last executing test programs: 2m44.789026093s ago: executing program 3 (id=603): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 2m43.940089938s ago: executing program 3 (id=618): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x7fffffff) 2m43.923052479s ago: executing program 3 (id=619): syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c1}, 0x400c801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x80000007, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x8000, 0x2}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 2m43.88846987s ago: executing program 3 (id=620): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 2m43.829832412s ago: executing program 3 (id=621): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x16, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.742876994s ago: executing program 3 (id=622): sched_setscheduler(0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capget(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x64000080) 2m43.742704694s ago: executing program 32 (id=622): sched_setscheduler(0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capget(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x64000080) 8.315915157s ago: executing program 2 (id=2359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x34}}, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 6.728342405s ago: executing program 5 (id=2373): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="b98256db3224cdf4f7e3201c7863b17c71c6b4dc23e09bd5001a76e98ef5a8b083a68a3772b212847be4b0b055856e1e5eb7e8531cf0452bac65e4c2f634a52d4177c4dfca3edc5107342e046363d2f911a8ad16495c1af72c024963d59fbfa5fe17d74de95a81e5cb964c6fcf20c4eb756d96830257b94c0c8af17a95a9f1c3c8a1e16359a48febdaa71a3b772e51e196d8ad360786cd5eb19d253b5b4a8a0ab7031403b4a271a38d74dae789963c22e4594917e76a6f0cfbd3aaac43307e11d394cd78d0093cdc1b3c6b8d3208a735672a8ac1b9cbaaabffa3c2336e65af340da2061d7ef32c85c1063af439c0a65cd88e07d7904579231dc83579ee770555", 0x100}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99df928e46e25366db886525ab80ef54836d05b03d0b4bfe7a6a614713", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000008c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320e", 0xce}], 0x5}, 0xc0d0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 6.24308243s ago: executing program 2 (id=2375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x9, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) 6.180703932s ago: executing program 5 (id=2376): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 5.300681759s ago: executing program 2 (id=2381): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r3, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) sendto$inet6(r0, 0x0, 0x0, 0x8910, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.979605509s ago: executing program 0 (id=2384): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x10) 3.840704593s ago: executing program 0 (id=2385): r0 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x400, 0x8001002, 0x3d7}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 3.689446037s ago: executing program 0 (id=2386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e24, 0x1000, @empty}, 0x1c) mmap(&(0x7f0000134000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x70846000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000d7c000/0x4000)=nil) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) shmat(0x0, &(0x7f0000df6000/0x1000)=nil, 0x4000) 3.643064159s ago: executing program 0 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 3.514061073s ago: executing program 0 (id=2388): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000a80)=@ethtool_channels={0x4f}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x40c0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3d}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140), &(0x7f00000000c0)=0x8) r2 = syz_open_procfs(0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) syz_clone3(&(0x7f0000002040)={0x120040100, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff], 0x1}, 0x58) 3.150109514s ago: executing program 5 (id=2389): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) kcmp(0x0, r2, 0x5, r3, 0xffffffffffffffff) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.918174861s ago: executing program 5 (id=2391): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4800) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.714840207s ago: executing program 1 (id=2394): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2b, 0xa, 0x80000000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 2.519566563s ago: executing program 5 (id=2395): socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.336886899s ago: executing program 1 (id=2397): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'tunl0\x00', {}, {}, 0xff, 0x2, 0x16}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "07a80355d28bbcff9b5a838ad1d898e7f3872ead90a72898f058d8d95a35"}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff, 'ip6erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x21, 0x1, 0xa}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xfe000000, 0x7f], 0x1}}, @common=@ttl={{0x28}, {0x2, 0x40}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r2, @ANYBLOB="18000380100003800e42ea3d6ef0e65b14956b447723010008000500f9ffffff5600e377884e17e773c19968dcaba177d669131b28c15eefcb0dc3eefccad78105505cfd7a80690351124e51dc702f2e90e0e5"], 0x40}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) 2.078565066s ago: executing program 1 (id=2398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 2.038699978s ago: executing program 4 (id=2399): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.759448576s ago: executing program 4 (id=2400): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2d0, &(0x7f0000000dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000) 1.418753147s ago: executing program 4 (id=2401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x21a, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b6e, 0x2, @perf_config_ext={0x1e6c, 0x5}, 0x204, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x81, 0x0, &(0x7f00000010c0)) flock(0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.180442464s ago: executing program 1 (id=2402): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x3, 0x0, 0x80, 0x0, 0x9, 0x300, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8000, 0x6}, 0x600, 0x3, 0x401, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xe) perf_event_open(0x0, 0x0, 0xb, r0, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x28f, &(0x7f00000009c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 600.983271ms ago: executing program 5 (id=2403): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) 593.554662ms ago: executing program 1 (id=2404): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 566.224472ms ago: executing program 4 (id=2405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 538.055773ms ago: executing program 0 (id=2406): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 530.899333ms ago: executing program 2 (id=2407): socket$qrtr(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x4048044) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) 350.632529ms ago: executing program 4 (id=2408): socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 328.16895ms ago: executing program 2 (id=2409): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b00000001000030425bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00130000000000008800128009000100766c616e00000000780002800600010002000000280003800c00010000000000060000000c00010000020000090000000c0021000000000001000100280004800c00010001000000ef0300000c00010005000000a30000000c00010005000000000001001c0004801dfd010002000000020000000c0001007f0000000500000008000500", @ANYRES32=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 52.493538ms ago: executing program 4 (id=2410): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) 45.195838ms ago: executing program 2 (id=2411): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x1fd, 0x0, 0x7, 0x9, 0x0, 0x5, 0x9, 0x5, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) vmsplice(r0, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) r2 = semget$private(0x0, 0x6, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) semtimedop(r2, &(0x7f0000000140)=[{0x0, 0xe000, 0x3800}, {0x0, 0x8, 0x1800}], 0x2, 0x0) 0s ago: executing program 1 (id=2412): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.2.1490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 149.278797][ T8142] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.301696][ T28] audit: type=1326 audit(1781333739.614:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8141 comm="syz.2.1490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 149.356848][ T8142] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1490: couldn't read orphan inode 15 (err -117) [ 149.368914][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 149.368965][ C1] EXT4-fs (loop2): initial error at time 1781333740: ext4_orphan_get:1397: inode 15 [ 149.369093][ C1] EXT4-fs (loop2): last error at time 1781333740: ext4_orphan_get:1397: inode 15 [ 149.396173][ T8142] loop2: lost filesystem error report for type 5 error -117 [ 149.398711][ T8142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.670667][ T3423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 149.675476][ T8165] loop0: detected capacity change from 0 to 764 [ 149.684443][ T3423] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28 [ 149.720312][ T3423] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.720312][ T3423] [ 149.739909][ T3423] EXT4-fs (loop2): Total free blocks count 0 [ 149.750295][ T3423] EXT4-fs (loop2): Free/Dirty block details [ 149.778028][ T3423] EXT4-fs (loop2): free_blocks=0 [ 149.795034][ T3423] EXT4-fs (loop2): dirty_blocks=164 [ 149.806060][ T3423] EXT4-fs (loop2): Block reservation details [ 149.817956][ T3423] EXT4-fs (loop2): i_reserved_data_blocks=164 [ 149.832062][ T3296] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 149.844098][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.990686][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.001619][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.240825][ T8186] tipc: Failed to remove unknown binding: 66,0,0/2886997162:201134120/201134121 [ 150.267499][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1508'. [ 151.482950][ T8238] loop5: detected capacity change from 0 to 256 [ 151.534784][ T8238] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.581620][ T8243] loop0: detected capacity change from 0 to 512 [ 151.617385][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 151.654090][ T8243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.659432][ T8246] FAT-fs (loop5): Filesystem has been set read-only [ 151.684320][ T8243] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.702543][ T8243] openvswitch: netlink: Missing key (keys=440, expected=2000) [ 151.711878][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 151.720172][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 151.728286][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 151.736521][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 151.803451][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.865364][ T8246] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 151.877134][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'. [ 151.995176][ T8254] sit0: left promiscuous mode [ 152.076195][ T8244] syz.4.1530 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 152.113286][ T8254] ip6gre1: left promiscuous mode [ 152.123015][ T8254] gretap1: left promiscuous mode [ 152.134860][ T8244] CPU: 0 UID: 0 PID: 8244 Comm: syz.4.1530 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.134892][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.134907][ T8244] Call Trace: [ 152.134913][ T8244] [ 152.134922][ T8244] __dump_stack+0x1d/0x30 [ 152.134995][ T8244] dump_stack_lvl+0x95/0xd0 [ 152.135092][ T8244] dump_stack+0x15/0x1b [ 152.135179][ T8244] dump_header+0x80/0x240 [ 152.135242][ T8244] oom_kill_process+0x295/0x350 [ 152.135278][ T8244] out_of_memory+0x981/0xbc0 [ 152.135314][ T8244] try_charge_memcg+0x621/0xa00 [ 152.135432][ T8244] charge_memcg+0x6d/0x120 [ 152.135457][ T8244] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 152.135548][ T8244] __swap_cache_prepare_and_add+0x69/0x490 [ 152.135573][ T8244] ? alloc_pages_mpol+0xd9/0x1d0 [ 152.135616][ T8244] swap_cache_alloc_folio+0xa2/0x120 [ 152.135646][ T8244] swap_cluster_readahead+0x25f/0x3c0 [ 152.135681][ T8244] swapin_readahead+0xde/0x840 [ 152.135733][ T8244] ? _raw_spin_unlock+0x9/0x30 [ 152.135814][ T8244] ? swap_put_entries_cluster+0x44a/0x470 [ 152.135847][ T8244] ? __rcu_read_unlock+0x4e/0x70 [ 152.135869][ T8244] ? swap_cache_get_folio+0x1e0/0x1f0 [ 152.135952][ T8244] do_swap_page+0x34d/0x2150 [ 152.135977][ T8244] ? __css_rstat_updated+0xbb/0x280 [ 152.135999][ T8244] ? __rcu_read_lock+0x36/0x50 [ 152.136022][ T8244] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 152.136051][ T8244] handle_mm_fault+0xb3e/0x2da0 [ 152.136133][ T8244] do_user_addr_fault+0x634/0x1060 [ 152.136169][ T8244] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 152.136244][ T8244] ? trace_page_fault_user+0x1f/0xa0 [ 152.136350][ T8244] exc_page_fault+0x62/0xa0 [ 152.136374][ T8244] asm_exc_page_fault+0x26/0x30 [ 152.136457][ T8244] RIP: 0033:0x7f3c9a8d7f83 [ 152.136474][ T8244] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 152.136496][ T8244] RSP: 002b:00007ffe6724dee0 EFLAGS: 00010246 [ 152.136518][ T8244] RAX: 0000000000000000 RBX: 0000555568c95500 RCX: 0000000000000000 [ 152.136534][ T8244] RDX: 00007ffe6724df20 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.136550][ T8244] RBP: 00007f3c9ab97da0 R08: 0000000000000000 R09: 