last executing test programs: 2.12245044s ago: executing program 2 (id=374): bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 2.102630411s ago: executing program 4 (id=375): r0 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_setup(0x58, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x250, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200018100000000000000000a"], 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.942310519s ago: executing program 2 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x2}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 1.477888651s ago: executing program 4 (id=379): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x48}}, 0x0) 1.332325327s ago: executing program 0 (id=380): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@errors_continue}, {@nolazytime}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000240)={0xc859, 0x7, 0x6, 0x0, 0x8, 0x71a, 0x9, 0xffffffffffffffff, 0x3711, 0x100000001, 0x8, 0x398, 0x580ef166, 0x3, 0x0, 0x81, 0x1, 0x8, 0x9, 0x8, 0x1, 0x5, 0x0, 0x94dc, 0xc411, 0xffffffffffff4684}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) 1.27243264s ago: executing program 1 (id=381): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x6600, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="f236e7180000000300000000000000000016f4d6000095004662e6f1622a8a"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0}, 0x10) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0xa000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, 0x0, 0x0) 1.252168771s ago: executing program 4 (id=382): r0 = socket(0x1, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000002c0)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0xfe, 0x122d, &(0x7f0000001280)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800"], 0xb8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$devlink(0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8843549f67b43e60377ada897faffb06"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "43f49db8204cff84232ee50dcbc0cf07"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x804) pipe(&(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 1.149311506s ago: executing program 1 (id=383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.07937715s ago: executing program 2 (id=385): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000000000000100000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x26, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x1b, 0x0, @thr={&(0x7f0000000000)="cd21f616d18a6a9e2b75f502e4b5872a6ee917c82dc9705c0363c37c04d0cc930b24504615bc047bb2fd683cf93645437cda13", &(0x7f0000000040)="335e1541af86edf287e976e7d51bf12f3f7a2c938d102a28fc7fa5ef85ab"}}, &(0x7f00000000c0)) 1.045656641s ago: executing program 1 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000340)={{[0x7f, 0x1, 0x0, 0x10001]}, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000080)=[{{@align=0x2000400000, {0xfff, 0x1a, 0x4, 0x259}}, 0x1, 0x0, 'syzkaller\x00'}, {{@align=0x2, {0x7ff, 0xd00d, 0xb7, 0x9}}, 0x0, 0x0, 'syzkaller\x00'}]}) listen(r2, 0x2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "3b4c387a56d4a6f7841fdec35e9cf17e"}) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x2a) 1.007036723s ago: executing program 4 (id=387): bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 1.006073383s ago: executing program 0 (id=388): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) lseek(r0, 0x9, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x67, 0x2], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000003, 0x0, 0x5, 0x8000000000000001, 0x9, 0x10000, 0xfffffffffffffffd, 0x1, 0x0, 0xffffbffffffffff4, 0x8e3f, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x94, 0x1, 0x800000000002a9, 0x19, 0xfffffffffffffffa, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0xa, 0x7, 0x7, 0xfffffffffffffffa, 0x80, 0x100, 0x80, 0xfffffffffffffffb, 0x101, 0x3, 0x0, 0x9, 0xffff7ffffffffffa, 0x8000001, 0x3, 0x8, 0x1, 0x5d, 0x4, 0xfffffffffffffff7, 0x538a, 0x8001, 0xda, 0x4, 0x14, 0xdd, 0x5, 0xce67, 0x4, 0x128, 0x6, 0x40000001fffff, 0x1671, 0x5bc, 0x10, 0xffffffffffefffff, 0x4, 0x8000, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x10000000001000, 0xffffffff, 0xe9, 0x800000000000002, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x4, 0xffffffff00000001, 0x6144, 0x8, 0x200000000000000, 0x6, 0x1ff, 0x7, 0x7c54, 0x4, 0x4, 0x7, 0xb, 0x1000ffff, 0x7, 0x1, 0x16d, 0xfffffffffffffffe, 0x8, 0xffffffffffff43b0, 0x8, 0x0, 0x12, 0x8000000000000, 0xaa4, 0x3, 0x0, 0xb, 0x3ff, 0x0, 0x8000000000c, 0x6, 0x0, 0x100000000003, 0x42, 0x80000004, 0x7, 0xe, 0x1]}) write$char_usb(r2, &(0x7f0000000040), 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) lchown(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0xa1, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 928.407646ms ago: executing program 4 (id=390): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 927.658786ms ago: executing program 2 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x401, 0x6, 0x0, 0x5}, 0x7, 0x40}, [{0x9, 0xa, 0x6, 0x0, 0x6, 0x7}, {0x4, 0x200, 0x10, 0x0, 0x80000000, 0x6}, {0x7, 0x1, 0x7, 0x0, 0xf32, 0x800}, {0x4, 0xf, 0x2, 0x10, 0x4, 0x6}, {0x40, 0x7f, 0x80000000, 0x8, 0x4, 0x7}, {0x5, 0x80000001, 0x10000, 0xf, 0xea, 0x10000}, {0x7, 0x59, 0x3, 0x7fffffff, 0x401, 0xc}, {0x2, 0x1, 0xeb7, 0x2, 0x7, 0x4}, {0xc81, 0xb, 0xfffeffff, 0x7fff, 0x6, 0x5}, {0x1, 0x10, 0x5, 0x18, 0x0, 0x1}, {0xb2, 0x3, 0x1, 0x1, 0x10000, 0x400}, {0x3, 0xffffffc0, 0x4, 0x6, 0x7, 0xb4000000}, {0x800, 0xff, 0xffffff81, 0x10000, 0x7, 0x2}, {0xa7b4, 0x1, 0x8, 0x1, 0x2, 0x8}, {0x80000000, 0x1ff, 0x8, 0x0, 0x2, 0x8ef}, {0x5, 0x3, 0x8, 0xa, 0x1, 0x10}, {0x400, 0x1, 0x1, 0x4, 0xc, 0x1}, {0x0, 0x5, 0x7fffffff, 0x9, 0x5d55, 0x6}, {0xc3, 0x9, 0x5, 0x6, 0x1000, 0x3a}, {0x8000, 0x5, 0x24, 0x9, 0x2, 0x80000001}, {0x6, 0x8d12, 0x5, 0x3, 0x40, 0x1}, {0x5, 0x9, 0x2b17, 0x4, 0xf2, 0x38ae6c5e}, {0x5, 0xffffd1c8, 0x3, 0x0, 0x6, 0x6}, {0xfff, 0xc, 0x1, 0xf1, 0xf1da, 0x7}, {0x200, 0x6, 0x5, 0xb6, 0x5}, {0x80000001, 0xff, 0x2, 0x0, 0x4, 0x9}, {0x0, 0x1484, 0x9, 0x80, 0x80000000, 0x1}, {0x0, 0x9, 0x7, 0x1, 0x89a, 0xce}, {0x0, 0x81, 0x2, 0x5, 0x2, 0x4}, {0x8000, 0xff, 0x3, 0x9, 0x9, 0x9}, {0x401, 0x7, 0x7, 0x5, 0x5, 0x5}, {0x200, 0x7fffffff, 0x8f1b, 0x80000001, 0xbf3, 0xb4f}, {0x3, 0x9, 0x10, 0x6, 0x5, 0x3}, {0x400, 0xfb, 0x1, 0x1, 0x262, 0x473}, {0x5, 0x9, 0x1, 0x10, 0x3, 0x3}, {0x1, 0x6, 0xd432, 0x4, 0x7, 0xd}, {0xfffffffa, 0x5, 0x8, 0x9, 0x2, 0x3}, {0x3, 0x101, 0x3, 0x3, 0x5}, {0xd, 0x81, 0x7ff, 0x5, 0x9, 0x2}, {0x9, 0x5, 0x2, 0x0, 0x5, 0x8c}, {0x5, 0x3, 0xc0000000, 0x4, 0x8, 0x9b18}, {0x2, 0x8, 0xffffffff, 0x8, 0x39b2b5f9, 0x8}, {0xc, 0x0, 0x2, 0xb, 0x9, 0x1}, {0x1, 0x6959, 0x13e, 0x5, 0x2, 0xffffff80}, {0x2, 0x5, 0x5, 0x5, 0x80, 0x8}, {0x1ff, 0x7, 0xd2bc, 0x8000, 0x4, 0x1}, {0xffffffff, 0x1ff, 0x3, 0x0, 0x1, 0x6}, {0xd59, 0x0, 0x81, 0x10001, 0x9, 0x9}, {0x8, 0xc6, 0x1, 0x10, 0x5e08}, {0x9, 0x1e000, 0xffffffff, 0x4800000, 0x0, 0x28}, {0x4, 0x3, 0x64f, 0x4, 0xf}, {0x6, 0x1300, 0x9, 0x4, 0x0, 0x400}, {0x1, 0x0, 0x6, 0x0, 0x5, 0x4}, {0x6, 0x2, 0x4, 0x8, 0xba000000, 0x401}, {0xfffff1b8, 0x3, 0x0, 0x1, 0x6, 0x8}, {0x9c8, 0xfb, 0x10001, 0x7, 0xd, 0xfffffff9}, {0x1000, 0xe, 0xffffe3e9, 0xff, 0xffffffff, 0x771}, {0xd, 0x2, 0x7, 0x1, 0x7fff, 0xd0c}, {0x3, 