last executing test programs: 3m37.455894229s ago: executing program 32 (id=229): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206010800000000000014000000fffd14000780080011408856ddb1050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6970"], 0x60}}, 0x80) 3m24.983320497s ago: executing program 33 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0xf, 0x2}]}}, "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"}}, 0xfce) 3m14.368050253s ago: executing program 34 (id=750): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x4, r1}, 0x10) 2m18.271766012s ago: executing program 35 (id=2122): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = eventfd2(0xfffffffb, 0x801) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x20, 0x8, 0x9a, r0, 0x0, 0x0, 0x7, 0x0, 0x1, r2}]) 2m3.027849097s ago: executing program 36 (id=2406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) 1m59.300168851s ago: executing program 37 (id=2458): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="11980400419804003000128008000100736974002400028008000300ac1414aa06000f0003"], 0x50}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1m46.021530469s ago: executing program 38 (id=2664): unshare(0x24060400) creat(&(0x7f0000000100)='./file0\x00', 0x3c) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000040)) 1m42.505012513s ago: executing program 9 (id=2699): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m41.486336134s ago: executing program 9 (id=2714): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x81, 0x5, 0x1, 'queue1\x00', 0xef}) tkill(r0, 0x7) 1m41.258181985s ago: executing program 9 (id=2702): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setresuid(0xee01, 0xee00, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1m41.192382779s ago: executing program 9 (id=2706): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m41.14297596s ago: executing program 9 (id=2708): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m40.843874106s ago: executing program 9 (id=2720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r0) 1m40.843673486s ago: executing program 39 (id=2720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r0) 1m26.685631117s ago: executing program 0 (id=3004): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000d40000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x4000000) 1m25.934368734s ago: executing program 0 (id=3000): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {r2, r3+10000000}}, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 1m25.863196477s ago: executing program 0 (id=3003): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) 1m25.775939382s ago: executing program 0 (id=3006): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 1m25.548355473s ago: executing program 0 (id=3011): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = socket(0x1e, 0x2, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8b, 0x0, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m25.355508273s ago: executing program 7 (id=3015): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "000000000600000000ff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x212e}], 0x1, 0x9e) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x200, 0x0, 0x3, 0xfffffffe, 0xb, "1917134163410a57e12a33c39e4988bdfdf51f"}) 1m25.261024428s ago: executing program 0 (id=3019): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x7290}], 0x1, 0x405) shutdown(r0, 0x0) 1m25.2199965s ago: executing program 40 (id=3019): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x7290}], 0x1, 0x405) shutdown(r0, 0x0) 1m23.999183469s ago: executing program 7 (id=3035): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m23.79908916s ago: executing program 7 (id=3039): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xd07, 0x20040}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1m23.724925503s ago: executing program 7 (id=3030): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 1m23.38822471s ago: executing program 7 (id=3045): syz_open_procfs(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2082) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004003, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@noload}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x200000, 0x4) 1m22.77605477s ago: executing program 7 (id=3038): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 1m22.751157592s ago: executing program 41 (id=3038): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 1m13.759977947s ago: executing program 2 (id=3185): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x200080c0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1m13.529082698s ago: executing program 2 (id=3189): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0x1}], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m13.358552957s ago: executing program 2 (id=3193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.428031253s ago: executing program 2 (id=3209): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m12.416317534s ago: executing program 2 (id=3210): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.87537949s ago: executing program 2 (id=3247): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) 1m9.87520142s ago: executing program 42 (id=3247): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) 36.416744156s ago: executing program 8 (id=3932): r0 = syz_io_uring_setup(0x74f9, &(0x7f0000000340)={0x0, 0xff67, 0x13911, 0x1, 0x187}, &(0x7f0000003400), &(0x7f0000000240)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180)) r1 = eventfd2(0x800, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 36.34749517s ago: executing program 8 (id=3934): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa002, 0xc) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x4000423) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3) 36.292933953s ago: executing program 8 (id=3935): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noquota}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.891902493s ago: executing program 8 (id=3938): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102220, 0x10000, 0xfffffffa, 0x1, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 35.087156422s ago: executing program 8 (id=3950): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.903987832s ago: executing program 8 (id=3955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 34.903813702s ago: executing program 43 (id=3955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) 4.419737372s ago: executing program 3 (id=4545): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\n\x00', 0x2, 0xc0d0, 0x0, 0x0) close(r0) 4.387765703s ago: executing program 3 (id=4547): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 4.294863148s ago: executing program 3 (id=4548): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x80c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 2.466100408s ago: executing program 3 (id=4565): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 2.326680415s ago: executing program 1 (id=4566): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 2.22292988s ago: executing program 3 (id=4568): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) 2.222500001s ago: executing program 4 (id=4569): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0x0) 2.121649636s ago: executing program 4 (id=4570): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 2.113203796s ago: executing program 1 (id=4571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x17, 0x1c, 0x66, 0x0, 0xf1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x41af}}}}}}, 0x36) 2.03063891s ago: executing program 3 (id=4573): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x9}}, 0x1c}}, 0x20000090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200000ca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20) 1.987065642s ago: executing program 4 (id=4574): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 1.958211843s ago: executing program 1 (id=4575): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.941024634s ago: executing program 5 (id=4576): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x0, r2}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) 1.840185439s ago: executing program 5 (id=4578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0xf2ff, 0x2400}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xcb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440}, 0x0) 1.778101802s ago: executing program 1 (id=4579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x88a2}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000010", 0x38, 0x2c, 0x1, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, {[@hopopts={0x2b}, @hopopts={0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x5}}]}]}}}}}}, 0x72) 1.700305156s ago: executing program 5 (id=4580): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@tclass={{0x18, 0x29, 0x36, 0x302}}], 0x18}, 0x440e0) 1.63555325s ago: executing program 5 (id=4581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r1, 0x2cb3b0415539fbbb, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) 1.599651011s ago: executing program 6 (id=4582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.598311141s ago: executing program 1 (id=4583): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) 1.274244587s ago: executing program 6 (id=4584): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}], 0x1, 0x4000800) 508.058655ms ago: executing program 1 (id=4585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 444.223679ms ago: executing program 4 (id=4586): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x2, 0x1) 357.670942ms ago: executing program 6 (id=4587): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r3, 0x2f15f411}, &(0x7f0000000540)=0xc) 351.820393ms ago: executing program 4 (id=4588): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 342.742213ms ago: executing program 5 (id=4589): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000)) 276.775837ms ago: executing program 6 (id=4590): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) 228.389579ms ago: executing program 6 (id=4591): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40}}, 0x0, 0x0, 0xd, 0x0, "68ea2b0a67f88fe018e0818b6ad58b24940dbc406650d6ec0564558bf4bdde54fea87220b58d4eafadec03fe7faf83cbb9180891f68da04f4b2f8cfbe96e7385944fb477fdfbf627fba155a53eac0c51"}, 0xd8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 149.617143ms ago: executing program 5 (id=4592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e1e, @empty}, 0x40, 0x0, 0x0, 0x0, 0xa009, 0x0, 0x8000000000200001, 0x9, 0x8}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 55.549528ms ago: executing program 6 (id=4593): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000080)="d1", 0x1, 0x7, 0x0, 0x5, r2}, 0x0, 0x0]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=4594): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) kernel console output (not intermixed with test programs): 84] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.788276][T12384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.828944][T12384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.847807][T12384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.907399][T12456] ip6gre1: entered promiscuous mode [ 185.912668][T12456] ip6gre1: entered allmulticast mode [ 186.013154][T12435] chnl_net:caif_netlink_parms(): no params data found [ 186.144972][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.184056][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.207083][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.214222][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.229926][T12477] netlink: 'syz.6.3044': attribute type 10 has an invalid length. [ 186.238149][T12477] __nla_validate_parse: 2 callbacks suppressed [ 186.238163][T12477] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3044'. [ 186.254365][T12435] bridge_slave_0: entered allmulticast mode [ 186.278119][T12477] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 186.282582][T12435] bridge_slave_0: entered promiscuous mode [ 186.309817][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.336939][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.344261][T12435] bridge_slave_1: entered allmulticast mode [ 186.367766][T12435] bridge_slave_1: entered promiscuous mode [ 186.390904][T12500] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 186.417965][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.425284][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.434235][T12502] loop6: detected capacity change from 0 to 512 [ 186.443907][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.451062][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.485424][T12435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.504867][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.513716][T12502] FAT-fs (loop6): Filesystem has been set read-only [ 186.528899][T12435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.541641][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.572773][T12384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.586804][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.616603][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.632445][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.651114][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.666538][T12517] loop2: detected capacity change from 0 to 512 [ 186.674646][T12435] team0: Port device team_slave_0 added [ 186.677218][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.712475][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.723548][T12435] team0: Port device team_slave_1 added [ 