0000000000000000 [ 152.136566][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025355 [ 152.136623][ T8244] R13: 00007f3c9ab9609c R14: 0000000000025096 R15: 00007f3c9ab96090 [ 152.136684][ T8244] [ 152.390070][ T8244] memory: usage 245572kB, limit 307200kB, failcnt 3616 [ 152.413178][ T8244] memory+swap: usage 214492kB, limit 9007199254740988kB, failcnt 0 [ 152.450903][ T8244] kmem: usage 160972kB, limit 9007199254740988kB, failcnt 0 [ 152.470789][ T8254] 8021q: adding VLAN 0 to HW filter on device eth0 [ 152.485430][ T8244] Memory cgroup stats for /syz4: [ 152.485814][ T8244] cache 524288 [ 152.506173][ T8254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.521416][ T8244] rss 28672 [ 152.530337][ T8254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.537727][ T8244] shmem 0 [ 152.542208][ T8244] mapped_file 65536 [ 152.552010][ T8254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.558588][ T8244] dirty 0 [ 152.563498][ T8244] writeback 12288 [ 152.571880][ T8244] workingset_refault_anon 451 [ 152.601392][ T8244] workingset_refault_file 585 [ 152.615216][ T8244] swap 1187840 [ 152.632283][ T8244] swapcached 5443584 [ 152.649777][ T8244] pgpgin 82668 [ 152.658443][ T8244] pgpgout 82522 [ 152.665851][ T8244] pgfault 117476 [ 152.675178][ T8244] pgmajfault 923 [ 152.683540][ T8244] inactive_anon 28672 [ 152.690445][ T8244] active_anon 45056 [ 152.697661][ T8244] inactive_file 0 [ 152.702795][ T8244] active_file 524288 [ 152.709432][ T8244] unevictable 0 [ 152.718289][ T8244] hierarchical_memory_limit 314572800 [ 152.725204][ T8244] hierarchical_memsw_limit 9223372036854771712 [ 152.739480][ T8244] total_cache 524288 [ 152.743462][ T8244] total_rss 28672 [ 152.748517][ T8244] total_shmem 0 [ 152.769077][ T8244] total_mapped_file 65536 [ 152.797160][ T8244] total_dirty 0 [ 152.815553][ T8244] total_writeback 12288 [ 152.829908][ T8244] total_workingset_refault_anon 451 [ 152.839606][ T8244] total_workingset_refault_file 585 [ 152.844848][ T8244] total_swap 1187840 [ 152.848810][ T8244] total_swapcached 5443584 [ 152.853280][ T8244] total_pgpgin 82668 [ 152.857313][ T8244] total_pgpgout 82522 [ 152.861404][ T8244] total_pgfault 117476 [ 152.865489][ T8244] total_pgmajfault 923 [ 152.869631][ T8244] total_inactive_anon 28672 [ 152.874151][ T8244] total_active_anon 45056 [ 152.878568][ T8244] total_inactive_file 0 [ 152.882785][ T8244] total_active_file 524288 [ 152.887295][ T8244] total_unevictable 0 [ 152.891351][ T8244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1530,pid=8244,uid=0 [ 152.900699][ T8263] loop0: detected capacity change from 0 to 4096 [ 152.906087][ T8244] Memory cgroup out of memory: Killed process 8244 (syz.4.1530) total-vm:94168kB, anon-rss:1256kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 152.942820][ T8263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.014401][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.273618][ T8271] loop1: detected capacity change from 0 to 512 [ 153.289000][ T8271] EXT4-fs: Ignoring removed oldalloc option [ 153.311915][ T8271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 153.321337][ T8271] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.330099][ T8271] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 153.346450][ T8271] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 153.356040][ T8271] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.1540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.378302][ T8271] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 153.379326][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 153.395068][ C1] EXT4-fs (loop1): last error at time 1781333744: ext4_ext_check_inode:521: inode 13 [ 153.405559][ T8271] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1540: couldn't read orphan inode 13 (err -117) [ 153.424185][ T8271] loop1: lost filesystem error report for type 5 error -117 [ 153.430393][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.488218][ T8271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.495474][ T8276] loop0: detected capacity change from 0 to 1024 [ 153.505052][ T8276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.532450][ T8276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.567839][ T8276] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.621021][ T8276] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1542: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.745208][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.801739][ T8293] lo: entered allmulticast mode [ 153.825482][ T8293] syz_tun: left allmulticast mode [ 153.851997][ T8293] lo: left allmulticast mode [ 153.929036][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3306502219/3306502220 [ 153.940243][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 153.940261][ T28] audit: type=1400 audit(1781333744.594:2544): avc: denied { create } for pid=8296 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.970032][ T8297] syzkaller0: entered allmulticast mode [ 153.975977][ T8299] tipc: Failed to remove unknown binding: 66,0,0/0:3306502219/3306502220 [ 153.985469][ T28] audit: type=1400 audit(1781333744.634:2545): avc: denied { ioctl } for pid=8296 comm="syz.2.1550" path="socket:[22612]" dev="sockfs" ino=22612 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.091752][ T4240] dummy0: left promiscuous mode [ 154.195314][ T28] audit: type=1400 audit(1781333744.854:2546): avc: denied { read } for pid=8309 comm="syz.1.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.653683][ T8327] loop2: detected capacity change from 0 to 764 [ 154.781790][ T28] audit: type=1400 audit(1781333745.434:2547): avc: denied { bind } for pid=8343 comm="syz.5.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.848923][ T28] audit: type=1400 audit(1781333745.474:2548): avc: denied { setopt } for pid=8343 comm="syz.5.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.942106][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.962785][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.068996][ T8353] syzkaller0: entered promiscuous mode [ 155.078226][ T8353] syzkaller0: entered allmulticast mode [ 155.104699][ T28] audit: type=1400 audit(1781333745.764:2549): avc: denied { relabelfrom } for pid=8352 comm="syz.5.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.132464][ T28] audit: type=1400 audit(1781333745.764:2550): avc: denied { relabelto } for pid=8352 comm="syz.5.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.226923][ T28] audit: type=1400 audit(1781333745.884:2551): avc: denied { ioctl } for pid=8366 comm="syz.1.1577" path="socket:[21820]" dev="sockfs" ino=21820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.501827][ T8383] loop5: detected capacity change from 0 to 128 [ 155.517644][ T8383] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.539637][ T8383] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.569716][ T28] audit: type=1400 audit(1781333746.224:2552): avc: denied { write } for pid=8382 comm="syz.5.1582" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.641768][ T5204] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.664958][ T28] audit: type=1400 audit(1781333746.254:2553): avc: denied { write } for pid=8382 comm="syz.5.1582" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.836222][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 155.855434][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 156.666062][ T8421] veth0_vlan: entered allmulticast mode [ 156.752487][ T8421] veth0_vlan: left promiscuous mode [ 156.926141][ T8421] veth0_vlan: entered promiscuous mode [ 157.269395][ T8440] loop2: detected capacity change from 0 to 128 [ 157.272149][ T8439] loop1: detected capacity change from 0 to 128 [ 157.823332][ T8462] loop1: detected capacity change from 0 to 128 [ 158.042451][ T8474] loop0: detected capacity change from 0 to 2048 [ 158.062593][ T8474] EXT4-fs: dax option not supported [ 158.149085][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1622'. [ 158.353128][ T8488] loop1: detected capacity change from 0 to 128 [ 159.046189][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 159.046206][ T28] audit: type=1400 audit(1781333749.704:2558): avc: denied { append } for pid=8489 comm="syz.1.1627" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.098243][ T28] audit: type=1400 audit(1781333749.754:2559): avc: denied { bind } for pid=8510 comm="syz.2.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.679857][ T8520] syzkaller0: entered promiscuous mode [ 159.688830][ T8520] syzkaller0: entered allmulticast mode [ 159.826747][ T6334] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.844450][ T6334] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.255572][ T8525] loop2: detected capacity change from 0 to 512 [ 160.326466][ T8525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.391317][ T8525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.417500][ T8525] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.474554][ T8525] EXT4-fs (loop2): failed to initialize system zone (-117) [ 160.490612][ T8525] EXT4-fs (loop2): mount failed [ 160.509219][ T28] audit: type=1326 audit(1781333751.164:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1ecd7ce59 code=0x0 [ 160.616835][ T28] audit: type=1326 audit(1781333751.274:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ecd7ce59 code=0x7ffc0000 [ 160.680856][ T8545] loop0: detected capacity change from 0 to 512 [ 160.689095][ T28] audit: type=1326 audit(1781333751.274:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ecd7ce59 code=0x7ffc0000 [ 160.718344][ T28] audit: type=1326 audit(1781333751.274:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ecd7ce59 code=0x7ffc0000 [ 160.747859][ T28] audit: type=1326 audit(1781333751.274:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ecd7ce59 code=0x7ffc0000 [ 160.833884][ T28] audit: type=1326 audit(1781333751.304:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb1ecd7ce59 code=0x7ffc0000 [ 160.887040][ T28] audit: type=1326 audit(1781333751.324:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ecd3d68e code=0x7ffc0000 [ 160.929427][ T28] audit: type=1326 audit(1781333751.324:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8543 comm="syz.5.1647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ecd3d68e code=0x7ffc0000 [ 160.945279][ T8556] loop0: detected capacity change from 0 to 1024 [ 160.977870][ T8556] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 160.999830][ T8556] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 161.010350][ T8556] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 161.021678][ T8556] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 161.067326][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 161.267748][ T8571] xt_hashlimit: size too large, truncated to 1048576 [ 161.388170][ T6329] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 161.406347][ T6329] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.689138][ T8577] loop5: detected capacity change from 0 to 512 [ 161.772473][ T8560] loop1: detected capacity change from 0 to 128 [ 161.792810][ T8577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.799015][ T8594] loop2: detected capacity change from 0 to 512 [ 161.841272][ T8577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.103037][ T8577] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.184199][ T8599] loop2: detected capacity change from 0 to 512 [ 162.235310][ T8599] EXT4-fs: test_dummy_encryption option not supported [ 162.339010][ T8577] EXT4-fs (loop5): failed to initialize system zone (-117) [ 162.348164][ T8577] EXT4-fs (loop5): mount failed [ 162.418506][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'. [ 162.481393][ T8560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.512309][ T8560] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.640462][ T8615] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.1673'. [ 162.643023][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.716535][ T4228] bridge_slave_1: left allmulticast mode [ 162.730623][ T4228] bridge_slave_1: left promiscuous mode [ 162.745392][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.753744][ T4228] bridge_slave_0: left allmulticast mode [ 162.760157][ T4228] bridge_slave_0: left promiscuous mode [ 162.767639][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.793126][ T4228] batman_adv: batadv0: Interface deactivated: gretap1 [ 162.815799][ T4228] batman_adv: batadv0: Removing interface: gretap1 [ 162.867220][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.894937][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.925906][ T4228] bond0 (unregistering): Released all slaves [ 162.938216][ T8626] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 162.946974][ T8632] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 163.039232][ T4228] hsr_slave_0: left promiscuous mode [ 163.054082][ T4228] hsr_slave_1: left promiscuous mode [ 163.065356][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.086236][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.167501][ T8654] loop1: detected capacity change from 0 to 8192 [ 163.188407][ T4228] team0 (unregistering): Port device team_slave_1 removed [ 163.201435][ T4228] team0 (unregistering): Port device team_slave_0 removed [ 163.210459][ T8654] loop1: p1 < > p2 p4 < p5 > [ 163.218416][ T8654] loop1: partition table partially beyond EOD, truncated [ 163.227487][ T8654] loop1: p1 start 134217728 is beyond EOD, truncated [ 163.238864][ T8654] loop1: p2 size 67072 extends beyond EOD, truncated [ 163.249944][ T8654] loop1: p5 size 67072 extends beyond EOD, truncated [ 163.299783][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.573236][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.688779][ T8692] loop2: detected capacity change from 0 to 256 [ 163.772283][ T8665] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1681'. [ 163.948739][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.026881][ T8714] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 164.055550][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 164.055636][ T28] audit: type=1400 audit(1781333754.714:2842): avc: denied { write } for pid=8716 comm="syz.5.