524.815378][T31434] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.7486: bad orphan inode 15 [ 524.826151][T31434] loop5: lost filesystem error report for type 5 error -117 [ 524.826378][T31434] ext4_test_bit(bit=14, block=18) = 1 [ 524.833698][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 524.833718][ C0] EXT4-fs (loop5): initial error at time 1781955836: ext4_orphan_get:1425 [ 524.833742][ C0] EXT4-fs (loop5): last error at time 1781955836: ext4_orphan_get:1425 [ 524.862643][T31434] is_bad_inode(inode)=0 [ 524.866861][T31434] NEXT_ORPHAN(inode)=1023 [ 524.871288][T31434] max_ino=32 [ 524.874584][T31434] i_nlink=0 [ 524.876532][T31433] syz_tun: left allmulticast mode [ 524.883416][T31434] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.7486: corrupted xattr block 19: invalid header [ 524.923391][T31434] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.927601][T31434] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 524.947066][T31434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 524.960650][T31434] ext4 filesystem being mounted at /148/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 525.149822][T31445] loop1: detected capacity change from 0 to 512 [ 525.198767][T31445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 525.226774][T31445] EXT4-fs (loop1): 1 truncate cleaned up [ 525.232942][T31445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.328442][ T28] audit: type=1400 audit(1781955837.358:3385): avc: denied { write } for pid=31444 comm="syz.1.7490" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 525.484267][T31459] loop4: detected capacity change from 0 to 128 [ 525.494166][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.581036][T31459] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 525.610793][T31459] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.687665][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 525.874294][T31479] loop5: detected capacity change from 0 to 512 [ 525.919787][T31479] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.7503: inode has both inline data and extents flags [ 525.959948][T31479] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.961982][T31479] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7503: couldn't read orphan inode 15 (err -117) [ 525.971241][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 525.971262][ C0] EXT4-fs (loop5): initial error at time 1781955837: ext4_orphan_get:1399: inode 15 [ 525.971309][ C0] EXT4-fs (loop5): last error at time 1781955837: ext4_orphan_get:1399: inode 15 [ 526.008492][T31479] loop5: lost filesystem error report for type 5 error -117 [ 526.009956][T31479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.033795][ T28] audit: type=1400 audit(1781955838.058:3386): avc: denied { write } for pid=31477 comm="syz.5.7503" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 526.066695][ T28] audit: type=1400 audit(1781955838.088:3387): avc: denied { write } for pid=31477 comm="syz.5.7503" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 526.089689][T27785] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 527.026153][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.270574][T31529] loop5: detected capacity change from 0 to 512 [ 527.283404][T31529] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 527.291550][T31529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 527.326129][T31529] EXT4-fs (loop5): orphan cleanup on readonly fs [ 527.335770][T31529] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.7524: iget: bad i_size value: 12154761577498 [ 527.364886][T31529] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 527.366477][T31529] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7524: couldn't read orphan inode 13 (err -117) [ 527.375704][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 527.375726][ C0] EXT4-fs (loop5): initial error at time 1781955839: ext4_orphan_get:1399: inode 13 [ 527.375762][ C0] EXT4-fs (loop5): last error at time 1781955839: ext4_orphan_get:1399: inode 13 [ 527.418643][T31529] loop5: lost filesystem error report for type 5 error -117 [ 527.419378][T31529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 527.428174][T31534] SELinux: failed to load policy [ 527.513709][T31529] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.7524: dx entry: limit 65535 != root limit 120 [ 527.534388][T31529] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7524: Corrupt directory, running e2fsck is recommended [ 527.603307][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.908038][ T28] audit: type=1400 audit(1781955839.938:3388): avc: denied { ioctl } for pid=31565 comm="syz.1.7538" path="socket:[99618]" dev="sockfs" ino=99618 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 527.998480][ T28] audit: type=1400 audit(1781955840.028:3389): avc: denied { append } for pid=31571 