last executing test programs: 5.630930115s ago: executing program 3 (id=306): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/187, 0xbb}, {0x0}, {&(0x7f0000000180)=""/119, 0x77}], 0x4}, 0x8}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r4, 0xfffffffffffffff3, 0x6, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) 3.884112731s ago: executing program 3 (id=312): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 3.182217441s ago: executing program 3 (id=320): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) unshare(0x26020480) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) socket$netlink(0x10, 0x3, 0x5) 2.971578264s ago: executing program 0 (id=324): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x8f}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000440)="0700000002000000", 0x8) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2.950495015s ago: executing program 3 (id=325): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 2.827946787s ago: executing program 1 (id=326): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xc}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.757800068s ago: executing program 1 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0xde74, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 2.652240889s ago: executing program 1 (id=328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = mq_open(&(0x7f0000000300)='!\x7fM\x8e3\xd5\x00\f\x00RBn[A\x164\v6\x89}\x87\xc4\xfaP\x00\x01E!Vnux\x00\xa5\xf5\x1b\xa8\x12\x8a\x88\xad\x03\x16\x9arA\ap%s\a\xf3O\xc3\xd5._a\x04\xb7eQ7]N\xb5\xd1\xe5\x04%\xd4\xd0R\xbc\x84fNW3\r0A\x81E\xd8\x98\xe2\x05\x06\"\xb86I*h\xfc\xc8\xdb\x9f\xd7~\x90\xd0\xbc<\xdc\x89\xea?:\n\x9b\xf4xQ', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0xd, 0xa, 0x3}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.583968681s ago: executing program 0 (id=330): execve(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 2.253343215s ago: executing program 4 (id=332): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0xfffffffa}, 0x6e) 1.671887235s ago: executing program 1 (id=333): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x4002003a, 0x0, 0x0, 0x0, 0x0, 0x0) 1.646541155s ago: executing program 0 (id=334): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x60, 0x453, 0x100, 0x70bd2c, 0x25dfdbfe, "fa10fce0b16e8432162e51db10f8d5e877e06b419897d73b1515af92afc75bb4b8baf81098ef39afbee9fffe0d2952f3b58e1aa158b401566c7301f04b6e544f2313cb7c8585e6ef0dcf93c50e4d", ["", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x4040) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r2, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r3, 0xc0185879, 0x0) 1.462508987s ago: executing program 2 (id=335): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x2, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6}, {0xfffffffffffffffe, 0x4, 0x8}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff6, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x4000014) 1.416702488s ago: executing program 2 (id=336): r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000500)={0x40002012}) 1.356930779s ago: executing program 1 (id=337): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c\"', 0x2}], 0x1}, 0x11) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 1.221772561s ago: executing program 2 (id=338): fsync(0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) syz_emit_ethernet(0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac01a6b478aad89e83e007e3ee3ca90df7a6d4bbbbbbbbbb08004500002400e0000311907800000000000000000000ff000010907882010031f800000000000000000002d2d0fc063b1d53eeb2a34b4e581c9399cde527b3bc971c16f59d849f21362d214259012e4a78fe781a710700c95031188fc13f99ff923b9143e4de462ca85f44f57d894bf50ba7bf96e814e4af5adbeef4e9f268c5d9f657dd54953dc3adb9118ab92b805e6dae10893cf5b86abc858631448a40e66027497d7de46f8cbd5b51a56ae08716023d3e953dccd89023d14f084323dc3e129e7e1b268080236f9532b00d519c2558f48729"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x7, 0x9) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@lazytime}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 1.144490112s ago: executing program 0 (id=339): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x1f89, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.002354385s ago: executing program 4 (id=340): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x6, 0x4000}, 0x800, 0x2, 0x100, 0xa, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) 892.494196ms ago: executing program 4 (id=341): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x8010, 0xffffffffffffffff, 0xc0f2d000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 798.646737ms ago: executing program 2 (id=342): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xb) 797.113837ms ago: executing program 4 (id=343): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0xec8}, 0x980, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="6880a6", 0x3}], 0x1}, 0x20000851) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101500) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 631.40532ms ago: executing program 0 (id=344): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x880) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10042, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r3], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 598.57883ms ago: executing program 4 (id=345): unshare(0x42060000) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2de, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0xfa}, 0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xb8) close(0xffffffffffffffff) 574.784981ms ago: executing program 2 (id=346): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x6, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 523.542361ms ago: executing program 2 (id=347): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) 487.349012ms ago: executing program 0 (id=348): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) syz_emit_ethernet(0xbe, 0x0, 0x0) 376.891244ms ago: executing program 1 (id=349): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) close_range(r0, 0xffffffffffffffff, 0x0) 105.403348ms ago: executing program 3 (id=350): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) 67.860299ms ago: executing program 4 (id=351): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 0s ago: executing program 3 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1, 0x3, 0xc574572, 0x1, 0x6, 0x8e}, [@TCA_NETEM_CORR={0x10, 0x1, {0x102, 0x7, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xdf8, 0x4}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): [ 24.839798][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 24.839816][ T28] audit: type=1400 audit(1782415171.918:120): avc: denied { write } for pid=3233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.874234][ T28] audit: type=1400 audit(1782415171.958:121): avc: denied { write } for pid=3244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.012434][ T28] audit: type=1400 audit(1782415172.098:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.042197][ T28] audit: type=1400 audit(1782415172.128:123): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.116276][ T28] audit: type=1400 audit(1782415172.198:124): avc: denied { write } for pid=3261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.146189][ T28] audit: type=1400 audit(1782415172.228:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 32.296969][ T28] audit: type=1400 audit(1782415179.378:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.320126][ T28] audit: type=1400 audit(1782415179.398:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.322553][ T3284] cgroup: Unknown subsys name 'net' [ 32.348026][ T28] audit: type=1400 audit(1782415179.428:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.462458][ T3284] cgroup: Unknown subsys name 'cpuset' [ 32.468717][ T3284] cgroup: Unknown subsys name 'rlimit' [ 32.579811][ T28] audit: type=1400 audit(1782415179.658:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.603257][ T28] audit: type=1400 audit(1782415179.668:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.631137][ T28] audit: type=1400 audit(1782415179.668:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.651711][ T28] audit: type=1400 audit(1782415179.668:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.672237][ T28] audit: type=1400 audit(1782415179.678:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.692589][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.693366][ T28] audit: type=1400 audit(1782415179.688:134): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.726816][ T28] audit: type=1400 audit(1782415179.688:135): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.767743][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.068577][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.075837][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.083092][ T3302] bridge_slave_0: entered allmulticast mode [ 34.089748][ T3302] bridge_slave_0: entered promiscuous mode [ 34.114457][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.121772][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.129023][ T3302] bridge_slave_1: entered allmulticast mode [ 34.135693][ T3302] bridge_slave_1: entered promiscuous mode [ 34.183397][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.192619][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.199731][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.207052][ T3298] bridge_slave_0: entered allmulticast mode [ 34.213627][ T3298] bridge_slave_0: entered promiscuous mode [ 34.232309][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.246281][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.253530][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.260815][ T3298] bridge_slave_1: entered allmulticast mode [ 34.267485][ T3298] bridge_slave_1: entered promiscuous mode [ 34.308557][ T3302] team0: Port device team_slave_0 added [ 34.319564][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.326761][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.333996][ T3301] bridge_slave_0: entered allmulticast mode [ 34.340408][ T3301] bridge_slave_0: entered promiscuous mode [ 34.347083][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.354199][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.361438][ T3304] bridge_slave_0: entered allmulticast mode [ 34.368075][ T3304] bridge_slave_0: entered promiscuous mode [ 34.377834][ T3302] team0: Port device team_slave_1 added [ 34.384691][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.394084][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.401178][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.408464][ T3301] bridge_slave_1: entered allmulticast mode [ 34.414951][ T3301] bridge_slave_1: entered promiscuous mode [ 34.421435][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.428688][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.435909][ T3304] bridge_slave_1: entered allmulticast mode [ 34.442395][ T3304] bridge_slave_1: entered promiscuous mode [ 34.459330][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.502801][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.509968][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.517211][ T3297] bridge_slave_0: entered allmulticast mode [ 34.523714][ T3297] bridge_slave_0: entered promiscuous mode [ 34.530488][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.537606][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.563602][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.580826][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.591199][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.601368][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.611745][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.621044][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.628188][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.635347][ T3297] bridge_slave_1: entered allmulticast mode [ 34.641948][ T3297] bridge_slave_1: entered promiscuous mode [ 34.648711][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.655839][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.681860][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.693407][ T3298] team0: Port device team_slave_0 added [ 34.722095][ T3298] team0: Port device team_slave_1 added [ 34.739172][ T3304] team0: Port device team_slave_0 added [ 34.745939][ T3304] team0: Port device team_slave_1 added [ 34.753097][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.767758][ T3301] team0: Port device team_slave_0 added [ 34.774800][ T3301] team0: Port device team_slave_1 added [ 34.786177][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.819247][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.826270][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.852268][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.873005][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.879993][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.906064][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.921648][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.928673][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.954650][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.968182][ T3302] hsr_slave_0: entered promiscuous mode [ 34.974630][ T3302] hsr_slave_1: entered promiscuous mode [ 34.980890][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.988013][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.014135][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.025156][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.032315][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.058342][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.069840][ T3297] team0: Port device team_slave_0 added [ 35.076421][ T3297] team0: Port device team_slave_1 added [ 35.092387][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.099454][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.125460][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.171122][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.178170][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.204225][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.232642][ T3301] hsr_slave_0: entered promiscuous mode [ 35.238727][ T3301] hsr_slave_1: entered promiscuous mode [ 35.244833][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 35.250563][ T3301] Cannot create hsr debugfs directory [ 35.256323][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.263416][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.289618][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.307234][ T3298] hsr_slave_0: entered promiscuous mode [ 35.313406][ T3298] hsr_slave_1: entered promiscuous mode [ 35.319224][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 35.325005][ T3298] Cannot create hsr debugfs directory [ 35.349211][ T3304] hsr_slave_0: entered promiscuous mode [ 35.355312][ T3304] hsr_slave_1: entered promiscuous mode [ 35.361176][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.366965][ T3304] Cannot create hsr debugfs directory [ 35.432118][ T3297] hsr_slave_0: entered promiscuous mode [ 35.438151][ T3297] hsr_slave_1: entered promiscuous mode [ 35.444225][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 35.449982][ T3297] Cannot create hsr debugfs directory [ 35.604508][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.613376][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.621211][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.629886][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.643292][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.652079][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.667487][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.676245][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.697680][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.706349][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.714240][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.723567][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.731243][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.740263][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.748014][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.756683][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.794579][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.803776][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.816948][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.825992][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.834393][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.843515][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.860351][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.869794][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.880309][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.888912][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.896862][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.905807][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.914324][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.923210][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.930801][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.939885][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.972689][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.982075][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.989767][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.998629][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.017277][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.026221][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.037771][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.046791][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.075997][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.096637][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.121892][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.140548][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.147688][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.161218][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.170958][ T2292] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.178084][ T2292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.191573][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.201953][ T2292] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.209039][ T2292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.220091][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.241965][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.251801][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.259035][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.273626][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.280723][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.297048][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.304844][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.313772][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.320889][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.343546][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.350703][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.375525][ T2292] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.382642][ T2292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.394427][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.404846][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.420659][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.431525][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.454617][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.461762][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.482355][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.489603][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.531212][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.549805][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.742072][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.756684][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.772520][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.797671][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.807992][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.951094][ T3297] veth0_vlan: entered promiscuous mode [ 36.963856][ T3301] veth0_vlan: entered promiscuous mode [ 36.973197][ T3297] veth1_vlan: entered promiscuous mode [ 36.986862][ T3301] veth1_vlan: entered promiscuous mode [ 37.008645][ T3302] veth0_vlan: entered promiscuous mode [ 37.021486][ T3297] veth0_macvtap: entered promiscuous mode [ 37.036572][ T3297] veth1_macvtap: entered promiscuous mode [ 37.044857][ T3302] veth1_vlan: entered promiscuous mode [ 37.063833][ T3298] veth0_vlan: entered promiscuous mode [ 37.073208][ T3301] veth0_macvtap: entered promiscuous mode [ 37.084656][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.097481][ T3301] veth1_macvtap: entered promiscuous mode [ 37.107405][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.117367][ T3298] veth1_vlan: entered promiscuous mode [ 37.135793][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.144929][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.157414][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166350][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.180925][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.200012][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.209634][ T3302] veth0_macvtap: entered promiscuous mode [ 37.226263][ T3302] veth1_macvtap: entered promiscuous mode [ 37.235519][ T2292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.245042][ T2292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.260742][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.275259][ T3304] veth0_vlan: entered promiscuous mode [ 37.281354][ T2292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.290232][ T2292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.306761][ T3298] veth0_macvtap: entered promiscuous mode [ 37.314506][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 37.314519][ T28] audit: type=1400 audit(1782415184.398:155): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.325288][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.358995][ T28] audit: type=1400 audit(1782415184.398:156): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.372936][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.392568][ T3304] veth1_vlan: entered promiscuous mode [ 37.395623][ T3502] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 37.409722][ T3298] veth1_macvtap: entered promiscuous mode [ 37.413555][ T28] audit: type=1400 audit(1782415184.428:157): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.449028][ T28] audit: type=1400 audit(1782415184.438:158): avc: denied { open } for pid=3501 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.468752][ T28] audit: type=1400 audit(1782415184.438:159): avc: denied { perfmon } for pid=3501 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.493166][ T28] audit: type=1400 audit(1782415184.438:160): avc: denied { kernel } for pid=3501 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.517344][ T28] audit: type=1400 audit(1782415184.498:161): avc: denied { create } for pid=3501 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.538152][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.547776][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.551258][ T28] audit: type=1400 audit(1782415184.528:162): avc: denied { create } for pid=3501 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.558965][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.586109][ T28] audit: type=1400 audit(1782415184.528:163): avc: denied { prog_load } for pid=3501 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.605119][ T28] audit: type=1400 audit(1782415184.528:164): avc: denied { bpf } for pid=3501 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.612826][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.641601][ T3507] xt_hashlimit: size too large, truncated to 1048576 [ 37.652926][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.668032][ T3304] veth0_macvtap: entered promiscuous mode [ 37.675988][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.691610][ T3304] veth1_macvtap: entered promiscuous mode [ 37.707605][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.740838][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.751171][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.781966][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.845507][ T3510] syzkaller0: entered promiscuous mode [ 37.857648][ T3510] syzkaller0: entered allmulticast mode [ 37.872337][ T3517] syzkaller0: create flow: hash 1092764362 index 0 [ 37.873837][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.913984][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.940299][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.968097][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.986464][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999646][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.073135][ T3510] syzkaller0 (unregistered): delete flow: hash 1092764362 index 0 [ 38.278696][ T3529] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 38.328752][ T3529] macvlan2: entered promiscuous mode [ 38.334905][ T3529] macvlan2: entered allmulticast mode [ 38.467827][ T3531] syzkaller0: entered promiscuous mode [ 38.473732][ T3531] syzkaller0: entered allmulticast mode [ 38.486634][ T3531] tipc: Started in network mode [ 38.491815][ T3531] tipc: Node identity 929d0975f042, cluster identity 4711 [ 38.499276][ T3531] tipc: Enabled bearer , priority 0 [ 38.507893][ T3530] tipc: Resetting bearer [ 38.518979][ T3530] tipc: Disabling bearer [ 38.530860][ T3512] syz.1.6 (3512) used greatest stack depth: 10280 bytes left [ 39.031347][ T3544] loop3: detected capacity change from 0 to 512 [ 39.092319][ T3544] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.14: bad orphan inode 13 [ 39.105222][ T3544] loop3: lost filesystem error report for type 5 error -117 [ 39.107266][ T3544] ext4_test_bit(bit=12, block=4) = 1 [ 39.115403][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 39.115642][ C0] EXT4-fs (loop3): initial error at time 1782415186: ext4_orphan_get:1425 [ 39.115822][ C0] EXT4-fs (loop3): last error at time 1782415186: ext4_orphan_get:1425 [ 39.147672][ T3544] is_bad_inode(inode)=0 [ 39.152758][ T3544] NEXT_ORPHAN(inode)=0 [ 39.157871][ T3544] max_ino=32 [ 39.161608][ T3544] i_nlink=1 [ 39.177145][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.298884][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.821004][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 40.865533][ T3578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.027414][ T3588] tipc: Failed to remove unknown binding: 66,0,0/0:1508314253/1508314255 [ 41.063361][ T3588] tipc: Failed to remove unknown binding: 66,0,0/0:1508314253/1508314254 [ 41.254467][ T3578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.346229][ T3578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.544762][ T3578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.558894][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.566208][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.574685][ T3600] bridge0: entered allmulticast mode [ 41.588833][ T3600] bridge_slave_1: left allmulticast mode [ 41.594790][ T3600] bridge_slave_1: left promiscuous mode [ 