0x7308, 0x27, 0xa, 0x2, 0xffffff81}, {0x3, 0xabe5, 0x0, 0xf, 0x1, 0xd}, {0x0, 0xb, 0x7, 0x81d8, 0x10, 0x1}, {0x80000000, 0x4, 0xdb, 0x1, 0x7, 0x4}, {0x3, 0x0, 0x9, 0x7, 0x7, 0xa}, {0x8, 0x1, 0x3c, 0x6, 0x3, 0x3}, {0x4, 0xfffffffb, 0x1, 0x4, 0x9}, {0x7, 0x401, 0x1, 0x3, 0x1}, {0xf2e, 0xf4, 0x2, 0x0, 0x10001, 0x8}, {0x9, 0x3, 0x8001, 0x3, 0x4, 0x907d}, {0x10, 0xffffffff, 0x6, 0x9, 0x42, 0xfd6d}, {0x923f, 0x1, 0x8000, 0x4, 0x709, 0x5}, {0x6, 0x8000, 0x9, 0x7fff, 0x6, 0xc63}, {0x5, 0xc4, 0xffffffff, 0x52c, 0x80000000, 0x1}, {0x40, 0x2, 0x47, 0x8, 0xf, 0x90c}, {0x6, 0xef55, 0x88, 0x2, 0x3, 0x2}, {0x1, 0x4, 0x800, 0x5, 0x5, 0x4}, {0x1, 0x8, 0x3ff, 0x1ff, 0xa, 0x4}, {0x5, 0x8, 0xffffa548, 0x7, 0x6, 0x3}, {0x6, 0x40, 0x7, 0x4, 0x0, 0x78}, {0x4, 0x5, 0xff, 0x8, 0x9, 0x1}, {0x8, 0xfffffbff, 0x3, 0x9, 0x8, 0x6}, {0x9, 0x7, 0x9033, 0x1, 0x9, 0x9}, {0xd8fd92f, 0x3, 0x80000001, 0x3, 0x2, 0xc}, {0x3, 0x44, 0x5, 0x53, 0x8, 0x7}, {0x9, 0x59, 0x1, 0xca3b, 0x0, 0xffffffff}, {0x12, 0x9, 0xe, 0x4, 0x9, 0x101}, {0x8, 0x0, 0x3, 0x10008d, 0xe, 0xffffffff}, {0xffffffff, 0x68e2a0bf, 0x4, 0x10000, 0x1, 0x40}, {0x50d, 0x2, 0x0, 0x3, 0x0, 0x8000}, {0x80000, 0x3, 0x8, 0x8, 0x9}, {0x3, 0x4, 0xfffffffa, 0xffff0000, 0x5, 0x7}, {0x1ff, 0x8d, 0x101, 0x7, 0x9e64, 0x5}, {0x7, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x81, 0xa0000, 0x5, 0xfffffffa, 0x1}, {0xbb, 0x164, 0x2, 0xe7, 0x2, 0x7ff}, {0x400, 0x3, 0x7774, 0x2, 0x9, 0x5d}, {0x9, 0x5, 0x4, 0x1, 0xa700, 0x2}, {0x0, 0x7, 0x7fffffff, 0x1, 0x3, 0x5}, {0x4, 0x8, 0x10, 0x100, 0x81, 0x8}, {0x8, 0xfffff434, 0x4, 0x100, 0x7, 0x1}, {0x6, 0x2, 0x0, 0x0, 0x5, 0x4}, {0x63, 0x100003ff, 0x4, 0x8000, 0x0, 0x1}, {0x6, 0x9, 0x4bda, 0x8, 0x10, 0x3}, {0x10, 0x5, 0x9, 0x0, 0x2, 0x4}, {0xffffffff, 0x2, 0xfffeffff, 0x5, 0x0, 0x8}, {0x5, 0x527, 0x6, 0x63724abb, 0xb5e, 0xfff}, {0x1, 0x9, 0x9, 0x0, 0xc, 0x9}, {0x1, 0x2, 0x1ff, 0x0, 0x9, 0xd0cc}, {0xfffff319, 0x4, 0x10000, 0x6, 0x1, 0x7}, {0x4, 0x800, 0x9, 0x3ff, 0x1, 0x9}, {0xfffffffd, 0x4, 0x1000, 0x7f, 0xffffff57, 0x8}, {0x0, 0x5, 0x8, 0x80000000, 0xe0a, 0xdea}, {0x7ff, 0x8, 0x6, 0x7fffffff, 0x1, 0x7}, {0x0, 0x40000000, 0x3, 0x20000, 0x2, 0x2219ba8a}, {0x400, 0x100, 0x7fffffff, 0x200, 0x0, 0x8}, {0xe, 0x80, 0x7, 0x400, 0x0, 0x4}, {0x0, 0x7fffffff, 0x3d, 0x7, 0x0, 0xff}, {0xd60, 0x6, 0x8, 0xa2dd, 0x0, 0xe4}, {0x5, 0x7, 0x3, 0x9, 0x5, 0xfff}, {0x3, 0x8, 0x5, 0x9, 0x2, 0x8000}, {0x100, 0x8, 0x9, 0x9, 0x7, 0xfffffdb7}, {0xc00000, 0x6, 0x80, 0xcf4, 0x5}, {0x2, 0x8, 0x1, 0x4, 0x0, 0x3}, {0x3, 0x8e, 0x8000, 0xfffffffc, 0xf2b, 0x7}, {0x6, 0xd7d, 0x769, 0x9, 0x1, 0x3}, {0x9, 0xaa4e, 0x938, 0x8, 0xffffff7c, 0x8e90}, {0xaa, 0x400, 0x200, 0x200, 0x7, 0x5}, {0x7, 0x3816c528, 0x4, 0x5, 0xc0000000, 0x6fb1}, {0xffffff01, 0x5, 0x10000, 0x8, 0xfffffffb, 0xff}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0xe422f9593938532}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885) 913.714917ms ago: executing program 3 (id=392): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x80004700) 746.281715ms ago: executing program 2 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x70bd6d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x20046}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_TTL={0x5, 0x8, 0x48}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x200080, &(0x7f0000000640)={[], [{@euid_eq={'euid', 0x3d, r1}}]}, 0x3, 0x577, &(0x7f0000000680)="$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") r2 = semget(0x1, 0x2, 0xd6f04807dac96d17) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000180)=""/252) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f0000000000)='7', 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==") r5 = syz_open_dev$evdev(&(0x7f00000003c0), 0xc, 0x40100) fsetxattr$security_ima(r5, &(0x7f0000000400), &(0x7f0000000440)=@v1={0x2, "2f8a1809df"}, 0x6, 0x3) 746.005975ms ago: executing program 0 (id=394): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 709.432837ms ago: executing program 0 (id=395): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) utimensat(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x0, 0x0) signalfd4(r2, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380), 0x80, 0x54f, &(0x7f0000000480)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_channels={0x28, 0x0, 0x2e, 0x9, 0x0, 0xdbea, 0x4, 0x8, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c000280050005000000000008000400010000000800"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002b80)=""/4082, 0xff2}], 0x1}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8c0}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x6, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 709.080577ms ago: executing program 1 (id=396): socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x1008040, &(0x7f0000000200)={[{@noblock_validity}, {@nojournal_checksum}, {@nodelalloc}, {@grpjquota}, {@journal_ioprio}, {@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1000001}}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5ca, &(0x7f0000000a40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090327bd7000000000001d001d00"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) 708.689097ms ago: executing program 3 (id=397): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000003680)) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003780)) getpid() getgid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_ifreq(0xffffffffffffffff, 0x894a, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20060300) 576.218603ms ago: executing program 3 (id=398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private0, @in=@multicast2, 0x4e21, 0x1, 0x4e22, 0x3, 0xa, 0x80, 0xa0, 0x2b}, {0xa9, 0x2, 0x1, 0x7f, 0x200, 0x0, 0x8, 0xc426}, {0x8001, 0x40, 0x6}, 0x3ff, 0x6e6bb7, 0x0, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x400004d6, 0x6c}, 0x2, @in=@local, 0x0, 0x3, 0x1, 0x8, 0xffffff01, 0x5, 0x101}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000020c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_ADD_DEV(r1, 0x8004b706, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r3, &(0x7f0000009140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x10, 0x168d4fa989313b31, 0xd76}, {0x10, 0x1, 0xba3}], 0x20}}], 0x1, 0x4010) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffd, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') close(r5) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) r7 = fsopen(&(0x7f0000000080)='v7\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='msdos\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 372.512732ms ago: executing program 3 (id=399): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) readahead(0xffffffffffffffff, 0x8, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0}, 0x3cad, 0x4, 0x0, 0x2, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r3, 0x1, 0x28, 0x0, &(0x7f0000000440)) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) fcntl$getownex(r0, 0x10, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @auto=[0x37, 0x66, 0x66, 0x64, 0x35, 0x36, 0x31, 0x58, 0x1, 0x36, 0x65, 0x32, 0x32, 0x64, 0x66, 0x36]}, &(0x7f0000000280)={0x0, "714530b2e67e9ba08fe522a11adf75d880c2897d2b56e9e976fca055913480cee94499fb7f036100e57ef432ee37f6cee7968424324ccade8b137532665996f1", 0x26}, 0x48, r4) keyctl$set_timeout(0xf, r5, 