comm="syz.1.7541" name="icmp6" dev="proc" ino=4026534590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 528.041638][T31574] loop1: detected capacity change from 0 to 512 [ 528.060023][T31574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 528.087779][T31574] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.7542: bad orphan inode 131083 [ 528.102226][T31574] loop1: lost filesystem error report for type 5 error -117 [ 528.102796][T31574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.142231][ T28] audit: type=1400 audit(1781955840.168:3390): avc: denied { write } for pid=31573 comm="syz.1.7542" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.251058][T30187] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.380784][T31600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7553'. [ 528.733404][T31615] loop5: detected capacity change from 0 to 512 [ 528.743395][T31615] EXT4-fs: Ignoring removed orlov option [ 528.768840][T31615] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.841704][T31615] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.7559: corrupted in-inode xattr: e_value size too large [ 528.859226][T31615] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 528.864473][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 528.885211][ C1] EXT4-fs (loop5): initial error at time 1781955840: ext4_iget_extra_inode:5180: inode 15 [ 528.896815][ C1] EXT4-fs (loop5): last error at time 1781955840: ext4_iget_extra_inode:5180: inode 15 [ 528.912043][T31615] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.7559: couldn't read orphan inode 15 (err -117) [ 528.926603][T31615] loop5: lost filesystem error report for type 5 error -117 [ 529.002433][T31615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.128627][ T28] audit: type=1400 audit(1781955841.128:3391): avc: denied { append } for pid=31627 comm="syz.1.7564" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 529.157995][T31615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7559'. [ 529.163628][T31629] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 529.203776][ T28] audit: type=1400 audit(1781955841.218:3392): avc: denied { write } for pid=31614 comm="syz.5.7559" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.274867][T28966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.330533][T31638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31638 comm=syz.4.7568 [ 529.362729][T31638] netlink: 'syz.4.7568': attribute type 5 has an invalid length. [ 529.465880][T31647] loop4: detected capacity change from 0 to 1024 [ 529.483967][T31647] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 529.519177][T31647] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.7572: lblock 2 mapped to illegal pblock 2 (length 1) [ 529.547980][T31647] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 529.548718][T31647] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 529.557937][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 529.557968][ C1] EXT4-fs (loop4): initial error at time 1781955841: ext4_map_blocks:791: inode 3: block 2 [ 529.558002][ C1] EXT4-fs (loop4): last error at time 1781955841: ext4_map_blocks:791: inode 3: block 2 [ 529.592757][T31647] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.7572: lblock 0 mapped to illegal pblock 48 (length 1) [ 529.607188][T31647] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 529.608627][T31647] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 529.626811][T31647] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7572: Failed to acquire dquot type 0 [ 529.638165][T31647] loop4: lost filesystem error report for type 5 error -117 [ 529.641249][T31647] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 529.666065][T31647] loop4: lost filesystem error report for type 5 error -117 [ 529.672479][T31647] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.7572: mark_inode_dirty error [ 529.705023][T31647] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 529.706437][T31647] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 529.769402][T31647] EXT4-fs (loop4): 1 orphan inode deleted [ 529.775634][T31647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.833563][ T12] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 529.848587][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 529.897507][T27785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.906993][T27785] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 529.920623][T27785] loop4: lost filesystem error report for type 5 error -117 [ 529.920797][T27785] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 529.938664][T27785] loop4: lost filesystem error report for type 5 error -117 [ 529.946089][T27785] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 529.965611][T27785] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 530.034704][T31671] netlink: 'syz.5.7576': attribute type 21 has an invalid length. [ 