41.600579][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.608995][ T3600] bridge_slave_0: left allmulticast mode [ 41.624561][ T3600] bridge_slave_0: left promiscuous mode [ 41.631321][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.665577][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.674186][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.693581][ T2506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.717260][ T2506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.750490][ T3606] capability: warning: `syz.1.34' uses 32-bit capabilities (legacy support in use) [ 41.808679][ T3604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.861985][ T3604] syz.2.35 (3604) used greatest stack depth: 10240 bytes left [ 42.482362][ T3608] loop4: detected capacity change from 0 to 512 [ 42.647392][ T3608] EXT4-fs: Ignoring removed bh option [ 42.675918][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 42.675936][ T28] audit: type=1400 audit(1782415189.758:307): avc: denied { create } for pid=3618 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.866666][ T3624] macvlan2: entered promiscuous mode [ 42.889371][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.904708][ T28] audit: type=1400 audit(1782415189.968:308): avc: denied { read } for pid=3627 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.913640][ T3624] macvlan2: entered allmulticast mode [ 42.953594][ T3608] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.956657][ T3630] loop3: detected capacity change from 0 to 256 [ 42.971071][ T28] audit: type=1400 audit(1782415189.988:309): avc: denied { write } for pid=3627 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.982251][ T3630] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.031307][ T3631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.051905][ T3631] team0: Port device bond0 added [ 43.055058][ T28] audit: type=1400 audit(1782415190.138:310): avc: denied { setattr } for pid=3607 comm="syz.4.36" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.131099][ T28] audit: type=1400 audit(1782415190.208:311): avc: denied { create } for pid=3633 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.141754][ T3630] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.173050][ T3636] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 43.186300][ T28] audit: type=1400 audit(1782415190.228:312): avc: denied { setopt } for pid=3633 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.228669][ T28] audit: type=1400 audit(1782415190.268:313): avc: denied { bind } for pid=3633 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.261877][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.273180][ T28] audit: type=1400 audit(1782415190.268:314): avc: denied { create } for pid=3633 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.292966][ T28] audit: type=1400 audit(1782415190.288:315): avc: denied { mounton } for pid=3633 comm="syz.2.45" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.294090][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 43.332917][ T28] audit: type=1400 audit(1782415190.308:316): avc: denied { mount } for pid=3628 comm="syz.3.43" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.564170][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.583151][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.921100][ T3657] Zero length message leads to an empty skb [ 44.019378][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.51'. [ 44.112756][ T3665] loop4: detected capacity change from 0 to 512 [ 44.156367][ T3665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.176336][ T3665] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.54: iget: bad i_size value: 38620345925642 [ 44.192635][ T3665] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.194166][ T3665] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.54: couldn't read orphan inode 15 (err -117) [ 44.203413][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 44.203436][ C0] EXT4-fs (loop4): initial error at time 1782415191: ext4_orphan_get:1399: inode 15 [ 44.203487][ C0] EXT4-fs (loop4): last error at time 1782415191: ext4_orphan_get:1399: inode 15 [ 44.278747][ T3665] loop4: lost filesystem error report for type 5 error -117 [ 44.399233][ T3665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.475974][ T3678] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 44.579926][ T3665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.54: bg 0: block 5: invalid block bitmap [ 44.609178][ T3665] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1132 with error 28 [ 44.637135][ T3665] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.637135][ T3665] [ 44.755256][ T3665] EXT4-fs (loop4): Total free blocks count 0 [ 44.779411][ T3665] EXT4-fs (loop4): Free/Dirty block details [ 44.797383][ T3665] EXT4-fs (loop4): free_blocks=0 [ 44.830433][ T3665] EXT4-fs (loop4): dirty_blocks=1132 [ 44.842463][ T3665] EXT4-fs (loop4): Block reservation details [ 44.848595][ T3665] EXT4-fs (loop4): i_reserved_data_blocks=1132 [ 44.887660][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.574210][ T3685] bond1: option arp_validate: invalid value (18446744073709551615) [ 45.761163][ T3685] bond1 (unregistering): Released all slaves [ 46.126494][ T3696] batman_adv: batadv0: Adding interface: macvtap1 [ 46.133899][ T3696] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.162239][ T3696] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 46.210870][ T3714] loop2: detected capacity change from 0 to 256 [ 46.380805][ T3700] loop4: detected capacity change from 0 to 1024 [ 46.433918][ T3700] ======================================================= [ 46.433918][ T3700] WARNING: The mand mount option has been deprecated and [ 46.433918][ T3700] and is ignored by this kernel. Remove the mand [ 46.433918][ T3700] option from the mount to silence this warning. [ 46.433918][ T3700] ======================================================= [ 46.533443][ T3700] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.608711][ T3700] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.65: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.625402][ T3700] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.626570][ T3700] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.65: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.636110][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 46.636250][ C0] EXT4-fs (loop4): initial error at time 1782415193: ext4_map_blocks:791: inode 3: block 2 [ 46.636439][ C0] EXT4-fs (loop4): last error at time 1782415193: ext4_map_blocks:791: inode 3: block 2 [ 46.683545][ T3700] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.685632][ T3700] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.65: Failed to acquire dquot type 0 [ 46.709974][ T3700] loop4: lost filesystem error report for type 5 error -117 [ 46.713449][ T3700] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 46.733734][ T3700] loop4: lost filesystem error report for type 5 error -117 [ 46.737531][ T3700] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.65: mark_inode_dirty error [ 46.761086][ T3700] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.764704][ T3700] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 46.794290][ T3700] EXT4-fs (loop4): 1 orphan inode deleted [ 46.809588][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.823204][ T68] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.837889][ T68] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.838002][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 46.967037][ T3700] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 46.987983][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 47.013027][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.042220][ T3304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.068061][ T3304] loop4: lost filesystem error report for type 5 error -117 [ 47.068175][ T3304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 47.085496][ T3304] loop4: lost filesystem error report for type 5 error -117 [ 47.086388][ T3304] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 47.105289][ T3304] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.106519][ T3742] loop2: detected capacity change from 0 to 1024 [ 47.123359][ T3742] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.156793][ T3742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.176678][ T3742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.207709][ T3742] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.79: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 47.233924][ T3746] loop4: detected capacity change from 0 to 512 [ 47.245827][ T3742] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.246049][ T3742] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.79: couldn't read orphan inode 11 (err -117) [ 47.255522][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 47.255544][ C0] EXT4-fs (loop2): initial error at time 1782415194: ext4_ext_check_inode:521: inode 11 [ 47.255581][ C0] EXT4-fs (loop2): last error at time 1782415194: ext4_ext_check_inode:521: inode 11 [ 47.293745][ T3746] EXT4-fs: Ignoring removed oldalloc