186.747062][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.757453][T12502] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 186.776620][T12517] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 186.784686][T12517] System zones: 0-2, 18-18, 34-35 [ 186.800117][T12435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.811595][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.838703][T12517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.851645][T12517] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.899164][T10223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.921211][T12435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.952737][T12435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.996413][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.033083][T12435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.060629][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.125192][T12435] hsr_slave_0: entered promiscuous mode [ 187.141705][T12435] hsr_slave_1: entered promiscuous mode [ 187.151754][T12435] debugfs: 'hsr0' already exists in 'hsr' [ 187.163971][T12435] Cannot create hsr debugfs directory [ 187.379889][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 187.379907][ T28] audit: type=1400 audit(1774267906.381:1877): avc: denied { watch_reads } for pid=12576 comm="syz.6.3063" path="/proc/174" dev="proc" ino=43114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 187.486795][ T3423] IPVS: starting estimator thread 0... [ 187.518137][T12384] veth0_vlan: entered promiscuous mode [ 187.586354][T12594] IPVS: using max 2304 ests per chain, 115200 per kthread [ 187.620813][T12384] veth1_vlan: entered promiscuous mode [ 187.643777][T12384] veth0_macvtap: entered promiscuous mode [ 187.672730][T12384] veth1_macvtap: entered promiscuous mode [ 187.697693][T12435] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.494626][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.517053][T12435] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.543888][T12628] loop6: detected capacity change from 0 to 512 [ 188.544879][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.561656][T12435] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.573407][T12435] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.597499][T12628] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 188.608605][T12630] ip6gre1: entered promiscuous mode [ 188.613859][T12630] ip6gre1: entered allmulticast mode [ 188.615015][T12634] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.627310][T12628] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.659066][T12628] EXT4-fs (loop6): mount failed [ 188.705586][ T7255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.728301][ T7255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.779018][ T7265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.806420][ T7265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.957224][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.021467][T12680] loop2: detected capacity change from 0 to 512 [ 189.060971][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.106575][T12680] FAT-fs (loop2): Filesystem has been set read-only [ 189.133029][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.144972][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.166615][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.167972][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.173892][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.207340][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.214565][ T7251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.246367][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.284522][T12435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.289189][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.296007][T12435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.367092][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.407191][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.420478][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.463091][T12435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.486616][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.498757][T12680] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 189.582210][ T7247] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.607126][ T3423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.619099][ T7247] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.813174][T12435] veth0_vlan: entered promiscuous mode [ 189.823966][T12435] veth1_vlan: entered promiscuous mode [ 189.842101][T12435] veth0_macvtap: entered promiscuous mode [ 189.850166][T12435] veth1_macvtap: entered promiscuous mode [ 189.871096][T12435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.881842][T12435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.893650][ T7251] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.905926][ T7251] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.919711][ T7251] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.929325][ T7251] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.002585][T12758] loop2: detected capacity change from 0 to 512 [ 190.034666][T12758] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 190.084071][T12758] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.134641][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 190.151787][T12758] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 190.214421][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3096'. [ 190.226206][T12758] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 190.227699][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.262128][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 190.262231][T12758] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.3105: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 190.262272][T12758] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 190.276713][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3096'. [ 190.289571][ T7247] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.356721][T12758] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3105: couldn't read orphan inode 13 (err -117) [ 190.369509][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 190.369546][ C1] EXT4-fs (loop2): last error at time 1774267909: ext4_ext_check_inode:521: inode 13 [ 190.416407][ T7251] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.436849][ T7251] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.447899][T12758] loop2: lost filesystem error report for type 5 error -117 [ 190.448498][T12758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.486777][T12758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.499082][ T7251] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.593904][T12796] loop4: detected capacity change from 0 to 512 [ 190.625575][T12796] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 190.627903][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.648928][T12790] netlink: 'syz.8.3099': attribute type 10 has an invalid length. [ 190.653291][T12796] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.663585][T12790] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3099'. [ 190.681204][T12790] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 190.723895][T12796] EXT4-fs (loop4): mount failed [ 190.876737][T12826] netlink: 'syz.2.3111': attribute type 12 has an invalid length. [ 191.210712][ T28] audit: type=1400 audit(1774267910.211:1878): avc: denied { write } for pid=12852 comm="syz.2.3118" path="socket:[43709]" dev="sockfs" ino=43709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 191.428926][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'. [ 191.465628][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'. [ 192.429272][T12960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.470429][T12960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.542590][T12960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.569807][T12960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.649965][T12960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.684780][T12960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.780414][T12960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.806373][T12960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.895798][ T7269] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.909019][ T7269] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.955116][ T7269] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.965602][ T7269] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.006444][ T7269] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.022135][ T7269] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.067245][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3152'. [ 193.076248][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3152'. [ 193.086051][ T7269] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.109334][ T7269] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.426410][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.672729][ T28] audit: type=1326 audit(1774267912.671:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 193.771100][ T28] audit: type=1326 audit(1774267912.671:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 193.859090][ T28] audit: type=1326 audit(1774267912.671:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 193.882868][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'. [ 193.926532][ T28] audit: type=1326 audit(1774267912.671:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 193.959979][ T28] audit: type=1326 audit(1774267912.681:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.060867][ T28] audit: type=1326 audit(1774267912.721:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.098888][T13125] netlink: 'syz.6.3184': attribute type 9 has an invalid length. [ 194.107013][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3184'. [ 194.117120][T13125] netlink: 'syz.6.3184': attribute type 9 has an invalid length. [ 194.125334][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3184'. [ 194.130132][ T28] audit: type=1326 audit(1774267912.721:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.194817][T13129] loop2: detected capacity change from 0 to 4096 [ 194.219926][ T28] audit: type=1326 audit(1774267912.721:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.248075][ T28] audit: type=1326 audit(1774267912.721:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.273321][T13129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.273646][ T28] audit: type=1326 audit(1774267912.721:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.3174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 194.394261][T10223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.775965][T13177] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.658346][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 195.682795][T13273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.718103][T13273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.740455][T13273] bond0 (unregistering): Released all slaves [ 195.830337][T13158] kexec: Could not allocate control_code_buffer [ 196.125645][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3222'. [ 197.774470][T13484] netlink: 'syz.4.3239': attribute type 19 has an invalid length. [ 197.783197][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 197.803990][T13484] netlink: 'syz.4.3239': attribute type 19 has an invalid length. [ 197.814864][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 197.825039][T13486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3240'. [ 197.864318][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3242'. [ 197.893070][T13496] loop6: detected capacity change from 0 to 1024 [ 197.952152][T13496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.983787][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.025444][ T7269] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.036934][ T7269] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.073611][T13506] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3246'. [ 198.117502][ T7269] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.128525][ T7269] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.179249][ T7269] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.189330][ T7269] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.241058][ T7269] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.262833][ T7269] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.296564][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 198.706579][ T7269] bond2 (unregistering): (slave geneve2): Releasing active interface [ 198.743626][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3260'. [ 198.768676][ T7269] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 198.786428][ T7269] bridge1 (unregistering): left promiscuous mode [ 198.827076][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 198.827093][ T28] audit: type=1326 audit(1774267917.831:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 198.859189][ T28] audit: type=1326 audit(1774267917.831:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 198.883719][ T28] audit: type=1326 audit(1774267917.831:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 198.884803][ T7269] bond0 (unregistering): Released all slaves [ 198.907771][ T28] audit: type=1326 audit(1774267917.831:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 198.920447][ T7269] bond1 (unregistering): Released all slaves [ 198.938015][ T28] audit: type=1326 audit(1774267917.831:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 198.953049][ T7269] bond2 (unregistering): Released all slaves [ 198.967325][ T28] audit: type=1326 audit(1774267917.831:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.6.