530.067505][T31671] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7576'. [ 530.607050][T31674] ================================================================== [ 530.615179][T31674] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 530.622129][T31674] [ 530.624454][T31674] read-write to 0xffff88813a3778a4 of 4 bytes by task 31684 on cpu 0: [ 530.632613][T31674] fifo_open+0x89/0x5b0 [ 530.636771][T31674] do_dentry_open+0x49f/0xa60 [ 530.641459][T31674] vfs_open+0x37/0x1e0 [ 530.645548][T31674] path_openat+0x1b39/0x2000 [ 530.650153][T31674] do_file_open+0x16c/0x290 [ 530.654669][T31674] do_sys_openat2+0xa0/0x130 [ 530.659269][T31674] __x64_sys_openat+0xf2/0x120 [ 530.664042][T31674] x64_sys_call+0x1e39/0x3020 [ 530.668730][T31674] do_syscall_64+0x136/0x3c0 [ 530.673328][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.679232][T31674] [ 530.681561][T31674] read to 0xffff88813a3778a4 of 4 bytes by task 31674 on cpu 1: [ 530.689196][T31674] wait_for_partner+0xc9/0x1d0 [ 530.693964][T31674] fifo_open+0x443/0x5b0 [ 530.698296][T31674] do_dentry_open+0x49f/0xa60 [ 530.703069][T31674] vfs_open+0x37/0x1e0 [ 530.707146][T31674] path_openat+0x1b39/0x2000 [ 530.711751][T31674] do_file_open+0x16c/0x290 [ 530.716269][T31674] do_sys_openat2+0xa0/0x130 [ 530.720874][T31674] __se_sys_openat2+0x193/0x1f0 [ 530.725733][T31674] __x64_sys_openat2+0x55/0x70 [ 530.730504][T31674] x64_sys_call+0x2170/0x3020 [ 530.735192][T31674] do_syscall_64+0x136/0x3c0 [ 530.739788][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.745684][T31674] [ 530.748004][T31674] value changed: 0x00000001 -> 0x00000002 [ 530.753719][T31674] [ 530.756048][T31674] Reported by Kernel Concurrency Sanitizer on: [ 530.762286][T31674] CPU: 1 UID: 0 PID: 31674 Comm: syz.0.7578 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 530.773231][T31674] Tainted: [W]=WARN [ 530.777122][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.787188][T31674] ================================================================== [ 531.184524][ T2122] bridge_slave_1: left allmulticast mode [ 531.190213][ T2122] bridge_slave_1: left promiscuous mode [ 531.195966][ T2122] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.204279][ T2122] bridge_slave_0: left allmulticast mode [ 531.209965][ T2122] bridge_slave_0: left promiscuous mode [ 531.215765][ T2122] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.234394][ T2122] bond1 (unregistering): (slave gretap1): Releasing active interface [ 531.251210][ T2122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.261182][ T2122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.270615][ T2122] bond0 (unregistering): Released all slaves [ 531.278532][ T2122] bond1 (unregistering): Released all slaves [ 531.287677][ T2122] bond2 (unregistering): (slave veth3): Releasing backup interface [ 531.296239][ T2122] bond2 (unregistering): Released all slaves [ 531.346276][ T2122] tipc: Left network mode [ 531.377931][ T2122] hsr_slave_0: left promiscuous mode [ 531.384185][ T2122] hsr_slave_1: left promiscuous mode [ 531.387171][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 531.387186][ T28] audit: type=1400 audit(1781955843.418:3393): avc: denied { write } for pid=31697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.389820][ T2122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.414671][ T28] audit: type=1400 audit(1781955843.448:3394): avc: denied { write } for pid=31708 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.448405][ T2122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.491258][ T2122] team0 (unregistering): Port device team_slave_1 removed [ 531.501429][ T2122] team0 (unregistering): Port device team_slave_0 removed [ 531.530012][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 531.604592][ T28] audit: type=1400 audit(1781955843.638:3395): avc: denied { write } for pid=31711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.628613][ T28] audit: type=1400 audit(1781955843.658:3396): avc: denied { write } for pid=31722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.662969][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 531.676416][ T2122] IPVS: stop unused estimator thread 0... [ 531.739150][ T28] audit: type=1400 audit(1781955843.768:3397): avc: denied { write } for pid=31725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.762611][ T28] audit: type=1400 audit(1781955843.788:3398): avc: denied { write } for pid=31736 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.775285][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 531.858681][ T28] audit: type=1400 audit(1781955843.888:3399): avc: denied { write } for pid=31739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.882247][ T28] audit: type=1400 audit(1781955843.908:3400): avc: denied { write } for pid=31750 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.896778][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8