option [ 47.299778][ T3746] EXT4-fs: Ignoring removed nobh option [ 47.306455][ T3742] loop2: lost filesystem error report for type 5 error -117 [ 47.315213][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.345920][ T3746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.78: iget: bad extra_isize 90 (inode size 256) [ 47.360142][ T3746] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.360886][ T3746] EXT4-fs (loop4): Remounting filesystem read-only [ 47.370255][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.370285][ C1] EXT4-fs (loop4): initial error at time 1782415194: ext4_xattr_inode_iget:441: inode 11 [ 47.370318][ C1] EXT4-fs (loop4): last error at time 1782415194: ext4_xattr_inode_iget:441: inode 11 [ 47.403378][ T3746] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.416758][ T3746] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 47.427114][ T3746] EXT4-fs (loop4): 1 orphan inode deleted [ 47.433602][ T3746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.502743][ T3749] loop3: detected capacity change from 0 to 512 [ 47.529101][ T3749] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.561569][ T3749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.574072][ T3749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.80: invalid indirect mapped block 4294967295 (level 0) [ 47.589786][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.599248][ T3749] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.599413][ T3749] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.80: invalid indirect mapped block 4294967295 (level 1) [ 47.608606][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 47.608628][ C0] EXT4-fs (loop3): initial error at time 1782415194: ext4_free_branches:1023: inode 16 [ 47.608666][ C0] EXT4-fs (loop3): last error at time 1782415194: ext4_free_branches:1023: inode 16 [ 47.648650][ T3749] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.652956][ T3749] EXT4-fs (loop3): 1 orphan inode deleted [ 47.665580][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.693986][ T3749] EXT4-fs (loop3): 1 truncate cleaned up [ 47.700433][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.723307][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 47.723367][ T28] audit: type=1400 audit(1782415194.808:354): avc: denied { bind } for pid=3748 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.756598][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.806342][ T28] audit: type=1400 audit(1782415194.888:355): avc: denied { write } for pid=3760 comm="syz.3.83" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.856355][ T28] audit: type=1400 audit(1782415194.908:356): avc: denied { create } for pid=3759 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.861374][ T3764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 47.918508][ T28] audit: type=1400 audit(1782415194.928:357): avc: denied { ioctl } for pid=3759 comm="syz.4.85" path="socket:[5439]" dev="sockfs" ino=5439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.963416][ T28] audit: type=1400 audit(1782415194.938:358): avc: denied { create } for pid=3763 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 47.997892][ T28] audit: type=1400 audit(1782415194.938:359): avc: denied { write } for pid=3763 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 48.034929][ T3769] loop4: detected capacity change from 0 to 1024 [ 48.048031][ T3769] EXT4-fs: Ignoring removed orlov option [ 48.074820][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.090315][ T3769] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 48.108160][ T3770] : port 1(ip6gretap0) entered blocking state [ 48.116141][ T3770] : port 1(ip6gretap0) entered disabled state [ 48.122678][ T3770] ip6gretap0: entered allmulticast mode [ 48.129290][ T3770] ip6gretap0: entered promiscuous mode [ 48.141542][ T3773] ip6gretap0: left allmulticast mode [ 48.144126][ T28] audit: type=1400 audit(1782415195.218:360): avc: denied { getopt } for pid=3768 comm="syz.4.88" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.158664][ T3773] ip6gretap0: left promiscuous mode [ 48.170004][ T28] audit: type=1400 audit(1782415195.218:361): avc: denied { ioctl } for pid=3768 comm="syz.4.88" path="socket:[6389]" dev="sockfs" ino=6389 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.198004][ T3773] : port 1(ip6gretap0) entered disabled state [ 48.208576][ T3769] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 48.258456][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.412543][ T3780] loop4: detected capacity change from 0 to 128 [ 48.429196][ T3780] vfat: Bad value for 'errors' [ 48.526442][ T3788] bridge_slave_0: left allmulticast mode [ 48.537835][ T3788] bridge_slave_0: left promiscuous mode [ 48.549670][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.561814][ T3790] loop4: detected capacity change from 0 to 512 [ 48.575831][ T3788] bridge_slave_1: left allmulticast mode [ 48.582634][ T28] audit: type=1400 audit(1782415195.668:362): avc: denied { bind } for pid=3787 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.604601][ T3788] bridge_slave_1: left promiscuous mode [ 48.610509][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.626662][ T3788] bond0: (slave bond_slave_0): Releasing backup interface [ 48.628028][ T3790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.655024][ T3788] bond0: (slave bond_slave_1): Releasing backup interface [ 48.693676][ T3788] team0: Failed to send options change via netlink (err -105) [ 48.708968][ T3790] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.716925][ T3788] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 48.728381][ T3790] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 48.747126][ T3788] team0: Port device team_slave_0 removed [ 48.755212][ T3790] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 48.765949][ T3788] team0: Failed to send options change via netlink (err -105) [ 48.774146][ T3790] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.94: bad orphan inode 768 [ 48.791507][ T3788] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 48.806962][ T3788] team0: Port device team_slave_1 removed [ 48.813435][ T3790] loop4: lost filesystem error report for type 5 error -117 [ 48.820278][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.841453][ T3788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.851068][ T3790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.868359][ T3788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.876221][ T3788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.891282][ T3788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.910391][ T3792] team0: Failed to send options change via netlink (err -105) [ 48.923019][ T3792] team0: Mode changed to "activebackup" [ 48.951998][ T3790] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 49.001071][ T3790] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 49.060620][ T28] audit: type=1400 audit(1782415196.138:363): avc: denied { mmap_zero } for pid=3809 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 49.094879][ T3808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 49.114868][ T3810] mmap: syz.3.98 (3810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.206062][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.390867][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.432313][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.480275][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 50.502294][ T23] IPVS: starting estimator thread 0... [ 50.510774][ T3828] erspan1: entered allmulticast mode [ 50.546249][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 50.624372][ T3829] IPVS: using max 2352 ests per chain, 117600 per kthread [ 50.788303][ T3843] loop0: detected capacity change from 0 to 512 [ 50.812471][ T3843] EXT4-fs (loop0): unable to read superblock [ 51.305613][ T3858] loop4: detected capacity change from 0 to 512 [ 51.569503][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 51.599076][ T3870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 52.050623][ T3898] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 52.089652][ T3898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 52.767132][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 52.767147][ T28] audit: type=1400 audit(1782415199.848:404): avc: denied { read } for pid=3916 comm="syz.2.137" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.808980][ T3919] loop0: detected capacity change from 0 to 512 [ 52.834525][ T3919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.889036][ T28] audit: type=1400 audit(1782415199.848:405): avc: denied { open } for pid=3916 comm="syz.2.137" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 52.941337][ T3919] EXT4-fs (loop0): 1 truncate cleaned up [ 52.948110][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.084405][ T28] audit: type=1400 audit(1782415199.878:406): avc: denied { ioctl } for pid=3916 comm="syz.2.137" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.517806][ T28] audit: type=1400 audit(1782415200.588:407): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.588145][ T28] audit: type=1400 audit(1782415200.668:408): avc: denied { audit_read } for pid=3928 comm="syz.1.141" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.612814][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.654475][ T28] audit: type=1400 audit(1782415200.728:409): avc: denied { create } for pid=3931 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.678327][ T3933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.697251][ T3933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.740584][ T28] audit: type=1400 audit(1782415200.788:410): avc: denied { getopt } for pid=3931 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.762078][ T3936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'. [ 53.784662][ T3935] loop0: detected capacity change from 0 to 764 [ 53.942186][ T28] audit: type=1400 audit(1782415201.018:411): avc: denied { mount } for pid=3931 comm="syz.0.142" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.080085][ T3939] netlink: 188 bytes leftover after parsing attributes in process `syz.2.143'. [ 54.238122][ T3927] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.250167][ T3927] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.507894][ T3927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 54.526139][ T3932] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 54.545316][ T3927] syz.4.140 (3927) used greatest stack depth: 10112 bytes left [ 54.576385][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 54.659733][ T28] audit: type=1400 audit(1782415201.738:412): avc: denied { mounton } for pid=3958 comm="syz.4.150" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.660463][ T3959] tmpfs: Bad value for 'mpol' [ 54.730269][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 54.740944][ T3961] tipc: Enabling of bearer rejected, failed to enable media [ 54.758848][ T28] audit: type=1400 audit(1782415201.838:413): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.804373][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 54.818469][ T3965] loop3: detected capacity change from 0 to 1024 [ 54.840279][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.893654][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.344149][ T3993] loop4: detected capacity change from 0 to 512 [ 55.351526][ T3993] ext3: Unknown parameter 'nouser_xattr' [ 56.030802][ T4006] syzkaller0: entered promiscuous mode [ 56.036712][ T4006] syzkaller0: entered allmulticast mode [ 56.222698][ T3385] kernel read not supported for file /eth0 (pid: 3385 comm: kworker/1:3) [ 56.271904][ T4016] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 56.299841][ T4015] loop2: detected capacity change from 0 to 128 [ 56.416650][ T4024] team0: Port device syz_tun added [ 56.428741][ T4015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 56.449493][ T4015] System zones: 1-3, 19-19, 35-36 [ 56.490887][ T4024] team0: Port device syz_tun removed [ 56.533089][ T4015] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.540443][ T4022] loop1: detected capacity change from 0 to 1024 [ 56.571210][ T4024] bridge_slave_0: left allmulticast mode [ 56.574735][ T4022] EXT4-fs: Ignoring removed orlov option [ 56.593886][ T4024] bridge_slave_0: left promiscuous mode [ 56.602978][ T4015] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.617772][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.641300][ T4024] bridge_slave_1: left allmulticast mode [ 56.660352][ T4024] bridge_slave_1: left promiscuous mode [ 56.672142][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.688719][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.713433][ T4015] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 56.736254][ T4024] bond0: (slave bond_slave_0): Releasing backup interface [ 56.767521][ T4024] bond0: (slave bond_slave_1): Releasing backup interface [ 56.808000][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.826209][ T4024] team0: Port device team_slave_0 removed [ 56.837541][ T4022] netlink: 'syz.1.173': attribute type 3 has an invalid length. [ 56.859403][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 56.877867][ T4024] team0: Port device team_slave_1 removed [ 56.885396][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.899206][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.924020][ T4024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.943937][ T4024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.954951][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.967191][ T4024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.036576][ T4041] loop1: detected capacity change from 0 to 128 [ 57.382450][ T4053] syzkaller0: entered promiscuous mode [ 57.388092][ T4053] syzkaller0: entered allmulticast mode [ 57.753635][ T4063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.797141][ T4066] team0: Port device xfrm0 added [ 57.830179][ T4063] tipc: Started in network mode [ 57.835969][ T4063] tipc: Node identity 1243523d52eb, cluster identity 4711 [ 57.848061][ T4063] tipc: Enabled bearer , priority 0 [ 57.911746][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 57.911760][ T28] audit: type=1400 audit(1782415204.988:431): avc: denied { read } for pid=4071 comm="syz.3.191" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.008293][ T4077] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.025832][ T4070] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.052426][ T4075] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.119398][ T4080] syz.4.193 uses obsolete (PF_INET,SOCK_PACKET) [ 58.157998][ T4082] netlink: 'syz.1.194': attribute type 21 has an invalid length. [ 58.166609][ T4082] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.199222][ T4082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.206662][ T4082] IPv6: NLM_F_CREATE should be set when creating new route [ 58.210048][ T4083] netlink: 'syz.1.194': attribute type 21 has an invalid length. [ 58.214016][ T4082] IPv6: NLM_F_CREATE should be set when creating new route [ 58.214049][ T4082] IPv6: NLM_F_CREATE should be set when creating new route [ 58.271840][ T4083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 58.332565][ T4082] vlan2: entered promiscuous mode [ 58.349817][ T4082] bridge0: entered promiscuous mode [ 58.427205][ T28] audit: type=1400 audit(1782415205.508:432): avc: denied { mount } for pid=4089 comm="syz.1.196" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.465060][ T28] audit: type=1400 audit(1782415205.528:433): avc: denied { search } for pid=4089 comm="syz.1.196" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.488478][ T28] audit: type=1400 audit(1782415205.538:434): avc: denied { search } for pid=4089 comm="syz.1.196" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.530538][ T4093] netlink: 'syz.2.197': attribute type 11 has an invalid length. [ 58.538789][ T4093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 58.587252][ T28] audit: type=1400 audit(1782415205.538:435): avc: denied { read } for pid=4089 comm="syz.1.196" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.648292][ T28] audit: type=1400 audit(1782415205.538:436): avc: denied { read open } for pid=4089 comm="syz.1.196" path="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.680472][ T28] audit: type=1400 audit(1782415205.638:437): avc: denied { create } for pid=4094 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 58.715469][ T28] audit: type=1400 audit(1782415205.708:438): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.758756][ T28] audit: type=1326 audit(1782415205.798:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ab6dce59 code=0x7ffc0000 [ 58.785756][ T28] audit: type=1326 audit(1782415205.798:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ab6dce59 code=0x7ffc0000 [ 58.846663][ T4102] loop1: detected capacity change from 0 to 512 [ 58.906565][ T23] tipc: Node number set to 1084772925 [ 58.909546][ T4102] EXT4-fs: Ignoring removed i_version option [ 58.927901][ T4107] netlink: 264 bytes leftover after parsing attributes in process `syz.2.203'. [ 58.930202][ T4102] EXT4-fs: Ignoring removed bh option [ 58.956849][ T4107] netlink: 264 bytes leftover after parsing attributes in process `syz.2.203'. [ 59.007639][ T3378] IPVS: starting estimator thread 0... [ 59.075848][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.094564][ T4118] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 59.103974][ T4115] IPVS: using max 1776 ests per chain, 88800 per kthread [ 59.130742][ T4102] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.144435][ T4118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.174439][ T4118] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 59.236447][ T4118] bond1: entered promiscuous mode [ 59.258958][ T4118] bond1: entered allmulticast mode [ 59.306302][ T4118] macvlan2: entered promiscuous mode [ 59.332862][ T4118] macvlan2: entered allmulticast mode [ 59.355166][ T4118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.469568][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.563387][ T4172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.222'. [ 61.610996][ T4172] 9p: Bad value for 'rfdno' [ 61.759272][ T4184] loop4: detected capacity change from 0 to 128 [ 61.777426][ T4184] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.787544][ T4181] loop3: detected capacity change from 0 to 128 [ 61.821285][ T4184] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.853341][ T4181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c028, mo2=0002] [ 61.871074][ T4181] System zones: 1-3, 19-19, 35-36 [ 61.988810][ T4181] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.016645][ T4181] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.105551][ T4181] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.225: No space for directory leaf checksum. Please run e2fsck -D. [ 62.123711][ T4181] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.225: checksumming directory block 0 [ 62.140581][ T4181] EXT4-fs (loop3): Remounting filesystem read-only [ 62.215697][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.267362][ T4184] syz.4.226 (4184) used greatest stack depth: 9856 bytes left [ 62.453183][ T4199] loop3: detected capacity change from 0 to 512 [ 62.586413][ T4199] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.230: invalid block [ 62.601509][ T4199] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.604643][ T4199] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.230: couldn't read orphan inode 11 (err -117) [ 62.615484][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.615543][ C0] EXT4-fs (loop3): initial error at time 1782415209: __ext4_iget:5533: inode 11: block 1 [ 62.615733][ C0] EXT4-fs (loop3): last error at time 1782415209: __ext4_iget:5533: inode 11: block 1 [ 62.662726][ T4199] loop3: lost filesystem error report for type 5 error -117 [ 62.678989][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.772115][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.604285][ T4219] loop1: detected capacity change from 0 to 512 [ 65.277141][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 65.277160][ T28] audit: type=1400 audit(1782415212.358:579): avc: denied { getopt } for pid=4232 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.884476][ T28] audit: type=1400 audit(1782415212.958:580): avc: denied { read } for pid=4242 comm="syz.3.245" path="socket:[7251]" dev="sockfs" ino=7251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.985606][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 66.088576][ T28] audit: type=1400 audit(1782415213.168:581): avc: denied { write } for pid=4246 comm="syz.1.246" path="socket:[8199]" dev="sockfs" ino=8199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.281410][ T28] audit: type=1400 audit(1782415213.348:582): avc: denied { read } for pid=4258 comm="syz.4.250" path="socket:[8211]" dev="sockfs" ino=8211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.334527][ T4265] syzkaller0: entered promiscuous mode [ 66.356727][ T4265] syzkaller0: entered allmulticast mode [ 66.381585][ T28] audit: type=1400 audit(1782415213.458:583): avc: denied { cpu } for pid=4266 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.385689][ T4265] tipc: Started in network mode [ 66.405453][ T4265] tipc: Node identity c679e5a8138a, cluster identity 4711 [ 66.434818][ T4265] tipc: Enabled bearer , priority 0 [ 66.448750][ T28] audit: type=1400 audit(1782415213.458:584): avc: denied { create } for pid=4266 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.453529][ T4263] loop2: detected capacity change from 0 to 512 [ 66.475367][ T28] audit: type=1400 audit(1782415213.468:585): avc: denied { ioctl } for pid=4266 comm="syz.1.254" path="socket:[7291]" dev="sockfs" ino=7291 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.504812][ T4264] tipc: Resetting bearer [ 66.521036][ T4264] tipc: Disabling bearer [ 66.616234][ T4263] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 66.637390][ T4263] EXT4-fs (loop2): Remounting filesystem read-only [ 66.645760][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.645969][ C0] EXT4-fs (loop2): initial error at time 1782415213: ext4_mb_generate_buddy:1317 [ 66.648201][ C0] EXT4-fs (loop2): last error at time 1782415213: ext4_mb_generate_buddy:1317 [ 66.684778][ T4263] EXT4-fs (loop2): 1 truncate cleaned up [ 66.712959][ T4263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.789052][ T28] audit: type=1400 audit(1782415213.848:586): avc: denied { mount } for pid=4271 comm="syz.0.255" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 66.957596][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.103127][ T28] audit: type=1400 audit(1782415214.188:587): avc: denied { getopt } for pid=4280 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.123500][ T4283] loop0: detected capacity change from 0 to 2048 [ 67.245906][ T28] audit: type=1400 audit(1782415214.328:588): avc: denied { read write } for pid=4289 comm="syz.2.261" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.326094][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 67.628222][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.637304][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.686233][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.695049][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.710829][ T4317] fido_id[4317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.753014][ T4323] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 67.825907][ T4323] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 67.884543][ T4323] macvlan2: entered promiscuous mode [ 67.901100][ T4323] macvlan2: entered allmulticast mode [ 67.920179][ T4323] bond1: entered promiscuous mode [ 67.940113][ T4323] bridge1: entered promiscuous mode [ 67.949274][ T4327] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.965794][ T4323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.980231][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.988968][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.002194][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.011727][ T4323] bond1: left promiscuous mode [ 68.017318][ T4323] bridge1: left promiscuous mode [ 68.023214][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.125936][ T4335] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 68.136722][ T4332] loop0: detected capacity change from 0 to 512 [ 68.154755][ T4335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.207802][ T4335] bond2: (slave veth3): Enslaving as an active interface with a down link [ 68.242649][ T4335] bond2: (slave dummy0): making interface the new active one [ 68.260086][ T4335] dummy0: entered promiscuous mode [ 68.271289][ T4335] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 68.285004][ T4335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.276'. [ 68.319050][ T4335] bond2: (slave dummy0): Releasing active interface [ 68.330343][ T4335] dummy0 (unregistering): left promiscuous mode [ 68.390674][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 68.463293][ T4346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4346 comm=syz.2.278 [ 68.503069][ T4344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.280'. [ 68.524683][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 68.651515][ T4353] loop2: detected capacity change from 0 to 512 [ 68.700346][ T4353] EXT4-fs: test_dummy_encryption option not supported [ 68.722589][ T4349] netlink: 125768 bytes leftover after parsing attributes in process `syz.1.281'. [ 68.916220][ T4361] loop0: detected capacity change from 0 to 2048 [ 69.002218][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 69.019352][ T4361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 69.321437][ T4372] netlink: 240 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.794161][ T4361] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.852210][ T4361] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 69.911412][ T4361] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.911412][ T4361] [ 69.941535][ T4361] EXT4-fs (loop0): Total free blocks count 0 [ 69.971364][ T4361] EXT4-fs (loop0): Free/Dirty block details [ 69.985460][ T4361] EXT4-fs (loop0): free_blocks=2415919104 [ 70.000810][ T4361] EXT4-fs (loop0): dirty_blocks=6080 [ 70.019207][ T4361] EXT4-fs (loop0): Block reservation details [ 70.035279][ T4361] EXT4-fs (loop0): i_reserved_data_blocks=380 [ 70.053529][ T4388] loop0: detected capacity change from 2048 to 2047 [ 70.128025][ T2506] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 70.261796][ T3301] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 70.304230][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 70.304250][ T28] audit: type=1400 audit(1782415473.354:602): avc: denied { name_bind } for pid=4394 comm="syz.4.295" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.519667][ T4410] loop3: detected capacity change from 0 to 512 [ 70.551864][ T4410] EXT4-fs: Ignoring removed nobh option [ 70.585384][ T4410] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 70.622913][ T4410] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.300: attempt to clear invalid blocks 1 len 1 [ 70.724528][ T4410] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 70.731634][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 70.747356][ C0] EXT4-fs (loop3): initial error at time 1782415473: ext4_clear_blocks:876: inode 13 [ 70.756910][ C0] EXT4-fs (loop3): last error at time 1782415473: ext4_clear_blocks:876: inode 13 [ 