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 199.040780][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3264'. [ 199.118652][ T7269] hsr_slave_0: left promiscuous mode [ 199.124637][ T7269] hsr_slave_1: left promiscuous mode [ 199.134041][ T7269] veth1_macvtap: left promiscuous mode [ 199.139837][ T7269] veth0_macvtap: left promiscuous mode [ 199.145438][ T7269] veth1_vlan: left promiscuous mode [ 199.151037][ T7269] veth0_vlan: left promiscuous mode [ 199.208436][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3269'. [ 199.294511][T13507] chnl_net:caif_netlink_parms(): no params data found [ 199.321019][T13592] loop6: detected capacity change from 0 to 512 [ 199.372440][T13592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.449848][T13592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.497700][T13507] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.498673][T13592] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.505411][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.522808][T13507] bridge_slave_0: entered allmulticast mode [ 199.529430][T13507] bridge_slave_0: entered promiscuous mode [ 199.536757][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.556389][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.563703][T13507] bridge_slave_1: entered allmulticast mode [ 199.571813][T13507] bridge_slave_1: entered promiscuous mode [ 199.630811][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.642915][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.653600][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.704086][T13507] team0: Port device team_slave_0 added [ 199.724808][T13507] team0: Port device team_slave_1 added [ 199.763221][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.771867][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.800205][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.800997][ T28] audit: type=1326 audit(1774267918.801:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.8.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6c87c799 code=0x7fc00000 [ 199.830300][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.854728][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.892746][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.960659][T13507] hsr_slave_0: entered promiscuous mode [ 199.970228][T13507] hsr_slave_1: entered promiscuous mode [ 199.980571][T13507] debugfs: 'hsr0' already exists in 'hsr' [ 199.992917][T13507] Cannot create hsr debugfs directory [ 200.010132][T13567] kernel write not supported for file bpf-prog (pid: 13567 comm: kworker/1:7) [ 200.154172][ T28] audit: type=1326 audit(1774267919.151:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.6.3285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9327bdc799 code=0x0 [ 200.180485][T13507] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.265628][T13507] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.353178][T13507] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.437081][T13507] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.490434][ T28] audit: type=1326 audit(1774267919.491:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.8.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6c87c799 code=0x7fc00000 [ 200.555470][T13507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.569776][T13507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.579346][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 200.602132][T13507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.633907][T13507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.776369][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.838553][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.882615][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.907874][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.915015][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.926713][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.933908][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.048313][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 201.085138][T13718] bond0 (unregistering): Released all slaves [ 201.103813][ T28] audit: type=1326 audit(1774267920.101:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13719 comm="syz.6.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 201.148570][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.198860][T13729] loop8: detected capacity change from 0 to 128 [ 201.225634][T13729] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.240172][T13729] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.316832][T12435] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.477908][T13507] veth0_vlan: entered promiscuous mode [ 201.496626][T13507] veth1_vlan: entered promiscuous mode [ 201.532155][T13507] veth0_macvtap: entered promiscuous mode [ 201.547069][T13507] veth1_macvtap: entered promiscuous mode [ 201.563733][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.578917][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.604458][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.628640][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.639452][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.656111][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.061085][T13732] loop6: detected capacity change from 0 to 512 [ 202.144221][T13732] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 202.182358][T13791] loop5: detected capacity change from 0 to 1024 [ 202.200495][T13791] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 202.225052][T13791] EXT4-fs (loop5): group descriptors corrupted! [ 202.351086][T13801] ip6erspan0: entered promiscuous mode [ 202.590589][T13818] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 202.653797][T13818] bond0: entered promiscuous mode [ 202.666572][T13818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.824055][T13826] loop5: detected capacity change from 0 to 1024 [ 202.836707][T13826] EXT4-fs: Ignoring removed i_version option [ 202.871757][T13823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.888209][T13826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.919921][T13823] bond0: (slave bond1): making interface the new active one [ 202.956559][T13823] bond1: entered promiscuous mode [ 202.964691][T13826] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.998410][T13823] bond0: (slave bond1): Enslaving as an active interface with an up link [ 203.017623][T13826] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.3334: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.047489][T13828] ip6gre2: entered allmulticast mode [ 203.087506][T13832] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.3334: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.114093][T13832] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.147507][T13832] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.147507][T13832] [ 203.179377][T13826] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.3334: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.278084][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.664818][T13870] loop8: detected capacity change from 0 to 1024 [ 203.703350][T13870] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 203.724402][T13870] EXT4-fs (loop8): group descriptors corrupted! [ 203.875239][T13884] __nla_validate_parse: 1 callbacks suppressed [ 203.875255][T13884] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3354'. [ 203.999138][T13897] loop5: detected capacity change from 0 to 4096 [ 204.019273][T13897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.060962][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'. [ 204.071020][T13903] IPv6: Can't replace route, no match found [ 204.112445][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.207573][T13915] netlink: 'syz.4.3364': attribute type 15 has an invalid length. [ 204.220054][T13913] loop5: detected capacity change from 0 to 256 [ 204.226911][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 204.236216][T13915] netlink: 'syz.4.3364': attribute type 15 has an invalid length. [ 204.244249][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3364'. [ 204.268568][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.277853][T13913] FAT-fs (loop5): Filesystem has been set read-only [ 204.284851][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.295092][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.321976][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.331549][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.340718][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.349851][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.360672][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.369689][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.380379][T13913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 204.396805][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 204.396822][ T28] audit: type=1326 audit(1774267923.391:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.486402][ T28] audit: type=1326 audit(1774267923.401:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.548338][T13923] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3366'. [ 204.565732][ T28] audit: type=1326 audit(1774267923.401:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.619127][ T28] audit: type=1326 audit(1774267923.401:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.661148][ T28] audit: type=1326 audit(1774267923.431:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.686515][ T28] audit: type=1326 audit(1774267923.431:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.710474][ T28] audit: type=1326 audit(1774267923.431:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 204.936323][ T28] audit: type=1326 audit(1774267923.431:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 205.006005][ T28] audit: type=1326 audit(1774267923.431:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 205.066328][ T28] audit: type=1326 audit(1774267923.431:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.4.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 205.267307][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3379'. [ 205.545520][T13968] loop8: detected capacity change from 0 to 8192 [ 205.565461][T13968] bio_check_eod: 206 callbacks suppressed [ 205.565479][T13968] syz.8.3386: attempt to access beyond end of device [ 205.565479][T13968] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 205.633823][T13968] Buffer I/O error on dev loop8, logical block 57847, async page read [ 205.656634][T13972] syz.8.3386: attempt to access beyond end of device [ 205.656634][T13972] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 205.686335][T13972] Buffer I/O error on dev loop8, logical block 57847, async page read [ 205.716642][T13972] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 205.735309][T13972] FAT-fs (loop8): Filesystem has been set read-only [ 205.826696][T13972] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 206.047874][T13982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.077657][T13982] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 206.221764][T13994] loop5: detected capacity change from 0 to 128 [ 206.678715][T14018] loop5: detected capacity change from 0 to 1024 [ 206.720587][T14018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.073290][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.312166][T14057] batadv_slave_1: entered promiscuous mode [ 207.329218][T14056] batadv_slave_1: left promiscuous mode [ 207.607559][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3429'. [ 207.620776][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3429'. [ 207.640596][T14084] netlink: 'syz.6.3429': attribute type 6 has an invalid length. [ 207.655257][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3429'. [ 207.669909][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3429'. [ 207.696404][T14084] netlink: 'syz.6.3429': attribute type 6 has an invalid length. [ 207.952377][T14050] loop5: detected capacity change from 0 to 512 [ 208.003862][T14050] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 208.051829][T14139] netlink: 'syz.4.3440': attribute type 20 has an invalid length. [ 208.062207][T14139] netlink: 'syz.4.3440': attribute type 21 has an invalid length. [ 208.376528][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 208.382601][ T5244] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.466225][T14189] SELinux: ebitmap: map size 1598833228 does not match my size 64 (high bit was 1397770563) [ 208.477150][T14189] SELinux: failed to load policy [ 208.548487][T14198] loop8: detected capacity change from 0 to 256 [ 208.570690][T14200] syzkaller1: entered promiscuous mode [ 208.576241][T14200] syzkaller1: entered allmulticast mode [ 208.613810][T14202] loop8: detected capacity change from 0 to 2048 [ 208.653467][T14202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.677438][T14202] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.693627][T14202] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3455: bg 0: block 345: padding at end of block bitmap is not set [ 208.727019][T14202] EXT4-fs (loop8): Remounting filesystem read-only [ 208.763985][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.819624][T14226] veth0_virt_wifi: entered allmulticast mode [ 208.954565][T14241] netlink: 'syz.8.3466': attribute type 2 has an invalid length. [ 209.385537][T14287] loop8: detected capacity change from 0 to 512 [ 209.435886][T14287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.498381][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 209.498410][ T28] audit: type=1400 audit(1774267928.501:2070): avc: denied { remount } for pid=14283 comm="syz.1.