0xfffffffffffff108) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4008157) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 330.429964ms ago: executing program 3 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 322.134005ms ago: executing program 1 (id=401): bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 230.431719ms ago: executing program 1 (id=402): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x12}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) io_uring_setup(0x7e63, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_pwait2(r1, &(0x7f0000000000), 0x1, 0x0, 0x0, 0xfffffffffffffef0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000300)={0xfffffffe, {{0x2, 0x4e24, @loopback}}}, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r2, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 214.40191ms ago: executing program 3 (id=403): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x1, 0x7, 0x0, 0x0, 0x10000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x40000}, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x1a0c8, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRES16], 0x1, 0x273, &(0x7f0000000380)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xa}, {0x9, 0xd}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8041) lstat(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) 63.396927ms ago: executing program 2 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1100, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 45.195528ms ago: executing program 0 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 43.436768ms ago: executing program 4 (id=406): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x6897c, 0x13}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff7}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x9a, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000340)={{[0x7f, 0x1, 0x0, 0x10001]}, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000080)=[{{@align=0x2000400000, {0xfff, 0x1a, 0x4, 0x259}}, 0x1, 0x0, 'syzkaller\x00'}, {{@align=0x2, {0x7ff, 0xd00d, 0xb7, 0x9}}, 0x0, 0x0, 'syzkaller\x00'}]}) listen(r2, 0x2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "3b4c387a56d4a6f7841fdec35e9cf17e"}) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) kernel console output (not intermixed with test programs): } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.082590][ T29] audit: type=1400 audit(1789484843.817:126): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.121197][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.176014][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.391696][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.391802][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.391852][ T3300] bridge_slave_0: entered allmulticast mode [ 31.392307][ T3300] bridge_slave_0: entered promiscuous mode [ 31.425145][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.425171][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.425216][ T3300] bridge_slave_1: entered allmulticast mode [ 31.425714][ T3300] bridge_slave_1: entered promiscuous mode [ 31.455993][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.456086][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.456133][ T3299] bridge_slave_0: entered allmulticast mode [ 31.456563][ T3299] bridge_slave_0: entered promiscuous mode [ 31.478226][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478255][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.478322][ T3306] bridge_slave_0: entered allmulticast mode [ 31.478842][ T3306] bridge_slave_0: entered promiscuous mode [ 31.496728][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.496758][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.496844][ T3306] bridge_slave_1: entered allmulticast mode [ 31.497294][ T3306] bridge_slave_1: entered promiscuous mode [ 31.512010][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.512180][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.512209][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.512257][ T3303] bridge_slave_0: entered allmulticast mode [ 31.512683][ T3303] bridge_slave_0: entered promiscuous mode [ 31.513396][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.513484][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.513544][ T3303] bridge_slave_1: entered allmulticast mode [ 31.514316][ T3303] bridge_slave_1: entered promiscuous mode [ 31.521212][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.521265][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.521301][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.521397][ T3299] bridge_slave_1: entered allmulticast mode [ 31.521777][ T3299] bridge_slave_1: entered promiscuous mode [ 31.536766][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.541865][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.566184][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.567239][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.577778][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.583879][ T3306] team0: Port device team_slave_0 added [ 31.584654][ T3300] team0: Port device team_slave_0 added [ 31.585416][ T3300] team0: Port device team_slave_1 added [ 31.586073][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.590791][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.590821][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.590938][ T3305] bridge_slave_0: entered allmulticast mode [ 31.591360][ T3305] bridge_slave_0: entered promiscuous mode [ 31.602516][ T3306] team0: Port device team_slave_1 added [ 31.607379][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.607418][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.607468][ T3305] bridge_slave_1: entered allmulticast mode [ 31.607937][ T3305] bridge_slave_1: entered promiscuous mode [ 31.618937][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.618949][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.618978][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.619467][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.619478][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.619543][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.634168][ T3299] team0: Port device team_slave_0 added [ 31.634810][ T3303] team0: Port device team_slave_0 added [ 31.645130][ T3303] team0: Port device team_slave_1 added [ 31.650956][ T3299] team0: Port device team_slave_1 added [ 31.651881][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.652941][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.657965][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.657977][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.658034][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.675406][ T3300] hsr_slave_0: entered promiscuous mode [ 31.675747][ T3300] hsr_slave_1: entered promiscuous mode [ 