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.149261][ T8714] bond3: entered promiscuous mode [ 164.158126][ T8714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.215868][ T28] audit: type=1400 audit(1781333754.874:2843): avc: denied { create } for pid=8713 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 164.240209][ T8729] netlink: 'syz.5.1694': attribute type 10 has an invalid length. [ 164.266950][ T28] audit: type=1400 audit(1781333754.924:2844): avc: denied { write } for pid=8713 comm="syz.2.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 164.298440][ T8714] bond3: (slave bridge5): making interface the new active one [ 164.316151][ T28] audit: type=1400 audit(1781333754.954:2845): avc: denied { write } for pid=8721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.317755][ T8714] bridge5: entered promiscuous mode [ 164.360386][ T28] audit: type=1400 audit(1781333755.014:2846): avc: denied { write } for pid=8736 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.392388][ T8714] bridge5: left promiscuous mode [ 164.455065][ T8683] loop1: detected capacity change from 0 to 512 [ 164.537515][ T8744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.537599][ T8744] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.565355][ T28] audit: type=1400 audit(1781333755.204:2847): avc: denied { write } for pid=8743 comm="syz.0.1697" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.594877][ T68] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 164.595401][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.615870][ T68] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 164.634681][ T8729] bond0: (slave team0): Enslaving as an active interface with an up link [ 164.661456][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.675417][ T68] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.675417][ T68] [ 164.736578][ T68] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 164.805797][ T68] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 164.851178][ T68] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.851178][ T68] [ 165.013075][ T8683] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.038772][ T8683] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 165.225652][ T8683] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 165.274787][ T8683] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 165.314475][ T8683] System zones: 0-2, 18-18, 34-35 [ 165.340125][ T8744] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1697: bg 0: block 112: padding at end of block bitmap is not set [ 165.364609][ T8683] [ 165.399230][ T8744] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 165.419024][ T8683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.471413][ T8744] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.471413][ T8744] [ 165.489560][ T8744] EXT4-fs (loop0): Total free blocks count 0 [ 165.505889][ T8744] EXT4-fs (loop0): Free/Dirty block details [ 165.519502][ T8744] EXT4-fs (loop0): free_blocks=0 [ 165.612061][ T3303] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 165.676781][ T28] audit: type=1400 audit(1781333756.334:2848): avc: denied { write } for pid=8679 comm="syz.1.1683" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.812482][ T28] audit: type=1400 audit(1781333756.454:2849): avc: denied { write } for pid=8679 comm="syz.1.1683" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.909200][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.989428][ T8865] veth0_to_team: entered promiscuous mode [ 166.038810][ T8865] pimreg: entered allmulticast mode [ 166.071846][ T8865] pimreg: left allmulticast mode [ 166.103991][ T28] audit: type=1400 audit(1781333756.764:2850): avc: denied { read write } for pid=8870 comm="syz.2.1710" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 166.138112][ T28] audit: type=1400 audit(1781333756.764:2851): avc: denied { open } for pid=8870 comm="syz.2.1710" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 166.184830][ T8871] bridge0: port 1(gretap0) entered blocking state [ 166.219067][ T8871] bridge0: port 1(gretap0) entered disabled state [ 166.245961][ T8871] gretap0: entered allmulticast mode [ 166.288744][ T8871] gretap0: entered promiscuous mode [ 166.347359][ T8882] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 166.385317][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1717'. [ 166.400365][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 166.418150][ T8882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.444719][ T8891] bond3 (unregistering): Released all slaves [ 166.908211][ T8908] set_capacity_and_notify: 1 callbacks suppressed [ 166.908255][ T8908] loop5: detected capacity change from 0 to 1024 [ 166.966223][ T8908] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 166.982389][ T8908] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 167.001137][ T8908] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.018479][ T8908] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 167.096842][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:3704001846/3704001848 [ 167.121708][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:3704001846/3704001847 [ 167.144599][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:3704001846/3704001848 [ 167.165266][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:3704001846/3704001847 [ 167.199414][ T8928] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1730'. [ 167.565617][ T8950] loop5: detected capacity change from 0 to 256 [ 167.596065][ T8950] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.323632][ T8950] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 168.338972][ T8950] FAT-fs (loop5): Filesystem has been set read-only [ 168.354399][ T8950] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 168.368809][ T8950] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 168.382250][ T8950] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 168.589568][ T6335] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 169.554392][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 169.554410][ T28] audit: type=1326 audit(1781333760.214:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 169.620458][ T8984] vti0: entered allmulticast mode [ 169.631931][ T28] audit: type=1326 audit(1781333760.244:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 169.700684][ T28] audit: type=1326 audit(1781333760.244:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 169.752072][ T28] audit: type=1326 audit(1781333760.244:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2b0fcece59 code=0x7ffc0000 [ 169.854811][ T28] audit: type=1326 audit(1781333760.324:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 169.917058][ T28] audit: type=1326 audit(1781333760.324:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 169.973600][ T8999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1756'. [ 170.005837][ T28] audit: type=1326 audit(1781333760.334:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 170.060293][ T28] audit: type=1326 audit(1781333760.334:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 170.111596][ T28] audit: type=1326 audit(1781333760.334:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 170.190656][ T28] audit: type=1326 audit(1781333760.334:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b0fcad68e code=0x7ffc0000 [ 170.252856][ T8973] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 170.491599][ T9013] netlink: 66512 bytes leftover after parsing attributes in process `syz.5.1762'. [ 170.529634][ T9013] netlink: zone id is out of range [ 170.540941][ T9013] netlink: zone id is out of range [ 170.555146][ T9013] netlink: zone id is out of range [ 170.583428][ T9013] netlink: zone id is out of range [ 170.621415][ T9013] netlink: zone id is out of range [ 170.628239][ T9013] netlink: zone id is out of range [ 170.646317][ T9013] netlink: zone id is out of range [ 170.653102][ T9013] netlink: zone id is out of range [ 170.681662][ T9013] netlink: zone id is out of range [ 170.698354][ T9013] netlink: zone id is out of range [ 170.963738][ T9037] loop1: detected capacity change from 0 to 512 [ 170.993065][ T9037] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.046578][ T9037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.376094][ T9034] xfrm1: left promiscuous mode [ 171.467490][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.592955][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1774'. [ 171.651640][ T9048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9048 comm=syz.4.1774 [ 171.906513][ T9055] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 171.945264][ T9055] bond6 (unregistering): Released all slaves [ 172.378485][ T9019] loop0: detected capacity change from 0 to 512 [ 172.829061][ T9066] loop2: detected capacity change from 0 to 512 [ 172.841708][ T9019] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.1765: invalid block [ 172.908991][ T9019] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 172.917462][ T9066] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.949539][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 172.959780][ C1] EXT4-fs (loop0): initial error at time 1781333763: __ext4_iget:5481: inode 11: block 1 [ 172.976149][ C1] EXT4-fs (loop0): last error at time 1781333763: __ext4_iget:5481: inode 11: block 1 [ 172.992881][ T9066] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 173.026447][ T9019] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1765: couldn't read orphan inode 11 (err -117) [ 173.068243][ T9019] loop0: lost filesystem error report for type 5 error -117 [ 173.094391][ T9066] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 173.126648][ T9066] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 173.177450][ T9066] System zones: 0-2, 18-18 [ 173.239389][ T9019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.265149][ T9066] , 34-35 [ 173.309385][ T9066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.453210][ T9067] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 173.500592][ T9019] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 173.565487][ T9019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 173.644719][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.667966][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 173.795738][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.933329][ T9116] netlink: 'syz.5.1797': attribute type 10 has an invalid length. [ 173.958597][ T9116] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.1797'. [ 174.426520][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.433798][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.595571][ T9134] bridge0: entered allmulticast mode [ 174.671700][ T9136] bridge_slave_1: left allmulticast mode [ 174.694464][ T9136] bridge_slave_1: left promiscuous mode [ 174.700220][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.779264][ T9136] bridge_slave_0: left allmulticast mode [ 174.810535][ T9136] bridge_slave_0: left promiscuous mode [ 174.842247][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.035715][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1804'. [ 175.109936][ T9157] netlink: 'syz.4.1809': attribute type 12 has an invalid length. [ 175.148191][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 175.148208][ T28] audit: type=1400 audit(1781333765.804:2889): avc: denied { bind } for pid=9159 comm="syz.2.