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.547908][T14287] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.707572][ T28] audit: type=1326 audit(1774267928.691:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14263 comm="syz.4.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 209.826005][T14326] batadv_slave_1: entered promiscuous mode [ 209.856889][T14325] batadv_slave_1: left promiscuous mode [ 209.925045][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.973439][T14333] netlink: 'syz.1.3488': attribute type 1 has an invalid length. [ 209.993676][T14339] __nla_validate_parse: 1 callbacks suppressed [ 209.993694][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3489'. [ 210.025405][T14333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.434601][T14371] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3503'. [ 210.460473][T14371] netlink: zone id is out of range [ 210.471359][T14371] netlink: zone id is out of range [ 210.579041][T14371] netlink: set zone limit has 8 unknown bytes [ 210.705277][T14405] loop5: detected capacity change from 0 to 128 [ 211.187583][T14440] loop5: detected capacity change from 0 to 512 [ 211.217017][T14440] EXT4-fs: Ignoring removed oldalloc option [ 211.233966][T14440] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.309493][T14440] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3522: bad orphan inode 131083 [ 211.358214][T14440] loop5: lost filesystem error report for type 5 error -117 [ 211.363261][T14440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.389944][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3524'. [ 211.475722][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.617749][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3532'. [ 211.636375][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3532'. [ 211.667846][T14479] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.3535'. [ 211.798692][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3539'. [ 211.812195][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3539'. [ 211.870014][T14495] netlink: 'syz.8.3541': attribute type 2 has an invalid length. [ 211.886548][T14495] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3541'. [ 212.167508][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 212.428578][T14540] loop6: detected capacity change from 0 to 1024 [ 212.476709][T14540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.489599][T14540] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.508071][T14540] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.3553: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.535335][T14540] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 212.551765][T14540] EXT4-fs (loop6): This should not happen!! Data will be lost [ 212.551765][T14540] [ 212.579710][ T7255] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.593775][ T7255] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 212.606312][ T7255] EXT4-fs (loop6): This should not happen!! Data will be lost [ 212.606312][ T7255] [ 212.617376][ T7251] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 212.633005][ T7251] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 212.646172][ T7251] EXT4-fs (loop6): This should not happen!! Data will be lost [ 212.646172][ T7251] [ 212.661328][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.907803][T14562] loop5: detected capacity change from 0 to 512 [ 212.939702][T14562] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 213.012315][T14569] netlink: 'syz.8.3564': attribute type 26 has an invalid length. [ 213.021119][T14569] netlink: 'syz.8.3564': attribute type 26 has an invalid length. [ 213.046947][T14567] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 213.401157][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.408721][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.867664][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.894036][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.285939][ T7255] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.336385][ T7255] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.347284][ T7255] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.356433][ T7255] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.406323][ T7255] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.436656][ T7255] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.464374][ T7255] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.496327][ T7255] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.676787][T14574] uprobe: syz.8.3566:14574 failed to unregister, leaking uprobe [ 214.866594][T14672] loop6: detected capacity change from 0 to 512 [ 214.912293][T14672] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.951380][T14672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.981151][T14672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.994456][ T28] audit: type=1400 audit(1774267934.001:2072): avc: denied { setopt } for pid=14683 comm="syz.4.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.017234][T14672] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.811502][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.116082][T14729] __nla_validate_parse: 6 callbacks suppressed [ 216.116103][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3609'. [ 216.136646][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.237755][T14736] netlink: 'syz.5.3612': attribute type 39 has an invalid length. [ 216.297123][T14740] netlink: 'syz.6.3614': attribute type 29 has an invalid length. [ 216.317475][T14740] netlink: 'syz.6.3614': attribute type 29 has an invalid length. [ 216.338318][T14740] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3614'. [ 216.451689][T14749] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3618'. [ 216.809515][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.243436][T14793] loop5: detected capacity change from 0 to 764 [ 217.652568][T14823] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3648'. [ 217.704994][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3650'. [ 217.979859][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3661'. [ 217.996339][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3661'. [ 218.015865][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3661'. [ 218.027065][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3661'. [ 218.221218][ T28] audit: type=1400 audit(1774267937.221:2073): avc: denied { mounton } for pid=14860 comm="syz.5.3675" path=2F37382FE91F7189591E9233614B dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 218.268191][T14865] netlink: 'syz.5.3666': attribute type 4 has an invalid length. [ 218.339211][T14873] loop6: detected capacity change from 0 to 1024 [ 218.387008][T14873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.666240][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.856358][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 218.862510][ T5244] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.903792][T14900] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.967633][ T28] audit: type=1400 audit(1774267937.971:2074): avc: denied { write } for pid=14903 comm="syz.8.3682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 219.074154][ T28] audit: type=1400 audit(1774267938.071:2075): avc: denied { getopt } for pid=14914 comm="syz.8.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.111275][ T28] audit: type=1400 audit(1774267938.111:2076): avc: denied { read } for pid=14916 comm="syz.8.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 219.555499][T14944] loop5: detected capacity change from 0 to 512 [ 219.580195][T14944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.619899][T14944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.632984][T14944] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.703503][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.974258][T14987] netlink: 'syz.8.3718': attribute type 10 has an invalid length. [ 219.989988][T14987] team0: Port device dummy0 added [ 220.000243][T14987] netlink: 'syz.8.3718': attribute type 10 has an invalid length. [ 220.012462][T14987] team0: Port device dummy0 removed [ 220.021850][T14987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.240574][T15003] rdma_op ffff888118328580 conn xmit_rdma 0000000000000000 [ 220.252259][T15001] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3723'. [ 220.572294][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.704033][ T28] audit: type=1400 audit(1774267939.701:2077): avc: denied { mount } for pid=15032 comm="syz.6.3738" name="/" dev="autofs" ino=49910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.752823][T14590] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 221.778106][T14590] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.075737][ T28] audit: type=1400 audit(1774267941.071:2078): avc: denied { create } for pid=15188 comm="syz.8.3772" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.118306][ T28] audit: type=1400 audit(1774267941.071:2079): avc: denied { map } for pid=15188 comm="syz.8.3772" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.149481][ T28] audit: type=1400 audit(1774267941.071:2080): avc: denied { read write } for pid=15188 comm="syz.8.3772" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 222.224289][T15199] netlink: 'syz.8.3777': attribute type 1 has an invalid length. [ 222.262427][T15199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.363320][T15207] loop8: detected capacity change from 0 to 1024 [ 222.391189][T15207] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.502490][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.700674][T15222] TCP: TCP_TX_DELAY enabled [ 222.759324][T15225] netlink: 'syz.8.3785': attribute type 15 has an invalid length. [ 223.035559][T15231] loop8: detected capacity change from 0 to 512 [ 223.047926][T15231] EXT4-fs: Ignoring removed bh option [ 223.061799][T15231] EXT4-fs: inline encryption not supported [ 223.081233][T15231] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.108299][T15231] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 223.124036][T15231] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3788: bg 0: block 248: padding at end of block bitmap is not set [ 223.139802][T15231] loop8: lost filesystem error report for type 5 error -117 [ 223.146302][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 223.160149][ C0] EXT4-fs (loop8): last error at time 1774267942: ext4_validate_block_bitmap:441 [ 223.169650][T15231] Quota error (device loop8): write_blk: dquota write failed [ 223.177503][T15231] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 223.187980][T15231] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3788: Failed to acquire dquot type 1 [ 223.199599][T15231] loop8: lost filesystem error report for type 5 error -117 [ 223.211044][T15231] EXT4-fs (loop8): 1 truncate cleaned up [ 223.236822][T15231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 223.311731][T15237] loop5: detected capacity change from 0 to 512 [ 223.331083][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 223.347517][ T7253] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 223.366395][ T7253] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 1 [ 223.388556][T15237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.396495][ T7253] loop8: lost filesystem error report for type 5 error -117 [ 223.418518][T15237] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.435046][T15243] __nla_validate_parse: 1 callbacks suppressed [ 223.435097][T15243] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3791'. [ 223.441685][T15193] kexec: Could not allocate control_code_buffer [ 223.479069][T15237] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #4: comm syz.5.3790: corrupted inode contents [ 223.518610][T15237] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #4: comm syz.5.3790: mark_inode_dirty error [ 223.568409][T15237] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #4: comm syz.5.3790: corrupted inode contents [ 223.604659][T15237] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #4: comm syz.5.3790: mark_inode_dirty error [ 223.622480][T15237] Quota error (device loop5): write_blk: dquota write failed [ 223.630177][T15237] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 223.657318][T15237] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 223.673301][T15237] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3790: Failed to acquire dquot type 1 [ 223.700166][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.903455][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 226.903473][ T28] audit: type=1400 audit(1774267945.901:2082): avc: denied { firmware_load } for pid=15297 comm="syz.4.3815" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 226.935526][T15299] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 226.944928][T15299] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 227.031135][T15308] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 227.047518][T15306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.063686][T15310] netlink: 'syz.6.3820': attribute type 12 has an invalid length. [ 227.072978][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3818'. [ 227.076834][T15310] netlink: 'syz.6.3820': attribute type 29 has an invalid length. [ 227.090275][T15310] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3820'. [ 227.099618][T15310] netlink: 'syz.6.3820': attribute type 2 has an invalid length. [ 227.107517][T15310] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3820'. [ 