70.800217][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 70.820095][ T4413] openvswitch: netlink: Flow key attr not present in new flow. [ 70.829724][ T4410] EXT4-fs (loop3): 1 truncate cleaned up [ 70.854671][ T4410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.837966][ T28] audit: type=1400 audit(1782415474.914:603): avc: denied { block_suspend } for pid=4409 comm="syz.3.300" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.109649][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.769447][ T28] audit: type=1326 audit(1782415475.844:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 72.967251][ T28] audit: type=1326 audit(1782415476.044:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 72.992881][ T28] audit: type=1326 audit(1782415476.044:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.021018][ T4441] loop0: detected capacity change from 0 to 512 [ 73.031030][ T4441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.047612][ T28] audit: type=1326 audit(1782415476.044:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.099872][ T4441] EXT4-fs (loop0): 1 truncate cleaned up [ 73.114415][ T28] audit: type=1326 audit(1782415476.044:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.119362][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.139786][ T28] audit: type=1326 audit(1782415476.044:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.183673][ T28] audit: type=1326 audit(1782415476.044:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.209177][ T28] audit: type=1326 audit(1782415476.074:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.305" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 73.298892][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 73.886124][ T4456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.002698][ T4456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.017829][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.100808][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.169588][ T4456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.187450][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 74.213635][ T4465] netlink: 'syz.4.316': attribute type 49 has an invalid length. [ 74.242535][ T4456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.317701][ T4465] ip6gretap0: entered promiscuous mode [ 74.328060][ T4465] ip6gretap0: entered allmulticast mode [ 74.376054][ T2506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.402780][ T2506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433557][ T2506] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.444420][ T2506] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.749660][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 74.820594][ T4498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4498 comm=syz.4.323 [ 74.942971][ T4498] veth3: entered allmulticast mode [ 74.951146][ T4498] bond1: (slave veth3): Enslaving as an active interface with an up link [ 74.983163][ T4508] loop0: detected capacity change from 0 to 4096 [ 75.044748][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.119547][ T4519] syzkaller0: entered promiscuous mode [ 75.125251][ T4519] syzkaller0: entered allmulticast mode [ 75.134650][ T4519] tipc: Enabled bearer , priority 0 [ 75.145336][ T4518] tipc: Resetting bearer [ 75.155409][ T4518] tipc: Disabling bearer [ 75.161843][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.282691][ T4527] loop4: detected capacity change from 0 to 256 [ 75.619676][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 75.619774][ T28] audit: type=1400 audit(1782415478.694:629): avc: denied { allowed } for pid=4530 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.658649][ T28] audit: type=1326 audit(1782415478.724:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.700579][ T28] audit: type=1326 audit(1782415478.724:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.741415][ T28] audit: type=1326 audit(1782415478.724:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.783094][ T28] audit: type=1326 audit(1782415478.724:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.825587][ T28] audit: type=1326 audit(1782415478.734:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.869258][ T28] audit: type=1326 audit(1782415478.774:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.920172][ T28] audit: type=1326 audit(1782415478.774:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 75.967749][ T28] audit: type=1326 audit(1782415478.784:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 76.031685][ T28] audit: type=1326 audit(1782415478.784:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.4.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c962dce59 code=0x7ffc0000 [ 76.359982][ T4537] loop0: detected capacity change from 0 to 128 [ 76.439412][ T4537] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 76.488058][ T4537] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.504220][ T4537] ext2 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.599173][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.720251][ T4550] loop2: detected capacity change from 0 to 1024 [ 76.778698][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.876996][ T4550] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.928270][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.141651][ T4565] netlink: 72 bytes leftover after parsing attributes in process `syz.0.344'. [ 77.170090][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 77.186848][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 77.298882][ T4574] loop0: detected capacity change from 0 to 4096 [ 77.327308][ T4574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.836306][ T4586] batman_adv: batadv0: Adding interface: macvtap1 [ 77.845175][ T4586] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.873189][ T4586] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 77.897122][ T4581] ================================================================== [ 77.905310][ T4581] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 77.913492][ T4581] [ 77.915855][ T4581] write to 0xffff888100710684 of 4 bytes by task 4574 on cpu 1: [ 77.923528][ T4581] xas_set_mark+0x12b/0x140 [ 77.928080][ T4581] tag_pages_for_writeback+0xe3/0x2e0 [ 77.933509][ T4581] ext4_do_writepages+0x696/0x2720 [ 77.938671][ T4581] ext4_writepages+0x18f/0x300 [ 77.943520][ T4581] do_writepages+0x1b9/0x300 [ 77.948164][ T4581] file_write_and_wait_range+0x178/0x2f0 [ 77.953854][ T4581] mmb_fsync_noflush+0x48/0x140 [ 77.958755][ T4581] ext4_sync_file+0x1f2/0x6d0 [ 77.963489][ T4581] vfs_fsync_range+0xc5/0xe0 [ 77.968126][ T4581] ext4_buffered_write_iter+0x426/0x480 [ 77.973725][ T4581] ext4_file_write_iter+0x38e/0xef0 [ 77.978979][ T4581] iter_file_splice_write+0x6a0/0xa60 [ 77.984391][ T4581] direct_splice_actor+0x156/0x280 [ 77.989639][ T4581] splice_direct_to_actor+0x2f9/0x680 [ 77.995058][ T4581] do_splice_direct+0x119/0x1a0 [ 78.000127][ T4581] do_sendfile+0x37d/0x640 [ 78.005649][ T4581] __x64_sys_sendfile64+0x105/0x150 [ 78.010924][ T4581] x64_sys_call+0x2dc4/0x3020 [ 78.015671][ T4581] do_syscall_64+0x136/0x3c0 [ 78.020322][ T4581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.026265][ T4581] [ 78.028617][ T4581] read to 0xffff888100710684 of 4 bytes by task 4581 on cpu 0: [ 78.036277][ T4581] file_write_and_wait_range+0x130/0x2f0 [ 78.042018][ T4581] mmb_fsync_noflush+0x48/0x140 [ 78.047021][ T4581] ext4_sync_file+0x1f2/0x6d0 [ 78.051758][ T4581] vfs_fsync_range+0xc5/0xe0 [ 78.056421][ T4581] ext4_buffered_write_iter+0x426/0x480 [ 78.062013][ T4581] ext4_file_write_iter+0x38e/0xef0 [ 78.067355][ T4581] iter_file_splice_write+0x6a0/0xa60 [ 78.072778][ T4581] direct_splice_actor+0x156/0x280 [ 78.078117][ T4581] splice_direct_to_actor+0x2f9/0x680 [ 78.083540][ T4581] do_splice_direct+0x119/0x1a0 [ 78.088483][ T4581] do_sendfile+0x37d/0x640 [ 78.092960][ T4581] __x64_sys_sendfile64+0x105/0x150 [ 78.098207][ T4581] x64_sys_call+0x2dc4/0x3020 [ 78.102924][ T4581] do_syscall_64+0x136/0x3c0 [ 78.107575][ T4581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.113587][ T4581] [ 78.115940][ T4581] value changed: 0x02000021 -> 0x04000021 [ 78.121689][ T4581] [ 78.124041][ T4581] Reported by Kernel Concurrency Sanitizer on: [ 78.130240][ T4581] CPU: 0 UID: 0 PID: 4581 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.139492][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.149595][ T4581] ================================================================== [ 78.393771][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.678154][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 85.678174][ T28] audit: type=1400 audit(1782415488.754:870): avc: denied { write } for pid=4599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.716622][ T28] audit: type=1400 audit(1782415488.794:871): avc: denied { write } for pid=4610 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.005997][ T28] audit: type=1400 audit(1782415490.084:872): avc: denied { write } for pid=4613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.040269][ T28] audit: type=1400 audit(1782415490.114:873): avc: denied { write } for pid=4624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1