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.212297][ T28] audit: type=1400 audit(1781333765.804:2890): avc: denied { node_bind } for pid=9159 comm="syz.2.1811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 175.251789][ T28] audit: type=1400 audit(1781333765.904:2891): avc: denied { write } for pid=9151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.295250][ T28] audit: type=1400 audit(1781333765.944:2892): avc: denied { write } for pid=9176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.353852][ T9180] loop2: detected capacity change from 0 to 1024 [ 175.387359][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.563691][ T9180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.579996][ T9180] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.799352][ T28] audit: type=1400 audit(1781333766.414:2893): avc: denied { write } for pid=9179 comm="syz.2.1815" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.850487][ T9180] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1815: lblock 0 mapped to illegal pblock 0 (length 1) [ 175.867566][ T9195] netlink: 'syz.5.1819': attribute type 10 has an invalid length. [ 175.951724][ T9180] EXT4-fs (loop2): Remounting filesystem read-only [ 175.987026][ T9195] ipvlan1: entered allmulticast mode [ 176.003124][ T28] audit: type=1400 audit(1781333766.424:2894): avc: denied { append } for pid=9179 comm="syz.2.1815" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.218411][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.345894][ T28] audit: type=1400 audit(1781333767.004:2895): avc: denied { write } for pid=9192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.418683][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 176.426134][ T28] audit: type=1400 audit(1781333767.064:2896): avc: denied { write } for pid=9221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.471991][ T9195] team0: Device ipvlan1 failed to register rx_handler [ 176.616282][ T9240] syzkaller0: entered promiscuous mode [ 176.634475][ T9240] syzkaller0: entered allmulticast mode [ 176.666871][ T9244] No such timeout policy "syz1" [ 176.699075][ T28] audit: type=1400 audit(1781333767.324:2897): avc: denied { write } for pid=9229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.739737][ T28] audit: type=1400 audit(1781333767.354:2898): avc: denied { write } for pid=9252 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.902279][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1835'. [ 176.962482][ T9271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9271 comm=syz.4.1835 [ 177.009559][ T9279] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1839'. [ 177.053815][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 177.075611][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 177.309428][ T9296] net_ratelimit: 1523 callbacks suppressed [ 177.309516][ T9296] Set syz1 is full, maxelem 6117 reached [ 177.399452][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1849'. [ 177.421233][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 177.459120][ T9308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9308 comm=syz.2.1849 [ 177.475809][ T9314] loop5: detected capacity change from 0 to 128 [ 177.599937][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 177.650628][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.650628][ T9314] loop5: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 177.677702][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.677702][ T9314] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 177.705916][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.705916][ T9314] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 177.720536][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.720536][ T9314] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 177.780749][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.780749][ T9314] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 177.823420][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.823420][ T9314] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 177.856361][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.856361][ T9314] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 177.886964][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.886964][ T9314] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 177.905314][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.905314][ T9314] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 177.921009][ T9314] syz.5.1851: attempt to access beyond end of device [ 177.921009][ T9314] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 178.003120][ T9334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.121639][ T9329] netlink: 66512 bytes leftover after parsing attributes in process `syz.1.1857'. [ 178.156568][ T9329] netlink: zone id is out of range [ 178.163519][ T9329] netlink: zone id is out of range [ 178.170182][ T9329] netlink: zone id is out of range [ 178.184808][ T9329] netlink: zone id is out of range [ 178.198052][ T9329] netlink: zone id is out of range [ 178.212162][ T9329] netlink: zone id is out of range [ 178.223828][ T9329] netlink: zone id is out of range [ 178.237403][ T9329] netlink: zone id is out of range [ 178.252428][ T9329] netlink: zone id is out of range [ 178.262895][ T9334] loop5: detected capacity change from 0 to 512 [ 178.330028][ T9334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.378402][ T9334] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.415243][ T9334] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1858: corrupted xattr block 33: invalid ea_ino [ 178.431425][ T9346] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 178.440373][ T9334] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 178.453636][ T9334] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1858: corrupted xattr block 33: invalid ea_ino [ 178.467717][ T9334] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 178.541287][ T9350] netlink: 'syz.1.1864': attribute type 7 has an invalid length. [ 178.554492][ T9350] netlink: 'syz.1.1864': attribute type 7 has an invalid length. [ 178.562900][ T4222] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.571757][ T4222] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.580936][ T4222] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.591133][ T4222] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.997257][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.333967][ T9382] pim6reg: entered allmulticast mode [ 179.471506][ T9389] loop5: detected capacity change from 0 to 1024 [ 179.484925][ T9389] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 179.488600][ T9389] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 179.489052][ T9389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.598716][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.043195][ T9412] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 180.153171][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 180.153189][ T28] audit: type=1400 audit(1781334026.826:2915): avc: denied { write } for pid=9414 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 180.333783][ T9426] __nla_validate_parse: 1 callbacks suppressed [ 180.333800][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1891'. [ 180.365364][ T28] audit: type=1400 audit(1781334027.038:2916): avc: denied { shutdown } for pid=9428 comm="syz.2.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.433973][ T9433] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 180.440613][ T9433] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.449431][ T9433] vhci_hcd vhci_hcd.0: Device attached [ 180.685281][ T9434] vhci_hcd: connection closed [ 180.685533][ T4226] vhci_hcd vhci_hcd.5: stop threads [ 180.696035][ T4226] vhci_hcd vhci_hcd.5: release socket [ 180.709648][ T4226] vhci_hcd vhci_hcd.5: disconnect device [ 180.719822][ T6335] usb 12-1: SetAddress Request (2) to port 0 [ 180.726158][ T6335] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 181.880717][ T9471] loop2: detected capacity change from 0 to 128 [ 182.351544][ T9457] syz.4.1902 (9457) used greatest stack depth: 9448 bytes left [ 182.491096][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.548332][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.594918][ T9479] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 182.624514][ T9479] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 182.636109][ T9471] bio_check_eod: 4087 callbacks suppressed [ 182.636126][ T9471] syz.2.1906: attempt to access beyond end of device [ 182.636126][ T9471] loop2: rw=0, sector=153, nr_sectors = 8 limit=128 [ 182.696239][ T28] audit: type=1400 audit(1781334029.385:2917): avc: denied { map } for pid=9481 comm="syz.4.1910" path="socket:[25683]" dev="sockfs" ino=25683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 182.698970][ T9471] syz.2.1906: attempt to access beyond end of device [ 182.698970][ T9471] loop2: rw=0, sector=153, nr_sectors = 8 limit=128 [ 182.833722][ T9471] syz.2.1906: attempt to access beyond end of device [ 182.833722][ T9471] loop2: rw=0, sector=153, nr_sectors = 8 limit=128 [ 183.365875][ T28] audit: type=1400 audit(1781334030.000:2918): avc: denied { append } for pid=9497 comm="syz.1.1915" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.583144][ T28] audit: type=1400 audit(1781334030.282:2919): avc: denied { write } for pid=9511 comm="syz.1.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.938017][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1925'. [ 183.984799][ T9523] bond0: (slave bond_slave_0): Releasing backup interface [ 184.051647][ T28] audit: type=1326 audit(1781334030.745:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.1926" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a91ce59 code=0x7ffc0000 [ 184.091506][ T9523] bond_slave_0: entered promiscuous mode [ 184.106154][ T9523] bond_slave_0: entered allmulticast mode [ 184.137741][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 184.152682][ T28] audit: type=1326 audit(1781334030.745:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.1926" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a91ce59 code=0x7ffc0000 [ 184.207064][ T28] audit: type=1326 audit(1781334030.745:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.1926" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a91ce59 code=0x7ffc0000 [ 184.285409][ T28] audit: type=1326 audit(1781334030.745:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.1926" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9a91ce59 code=0x7ffc0000 [ 184.364407][ T28] audit: type=1326 audit(1781334030.755:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9525 comm="syz.4.1926" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c9a91ce59 code=0x7ffc0000 [ 184.748197][ T9555] loop0: detected capacity change from 0 to 128 [ 184.827077][ T9556] syz.0.1930: attempt to access beyond end of device [ 184.827077][ T9556] loop0: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 184.858224][ T9556] syz.0.1930: attempt to access beyond end of device [ 184.858224][ T9556] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 184.916102][ T9556] syz.0.1930: attempt to access beyond end of device [ 184.916102][ T9556] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 184.984954][ T9556] syz.0.1930: attempt to access beyond end of device [ 184.984954][ T9556] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 185.025125][ T9556] syz.0.1930: attempt to access beyond end of device [ 185.025125][ T9556] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 185.045768][ T9556] syz.0.1930: attempt to access beyond end of device [ 185.045768][ T9556] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 185.065885][ T9556] syz.0.1930: attempt to access beyond end of device [ 185.065885][ T9556] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 185.556242][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 185.556330][ T28] audit: type=1400 audit(1781334032.266:2952): avc: denied { ioctl } for pid=9560 comm="syz.1.1932" path="socket:[25812]" dev="sockfs" ino=25812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.637414][ T28] audit: type=1400 audit(1781334032.337:2953): avc: denied { write } for pid=9560 comm="syz.1.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.741553][ T6335] usb 12-1: device descriptor read/8, error -110 [ 185.850573][ T6335] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 185.963518][ T9570] netlink: 'syz.1.1934': attribute type 21 has an invalid length. [ 185.974467][ T9570] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.984725][ T9570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.992090][ T9570] IPv6: NLM_F_CREATE should be set when creating new route [ 185.999507][ T9570] IPv6: NLM_F_CREATE should be set when creating new route [ 186.006843][ T9570] IPv6: NLM_F_CREATE should be set when creating new route [ 186.012756][ T9575] netlink: 'syz.1.1934': attribute type 21 has an invalid length. [ 186.061705][ T9575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.093968][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1939'. [ 186.205181][ T9570] vlan4: entered promiscuous mode [ 186.229396][ T9570] bridge0: entered promiscuous mode [ 186.368802][ T28] audit: type=1400 audit(1781334033.092:2954): avc: denied { getopt } for pid=9594 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.508678][ T28] audit: type=1400 audit(1781334033.233:2955): avc: denied { mount } for pid=9600 comm="syz.1.1946" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 186.751871][ T9606] loop5: detected capacity change from 0 to 512 [ 186.801631][ T9606] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 186.802853][ T9610] netlink: 'syz.2.1949': attribute type 39 has an invalid length. [ 186.810155][ T9606] EXT4-fs (loop5): orphan cleanup on readonly fs [ 186.830057][ T9606] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 186.850139][ T9606] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 186.860732][ T9606] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #16: comm syz.5.1948: corrupted xattr block 31: invalid header [ 186.883382][ T9606] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.884083][ T9606] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 186.893390][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 186.893438][ C0] EXT4-fs (loop5): initial error at time 1781334033: ext4_xattr_delete_inode:2972: inode 16 [ 186.893570][ C0] EXT4-fs (loop5): last error at time 1781334033: ext4_xattr_delete_inode:2972: inode 16 [ 186.937421][ T9606] EXT4-fs (loop5): 1 orphan inode deleted [ 186.946676][ T9606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.009003][ T28] audit: type=1400 audit(1781334033.727:2956): avc: denied { ioctl } for pid=9603 comm="syz.1.1947" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.036725][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.076845][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 187.297781][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 187.546243][ T9649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 187.552853][ T9649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 187.567484][ T9649] vhci_hcd vhci_hcd.0: Device attached [ 187.683261][ T9652] vhci_hcd: connection closed [ 187.683472][ T4226] vhci_hcd vhci_hcd.1: stop threads [ 187.693593][ T4226] vhci_hcd vhci_hcd.1: release socket [ 187.699658][ T4226] vhci_hcd vhci_hcd.1: disconnect device [ 188.031453][ T9666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.044442][ T9666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.089290][ T9671] ip_vti0: entered promiscuous mode [ 188.096449][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1970'. [ 188.119607][ T9673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=9673 comm=syz.2.1973 [ 188.136137][ T28] audit: type=1400 audit(1781334034.864:2957): avc: denied { setattr } for pid=9672 comm="syz.2.1973" name="NETLINK" dev="sockfs" ino=25985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 188.237211][ T9679] loop5: detected capacity change from 0 to 512 [ 188.270082][ T9679] FAT-fs (loop5): FAT read failed (blocknr 128) [ 188.314110][ T9687] tipc: Failed to remove unknown binding: 66,0,0/1235525110:1388382127/1388382129 [ 188.323594][ T9687] tipc: Failed to remove unknown binding: 66,0,0/1235525110:1388382127/1388382128 [ 188.333418][ T9687] tipc: Failed to remove unknown binding: 66,0,0/1235525110:1388382127/1388382129 [ 188.342870][ T9687] tipc: Failed to remove unknown binding: 66,0,0/1235525110:1388382127/1388382128 [ 188.669939][ T6327] IPVS: starting estimator thread 0... [ 188.800411][ T9704] IPVS: using max 2784 ests per chain, 139200 per kthread [ 188.815381][ T9708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 188.821998][ T9708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.823055][ T28] audit: type=1400 audit(1781334035.559:2958): avc: denied { ioctl } for pid=9693 comm="syz.1.1983" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.858078][ T9694] net_ratelimit: 1524 callbacks suppressed [ 188.858161][ T9694] IPVS: lc: FWM 3 0x00000003 - no destination available [ 188.866777][ T9708] vhci_hcd vhci_hcd.0: Device attached [ 188.876905][ T6334] IPVS: starting estimator thread 0... [ 188.882582][ T28] audit: type=1400 audit(1781334035.599:2959): avc: denied { name_bind } for pid=9705 comm="syz.0.1987" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 188.967660][ T9709] vhci_hcd: connection closed [ 188.967923][ T4222] vhci_hcd vhci_hcd.2: stop threads [ 188.977963][ T9711] IPVS: using max 2496 ests per chain, 124800 per kthread [ 188.986096][ T4222] vhci_hcd vhci_hcd.2: release socket [ 188.991849][ T4222] vhci_hcd vhci_hcd.2: disconnect device [ 189.537453][ T4226] IPVS: stop unused estimator thread 0... [ 189.659130][ T9734] bridge_slave_0: left allmulticast mode [ 189.670581][ T9734] bridge_slave_0: left promiscuous mode [ 189.678946][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.699426][ T9734] bridge_slave_1: left allmulticast mode [ 189.705243][ T9734] bridge_slave_1: left promiscuous mode [ 189.711021][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.750248][ T9734] bond0: (slave bond_slave_1): Releasing backup interface [ 189.810584][ T9734] team0: Port device team_slave_0 removed [ 189.848203][ T9734] team0: Port device team_slave_1 removed [ 189.857206][ T9734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.876790][ T9734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.902158][ T9734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.921506][ T9734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.956883][ T9734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.013839][ T9736] team0: Port device xfrm0 added [ 190.040910][ T9737] tipc: Enabled bearer , priority 0 [ 190.082567][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1997'. [ 190.112760][ T9749] bridge2: port 1(dummy0) entered blocking state [ 190.140716][ T9749] bridge2: port 1(dummy0) entered disabled state [ 190.150430][ T9749] dummy0: entered allmulticast mode [ 190.158116][ T9749] dummy0: entered promiscuous mode [ 190.164130][ T9752] netlink: 'syz.0.1997': attribute type 10 has an invalid length. [ 190.208073][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1997'. [ 190.234519][ T9752] bridge2: port 1(dummy0) entered blocking state [ 190.240957][ T9752] bridge2: port 1(dummy0) entered forwarding state [ 190.273355][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 190.287893][ T9752] dummy0: left allmulticast mode [ 190.293259][ T9752] bridge2: port 1(dummy0) entered disabled state [ 190.409947][ T9767] syzkaller0: entered promiscuous mode [ 190.424919][ T9767] syzkaller0: entered allmulticast mode [ 190.493291][ T28] audit: type=1400 audit(1781334037.240:2960): avc: denied { ioctl } for pid=9775 comm="syz.4.2008" path="socket:[27003]" dev="sockfs" ino=27003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.770030][ T28] audit: type=1400 audit(1781334037.522:2961): avc: denied { write } for pid=9772 comm="syz.2.2007" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.941084][ T28] audit: type=1400 audit(1781334037.693:2962): avc: denied { getopt } for pid=9788 comm="syz.2.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.053454][ T9797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=9797 comm=syz.0.2015 [ 191.339911][ T9805] loop0: detected capacity change from 0 to 1024 [ 191.390525][ T9805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.417870][ T9810] netlink: 'syz.4.2018': attribute type 11 has an invalid length. [ 191.446165][ T28] audit: type=1400 audit(1781334038.196:2963): avc: denied { write } for pid=9804 comm="syz.0.2027" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.474082][ T9805] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.0.2027: path /398/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 191.560433][ T28] audit: type=1400 audit(1781334038.196:2964): avc: denied { create } for pid=9804 comm="syz.0.2027" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 191.653366][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.825045][ T9820] loop0: detected capacity change from 0 to 2048 [ 192.880270][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 192.896419][ T9806] loop5: detected capacity change from 0 to 512 [ 193.146414][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 193.245495][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2034'. [ 193.380639][ T9806] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.2017: invalid block [ 193.436582][ T9806] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.439788][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 193.455390][ C0] EXT4-fs (loop5): initial error at time 1781334040: __ext4_iget:5481: inode 11: block 1 [ 193.465276][ C0] EXT4-fs (loop5): last error at time 1781334040: __ext4_iget:5481: inode 11: block 1 [ 193.498663][ T9806] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2017: couldn't read orphan inode 11 (err -117) [ 193.542404][ T9806] loop5: lost filesystem error report for type 5 error -117 [ 193.658789][ T28] audit: type=1400 audit(1781334040.431:2965): avc: denied { create } for pid=9860 comm="syz.2.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 193.808530][ T9806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.204992][ T9806] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 194.289573][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.859891][ T9881] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2043'. [ 194.897633][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 194.933422][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 194.957167][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 195.012592][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 195.316994][ T9905] loop5: detected capacity change from 0 to 512 [ 195.318000][ T6334] IPVS: starting estimator thread 0... [ 195.328354][ T9887] IPVS: lc: FWM 3 0x00000003 - no destination available [ 195.361954][ T9905] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2052: bg 0: block 127: padding at end of block bitmap is not set [ 195.378740][ T9903] loop0: detected capacity change from 0 to 128 [ 195.389093][ T9905] loop5: lost filesystem error report for type 5 error -117 [ 195.390849][ T9905] ------------[ cut here ]------------ [ 195.398177][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 195.398198][ C0] EXT4-fs (loop5): initial error at time 1781334042: ext4_validate_block_bitmap:441 [ 195.398229][ C0] EXT4-fs (loop5): last error at time 1781334042: ext4_validate_block_bitmap:441 [ 195.407641][ T9907] IPVS: using max 2736 ests per chain, 136800 per kthread [ 195.410326][ T9905] EA inode 11 i_nlink=0 [ 195.435964][ T9905] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x301/0x330, CPU#0: syz.5.2052/9905 [ 195.451085][ T9905] Modules linked in: [ 195.454993][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.5.2052 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.464349][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.474450][ T9905] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 195.481160][ T9905] Code: 86 98 98 ff 4c 8d 2d cf 44 5c 05 49 8d 7e 40 e8 36 4a b6 ff 49 8b 6e 40 4c 89 e7 e8 6a 45 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 c1 52 d5 03 90 90 90 90 90 90 90 [ 195.500834][ T9905] RSP: 0018:ffffc90000e737f8 EFLAGS: 00010246 [ 195.506987][ T9905] RAX: ffff888141064f00 RBX: ffff88810866c178 RCX: ffffffff81c069a6 [ 195.514978][ T9905] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871cae60 [ 195.523184][ T9905] RBP: 000000000000000b R08: 000188810866c12b R09: 0000000000000000 [ 195.531375][ T9905] R10: 0000000000000000 R11: ffff888100489e00 R12: ffff88810866c128 [ 195.539442][ T9905] R13: ffffffff871cae60 R14: ffff88810866c0e0 R15: 0000000000000001 [ 195.547727][ T9905] FS: 00007fb1eb7d76c0(0000) GS:ffff8882ae90d000(0000) knlGS:0000000000000000 [ 195.556746][ T9905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.564702][ T9905] CR2: 000055f6a3e93008 CR3: 000000013da8c000 CR4: 00000000003506f0 [ 195.572764][ T9905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.580793][ T9905] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 195.588825][ T9905] Call Trace: [ 195.592131][ T9905] [ 195.595202][ T9905] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 195.601209][ T9905] ext4_xattr_delete_inode+0x6b5/0x790 [ 195.606972][ T9905] ext4_evict_inode+0xb12/0xe30 [ 195.611900][ T9905] ? __pfx_ext4_evict_inode+0x10/0x10 [ 195.617347][ T9905] evict+0x2a5/0x510 [ 195.621319][ T9905] iput+0x430/0x5a0 [ 195.625146][ T9905] ext4_process_orphan+0x1a4/0x1c0 [ 195.630397][ T9905] ext4_orphan_cleanup+0x6a6/0xa10 [ 195.635601][ T9905] ? ext4_register_li_request+0x14c/0x440 [ 195.641410][ T9905] ext4_fill_super+0x33d5/0x3780 [ 195.646437][ T9905] ? set_blocksize+0x14c/0x270 [ 195.651319][ T9905] ? __pfx_ext4_fill_super+0x10/0x10 [ 195.656696][ T9905] get_tree_bdev_flags+0x291/0x300 [ 195.661848][ T9905] ? __pfx_ext4_fill_super+0x10/0x10 [ 195.667217][ T9905] get_tree_bdev+0x1f/0x30 [ 195.671666][ T9905] ext4_get_tree+0x1c/0x30 [ 195.676163][ T9905] vfs_get_tree+0x57/0x1d0 [ 195.680613][ T9905] do_new_mount+0x288/0x8d0 [ 195.685193][ T9905] path_mount+0x4ad/0xb90 [ 195.689628][ T9905] __se_sys_mount+0x28c/0x2e0 [ 195.693382][ T9903] netlink: 'syz.0.2051': attribute type 21 has an invalid length. [ 195.694375][ T9905] __x64_sys_mount+0x67/0x80 [ 195.694414][ T9905] x64_sys_call+0x2d61/0x3020 [ 195.694443][ T9905] do_syscall_64+0x136/0x3c0 [ 195.694559][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.694600][ T9905] RIP: 0033:0x7fb1ecd7e0ca [ 195.694681][ T9905] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.712593][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2051'. [ 195.716533][ T9905] RSP: 002b:00007fb1eb7d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.716564][ T9905] RAX: ffffffffffffffda RBX: 00007fb1eb7d6ee0 RCX: 00007fb1ecd7e0ca [ 195.716582][ T9905] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb1eb7d6ea0 [ 195.716615][ T9905] RBP: 0000200000000180 R08: 00007fb1eb7d6ee0 R09: 0000000000000000 [ 195.716632][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 195.716648][ T9905] R13: 00007fb1eb7d6ea0 R14: 000000000000047a R15: 00002000000001c0 [ 195.716671][ T9905] [ 195.716680][ T9905] ---[ end trace 0000000000000000 ]--- [ 195.731319][ T9905] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.2052: bit already cleared for inode 11 [ 195.731413][ T9905] loop5: lost filesystem error report for type 5 error -117 [ 195.732485][ T9905] EXT4-fs (loop5): 1 orphan inode deleted [ 195.732993][ T9905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.748307][ T28] audit: type=1400 audit(1781334042.513:2966): avc: denied { write } for pid=9900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.913613][ T28] audit: type=1400 audit(1781334042.594:2967): avc: denied { write } for pid=9929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.919755][ T9940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2058'. [ 196.088628][ T28] audit: type=1400 audit(1781334042.866:2968): avc: denied { write } for pid=9933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.112579][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.164145][ T4226] IPVS: stop unused estimator thread 0... [ 196.209841][ T28] audit: type=1400 audit(1781334042.976:2969): avc: denied { write } for pid=9964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.259513][ T9970] loop2: detected capacity change from 0 to 512 [ 196.293356][ T9970] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2067: corrupted inode contents [ 196.305285][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.306105][ T9970] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.2067: mark_inode_dirty error [ 196.322053][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 196.333173][ C0] EXT4-fs (loop2): initial error at time 1781334043: ext4_do_update_inode:5690: inode 16 [ 196.343063][ C0] EXT4-fs (loop2): last error at time 1781334043: ext4_do_update_inode:5690: inode 16 [ 196.357349][ T9976] lo: entered allmulticast mode [ 196.364415][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.365335][ T9970] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2067: corrupted inode contents [ 196.388791][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.389937][ T9970] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2067: mark_inode_dirty error [ 196.410861][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.411147][ T9970] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2067: corrupted inode contents [ 196.432203][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.432485][ T9970] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 196.450151][ T9970] loop2: lost filesystem error report for type 5 error -117 [ 196.450406][ T9970] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2067: corrupted inode contents [ 196.469785][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.471185][ T9970] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.2067: mark_inode_dirty error [ 196.491847][ T9970] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.493252][ T9970] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 196.514189][ T9970] loop2: lost filesystem error report for type 5 error -117 [ 196.515350][ T9970] EXT4-fs (loop2): 1 truncate cleaned up [ 196.529575][ T9970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.542441][ T9970] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.553245][ T4224] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.563129][ T4224] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 196.705767][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.707760][ T9986] loop1: detected capacity change from 0 to 128 [ 196.861379][ T9986] netlink: 'syz.1.2072': attribute type 21 has an invalid length. [ 196.902187][ T6334] IPVS: starting estimator thread 0... [ 196.922332][ T9983] IPVS: lc: FWM 3 0x00000003 - no destination available [ 196.990056][ T9990] loop2: detected capacity change from 0 to 8192 [ 197.029035][ T9991] IPVS: using max 2832 ests per chain, 141600 per kthread [ 197.165810][T10004] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 198.080474][ T28] audit: type=1400 audit(1781334044.867:2970): avc: denied { associate } for pid=10040 comm="syz.4.2091" name="455" dev="tmpfs" ino=2364 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 198.171113][ T28] audit: type=1400 audit(1781334044.938:2971): avc: denied { sqpoll } for pid=10045 comm="syz.4.