227.122330][T15308] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.156079][T15314] bond4: (slave geneve3): making interface the new active one [ 227.181109][T15314] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 227.192178][ T1728] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.213771][ T1728] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.223070][ T1728] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.232743][ T1728] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.336763][T14611] Process accounting resumed [ 227.366619][T15337] netlink: 'syz.1.3829': attribute type 1 has an invalid length. [ 227.395996][T15340] loop6: detected capacity change from 0 to 1024 [ 227.418955][T15337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.438920][T15340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.471612][T15342] bond5: (slave geneve4): making interface the new active one [ 227.494862][T15342] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 227.575212][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.683168][T15357] syzkaller1: entered promiscuous mode [ 227.701547][T15357] syzkaller1: entered allmulticast mode [ 229.222220][ T28] audit: type=1400 audit(1774267948.211:2083): avc: denied { connect } for pid=15449 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.096175][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 230.195980][T15486] netlink: 'syz.4.3889': attribute type 2 has an invalid length. [ 230.213197][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3889'. [ 230.457373][T15509] SELinux: failed to load policy [ 230.509855][T15520] loop5: detected capacity change from 0 to 1024 [ 230.516919][T15520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.528168][T15520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.640371][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.870632][T15547] loop8: detected capacity change from 0 to 1024 [ 230.908490][T15547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.052499][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.639970][T15608] loop8: detected capacity change from 0 to 512 [ 231.695006][T15608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.714258][T15608] ext4 filesystem being mounted at /163/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.867918][T15562] syz.6.3916 (15562) used greatest stack depth: 7224 bytes left [ 232.303038][T15619] tipc: Started in network mode [ 232.309892][T15619] tipc: Node identity ac1414aa, cluster identity 4711 [ 232.318981][T15619] tipc: Enabled bearer , priority 10 [ 232.531401][ T28] audit: type=1400 audit(1774267951.531:2084): avc: denied { write } for pid=15623 comm="syz.4.3942" path="socket:[51067]" dev="sockfs" ino=51067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 232.613398][T12435] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.649244][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 232.658560][T15628] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3944'. [ 232.668217][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3944'. [ 232.688750][T15632] loop8: detected capacity change from 0 to 512 [ 232.708381][T15632] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 232.722325][T15632] EXT4-fs (loop8): 1 truncate cleaned up [ 232.728969][T15632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.760045][T15632] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.842351][T12435] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.864571][T12435] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.917451][T14248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.957582][ T28] audit: type=1400 audit(1774267951.961:2085): avc: denied { shutdown } for pid=15647 comm="syz.6.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.992602][ T290] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.020251][T15650] ip6gre1: entered promiscuous mode [ 233.055126][ T290] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.128865][ T290] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.144378][T15666] netlink: 'syz.4.3962': attribute type 7 has an invalid length. [ 233.156652][T15666] netlink: 'syz.4.3962': attribute type 7 has an invalid length. [ 233.199304][ T290] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.332669][ T290] bridge_slave_1: left allmulticast mode [ 233.339020][ T290] bridge_slave_1: left promiscuous mode [ 233.344999][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.356515][ T290] bridge_slave_0: left allmulticast mode [ 233.362388][ T290] bridge_slave_0: left promiscuous mode [ 233.368666][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.380215][T15679] loop6: detected capacity change from 0 to 512 [ 233.396658][T15679] EXT4-fs: Ignoring removed bh option [ 233.418439][T15679] EXT4-fs: inline encryption not supported [ 233.491898][T15679] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.525494][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.565520][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.586873][T15679] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.601762][ T290] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 233.611171][ T290] bond0 (unregistering): Released all slaves [ 233.618497][T15679] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3965: bg 0: block 248: padding at end of block bitmap is not set [ 233.619586][ T290] bond1 (unregistering): Released all slaves [ 233.649954][T15679] loop6: lost filesystem error report for type 5 error -117 [ 233.650710][T15679] Quota error (device loop6): write_blk: dquota write failed [ 233.658111][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 233.658131][ C0] EXT4-fs (loop6): last error at time 1774267952: ext4_validate_block_bitmap:441 [ 233.684141][T15679] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 233.694203][T14611] tipc: Node number set to 2886997162 [ 233.712982][T15679] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3965: Failed to acquire dquot type 1 [ 233.724856][T15679] loop6: lost filesystem error report for type 5 error -117 [ 233.725647][T15679] EXT4-fs (loop6): 1 truncate cleaned up [ 233.739462][T15679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 233.781189][ T290] hsr_slave_0: left promiscuous mode [ 233.798082][ T290] hsr_slave_1: left promiscuous mode [ 233.810360][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.820375][ T290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.828683][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 233.838502][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.846092][ T290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.855756][ T290] veth1_macvtap: left promiscuous mode [ 233.861548][ T290] veth0_macvtap: left promiscuous mode [ 233.871576][ T290] veth1_vlan: left promiscuous mode [ 233.877667][ T290] veth0_vlan: left promiscuous mode [ 233.949389][T15694] loop6: detected capacity change from 0 to 512 [ 233.986670][T15694] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.015558][T15694] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 234.032844][T15694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 234.044990][T15694] System zones: 0-2, 18-18, 34-35 [ 234.059289][T15694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.103388][T15694] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 234.148762][ T290] team0 (unregistering): Port device team_slave_1 removed [ 234.157371][T15694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 234.165434][T15694] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 234.174335][ T290] team0 (unregistering): Port device team_slave_0 removed [ 234.197328][T15694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3968: bg 0: block 353: padding at end of block bitmap is not set [ 234.259435][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.278888][T15715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.371823][T15656] chnl_net:caif_netlink_parms(): no params data found [ 234.438733][T15656] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.445938][T15656] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.456422][T15656] bridge_slave_0: entered allmulticast mode [ 234.546479][T15656] bridge_slave_0: entered promiscuous mode [ 234.553424][T15656] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.560696][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.567939][T15656] bridge_slave_1: entered allmulticast mode [ 234.574527][T15656] bridge_slave_1: entered promiscuous mode [ 234.609406][T15656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.620466][T15656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.663137][T15656] team0: Port device team_slave_0 added [ 234.675639][T15656] team0: Port device team_slave_1 added [ 234.695916][T15656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.708562][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.734904][T15656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.746998][T15656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.753974][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.790006][T15656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.856064][T15656] hsr_slave_0: entered promiscuous mode [ 234.860069][T15764] 9p: Unknown uid 00000000004294967295 [ 234.861976][ T28] audit: type=1400 audit(1774267953.851:2086): avc: denied { getopt } for pid=15763 comm="syz.5.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.892767][T15656] hsr_slave_1: entered promiscuous mode [ 234.899097][T15656] debugfs: 'hsr0' already exists in 'hsr' [ 234.905326][T15656] Cannot create hsr debugfs directory [ 234.911379][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3986'. [ 235.062387][T15776] ipip1: entered promiscuous mode [ 235.079674][T15776] ipip1: entered allmulticast mode [ 235.322580][T15656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.372141][T15656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.529152][T15656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.553935][T15656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.579954][T15828] delete_channel: no stack [ 235.601418][ T28] audit: type=1400 audit(1774267954.581:2087): avc: denied { ioctl } for pid=15828 comm="syz.1.4000" path="socket:[52126]" dev="sockfs" ino=52126 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 235.798330][T15656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.840094][T15656] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.870613][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.877760][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.910822][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.918027][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.356951][T15911] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.4014'. [ 236.385358][T15911] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.4014'. [ 236.429934][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.514849][T15925] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4018'. [ 236.682641][T15656] veth0_vlan: entered promiscuous mode [ 236.703429][T15656] veth1_vlan: entered promiscuous mode [ 236.747396][T15656] veth0_macvtap: entered promiscuous mode [ 236.781669][T15656] veth1_macvtap: entered promiscuous mode [ 236.833047][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.868035][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.907377][ T7253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.937134][ T7253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.946119][ T7253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.977006][ T7253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.030398][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.234667][T15995] loop5: detected capacity change from 0 to 1024 [ 237.272363][T15995] EXT4-fs: Ignoring removed orlov option [ 237.301617][T15995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.379987][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.513993][T16008] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 237.627545][T16013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 237.993755][T16063] loop3: detected capacity change from 0 to 256 [ 238.116882][T16076] loop6: detected capacity change from 0 to 512 [ 238.124110][T16076] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.135604][T16076] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 238.205192][T16085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4047'. [ 238.222361][ T28] audit: type=1400 audit(1774267957.221:2088): avc: denied { read } for pid=14597 comm="kworker/1:14" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53385 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.946698][T16168] batadv_slave_1: entered promiscuous mode [ 238.963762][T16168] batadv_slave_1: left promiscuous mode [ 239.088674][T16177] loop3: detected capacity change from 0 to 1024 [ 239.096363][ T5244] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.105841][T16177] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 239.116042][T16177] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 239.126137][T16177] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4069: Failed to acquire dquot type 0 [ 239.137684][T16177] loop3: lost filesystem error report for type 5 error -117 [ 239.138324][T16177] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 239.160260][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 239.160286][ C1] EXT4-fs (loop3): initial error at time 1774267958: ext4_acquire_dquot:7001 [ 239.160310][ C1] EXT4-fs (loop3): last error at time 1774267958: ext4_acquire_dquot:7001 [ 239.191697][T16177] EXT4-fs (loop3): 1 truncate cleaned up [ 239.200072][T16177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.337740][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.392388][T16201] loop3: detected capacity change from 0 to 512 [ 239.456994][ T28] audit: type=1326 audit(1774267958.461:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.498095][ T28] audit: type=1326 audit(1774267958.461:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.537184][ T28] audit: type=1326 audit(1774267958.461:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.570546][ T28] audit: type=1326 audit(1774267958.461:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.595026][ T28] audit: type=1326 audit(1774267958.461:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.613276][T16213] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.619752][ T28] audit: type=1326 audit(1774267958.481:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.681263][ T28] audit: type=1326 audit(1774267958.481:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16207 comm="syz.4.