31.681846][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.681858][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.681893][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.701969][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.701981][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.702010][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.702656][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.702668][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.702749][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.711775][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.711786][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.711890][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.712453][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.712474][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.712500][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.733146][ T3305] team0: Port device team_slave_0 added [ 31.734195][ T3305] team0: Port device team_slave_1 added [ 31.760055][ T3303] hsr_slave_0: entered promiscuous mode [ 31.760378][ T3303] hsr_slave_1: entered promiscuous mode [ 31.760676][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.760689][ T3303] Cannot create hsr debugfs directory [ 31.762965][ T3306] hsr_slave_0: entered promiscuous mode [ 31.763565][ T3306] hsr_slave_1: entered promiscuous mode [ 31.763791][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.763802][ T3306] Cannot create hsr debugfs directory [ 31.792085][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.792098][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.792125][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.792648][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.792659][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.792686][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.834886][ T3299] hsr_slave_0: entered promiscuous mode [ 31.835273][ T3299] hsr_slave_1: entered promiscuous mode [ 31.835469][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 31.835481][ T3299] Cannot create hsr debugfs directory [ 31.871384][ T3305] hsr_slave_0: entered promiscuous mode [ 31.872211][ T3305] hsr_slave_1: entered promiscuous mode [ 31.872404][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.872416][ T3305] Cannot create hsr debugfs directory [ 31.945445][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.949946][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.965135][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.976836][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.977234][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.986965][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.011673][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.019151][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.077606][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.077679][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.077811][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.077840][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.110063][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.116583][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.129828][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.150044][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.158716][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.165521][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.168996][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.171854][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.173005][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.177573][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.191054][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.192972][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.207379][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.211203][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.218621][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.222514][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.252685][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.266043][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.266074][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.266181][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.266210][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.273311][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.291312][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.300738][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.306313][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.340103][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.351782][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.485540][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.486556][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.491768][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.574125][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.574169][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.575088][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.581680][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.592271][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.592302][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.596838][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.602580][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.607099][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.610688][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.626868][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.630585][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.643585][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.652046][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.652592][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.658185][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.691652][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.711433][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.719283][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.726988][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.727018][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.730018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.730048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.752048][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.766600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.766630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.768619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.768648][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.794563][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.817730][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.842812][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.842843][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.854641][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.858741][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.858771][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.894032][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.905646][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.905682][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.910339][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.910367][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.056851][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.093677][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.142118][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.144019][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.186709][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.223884][ T3303] veth0_vlan: entered promiscuous mode [ 33.225923][ T3303] veth1_vlan: entered promiscuous mode [ 33.244105][ T3303] veth0_macvtap: entered promiscuous mode [ 33.251042][ T3303] veth1_macvtap: entered promiscuous mode [ 33.268738][ T3300] veth0_vlan: entered promiscuous mode [ 33.272449][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.287524][ T3300] veth1_vlan: entered promiscuous mode [ 33.289022][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.320521][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320718][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320927][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.325731][ T3300] veth0_macvtap: entered promiscuous mode [ 33.341736][ T3300] veth1_macvtap: entered promiscuous mode [ 33.342765][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.343656][ T3305] veth0_vlan: entered promiscuous mode [ 33.373314][ T3305] veth1_vlan: entered promiscuous mode [ 33.380339][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.383656][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.416415][ T3303] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.420291][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420757][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420792][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420911][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.421666][ T3299] veth0_vlan: entered promiscuous mode [ 33.424862][ T3305] veth0_macvtap: entered promiscuous mode [ 33.428320][ T3299] veth1_vlan: entered promiscuous mode [ 33.429510][ T3305] veth1_macvtap: entered promiscuous mode [ 33.446317][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.453596][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.462245][ T314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462330][ T314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462367][ T314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.462425][ T314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.475716][ T3299] veth0_macvtap: entered promiscuous mode [ 33.500500][ T3299] veth1_macvtap: entered promiscuous mode [ 33.557317][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.570817][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.600683][ T3502] syzkaller0: entered promiscuous mode [ 33.600714][ T3502] syzkaller0: entered allmulticast mode [ 33.619717][ T3306] veth0_vlan: entered promiscuous mode [ 33.628782][ T3306] veth1_vlan: entered promiscuous mode [ 33.714996][ T3306] veth0_macvtap: entered promiscuous mode [ 33.718947][ T3306] veth1_macvtap: entered promiscuous mode [ 33.738488][ T3513] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 33.758859][ T3511] syzkaller0: entered promiscuous mode [ 33.758877][ T3511] syzkaller0: entered allmulticast mode [ 33.793237][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.799025][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.850241][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850291][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850328][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850395][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850431][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850466][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850522][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.850570][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.428053][ T3538] syz.3.13 (3538) used greatest stack depth: 10632 bytes left [ 34.828610][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 34.828627][ T29] audit: type=1400 audit(1789484848.557:294): avc: denied { create } for pid=3545 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.890919][ T3547] netlink: 'syz.3.16': attribute type 1 has an invalid length. [ 35.054245][ T3547] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 35.054264][ T3547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16'. [ 35.054340][ T3547] dummy0: entered promiscuous mode [ 35.264240][ T3550] loop1: detected capacity change from 0 to 512 [ 35.264828][ T29] audit: type=1400 audit(1789484848.997:295): avc: denied { mounton } for pid=3549 comm="syz.1.17" path="/3/sys" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.327819][ T3550] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.17: bad orphan inode 11862016 [ 35.327847][ T3550] loop1: lost filesystem error report for type 5 error -117 [ 35.340995][ T3550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.341320][ T3550] ext4 filesystem being mounted at /3/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 35.341545][ T29] audit: type=1400 audit(1789484849.077:296): avc: denied { mount } for pid=3549 comm="syz.1.17" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.402531][ T29] audit: type=1400 audit(1789484849.137:297): avc: denied { write } for pid=3549 comm="syz.1.17" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.402572][ T29] audit: type=1400 audit(1789484849.137:298): avc: denied { add_name } for pid=3549 comm="syz.1.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.402596][ T29] audit: type=1400 audit(1789484849.137:299): avc: denied { create } for pid=3549 comm="syz.1.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.403506][ T29] audit: type=1400 audit(1789484849.137:300): avc: denied { write open } for pid=3549 comm="syz.1.17" path="/3/sys/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.406952][ T29] audit: type=1400 audit(1789484849.137:301): avc: denied { read write } for pid=3549 comm="syz.1.17" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.407014][ T29] audit: type=1400 audit(1789484849.137:302): avc: denied { open } for pid=3549 comm="syz.1.17" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.591909][ T29] audit: type=1400 audit(1789484849.327:303): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.607492][ T3552] loop3: detected capacity change from 0 to 512 [ 35.822248][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.902210][ T3552] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.904550][ T3552] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.926957][ T3552] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.945740][ T3552] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 35.956871][ T3552] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #16: comm syz.3.18: inode has both inline data and extents flags [ 35.957157][ T3552] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.972606][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.972624][ C0] EXT4-fs (loop3): initial error at time 1789484849: ext4_orphan_get:1403: inode 16 [ 35.972652][ C0] EXT4-fs (loop3): last error at time 1789484849: ext4_orphan_get:1403: inode 16 [ 36.014167][ T3552] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.18: couldn't read orphan inode 16 (err -117) [ 36.016367][ T3552] loop3: lost filesystem error report for type 5 error -117 [ 36.043512][ T3552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.139452][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.212624][ T3569] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 36.355235][ T3569] veth3: entered allmulticast mode [ 36.478708][ T3580] syzkaller0: entered promiscuous mode [ 36.478729][ T3580] syzkaller0: entered allmulticast mode [ 37.085645][ T3592] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 37.105491][ T3592] erspan1: entered allmulticast mode [ 37.143816][ T3563] syz.1.20 (3563) used greatest stack depth: 10192 bytes left [ 37.168682][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 37.265847][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.266066][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.268022][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.268127][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.268195][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.268288][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.313522][ T3599] team0: Failed to send options change via netlink (err -105) [ 37.313540][ T3599] team0: Port device bridge0 added [ 37.314923][ T3597] batadv_slave_1: entered promiscuous mode [ 37.323351][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 37.355456][ T3599] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 37.385075][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.387745][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.408463][ T3599] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 37.435055][ T3599] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 37.653171][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.682137][ T3597] batadv_slave_1 (unregistering): left promiscuous mode [ 37.682224][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.974599][ T3624] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 39.350546][ T3637] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 39.477664][ T3643] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 39.526927][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.536648][ T3648] loop3: detected capacity change from 0 to 2048 [ 39.545871][ T3643] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 39.574775][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.574840][ T3648] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.619802][ T3655] loop2: detected capacity change from 0 to 128 [ 39.659925][ T3651] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 39.660128][ T3651] EXT4-fs (loop3): Remounting filesystem read-only [ 39.687804][ T3659] loop2: detected capacity change from 0 to 1024 [ 39.688284][ T3659] EXT4-fs: Ignoring removed orlov option [ 39.701260][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.758771][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.831603][ T3664] bridge_slave_0: left allmulticast mode [ 39.831621][ T3664] bridge_slave_0: left promiscuous mode [ 39.831853][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.859769][ T3664] bridge_slave_1: left allmulticast mode [ 39.859788][ T3664] bridge_slave_1: left promiscuous mode [ 39.860048][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.900713][ T3664] bond0: (slave bond_slave_0): Releasing backup interface [ 39.925735][ T3664] bond0: (slave bond_slave_1): Releasing backup interface [ 39.946904][ T3664] team0: Port device team_slave_0 removed [ 39.967365][ T3664] team0: Port device team_slave_1 removed [ 39.968362][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.968378][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.981191][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.981206][ T3664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.989388][ T3664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.160337][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 40.160356][ T29] audit: type=1400 audit(1789484853.897:349): avc: denied { write } for pid=3676 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.162524][ T3677] loop3: detected capacity change from 0 to 164 [ 40.687491][ T3671] syz.0.52 (3671) used greatest stack depth: 10040 bytes left [ 40.711017][ T29] audit: type=1400 audit(1789484854.447:350): avc: denied { mount } for pid=3684 comm="syz.1.56" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 40.712721][ T29] audit: type=1400 audit(1789484854.447:351): avc: denied { getopt } for pid=3684 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.725428][ T29] audit: type=1400 audit(1789484854.457:352): avc: denied { setopt } for pid=3687 comm="syz.0.57" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.793725][ T71] IPVS: starting estimator thread 0... [ 40.844737][ T29] audit: type=1400 audit(1789484854.577:353): avc: denied { bind } for pid=3693 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.852382][ T29] audit: type=1400 audit(1789484854.587:354): avc: denied { write } for pid=3693 comm="syz.0.60" name="event2" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.852455][ T29] audit: type=1400 audit(1789484854.587:355): avc: denied { open } for pid=3693 comm="syz.0.60" path="/dev/input/event2" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.854630][ T29] audit: type=1400 audit(1789484854.587:356): avc: denied { ioctl } for pid=3693 comm="syz.0.60" path="/dev/input/event2" dev="devtmpfs" ino=254 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.879682][ T3691] IPVS: using max 2544 ests per chain, 127200 per kthread [ 41.078445][ T3699] bridge_slave_0: left allmulticast mode [ 41.078466][ T3699] bridge_slave_0: left promiscuous mode [ 41.078607][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.099490][ T3699] bridge_slave_1: left allmulticast mode [ 41.099506][ T3699] bridge_slave_1: left promiscuous mode [ 41.101424][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.122016][ T3699] bond0: (slave bond_slave_0): Releasing backup interface [ 41.131953][ T3699] bond0: (slave bond_slave_1): Releasing backup interface [ 41.155571][ T3699] team0: Port device team_slave_0 removed [ 41.168041][ T3699] team0: Port device team_slave_1 removed [ 41.169382][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.169395][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.178573][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.178588][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.186309][ T3699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 41.212633][ T3701] team0: Port device xfrm0 added [ 41.214545][ T3702] tipc: Started in network mode [ 41.214579][ T3702] tipc: Node identity feadff6f9108, cluster identity 4711 [ 41.214655][ T3702] tipc: Enabled bearer , priority 0 [ 41.311237][ T29] audit: type=1400 audit(1789484855.047:357): avc: denied { mmap_zero } for pid=3703 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.319515][ T29] audit: type=1400 audit(1789484855.047:358): avc: denied { write } for pid=3703 comm="syz.4.62" name="ip_vs" dev="proc" ino=4026532729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.418666][ T3706] loop4: detected capacity change from 0 to 512 [ 41.431107][ T3706] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.444092][ T3706] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.63: bad orphan inode 13 [ 41.444114][ T3706] loop4: lost filesystem error report for type 5 error -117 [ 41.444256][ T3706] ext4_test_bit(bit=12, block=18) = 1 [ 41.444270][ T3706] is_bad_inode(inode)=0 [ 41.444278][ T3706] NEXT_ORPHAN(inode)=0 [ 41.444295][ T3706] max_ino=32 [ 41.444303][ T3706] i_nlink=1 [ 41.444905][ T3706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 41.750071][ T3709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 42.047861][ T3715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.064577][ T3711] lo: entered allmulticast mode [ 42.248364][ T3727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'. [ 42.329602][ T3389] tipc: Node number set to 1873149807 [ 42.471091][ T3730] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 42.493172][ T3730] veth0_to_hsr: entered promiscuous mode [ 42.493192][ T3730] veth0_to_hsr: entered allmulticast mode [ 42.516454][ T3730] macvlan2: entered promiscuous mode [ 42.516469][ T3730] macvlan2: entered allmulticast mode [ 42.518055][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 42.712370][ T3736] netlink: 'syz.0.73': attribute type 13 has an invalid length. [ 42.712385][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 42.712450][ T3736] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 42.803341][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 43.104772][ T3523] syz.1.9 (3523) used greatest stack depth: 8192 bytes left [ 43.157548][ T3746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 43.157570][ T3746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 43.157592][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 43.289451][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.429422][ T3757] xt_ecn: cannot match TCP bits for non-tcp packets [ 44.019720][ T3749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=3749 comm=syz.4.79 [ 44.020089][ T3749] Zero length message leads to an empty skb [ 44.049257][ T3753] pimreg: entered allmulticast mode [ 44.106249][ T3772] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.107591][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 44.199387][ T3776] loop1: detected capacity change from 0 to 1024 [ 44.254527][ T3776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.262215][ T3782] bridge0: port 3(macvlan2) entered blocking state [ 44.262245][ T3782] bridge0: port 3(macvlan2) entered disabled state [ 44.262296][ T3782] macvlan2: entered allmulticast mode [ 44.262311][ T3782] ip6gretap0: entered allmulticast mode [ 44.262871][ T3782] macvlan2: entered promiscuous mode [ 44.263079][ T3782] bridge0: port 3(macvlan2) entered blocking state [ 44.263108][ T3782] bridge0: port 3(macvlan2) entered forwarding state [ 44.264748][ T42] bridge0: port 3(macvlan2) entered disabled state [ 44.337512][ T3787] syzkaller0: entered promiscuous mode [ 44.337531][ T3787] syzkaller0: entered allmulticast mode [ 44.396061][ T3781] loop2: detected capacity change from 0 to 1024 [ 44.416574][ T3781] ======================================================= [ 44.416574][ T3781] WARNING: The mand mount option has been deprecated and [ 44.416574][ T3781] and is ignored by this kernel. Remove the mand [ 44.416574][ T3781] option from the mount to silence this warning. [ 44.416574][ T3781] ======================================================= [ 44.432840][ T3781] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 44.442254][ T3781] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.88: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.442453][ T3781] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.442771][ T3781] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.88: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.442841][ T3781] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.443143][ T3781] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.88: Failed to acquire dquot type 0 [ 44.443202][ T3781] loop2: lost filesystem error report for type 5 error -117 [ 44.443704][ T3781] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 44.443735][ T3781] loop2: lost filesystem error report for type 5 error -117 [ 44.444106][ T3781] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.88: mark_inode_dirty error [ 44.444207][ T3781] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.444560][ T3781] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 44.444672][ T3781] EXT4-fs (loop2): 1 orphan inode deleted [ 44.448615][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.485533][ T51] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.485635][ T51] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 44.562203][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.603132][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.603482][ T3303] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 44.603508][ T3303] loop2: lost filesystem error report for type 5 error -117 [ 44.603670][ T3303] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 44.603687][ T3303] loop2: lost filesystem error report for type 5 error -117 [ 44.603739][ T3303] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 44.603761][ T3303] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 44.603936][ T3303] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 44.603981][ T3303] loop2: lost filesystem error report for type 5 error -117 [ 44.781295][ T3796] loop2: detected capacity change from 0 to 8192 [ 45.067316][ T3802] loop3: detected capacity change from 0 to 1024 [ 45.094614][ T3802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.095434][ T3802] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.118676][ T3809] ip6tnl0: entered promiscuous mode [ 45.122898][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 45.196642][ T3802] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.94: bg 0: block 112: padding at end of block bitmap is not set [ 45.215027][ T3802] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 45.215068][ T3802] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.215068][ T3802] [ 45.215228][ T3802] EXT4-fs (loop3): Total free blocks count 0 [ 45.215328][ T3802] EXT4-fs (loop3): Free/Dirty block details [ 45.215488][ T3802] EXT4-fs (loop3): free_blocks=0 [ 45.215527][ T3802] EXT4-fs (loop3): dirty_blocks=64 [ 45.215547][ T3802] EXT4-fs (loop3): Block reservation details [ 45.215609][ T3802] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 45.290457][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.328401][ T3816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 45.328557][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 45.328616][ T29] audit: type=1400 audit(1789484859.057:398): avc: denied { write } for pid=3815 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.328693][ T29] audit: type=1400 audit(1789484859.057:399): avc: denied { nlmsg_read } for pid=3815 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.362048][ T3816] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 45.394725][ T3818] loop3: detected capacity change from 0 to 512 [ 45.405088][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.405147][ T3818] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.436533][ T29] audit: type=1400 audit(1789484859.167:400): avc: denied { write } for pid=3817 comm="syz.3.98" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.446391][ T29] audit: type=1400 audit(1789484859.167:401): avc: denied { setattr } for pid=3817 comm="syz.3.98" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.564898][ T29] audit: type=1400 audit(1789484859.297:402): avc: denied { nlmsg_write } for pid=3821 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.580649][ T29] audit: type=1400 audit(1789484859.307:403): avc: denied { create } for pid=3821 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 