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.245643][ T4224] IPVS: stop unused estimator thread 0... [ 198.293270][T10028] loop5: detected capacity change from 0 to 256 [ 198.326122][T10049] loop1: detected capacity change from 0 to 512 [ 198.356020][T10049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.400304][T10049] EXT4-fs (loop1): 1 truncate cleaned up [ 198.413306][T10049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.499752][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.883435][T10060] tipc: Resetting bearer [ 199.043202][T10066] netlink: 'syz.4.2098': attribute type 20 has an invalid length. [ 199.063169][T10066] __nla_validate_parse: 3 callbacks suppressed [ 199.063239][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 199.071333][T10064] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2097'. [ 199.158778][T10066] netlink: 'syz.4.2098': attribute type 20 has an invalid length. [ 199.166986][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 199.251431][ T28] audit: type=1400 audit(1781334046.024:2972): avc: denied { ioctl } for pid=10072 comm="syz.0.2101" path="socket:[27586]" dev="sockfs" ino=27586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 199.334353][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 199.347622][ T28] audit: type=1400 audit(1781334046.125:2973): avc: denied { setopt } for pid=10082 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.430952][T10083] team1: entered promiscuous mode [ 199.446851][T10083] team1: entered allmulticast mode [ 199.457864][T10083] 8021q: adding VLAN 0 to HW filter on device team1 [ 199.497519][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 199.528053][T10083] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 199.561223][T10083] team2: entered promiscuous mode [ 199.576564][T10083] team2: entered allmulticast mode [ 199.591973][T10083] 8021q: adding VLAN 0 to HW filter on device team2 [ 199.747056][T10104] loop1: detected capacity change from 0 to 256 [ 199.812445][T10102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2106'. [ 199.879471][T10104] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.519964][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2112'. [ 200.543821][ T28] audit: type=1400 audit(1781334047.352:2974): avc: denied { bind } for pid=10158 comm="syz.2.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.562390][T10157] bond2: entered promiscuous mode [ 200.581553][T10157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.618078][T10163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.628357][T10099] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.636307][T10099] FAT-fs (loop1): Filesystem has been set read-only [ 200.636695][T10163] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 200.642995][T10099] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.661456][T10099] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.669618][T10163] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 200.669650][T10099] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 200.694447][T10157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.701795][T10157] IPv6: NLM_F_CREATE should be set when creating new route [ 200.709060][T10157] IPv6: NLM_F_CREATE should be set when creating new route [ 200.738245][T10157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.761858][T10157] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 200.779519][T10157] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 200.927579][ T6335] usb 12-1: device descriptor read/8, error -110 [ 201.165117][ T6335] usb 12-1: SetAddress Request (3) to port 0 [ 201.171280][ T6335] usb 12-1: new SuperSpeed USB device number 3 using vhci_hcd [ 202.129324][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 202.158822][T10195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10195 comm=syz.1.2125 [ 202.247326][T10202] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 202.279869][T10202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.348760][T10202] bond3: (slave veth9): Enslaving as an active interface with a down link [ 202.426184][T10202] veth0_virt_wifi: entered promiscuous mode [ 202.491712][T10202] bond3: (slave veth0_virt_wifi): making interface the new active one [ 202.504835][T10202] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 202.532157][T10208] bond3: (slave veth0_virt_wifi): Releasing active interface [ 202.594724][T10212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2130'. [ 202.627395][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2130'. [ 203.237768][ T28] audit: type=1400 audit(1781334050.046:2975): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.276849][ T28] audit: type=1400 audit(1781334050.046:2976): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.314297][ T28] audit: type=1400 audit(1781334050.046:2977): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.342641][ T28] audit: type=1400 audit(1781334050.127:2978): avc: denied { prog_load } for pid=10244 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.363514][ T28] audit: type=1400 audit(1781334050.137:2979): avc: denied { bpf } for pid=10244 comm="syz.2.2142" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.416428][ T28] audit: type=1400 audit(1781334050.137:2980): avc: denied { perfmon } for pid=10244 comm="syz.2.2142" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.439847][ T28] audit: type=1400 audit(1781334050.137:2981): avc: denied { prog_run } for pid=10244 comm="syz.2.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 203.482917][T10250] veth11: entered promiscuous mode [ 203.548266][ T28] audit: type=1400 audit(1781334050.187:2982): avc: denied { getopt } for pid=10242 comm="syz.0.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.574879][ T28] audit: type=1400 audit(1781334050.237:2983): avc: denied { create } for pid=10251 comm="syz.2.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.597921][ T28] audit: type=1400 audit(1781334050.267:2984): avc: denied { open } for pid=10237 comm="syz.5.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 203.627616][T10261] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 203.678252][T10261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.723106][T10261] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 203.801484][T10277] bond6: entered promiscuous mode [ 203.830169][T10277] bond6: entered allmulticast mode [ 203.873147][T10261] macvlan2: entered promiscuous mode [ 203.878575][T10261] macvlan2: entered allmulticast mode [ 203.906670][T10261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.373560][T10302] : port 1(ip6gretap0) entered blocking state [ 204.387608][T10302] : port 1(ip6gretap0) entered disabled state [ 204.399908][T10302] ip6gretap0: entered allmulticast mode [ 204.411895][T10302] ip6gretap0: entered promiscuous mode [ 204.872496][T10305] __nla_validate_parse: 2 callbacks suppressed [ 204.872515][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 204.897247][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 205.074372][T10299] veth7: entered promiscuous mode [ 205.081009][T10303] ip6gretap0: left allmulticast mode [ 205.086699][T10303] ip6gretap0: left promiscuous mode [ 205.092095][T10303] : port 1(ip6gretap0) entered disabled state [ 205.117250][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.124773][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.153329][T10317] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 205.166389][T10322] loop5: detected capacity change from 0 to 512 [ 205.190237][T10322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.204462][T10322] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.2166: lblock 0 mapped to illegal pblock 3 (length 1) [ 205.222729][T10322] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.2166: error -117 reading directory block [ 205.237739][T10322] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.2166: lblock 0 mapped to illegal pblock 3 (length 1) [ 205.253590][T10322] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.2166: error -117 reading directory block [ 205.299175][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.855788][T10339] netlink: 'syz.1.2173': attribute type 3 has an invalid length. [ 205.875784][T10339] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2173'. [ 206.145252][T10351] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.2177'. [ 206.178091][ T6335] usb 12-1: device descriptor read/8, error -110 [ 206.290069][ T6335] usb 12-1: new SuperSpeed USB device number 3 using vhci_hcd [ 206.343001][T10347] veth11: entered promiscuous mode [ 206.596695][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.608104][T10367] syzkaller0: entered promiscuous mode [ 206.613654][T10367] syzkaller0: entered allmulticast mode [ 206.619597][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.404119][T10390] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 207.443696][T10390] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 207.492876][T10390] macvlan3: entered promiscuous mode [ 207.516103][T10390] macvlan3: entered allmulticast mode [ 207.546117][T10390] bond5: entered promiscuous mode [ 207.569840][T10390] bridge3: entered promiscuous mode [ 207.573465][T10385] loop5: detected capacity change from 0 to 256 [ 207.594234][T10390] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 207.626836][T10390] bond5: left promiscuous mode [ 207.632565][T10390] bridge3: left promiscuous mode [ 207.838771][T10402] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.849361][T10402] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.286492][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 208.286510][ T28] audit: type=1400 audit(1781334055.133:3083): avc: denied { execute } for pid=10405 comm="syz.4.2198" path="/477/file0" dev="tmpfs" ino=2482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.315872][T10407] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 208.339750][T10407] ref_ctr increment failed for inode: 0x9b2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810515af40 [ 208.355116][T10402] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.379680][T10413] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 208.393839][T10402] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.395142][T10413] ref_ctr decrement failed for inode: 0x9b2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810515af40 [ 208.417223][T10413] uprobe: syz.4.2198:10413 failed to unregister, leaking uprobe [ 208.470820][T10402] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.480873][T10402] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.735298][T10402] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.694686][T10402] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.770921][ T28] audit: type=1400 audit(1781334057.625:3085): avc: denied { setopt } for pid=10420 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.856717][ T28] audit: type=1400 audit(1781334057.605:3084): avc: denied { mount } for pid=10384 comm="syz.5.2189" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 210.879554][ T28] audit: type=1400 audit(1781334057.715:3086): avc: denied { unmount } for pid=5204 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 211.020995][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 211.914634][ T4216] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.135370][ T4216] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.145973][ T4216] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.154366][ T4216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.163290][ T4216] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.179132][ T4216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.190310][ T4216] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.212380][ T4216] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.496528][T10449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2211'. [ 212.526861][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2211'. [ 212.794020][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 212.808581][T10455] : port 1(ip6gretap0) entered blocking state [ 212.810647][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 212.834666][T10455] : port 1(ip6gretap0) entered disabled state [ 212.854840][T10455] ip6gretap0: entered allmulticast mode [ 212.869183][T10455] ip6gretap0: entered promiscuous mode [ 212.888131][T10456] ip6gretap0: left allmulticast mode [ 212.900790][T10456] ip6gretap0: left promiscuous mode [ 212.914484][T10456] : port 1(ip6gretap0) entered disabled state [ 212.966033][ T28] audit: type=1400 audit(1781334059.825:3087): avc: denied { read } for pid=10458 comm="syz.0.2215" dev="nsfs" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 213.018819][ T28] audit: type=1400 audit(1781334059.825:3088): avc: denied { open } for pid=10458 comm="syz.0.2215" path="net:[4026532622]" dev="nsfs" ino=4026532622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 213.068948][T10463] loop5: detected capacity change from 0 to 512 [ 213.077913][ T28] audit: type=1400 audit(1781334059.945:3089): avc: denied { create } for pid=10458 comm="syz.0.