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 239.740493][T16214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.997827][T16248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4100'. [ 240.009337][T16248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4100'. [ 240.045869][T16250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.101420][T16250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.212397][T16271] loop3: detected capacity change from 0 to 512 [ 240.251092][T16271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.293434][T16271] EXT4-fs (loop3): 1 truncate cleaned up [ 240.334519][T16271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.424462][T16290] sctp: [Deprecated]: syz.5.4119 (pid 16290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.424462][T16290] Use struct sctp_sack_info instead [ 240.502323][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.633279][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4125'. [ 240.637755][T16306] netlink: 'syz.3.4126': attribute type 1 has an invalid length. [ 240.667418][T16305] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4125'. [ 240.773270][T16314] netlink: 'syz.3.4129': attribute type 29 has an invalid length. [ 240.801071][T16314] netlink: 'syz.3.4129': attribute type 29 has an invalid length. [ 240.846720][T16314] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4129'. [ 241.057594][T16334] netlink: 'syz.6.4139': attribute type 1 has an invalid length. [ 241.127297][T16334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.170780][T16339] bond1: (slave veth0_to_bond): making interface the new active one [ 241.250141][T16339] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 241.450061][T16348] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4144'. [ 241.499686][T16348] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4144'. [ 242.034010][T16362] loop5: detected capacity change from 0 to 1024 [ 242.081082][T16362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.110368][T16362] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.4150: Allocating blocks 385-513 which overlap fs metadata [ 242.144169][T16362] EXT4-fs (loop5): pa ffff888107a9d380: logic 16, phys. 129, len 24 [ 242.152328][T16362] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 242.332572][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.708472][T16409] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4169'. [ 242.731235][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.738701][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.790061][T16414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4169'. [ 243.274684][T16431] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 243.343860][T16435] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 243.362955][T16435] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 243.376557][T16435] bond1: (slave ip6gre1): making interface the new active one [ 243.388215][T16435] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 243.408517][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 243.408532][ T28] audit: type=1400 audit(2000000000.970:2122): avc: denied { listen } for pid=16437 comm="syz.5.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 243.473491][T16442] loop3: detected capacity change from 0 to 512 [ 243.514696][T16442] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 243.515261][ T28] audit: type=1400 audit(2000000000.970:2123): avc: denied { accept } for pid=16437 comm="syz.5.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 243.548388][ T28] audit: type=1400 audit(2000000001.050:2124): avc: denied { attach_queue } for pid=16443 comm="syz.6.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 243.596344][T16442] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.611833][T16442] EXT4-fs (loop3): mount failed [ 243.697996][T16453] loop6: detected capacity change from 0 to 512 [ 243.711581][T16453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.740303][T16453] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.876601][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.923392][T16466] loop3: detected capacity change from 0 to 128 [ 243.985920][T16466] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.000541][T16466] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.032259][T15656] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.285250][T16485] loop3: detected capacity change from 0 to 512 [ 244.298349][ T28] audit: type=1326 audit(2000000001.860:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 244.331590][ T28] audit: type=1326 audit(2000000001.860:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 244.370941][ T28] audit: type=1326 audit(2000000001.860:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 244.395094][ T28] audit: type=1400 audit(2000000001.860:2128): avc: denied { setattr } for pid=16484 comm="syz.4.4199" name="UDPLITEv6" dev="sockfs" ino=54483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.398399][T16485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.420324][ T28] audit: type=1326 audit(2000000001.860:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 244.456338][ T28] audit: type=1326 audit(2000000001.860:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.4.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa311c4c799 code=0x7ffc0000 [ 244.516394][T16485] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.569989][T16501] loop6: detected capacity change from 0 to 1024 [ 244.577225][T16501] EXT4-fs: Ignoring removed bh option [ 244.618879][T16501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.631129][T16501] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.644900][T16501] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.4205: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.673025][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.711612][T16508] netlink: 'syz.6.4206': attribute type 1 has an invalid length. [ 244.724642][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.745949][T16508] bond2: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 244.756400][T16508] bond2: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 244.768529][T16508] bond2: (slave ip6gre3): making interface the new active one [ 244.776739][T16508] bond2: (slave ip6gre3): Enslaving as an active interface with an up link [ 244.998842][ T290] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.102504][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 246.113253][T16679] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.196104][T16689] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4228'. [ 246.304056][T16697] SELinux: ebitmap start bit (32) is not a multiple of the map unit size (64) [ 246.318784][T16697] SELinux: failed to load policy [ 246.435471][T16714] netlink: 'syz.3.4238': attribute type 4 has an invalid length. [ 246.459838][T16714] netlink: 'syz.3.4238': attribute type 4 has an invalid length. [ 246.468962][T16717] loop6: detected capacity change from 0 to 512 [ 247.018946][ T5244] Bluetooth: hci0: command 0x1003 tx timeout [ 247.036332][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.496501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.657949][T16760] loop5: detected capacity change from 0 to 1024 [ 247.707070][T16760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.735127][T16760] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.857488][T16764] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.4258: Freeing blocks not in datazone - block = 0, count = 16 [ 247.953297][T16759] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4258: bg 0: block 112: padding at end of block bitmap is not set [ 247.992284][T16759] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1344 with max blocks 64 with error 28 [ 248.030007][T16759] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.030007][T16759] [ 248.056189][T16759] EXT4-fs (loop5): Total free blocks count 0 [ 248.062930][T16759] EXT4-fs (loop5): Free/Dirty block details [ 248.069204][T16759] EXT4-fs (loop5): free_blocks=0 [ 248.074348][T16759] EXT4-fs (loop5): dirty_blocks=64 [ 248.080011][T16759] EXT4-fs (loop5): Block reservation details [ 248.086576][T16759] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 248.118484][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.898132][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 248.898147][ T28] audit: type=1400 audit(2000000006.460:2132): avc: denied { rename } for pid=16834 comm="syz.1.4276" name="file0" dev="tmpfs" ino=4237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 249.014283][T16842] SELinux: ebitmap start bit (32) is not a multiple of the map unit size (64) [ 249.024070][T16842] SELinux: failed to load policy [ 249.290154][ T28] audit: type=1400 audit(2000000006.850:2133): avc: denied { append } for pid=16858 comm="syz.6.4286" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.552166][T16723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.611178][T16749] netlink: 'syz.4.4252': attribute type 1 has an invalid length. [ 250.779679][T16929] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4306'. [ 251.351392][T16951] loop3: detected capacity change from 0 to 1024 [ 251.413922][T16951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.468479][T16951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.4314: inode #1897035249: comm syz.3.4314: iget: illegal inode # [ 251.636522][T16951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4314: error while reading EA inode 1897035249 err=-117 [ 251.847244][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.216782][ T28] audit: type=1400 audit(2000000009.770:2134): avc: denied { bind } for pid=16970 comm="syz.1.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.310479][ T28] audit: type=1400 audit(2000000009.870:2135): avc: denied { write } for pid=16970 comm="syz.1.4321" path="socket:[54990]" dev="sockfs" ino=54990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.447005][T16980] loop3: detected capacity change from 0 to 8192 [ 252.483324][T16980] FAT-fs (loop3): error, invalid access to FAT (entry 0x00008114) [ 252.491386][T16980] FAT-fs (loop3): Filesystem has been set read-only [ 252.504344][T16980] syz.3.4324: attempt to access beyond end of device [ 252.504344][T16980] loop3: rw=8388608, sector=33114, nr_sectors = 1 limit=8192 [ 253.398206][T16998] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.425519][ T28] audit: type=1400 audit(2000000010.980:2136): avc: denied { append } for pid=16999 comm="syz.1.4331" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.488697][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.499549][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.589508][ T7263] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.606416][ T7263] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.625379][ T7263] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.649623][ T7263] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.823102][T17011] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.4337'. [ 254.318324][T17031] loop6: detected capacity change from 0 to 4096 [ 254.329203][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4345'. [ 254.346676][T17031] EXT4-fs: Ignoring removed bh option [ 254.371417][T17031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.414683][ T28] audit: type=1400 audit(2000000011.970:2137): avc: denied { ioctl } for pid=17030 comm="syz.6.4344" path="/356/file3/bus" dev="loop6" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 254.463358][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.556943][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4347'. [ 254.594509][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4347'. [ 254.724425][ T28] audit: type=1326 audit(2000000012.280:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 254.766304][ T28] audit: type=1326 audit(2000000012.280:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 254.816680][ T28] audit: type=1326 audit(2000000012.280:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 254.857953][ T28] audit: type=1326 audit(2000000012.280:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 254.917605][ T28] audit: type=1326 audit(2000000012.280:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 254.967092][ T28] audit: type=1326 audit(2000000012.280:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.5.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77e7c799 code=0x7ffc0000 [ 255.113988][T17066] loop3: detected capacity change from 0 to 128 [ 255.134878][T17066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.147942][T17068] loop5: detected capacity change from 0 to 2048 [ 255.155324][T17068] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.201325][T17068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.233791][T17066] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.286318][T15656] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.311485][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.434540][T17093] loop6: detected capacity change from 0 to 128 [ 255.442055][T17093] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.457486][T17093] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.079654][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 256.089112][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 256.328128][T17128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.541384][T17139] loop5: detected capacity change from 0 to 1024 [ 256.584630][T17139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.606404][T17139] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.655018][T17139] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 256.680831][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 256.726401][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 256.985209][T17167] loop6: detected capacity change from 0 to 512 [ 257.017291][T17167] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 257.052560][T17167] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4402: bg 0: block 104: invalid block bitmap [ 257.095165][T17167] loop6: lost filesystem error report for type 5 error -117 [ 257.095426][T17167] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 257.103027][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 257.103060][ C0] EXT4-fs (loop6): initial error at time 2000000014: ext4_validate_block_bitmap:432 [ 257.103092][ C0] EXT4-fs (loop6): last error at time 2000000014: ext4_validate_block_bitmap:432 [ 257.155606][T17175] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.162501][T17167] loop6: lost filesystem error report for type 5 error -117 [ 257.162861][T17167] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4402: invalid indirect mapped block 1 (level 1) [ 257.186737][T17175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.203904][T17167] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.204191][T17167] EXT4-fs (loop6): 1 truncate cleaned up [ 257.220793][T17167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.307745][T17182] netlink: 'syz.1.4407': attribute type 1 has an invalid length. [ 257.332567][T17182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.354668][T17185] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 257.376825][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.421914][T17185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.474858][T17195] bond0: (slave gretap1): making interface the new active one [ 257.495059][T17195] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 257.564930][T17199] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 257.630151][T17208] loop5: detected capacity change from 0 to 512 [ 257.660403][T17210] hub 8-0:1.0: USB hub found [ 257.665925][T17210] hub 8-0:1.0: 8 ports detected [ 257.680218][T17208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.706368][T17208] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.752966][ T28] audit: type=1326 audit(2000000015.310:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17221 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 257.801539][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.870598][ T28] audit: type=1326 audit(2000000015.340:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17221 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 257.898978][ T28] audit: type=1326 audit(2000000015.340:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17221 comm="syz.1.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7feaab5bc799 code=0x7ffc0000 [ 258.224189][T17261] loop3: detected capacity change from 0 to 1764 [ 258.240891][T17261] ISOFS: Unable to identify CD-ROM format. [ 258.580004][T17278] loop3: detected capacity change from 0 to 1024 [ 258.608487][T17278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 258.652618][T17278] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.684270][T17278] EXT4-fs (loop3): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 258.720419][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.764176][T17285] netlink: 'syz.3.4450': attribute type 10 has an invalid length. [ 258.772211][T17285] syz_tun: entered promiscuous mode [ 258.922095][T17291] syzkaller1: entered promiscuous mode [ 258.928988][T17291] syzkaller1: entered allmulticast mode [ 259.018206][T14611] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 259.037259][T14611] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.092307][T17298] fido_id[17298]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.251071][T17294] loop3: detected capacity change from 0 to 32768 [ 259.270348][T17312] loop6: detected capacity change from 0 to 512 [ 259.330959][T17312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.360811][T17312] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.491974][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.736997][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 259.737012][ T28] audit: type=1400 audit(2000000017.300:2269): avc: denied { accept } for pid=17340 comm="syz.6.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 260.038072][T17352] syz.6.4476 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 260.062324][T17344] Set syz1 is full, maxelem 10763 reached [ 260.070627][T17352] CPU: 0 UID: 0 PID: 17352 Comm: syz.6.4476 Not tainted syzkaller #0 PREEMPT(full) [ 260.070736][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.070812][T17352] Call Trace: [ 260.070820][T17352] [ 260.070830][T17352] __dump_stack+0x1d/0x30 [ 260.070919][T17352] dump_stack_lvl+0x95/0xd0 [ 260.070959][T17352] dump_stack+0x15/0x1b [ 260.070989][T17352] dump_header+0x80/0x240 [ 260.071017][T17352] oom_kill_process+0x295/0x350 [ 260.071051][T17352] out_of_memory+0x97d/0xb80 [ 260.071146][T17352] try_charge_memcg+0x62e/0xa10 [ 260.071196][T17352] obj_cgroup_charge_pages+0x23/0xc0 [ 260.071299][T17352] __memcg_kmem_charge_page+0x9e/0x170 [ 260.071337][T17352] __alloc_frozen_pages_noprof+0x18a/0x360 [ 260.071459][T17352] alloc_pages_bulk_noprof+0x4aa/0x530 [ 260.071491][T17352] ? policy_nodemask+0x417/0x5e0 [ 260.071536][T17352] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 260.071584][T17352] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 260.071627][T17352] ? alloc_pages_mpol+0x217/0x260 [ 260.071668][T17352] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 260.071727][T17352] __kvmalloc_node_noprof+0x3d4/0x650 [ 260.071762][T17352] ? futex_hash_allocate+0x190/0x9d0 [ 260.071801][T17352] ? futex_hash_allocate+0x190/0x9d0 [ 260.071881][T17352] futex_hash_allocate+0x190/0x9d0 [ 260.071920][T17352] ? cap_task_prctl+0x13f/0x6e0 [ 260.071959][T17352] futex_hash_prctl+0xd8/0xf0 [ 260.071996][T17352] __se_sys_prctl+0xa3d/0x13f0 [ 260.072055][T17352] __x64_sys_prctl+0x67/0x80 [ 260.072091][T17352] x64_sys_call+0x2533/0x3020 [ 260.072157][T17352] do_syscall_64+0x12c/0x370 [ 260.072189][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.072220][T17352] RIP: 0033:0x7f9327bdc799 [ 260.072241][T17352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.072264][T17352] RSP: 002b:00007f9326637028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 260.072370][T17352] RAX: ffffffffffffffda RBX: 00007f9327e55fa0 RCX: 00007f9327bdc799 [ 260.072388][T17352] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 260.072458][T17352] RBP: 00007f9327c72c99 R08: 0000000000000000 R09: 0000000000000000 [ 260.072476][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.072489][T17352] R13: 00007f9327e56038 R14: 00007f9327e55fa0 R15: 00007ffcc65e2bb8 [ 260.072513][T17352] [ 260.072524][T17352] memory: usage 291600kB, limit 307200kB, failcnt 149 [ 260.345214][T17352] memory+swap: usage 244116kB, limit 9007199254740988kB, failcnt 0 [ 260.355293][T17352] kmem: usage 240840kB, limit 9007199254740988kB, failcnt 0 [ 260.375480][T17352] Memory cgroup stats for /syz6: [ 260.375716][T17352] cache 0 [ 260.405345][T17352] rss 454656 [ 260.416397][T17352] shmem 0 [ 260.426326][T17352] mapped_file 0 [ 260.430090][T17352] dirty 0 [ 260.433207][T17352] writeback 0 [ 260.444321][T17352] workingset_refault_anon 59 [ 260.458500][T17352] workingset_refault_file 0 [ 260.468723][T17352] swap 98304 [ 260.476416][T17352] swapcached 253952 [ 260.485531][T17352] pgpgin 81494 [ 260.493475][T17352] pgpgout 81382 [ 260.506151][T17352] pgfault 82774 [ 260.515232][T17352] pgmajfault 39 [ 260.537221][T17352] inactive_anon 450560 [ 260.541452][T17352] active_anon 4096 [ 260.545320][T17352] inactive_file 0 [ 260.569612][T17352] active_file 4096 [ 260.573536][T17352] unevictable 0 [ 260.600335][T17352] hierarchical_memory_limit 314572800 [ 260.608092][T17352] hierarchical_memsw_limit 9223372036854771712 [ 260.617438][T17352] total_cache 0 [ 260.620940][T17352] total_rss 454656 [ 260.624679][T17352] total_shmem 0 [ 260.636622][T17352] total_mapped_file 0 [ 260.646034][T17352] total_dirty 0 [ 260.656928][T17352] total_writeback 0 [ 260.660891][T17352] total_workingset_refault_anon 59 [ 260.716694][T17352] total_workingset_refault_file 0 [ 260.746292][T17352] total_swap 98304 [ 260.756329][T17352] total_swapcached 253952 [ 260.760814][T17352] total_pgpgin 81494 [ 260.764833][T17352] total_pgpgout 81382 [ 260.770079][T17352] total_pgfault 82774 [ 260.774143][T17352] total_pgmajfault 39 [ 260.796544][ T28] audit: type=1326 audit(2000000018.360:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 260.805451][T17352] total_inactive_anon 450560 [ 260.840974][T17352] total_active_anon 4096 [ 260.845322][T17352] total_inactive_file 0 [ 260.845804][ T28] audit: type=1326 audit(2000000018.360:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 260.866541][T17352] total_active_file 4096 [ 260.881849][ T28] audit: type=1326 audit(2000000018.360:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 260.909348][ T28] audit: type=1326 audit(2000000018.360:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 260.927151][T17352] total_unevictable 0 [ 260.957603][T17352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4476,pid=17351,uid=0 [ 260.977150][T17352] Memory cgroup out of memory: Killed process 17352 (syz.6.4476) total-vm:96080kB, anon-rss:1404kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 261.040007][ T28] audit: type=1326 audit(2000000018.360:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 261.129689][ T28] audit: type=1326 audit(2000000018.360:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 261.160774][ T28] audit: type=1326 audit(2000000018.360:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17377 comm="syz.3.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87391c799 code=0x7ffc0000 [ 261.208728][T17404] loop6: detected capacity change from 0 to 512 [ 261.224888][T17404] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4493: inode has both inline data and extents flags [ 261.296863][T17404] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.297037][T17404] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4493: couldn't read orphan inode 15 (err -117) [ 261.306337][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 261.306359][ C1] EXT4-fs (loop6): initial error at time 2000000018: ext4_orphan_get:1391: inode 15 [ 261.306398][ C1] EXT4-fs (loop6): last error at time 2000000018: ext4_orphan_get:1391: inode 15 [ 261.363222][T17408] Process accounting resumed [ 261.396440][T17404] loop6: lost filesystem error report for type 5 error -117 [ 261.397007][T17404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.447967][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4497'. [ 261.506360][ T28] audit: type=1400 audit(2000000019.060:2277): avc: denied { setattr } for pid=17417 comm="syz.4.4498" name="/" dev="configfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 261.554864][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.963034][T17448] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 261.988480][T17448] syzkaller0: group set to 0 [ 262.043704][T17451] loop3: detected capacity change from 0 to 512 [ 262.094395][T17451] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4511: inode has both inline data and extents flags [ 262.224466][T17451] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.224643][T17451] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4511: couldn't read orphan inode 15 (err -117) [ 262.233935][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 262.233953][ C0] EXT4-fs (loop3): initial error at time 2000000019: ext4_orphan_get:1391: inode 15 [ 262.233987][ C0] EXT4-fs (loop3): last error at time 2000000019: ext4_orphan_get:1391: inode 15 [ 262.286337][T17451] loop3: lost filesystem error report for type 5 error -117 [ 262.286859][T17451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.370347][ T28] audit: type=1326 audit(2000000019.930:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.6.