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.087790][T10463] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 213.231321][ T28] audit: type=1400 audit(1781334060.096:3090): avc: denied { append } for pid=10469 comm="syz.0.2219" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.260024][T10463] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 213.327156][ T28] audit: type=1400 audit(1781334060.096:3091): avc: denied { open } for pid=10469 comm="syz.0.2219" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.400804][ T28] audit: type=1400 audit(1781334060.136:3092): avc: denied { getopt } for pid=10469 comm="syz.0.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.435352][ T28] audit: type=1400 audit(1781334060.146:3093): avc: denied { ioctl } for pid=10469 comm="syz.0.2219" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.478903][ T28] audit: type=1400 audit(1781334060.187:3094): avc: denied { read } for pid=10474 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.547446][ T28] audit: type=1400 audit(1781334060.197:3095): avc: denied { read } for pid=10462 comm="syz.5.2216" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.564344][T10488] loop0: detected capacity change from 0 to 512 [ 213.598381][ T28] audit: type=1400 audit(1781334060.197:3096): avc: denied { open } for pid=10462 comm="syz.5.2216" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.630355][T10488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.651778][T10488] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.2225: lblock 0 mapped to illegal pblock 3 (length 1) [ 213.676763][ T28] audit: type=1400 audit(1781334060.418:3097): avc: denied { create } for pid=10486 comm="syz.1.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.708812][T10488] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2225: error -117 reading directory block [ 213.721840][T10493] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.2225: lblock 0 mapped to illegal pblock 3 (length 1) [ 213.738397][T10493] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.2225: error -117 reading directory block [ 213.792305][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.954936][T10497] : port 1(ip6gretap0) entered blocking state [ 213.974703][T10497] : port 1(ip6gretap0) entered disabled state [ 213.985296][T10497] ip6gretap0: entered allmulticast mode [ 214.008190][T10497] ip6gretap0: entered promiscuous mode [ 214.053256][T10501] ip6gretap0: left allmulticast mode [ 214.058709][T10501] ip6gretap0: left promiscuous mode [ 214.065400][T10501] : port 1(ip6gretap0) entered disabled state [ 214.213626][T10505] loop0: detected capacity change from 0 to 4096 [ 214.223903][T10505] EXT4-fs: inline encryption not supported [ 214.270310][T10505] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 214.291875][T10505] System zones: 0-5 [ 214.311329][T10505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.335938][ T28] audit: type=1400 audit(1781334061.211:3098): avc: denied { write } for pid=10504 comm="syz.0.2231" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.443958][ T28] audit: type=1400 audit(1781334061.211:3099): avc: denied { add_name } for pid=10504 comm="syz.0.2231" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.515219][ T28] audit: type=1400 audit(1781334061.211:3100): avc: denied { create } for pid=10504 comm="syz.0.2231" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.869668][T10513] loop5: detected capacity change from 0 to 512 [ 214.894786][T10513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.938309][T10513] EXT4-fs (loop5): 1 orphan inode deleted [ 214.950116][T10513] EXT4-fs (loop5): 1 truncate cleaned up [ 214.995831][T10513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.020796][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'. [ 215.049856][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.078059][T10516] bond7: entered promiscuous mode [ 215.088410][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.116818][T10516] bond7: entered allmulticast mode [ 215.129769][T10522] loop0: detected capacity change from 0 to 512 [ 215.139614][T10516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.174222][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 215.204718][T10522] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 215.226558][T10520] erspan1: entered allmulticast mode [ 215.232130][T10522] EXT4-fs (loop0): orphan cleanup on readonly fs [ 215.245729][T10522] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 215.272128][T10520] erspan1: entered promiscuous mode [ 215.280634][T10522] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 215.293800][T10522] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2234: bg 0: block 64: padding at end of block bitmap is not set [ 215.310615][T10520] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 215.325399][T10522] loop0: lost filesystem error report for type 5 error -117 [ 215.325559][T10522] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 215.341682][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 215.341716][ C0] EXT4-fs (loop0): initial error at time 1781334062: ext4_validate_block_bitmap:441 [ 215.341760][ C0] EXT4-fs (loop0): last error at time 1781334062: ext4_validate_block_bitmap:441 [ 215.374682][T10525] netlink: 'syz.5.2236': attribute type 41 has an invalid length. [ 215.396895][T10524] bond7 (unregistering): (slave erspan1): Releasing backup interface [ 215.438328][T10522] loop0: lost filesystem error report for type 5 error -117 [ 215.438827][T10522] EXT4-fs (loop0): 1 truncate cleaned up [ 215.452580][T10524] erspan1: left promiscuous mode [ 215.461851][T10524] bond7 (unregistering): Released all slaves [ 215.483079][T10522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.507990][T10522] xt_connbytes: Forcing CT accounting to be enabled [ 215.549141][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.599350][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2239'. [ 215.644430][T10536] loop0: detected capacity change from 0 to 512 [ 215.685597][T10532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10532 comm=syz.4.2239 [ 215.734687][T10536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2240: bg 0: block 169: padding at end of block bitmap is not set [ 215.767567][T10540] veth13: entered allmulticast mode [ 215.768921][T10536] loop0: lost filesystem error report for type 5 error -117 [ 215.774739][T10540] bond7: (slave veth13): Enslaving as an active interface with an up link [ 215.791235][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 215.797697][ C1] EXT4-fs (loop0): initial error at time 1781334062: ext4_validate_block_bitmap:441 [ 215.807121][ C1] EXT4-fs (loop0): last error at time 1781334062: ext4_validate_block_bitmap:441 [ 215.816636][T10536] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2240: Failed to acquire dquot type 0 [ 215.838700][T10536] loop0: lost filesystem error report for type 5 error -117 [ 215.839303][T10536] EXT4-fs (loop0): 1 truncate cleaned up [ 215.862878][T10536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.906207][T10542] loop1: detected capacity change from 0 to 512 [ 215.914217][T10536] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.938688][T10542] EXT4-fs: dax option not supported [ 216.148372][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.626063][T10569] veth1_to_bond: invalid flags given to default FDB implementation [ 218.964954][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 218.964970][ T28] audit: type=1400 audit(1781334065.861:3119): avc: denied { read } for pid=10595 comm="syz.5.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.803503][ T28] audit: type=1400 audit(1781334066.695:3120): avc: denied { create } for pid=10614 comm="syz.4.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.193459][ T28] audit: type=1400 audit(1781334067.076:3121): avc: denied { write } for pid=10623 comm="syz.1.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.458429][T10652] loop5: detected capacity change from 0 to 512 [ 221.786596][ T6335] usb 12-1: device descriptor read/8, error -110 [ 221.818771][T10652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.895712][ T6335] usb usb12-port1: attempt power cycle [ 221.996412][T10652] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.028416][ T6335] usb 12-1: SetAddress Request (4) to port 0 [ 222.035964][ T6335] usb 12-1: new SuperSpeed USB device number 4 using vhci_hcd [ 222.611101][ T28] audit: type=1400 audit(1781334069.516:3122): avc: denied { connect } for pid=10662 comm="syz.0.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.652683][ T28] audit: type=1400 audit(1781334069.516:3123): avc: denied { name_connect } for pid=10662 comm="syz.0.2277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 223.542586][T10669] loop1: detected capacity change from 0 to 512 [ 223.552142][T10669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.561559][ T5204] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.582623][T10669] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2280: bad orphan inode 131083 [ 223.616007][T10669] loop1: lost filesystem error report for type 5 error -117 [ 223.617379][T10669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.637267][ T28] audit: type=1400 audit(1781334070.540:3124): avc: denied { getopt } for pid=10674 comm="syz.2.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.792573][ T28] audit: type=1400 audit(1781334070.601:3125): avc: denied { write } for pid=10668 comm="syz.1.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.831546][ T28] audit: type=1400 audit(1781334070.731:3126): avc: denied { nlmsg_write } for pid=10668 comm="syz.1.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.000674][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.042381][T10688] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2286'. [ 224.079017][T10690] 9p: Bad value for 'rfdno' [ 224.109846][ T28] audit: type=1400 audit(1781334071.032:3127): avc: denied { create } for pid=10691 comm="syz.4.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.156819][ T28] audit: type=1400 audit(1781334071.052:3128): avc: denied { bind } for pid=10691 comm="syz.4.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.281014][ T28] audit: type=1400 audit(1781334071.052:3129): avc: denied { name_bind } for pid=10691 comm="syz.4.2288" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 224.302936][ T28] audit: type=1400 audit(1781334071.052:3130): avc: denied { node_bind } for pid=10691 comm="syz.4.2288" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 224.324791][ T28] audit: type=1400 audit(1781334071.062:3131): avc: denied { write } for pid=10691 comm="syz.4.2288" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.346583][ T28] audit: type=1400 audit(1781334071.062:3132): avc: denied { name_connect } for pid=10691 comm="syz.4.2288" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 224.427759][T10704] Cannot find set identified by id 0 to match [ 225.090654][ T28] audit: type=1400 audit(1781334072.006:3133): avc: denied { execute_no_trans } for pid=10707 comm="syz.4.2293" path="/497/file0" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.132071][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2295'. [ 225.166803][T10712] bond4: entered promiscuous mode [ 225.193273][T10712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.237499][ T28] audit: type=1400 audit(1781334072.157:3134): avc: denied { ioctl } for pid=10711 comm="syz.1.2295" path="socket:[28660]" dev="sockfs" ino=28660 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.455048][ T28] audit: type=1400 audit(1781334072.367:3135): avc: denied { read } for pid=10720 comm="syz.2.2298" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.539818][ T28] audit: type=1400 audit(1781334072.407:3136): avc: denied { open } for pid=10720 comm="syz.2.2298" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.237010][T10719] batman_adv: batadv0: Adding interface: macvtap1 [ 226.247352][T10719] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 226.273816][T10719] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 226.285724][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 226.534518][T10750] loop2: detected capacity change from 0 to 128 [ 226.615791][T10750] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.641483][T10750] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.661999][T10750] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.161428][ T6335] usb 12-1: device descriptor read/8, error -110 [ 227.547761][ T6335] usb 12-1: new SuperSpeed USB device number 4 using vhci_hcd [ 229.050052][T10801] loop2: detected capacity change from 0 to 4096 [ 229.091507][T10801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.309697][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.456929][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 229.456946][ T28] audit: type=1400 audit(1781334076.392:3145): avc: denied { name_connect } for pid=10812 comm="syz.2.2327" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 229.547931][ T28] audit: type=1400 audit(1781334076.492:3146): avc: denied { connect } for pid=10818 comm="syz.4.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.616082][ T28] audit: type=1400 audit(1781334076.512:3147): avc: denied { bind } for pid=10818 comm="syz.4.2330" lport=20438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 229.681188][ T28] audit: type=1400 audit(1781334076.512:3148): avc: denied { name_bind } for pid=10818 comm="syz.4.2330" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 229.725850][ T28] audit: type=1400 audit(1781334076.512:3149): avc: denied { node_bind } for pid=10818 comm="syz.4.2330" saddr=10.1.1.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 229.779939][ T28] audit: type=1400 audit(1781334076.623:3150): avc: denied { listen } for pid=10822 comm="syz.5.2331" lport=36978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.834525][ T28] audit: type=1400 audit(1781334076.683:3151): avc: denied { accept } for pid=10822 comm="syz.5.2331" lport=36978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.981178][ T28] audit: type=1400 audit(1781334076.904:3152): avc: denied { name_bind } for pid=10829 comm="syz.4.2335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 230.697737][T10831] loop0: detected capacity change from 0 to 512 [ 230.812697][T10843] lo speed is unknown, defaulting to 1000 [ 230.818477][ T28] audit: type=1400 audit(1781334077.757:3153): avc: denied { write } for pid=10842 comm="syz.5.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.839855][T10843] lo speed is unknown, defaulting to 1000 [ 230.846097][T10843] lo speed is unknown, defaulting to 1000 [ 230.893416][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.899994][ T28] audit: type=1400 audit(1781334077.837:3154): avc: denied { read write } for pid=10842 comm="syz.5.2337" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 230.920484][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.965923][T10831] EXT4-fs: Ignoring removed bh option [ 230.989038][T10846] smc: removing ib device syz1 [ 230.999851][T10843] infiniband sz1: set active [ 231.004782][ T3406] lo speed is unknown, defaulting to 1000 [ 231.022405][T10843] infiniband sz1: added lo [ 231.111192][T10843] RDS/IB: sz1: added [ 231.130772][T10843] smc: adding ib device sz1 with port count 1 [ 231.140086][T10831] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 231.154857][T10843] smc: ib device sz1 port 1 has no pnetid [ 231.180359][ T3415] lo speed is unknown, defaulting to 1000 [ 231.193485][T10843] lo speed is unknown, defaulting to 1000 [ 231.302432][T10831] EXT4-fs (loop0): 1 truncate cleaned up [ 231.528882][T10843] lo speed is unknown, defaulting to 1000 [ 231.729007][T10831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.819278][T10843] lo speed is unknown, defaulting to 1000 [ 231.897352][T10876] loop2: detected capacity change from 0 to 512 [ 231.932596][T10876] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 231.945584][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.005939][T10843] lo speed is unknown, defaulting to 1000 [ 232.117192][T10843] lo speed is unknown, defaulting to 1000 [ 232.136613][T10883] loop0: detected capacity change from 0 to 4096 [ 232.166840][T10883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.317159][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.938359][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'. [ 233.205764][T10902] loop2: detected capacity change from 0 to 512 [ 233.228828][T10902] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.295701][T10902] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2358: bad orphan inode 131083 [ 233.489590][T10902] loop2: lost filesystem error report for type 5 error -117 [ 233.490257][T10902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.971097][T10897] : port 1(ip6gretap0) entered blocking state [ 233.978616][T10897] : port 1(ip6gretap0) entered disabled state [ 233.985805][T10897] ip6gretap0: entered allmulticast mode [ 233.992226][T10897] ip6gretap0: entered promiscuous mode [ 234.009525][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.034101][T10900] ip6gretap0: left allmulticast mode [ 234.058151][T10900] ip6gretap0: left promiscuous mode [ 234.070817][T10900] : port 1(ip6gretap0) entered disabled state [ 234.225270][T10917] loop0: detected capacity change from 0 to 512 [ 234.250313][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2363'. [ 234.292593][T10917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.322135][T10917] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.454574][T10928] loop1: detected capacity change from 0 to 2048 [ 234.564947][T10928] GPT:first_usable_lbas don't match. [ 234.587020][T10928] GPT:34 != 290 [ 234.601266][T10928] GPT: Use GNU Parted to correct GPT errors. [ 234.621055][T10928] loop1: p1 p2 p3 [ 234.632040][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 234.780578][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 234.811781][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 234.828612][T10928] tipc: Enabled bearer , priority 10 [ 234.935646][T10942] lo speed is unknown, defaulting to 1000 [ 235.475241][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 235.475258][ T28] audit: type=1400 audit(1781334082.433:3173): avc: denied { read } for pid=10948 comm="syz.5.2372" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.550073][ T28] audit: type=1400 audit(1781334082.433:3174): avc: denied { open } for pid=10948 comm="syz.5.2372" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.574275][ T28] audit: type=1400 audit(1781334082.483:3175): avc: denied { ioctl } for pid=10948 comm="syz.5.2372" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.856442][ T28] audit: type=1326 audit(1781334082.824:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.2374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3973ece59 code=0x7ffc0000 [ 235.904945][ T28] audit: type=1326 audit(1781334082.824:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.2374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3973ece59 code=0x7ffc0000 [ 235.957349][ T28] audit: type=1326 audit(1781334082.824:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.2374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3973ece59 code=0x7ffc0000 [ 236.024363][ T28] audit: type=1326 audit(1781334082.824:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.2374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3973ece59 code=0x7ffc0000 [ 236.087946][ T28] audit: type=1326 audit(1781334082.824:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.0.2374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb3973ece59 code=0x7ffc0000 [ 236.174273][ T28] audit: type=1400 audit(1781334082.824:3181): avc: denied { write } for pid=10954 comm="syz.0.2374" path="socket:[31090]" dev="sockfs" ino=31090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.274284][ T28] audit: type=1400 audit(1781334082.824:3182): avc: denied { read } for pid=10954 comm="syz.0.2374" path="socket:[31090]" dev="sockfs" ino=31090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.366986][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2377'. [ 237.283080][T10967] Set syz1 is full, maxelem 65536 reached [ 237.777831][T10975] loop2: detected capacity change from 0 to 512 [ 238.027510][T10975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.247333][T10975] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.328317][T10975] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 238.410085][T10975] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 238.453862][T10975] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2381: bad orphan inode 768 [ 238.499382][T10975] loop2: lost filesystem error report for type 5 error -117 [ 238.507893][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 238.527819][ C1] EXT4-fs (loop2): initial error at time 1781334085: ext4_orphan_get:1423 [ 238.538120][ C1] EXT4-fs (loop2): last error at time 1781334085: ext4_orphan_get:1423 [ 238.650903][T10975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.691209][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 238.736680][T10992] bond6: entered promiscuous mode [ 238.754696][T10992] bond6: entered allmulticast mode [ 239.153791][T10998] loop5: detected capacity change from 0 to 128 [ 239.175873][T10998] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.247599][T10998] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.279829][T11000] syzkaller0: entered promiscuous mode [ 239.306111][ T39] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.306160][T11000] syzkaller0: entered allmulticast mode [ 239.323411][T10998] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.240333][T11035] loop1: detected capacity change from 0 to 128 [ 241.375572][T11035] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.420488][T11035] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.491628][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 241.491645][ T28] audit: type=1400 audit(1781334088.461:3229): avc: denied { write } for pid=11034 comm="syz.1.2402" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.522794][ T28] audit: type=1400 audit(1781334088.501:3230): avc: denied { create } for pid=11034 comm="syz.1.2402" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 241.575423][ T28] audit: type=1400 audit(1781334088.551:3231): avc: denied { write } for pid=11034 comm="syz.1.2402" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.617511][ T28] audit: type=1400 audit(1781334088.551:3232): avc: denied { create } for pid=11034 comm="syz.1.2402" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.710944][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.713599][T11040] lo speed is unknown, defaulting to 1000 [ 241.731970][ T28] audit: type=1400 audit(1781334088.642:3233): avc: denied { write } for pid=11034 comm="syz.1.2402" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.765237][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.897361][ T28] audit: type=1400 audit(1781334088.812:3234): avc: denied { create } for pid=11052 comm="syz.2.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.991872][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'. [ 242.087166][T11058] vlan3: entered promiscuous mode [ 242.103405][T11058] geneve1: entered promiscuous mode [ 242.108907][T11058] vlan3: entered allmulticast mode [ 242.114188][T11058] geneve1: entered allmulticast mode [ 242.137372][T11046] loop0: detected capacity change from 0 to 4096 [ 242.148850][T11046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.168659][ T28] audit: type=1400 audit(1781334089.143:3235): avc: denied { write } for pid=11042 comm="syz.0.2406" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.338528][T11046] ================================================================== [ 242.346660][T11046] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 242.354058][T11046] [ 242.356393][T11046] read-write to 0xffff88811adc2230 of 8 bytes by task 4238 on cpu 0: [ 242.364457][T11046] __xa_clear_mark+0xf5/0x1e0 [ 242.369149][T11046] __folio_end_writeback+0xf4/0x360 [ 242.374356][T11046] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 242.380611][T11046] folio_end_writeback+0x1c/0x70 [ 242.385561][T11046] ext4_finish_bio+0x454/0x770 [ 242.390342][T11046] ext4_release_io_end+0x9f/0x1f0 [ 242.395378][T11046] ext4_end_io_end+0x18d/0x240 [ 242.400155][T11046] ext4_end_io_rsv_work+0x15b/0x1f0 [ 242.405363][T11046] process_scheduled_works+0x4d4/0x9a0 [ 242.410847][T11046] worker_thread+0x569/0x750 [ 242.415460][T11046] kthread+0x221/0x270 [ 242.419530][T11046] ret_from_fork+0x146/0x330 [ 242.424131][T11046] ret_from_fork_asm+0x1a/0x30 [ 242.428912][T11046] [ 242.431238][T11046] read to 0xffff88811adc2230 of 8 bytes by task 11046 on cpu 1: [ 242.438865][T11046] xas_find_marked+0x211/0x650 [ 242.443639][T11046] filemap_get_folios_tag+0xf7/0x400 [ 242.448935][T11046] file_write_and_wait_range+0x20c/0x2f0 [ 242.454582][T11046] mmb_fsync_noflush+0x48/0x140 [ 242.459434][T11046] ext4_sync_file+0x1f2/0x6d0 [ 242.464114][T11046] vfs_fsync_range+0xc5/0xe0 [ 242.468711][T11046] ext4_buffered_write_iter+0x426/0x4a0 [ 242.474271][T11046] ext4_file_write_iter+0xb1f/0xef0 [ 242.479480][T11046] do_iter_readv_writev+0x4f6/0x5a0 [ 242.484691][T11046] vfs_writev+0x2d1/0x8d0 [ 242.489020][T11046] __se_sys_pwritev2+0xfc/0x1c0 [ 242.493880][T11046] __x64_sys_pwritev2+0x67/0x80 [ 242.498741][T11046] x64_sys_call+0xe07/0x3020 [ 242.503343][T11046] do_syscall_64+0x136/0x3c0 [ 242.507940][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.513844][T11046] [ 242.516171][T11046] value changed: 0xffffffffffffffff -> 0xffffffffffffffe0 [ 242.523295][T11046] [ 242.525623][T11046] Reported by Kernel Concurrency Sanitizer on: [ 242.531783][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.0.2406 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 242.542727][T11046] Tainted: [W]=WARN [ 242.546536][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.556601][T11046] ================================================================== [ 242.710940][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.312630][ T6335] usb 12-1: device descriptor read/8, error -110 [ 243.552093][ T6335] usb 12-1: SetAddress Request (5) to port 0 [ 243.558152][ T6335] usb 12-1: new SuperSpeed USB device number 5 using vhci_hcd [ 248.588130][ T6335] usb 12-1: device descriptor read/8, error -110 [ 248.697908][ T6335] usb 12-1: new SuperSpeed USB device number 5 using vhci_hcd