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9327bdc799 code=0x7ffc0000 [ 262.413217][T15656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.484728][T17475] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 262.509941][T17477] loop5: detected capacity change from 0 to 512 [ 262.556637][T17477] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.4522: corrupted in-inode xattr: bad e_name length [ 262.616629][T17477] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 262.618497][T17477] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4522: couldn't read orphan inode 12 (err -117) [ 262.627814][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 262.627834][ C1] EXT4-fs (loop5): initial error at time 2000000020: ext4_iget_extra_inode:5025: inode 12 [ 262.627879][ C1] EXT4-fs (loop5): last error at time 2000000020: ext4_iget_extra_inode:5025: inode 12 [ 262.669494][T17477] loop5: lost filesystem error report for type 5 error -117 [ 262.687663][T17477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.889303][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.113190][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4534'. [ 263.373668][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'. [ 263.383988][T17531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4543'. [ 263.417286][ T1728] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.432813][ T1728] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.450575][ T1728] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.469615][ T1728] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.693917][T17549] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 263.693917][T17549] The task syz.6.4550 (17549) triggered the difference, watch for misbehavior. [ 263.987167][T17560] loop5: detected capacity change from 0 to 512 [ 263.994641][T17560] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 264.036504][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4553'. [ 264.075883][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 264.080375][T17544] syz.3.4548 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 264.088587][T17560] EXT4-fs (loop5): 1 truncate cleaned up [ 264.109044][T17560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.126321][T17556] netlink: 'syz.4.4553': attribute type 6 has an invalid length. [ 264.134102][T17556] netlink: 'syz.4.4553': attribute type 5 has an invalid length. [ 264.144789][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4553'. [ 264.154772][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4553'. [ 264.163809][T17556] netlink: 'syz.4.4553': attribute type 6 has an invalid length. [ 264.174822][T17556] netlink: 'syz.4.4553': attribute type 5 has an invalid length. [ 264.186526][T17544] CPU: 0 UID: 0 PID: 17544 Comm: syz.3.4548 Not tainted syzkaller #0 PREEMPT(full) [ 264.186562][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.186623][T17544] Call Trace: [ 264.186630][T17544] [ 264.186639][T17544] __dump_stack+0x1d/0x30 [ 264.186691][T17544] dump_stack_lvl+0x95/0xd0 [ 264.186779][T17544] dump_stack+0x15/0x1b [ 264.186883][T17544] dump_header+0x80/0x240 [ 264.186913][T17544] oom_kill_process+0x295/0x350 [ 264.186940][T17544] out_of_memory+0x97d/0xb80 [ 264.186963][T17544] try_charge_memcg+0x62e/0xa10 [ 264.187066][T17544] obj_cgroup_charge_pages+0x23/0xc0 [ 264.187161][T17544] __memcg_kmem_charge_page+0x9e/0x170 [ 264.187190][T17544] __alloc_frozen_pages_noprof+0x18a/0x360 [ 264.187266][T17544] alloc_pages_mpol+0xb3/0x260 [ 264.187313][T17544] alloc_pages_noprof+0x8f/0x130 [ 264.187346][T17544] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 264.187433][T17544] __kvmalloc_node_noprof+0x3d4/0x650 [ 264.187522][T17544] ? futex_hash_allocate+0x190/0x9d0 [ 264.187618][T17544] ? futex_hash_allocate+0x190/0x9d0 [ 264.187648][T17544] futex_hash_allocate+0x190/0x9d0 [ 264.187710][T17544] ? cap_task_prctl+0x13f/0x6e0 [ 264.187770][T17544] futex_hash_prctl+0xd8/0xf0 [ 264.187869][T17544] __se_sys_prctl+0xa3d/0x13f0 [ 264.187898][T17544] __x64_sys_prctl+0x67/0x80 [ 264.187931][T17544] x64_sys_call+0x2533/0x3020 [ 264.188022][T17544] do_syscall_64+0x12c/0x370 [ 264.188055][T17544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.188148][T17544] RIP: 0033:0x7fc87391c799 [ 264.188168][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.188186][T17544] RSP: 002b:00007fc872377028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 264.188205][T17544] RAX: ffffffffffffffda RBX: 00007fc873b95fa0 RCX: 00007fc87391c799 [ 264.188219][T17544] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 264.188231][T17544] RBP: 00007fc8739b2c99 R08: 0000000000000000 R09: 0000000000000000 [ 264.188314][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.188356][T17544] R13: 00007fc873b96038 R14: 00007fc873b95fa0 R15: 00007fffeb22d9b8 [ 264.188381][T17544] [ 264.188422][T17544] memory: usage 307200kB, limit 307200kB, failcnt 85 [ 264.479050][T17570] EXT4-fs (loop5): shut down requested (2) [ 264.523216][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.586569][T17544] memory+swap: usage 150680kB, limit 9007199254740988kB, failcnt 0 [ 264.594664][T17544] kmem: usage 150228kB, limit 9007199254740988kB, failcnt 0 [ 264.655592][T17544] Memory cgroup stats for /syz3: [ 264.655944][T17544] cache 73728 [ 264.714498][T17544] rss 176128 [ 264.718268][T17544] shmem 0 [ 264.721249][T17544] mapped_file 73728 [ 264.731213][T17579] loop6: detected capacity change from 0 to 512 [ 264.735359][T17544] dirty 73728 [ 264.742917][T17544] writeback 0 [ 264.764958][T17579] EXT4-fs: Ignoring removed nobh option [ 264.787025][T17544] workingset_refault_anon 2058 [ 264.791920][T17544] workingset_refault_file 0 [ 264.796647][T17544] swap 0 [ 264.799572][T17544] swapcached 7720960 [ 264.803522][T17544] pgpgin 115474 [ 264.814204][T17581] loop5: detected capacity change from 0 to 2048 [ 264.827442][T17544] pgpgout 115412 [ 264.832418][T17544] pgfault 157258 [ 264.836308][T17544] pgmajfault 273 [ 264.840954][T17544] inactive_anon 180224 [ 264.852014][T17581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.864618][T17544] active_anon 0 [ 264.868304][T17544] inactive_file 0 [ 264.872006][T17544] active_file 73728 [ 264.904788][T17544] unevictable 0 [ 264.915229][T17544] hierarchical_memory_limit 314572800 [ 264.957927][T17544] hierarchical_memsw_limit 9223372036854771712 [ 264.976489][T17544] total_cache 73728 [ 264.981292][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.996552][T17579] ------------[ cut here ]------------ [ 265.002075][T17579] EA inode 11 i_nlink=1026 [ 265.002104][T17579] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.4557/17579 [ 265.017512][T17579] Modules linked in: [ 265.021553][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.6.4557 Not tainted syzkaller #0 PREEMPT(full) [ 265.031058][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.041253][T17579] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 265.047911][T17579] Code: 54 4b 99 ff 4c 8d 2d 2d b4 5d 05 49 8d 7e 40 e8 a4 df b5 ff 49 8b 6e 40 4c 89 e7 e8 d8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 9b dd 03 66 66 66 66 66 66 2e [ 265.066764][T17544] total_rss 176128 [ 265.067892][T17579] RSP: 0018:ffffc900035675a8 EFLAGS: 00010246 [ 265.071386][T17544] total_shmem 0 [ 265.071396][T17544] total_mapped_file 73728 [ 265.071404][T17544] total_dirty 73728 [ 265.071413][T17544] total_writeback 0 [ 265.077514][T17579] [ 265.077522][T17579] RAX: ffff888104cabd08 RBX: ffff88813519ca68 RCX: ffffffff81c013e8 [ 265.077541][T17579] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc800 [ 265.082544][T17544] total_workingset_refault_anon 2058 [ 265.085355][T17579] RBP: 000000000000000b R08: 000188813519ca1b R09: 0000000000000000 [ 265.096451][T17544] total_workingset_refault_file 0 [ 265.103547][T17579] R10: ffffc900035674d8 R11: 0001c900035674d8 R12: ffff88813519ca18 [ 265.111895][T17544] total_swap 0 [ 265.116718][T17579] R13: ffffffff871dc800 R14: ffff88813519c9d0 R15: 0000000000000001 [ 265.116739][T17579] FS: 00007f93266166c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 265.125458][T17544] total_swapcached 7720960 [ 265.129895][T17579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.148704][T17544] total_pgpgin 115474 [ 265.149497][T17579] CR2: 00007fa311cfeddd CR3: 000000010a4da000 CR4: 00000000003506f0 [ 265.172213][T17544] total_pgpgout 115412 [ 265.173805][T17579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.192092][T17544] total_pgfault 157258 [ 265.194159][T17579] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 265.202306][T17544] total_pgmajfault 273 [ 265.206168][T17579] Call Trace: [ 265.206180][T17579] [ 265.216327][T17544] total_inactive_anon 180224 [ 265.216941][T17579] ext4_xattr_set_entry+0x77c/0x1010 [ 265.221474][T17544] total_active_anon 0 [ 265.221486][T17544] total_inactive_file 0 [ 265.226817][T17579] ext4_xattr_ibody_set+0x184/0x3c0 [ 265.240591][T17579] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 265.246499][T17544] total_active_file 73728 [ 265.246567][T17579] __ext4_expand_extra_isize+0x246/0x280 [ 265.250951][T17544] total_unevictable 0 [ 265.256832][T17579] __ext4_mark_inode_dirty+0x29b/0x400 [ 265.266410][T17579] ext4_evict_inode+0x7c3/0xd60 [ 265.266447][T17544] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4548,pid=17542,uid=0 [ 265.271390][T17579] ? __pfx_ext4_evict_inode+0x10/0x10 [ 265.291476][T17579] evict+0x2af/0x510 [ 265.295431][T17579] ? __dquot_initialize+0x146/0x7c0 [ 265.300706][T17579] iput+0x41a/0x580 [ 265.304603][T17579] ext4_process_orphan+0x1a9/0x1c0 [ 265.309840][T17579] ext4_orphan_cleanup+0x6a8/0xa00 [ 265.315003][T17579] ext4_fill_super+0x3408/0x37c0 [ 265.316568][T17544] Memory cgroup out of memory: Killed process 17544 (syz.3.4548) total-vm:96080kB, anon-rss:1404kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 265.320052][T17579] ? set_blocksize+0x14c/0x270 [ 265.342138][T17579] ? setup_bdev_super+0x30e/0x370 [ 265.347330][T17579] ? __pfx_ext4_fill_super+0x10/0x10 [ 265.352669][T17579] get_tree_bdev_flags+0x291/0x300 [ 265.357855][T17579] ? __pfx_ext4_fill_super+0x10/0x10 [ 265.363299][T17579] get_tree_bdev+0x1f/0x30 [ 265.367842][T17579] ext4_get_tree+0x1c/0x30 [ 265.372300][T17579] vfs_get_tree+0x57/0x1d0 [ 265.376766][T17579] do_new_mount+0x288/0x8d0 [ 265.381325][T17579] path_mount+0x4d0/0xbc0 [ 265.385751][T17579] __se_sys_mount+0x28c/0x2e0 [ 265.390583][T17579] __x64_sys_mount+0x67/0x80 [ 265.395211][T17579] x64_sys_call+0x2d61/0x3020 [ 265.400045][T17579] do_syscall_64+0x12c/0x370 [ 265.404671][T17579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.410647][T17579] RIP: 0033:0x7f9327bdda0a [ 265.415097][T17579] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.434984][T17579] RSP: 002b:00007f9326615e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.443667][T17579] RAX: ffffffffffffffda RBX: 00007f9326615ee0 RCX: 00007f9327bdda0a [ 265.451748][T17579] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f9326615ea0 [ 265.459822][T17579] RBP: 0000200000000180 R08: 00007f9326615ee0 R09: 0000000000800718 [ 265.467859][T17579] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 265.475865][T17579] R13: 00007f9326615ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 265.483950][T17579] [ 265.487024][T17579] ---[ end trace 0000000000000000 ]--- [ 265.627002][T17579] EXT4-fs (loop6): 1 orphan inode deleted [ 265.633501][T17579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.994992][T17622] syz_tun: entered allmulticast mode [ 266.007912][T17622] syz_tun: left allmulticast mode [ 266.045673][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.335120][T17636] loop6: detected capacity change from 0 to 512 [ 266.379256][T17636] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 266.429993][T17636] EXT4-fs (loop6): 1 truncate cleaned up [ 266.436111][T17636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.410969][T11261] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.618188][T17652] loop5: detected capacity change from 0 to 1024 [ 267.688620][T17652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.776171][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.955057][T17664] team0: entered promiscuous mode [ 267.966311][T17664] team_slave_0: entered promiscuous mode [ 267.972195][T17664] team_slave_1: entered promiscuous mode [ 267.995473][T17664] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.003525][T14592] ================================================================== [ 268.011656][T14592] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 268.018899][T14592] [ 268.021239][T14592] read-write to 0xffff888237c2a8a4 of 4 bytes by task 3582 on cpu 0: [ 268.029358][T14592] wq_worker_running+0x9b/0x120 [ 268.034329][T14592] synchronize_rcu_expedited+0x5f8/0x770 [ 268.039994][T14592] synchronize_rcu+0x35/0x2e0 [ 268.044688][T14592] try_check_zero+0x182/0x260 [ 268.049376][T14592] process_srcu+0xd5/0xdc0 [ 268.053800][T14592] process_scheduled_works+0x513/0xa10 [ 268.059277][T14592] worker_thread+0x58a/0x780 [ 268.063886][T14592] kthread+0x22a/0x280 [ 268.067956][T14592] ret_from_fork+0x150/0x360 [ 268.072565][T14592] ret_from_fork_asm+0x1a/0x30 [ 268.077355][T14592] [ 268.079683][T14592] read to 0xffff888237c2a8a4 of 4 bytes by task 14592 on cpu 1: [ 268.087504][T14592] kick_pool+0x49/0x2d0 [ 268.091773][T14592] __queue_work+0x896/0xaf0 [ 268.096307][T14592] queue_work_on+0xa9/0x140 [ 268.101181][T14592] process_srcu+0xa56/0xdc0 [ 268.105714][T14592] process_scheduled_works+0x513/0xa10 [ 268.111357][T14592] worker_thread+0x58a/0x780 [ 268.115960][T14592] kthread+0x22a/0x280 [ 268.120122][T14592] ret_from_fork+0x150/0x360 [ 268.124734][T14592] ret_from_fork_asm+0x1a/0x30 [ 268.129863][T14592] [ 268.132188][T14592] value changed: 0x00000000 -> 0x00000001 [ 268.137943][T14592] [ 268.140364][T14592] Reported by Kernel Concurrency Sanitizer on: [ 268.146531][T14592] CPU: 1 UID: 0 PID: 14592 Comm: kworker/1:10 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.157736][T14592] Tainted: [W]=WARN [ 268.161713][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.171772][T14592] Workqueue: rcu_gp process_srcu [ 268.176811][T14592] ================================================================== [ 268.186838][T17664] bond0: (slave macvlan2): Enslaving as an active interface with a down link [ 268.262997][T17669] syzkaller1: entered promiscuous mode [ 268.268767][T17669] syzkaller1: entered allmulticast mode