45.658393][ T29] audit: type=1400 audit(1789484859.387:404): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.703583][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.742697][ T29] audit: type=1400 audit(1789484859.467:405): avc: denied { read } for pid=3833 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.872025][ T3839] loop0: detected capacity change from 0 to 512 [ 45.888093][ T29] audit: type=1400 audit(1789484859.617:406): avc: denied { watch_reads } for pid=3835 comm="syz.3.103" path="/21" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.895925][ T3839] EXT4-fs warning (device loop0): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 45.925174][ T29] audit: type=1400 audit(1789484859.657:407): avc: denied { ioctl } for pid=3840 comm="syz.2.105" path="socket:[6404]" dev="sockfs" ino=6404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.997874][ T3839] tipc: Started in network mode [ 45.997903][ T3839] tipc: Node identity ac14142f, cluster identity 4711 [ 45.998023][ T3839] tipc: New replicast peer: 127.0.0.1 [ 45.998180][ T3839] tipc: Enabled bearer , priority 10 [ 46.075674][ T3846] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 46.104267][ T3846] veth3: entered allmulticast mode [ 46.269094][ T3851] bridge0: port 3(team0) entered blocking state [ 46.269169][ T3851] bridge0: port 3(team0) entered disabled state [ 46.269291][ T3851] team0: entered allmulticast mode [ 46.269328][ T3851] team_slave_0: entered allmulticast mode [ 46.269342][ T3851] team_slave_1: entered allmulticast mode [ 46.277685][ T3851] team0: entered promiscuous mode [ 46.277722][ T3851] team_slave_0: entered promiscuous mode [ 46.277894][ T3851] team_slave_1: entered promiscuous mode [ 46.281879][ T3851] bridge0: port 3(team0) entered blocking state [ 46.281930][ T3851] bridge0: port 3(team0) entered forwarding state [ 46.478156][ T3882] loop4: detected capacity change from 0 to 512 [ 46.506272][ T3882] EXT4-fs: test_dummy_encryption option not supported [ 47.050400][ T3916] futex_wake_op: syz.1.117 tries to shift op by -1; fix this program [ 47.110495][ T3387] tipc: Node number set to 2886997039 [ 47.154650][ T3932] loop2: detected capacity change from 0 to 128 [ 47.246486][ T3932] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.246677][ T3932] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.305848][ T3944] __nla_validate_parse: 2 callbacks suppressed [ 47.305874][ T3944] netlink: 168 bytes leftover after parsing attributes in process `syz.3.122'. [ 47.555128][ T3955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3955 comm=syz.3.125 [ 47.578017][ T3955] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 47.581050][ T3950] loop1: detected capacity change from 0 to 164 [ 47.615290][ T3955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.637926][ T3950] isofs_fill_super: root inode is not a directory. Corrupted media? [ 47.654626][ T3955] dummy0: left promiscuous mode [ 47.665446][ T3955] bond1: (slave dummy0): making interface the new active one [ 47.677644][ T3955] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 47.688041][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.744500][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 47.747682][ T3967] team0: No ports can be present during mode change [ 47.748259][ T3967] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 47.752927][ T3967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.755993][ T3967] team0: Port device bond0 added [ 47.772507][ T3967] vlan0: entered promiscuous mode [ 47.785552][ T3967] team0: Port device vlan0 added [ 47.799981][ T3967] tipc: Enabled bearer , priority 0 [ 47.842531][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 47.866599][ T3975] loop1: detected capacity change from 0 to 512 [ 47.867592][ T3975] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 48.077679][ T3988] batman_adv: batadv0: Adding interface: veth0 [ 48.077694][ T3988] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.077749][ T3988] batman_adv: batadv0: Interface activated: veth0 [ 48.119622][ T3992] syzkaller0: entered promiscuous mode [ 48.119642][ T3992] syzkaller0: entered allmulticast mode [ 48.121330][ T3988] batman_adv: batadv0: Interface deactivated: veth0 [ 48.121396][ T3988] batman_adv: batadv0: Removing interface: veth0 [ 48.192146][ T4000] syzkaller0: entered promiscuous mode [ 48.192164][ T4000] syzkaller0: entered allmulticast mode [ 48.263368][ T4002] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 48.483501][ T4005] veth3: entered promiscuous mode [ 48.561567][ T4006] veth2: entered allmulticast mode [ 48.602164][ T4008] veth0_macvtap: entered allmulticast mode [ 48.651735][ T4015] tipc: Enabled bearer , priority 0 [ 48.651961][ T4015] syzkaller0: entered promiscuous mode [ 48.651976][ T4015] syzkaller0: entered allmulticast mode [ 48.658629][ T4015] tipc: Resetting bearer [ 48.681146][ T4014] tipc: Resetting bearer [ 48.700781][ T4014] tipc: Disabling bearer [ 48.866150][ T4022] syzkaller0: entered promiscuous mode [ 48.866169][ T4022] syzkaller0: entered allmulticast mode [ 49.007143][ T31] IPVS: starting estimator thread 0... [ 49.089711][ T4030] IPVS: using max 2352 ests per chain, 117600 per kthread [ 49.097539][ T4033] loop4: detected capacity change from 0 to 128 [ 49.120091][ T4033] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.123556][ T4033] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.194095][ T4041] loop2: detected capacity change from 0 to 512 [ 49.202375][ T4039] bond1: (slave dummy0): Releasing active interface [ 49.206938][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.243310][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.276334][ T4039] team0: Port device xfrm0 removed [ 49.277636][ T4039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.285723][ T31] tipc: Resetting bearer [ 49.291421][ T4043] team0: Mode changed to "broadcast" [ 49.332935][ T4048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 49.332967][ T4048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.333043][ T4048] vhci_hcd vhci_hcd.0: Device attached [ 49.340444][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.346690][ T4048] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 49.346774][ T4048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.346850][ T4048] vhci_hcd vhci_hcd.0: Device attached [ 49.392517][ T4054] loop2: detected capacity change from 0 to 1024 [ 49.393012][ T4054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.393032][ T4054] EXT4-fs: Ignoring removed i_version option [ 49.393105][ T4054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.396636][ T4039] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 49.411096][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.411174][ T4054] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.414039][ T4039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.417287][ T4039] team0: Port device bond0 added [ 49.434063][ T4039] vlan0: entered promiscuous mode [ 49.443410][ T4039] team0: Port device vlan0 added [ 49.460947][ T4039] tipc: Enabling of bearer rejected, already enabled [ 49.578057][ T4035] loop1: detected capacity change from 0 to 1024 [ 49.580123][ T11] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 49.611343][ T4035] EXT4-fs: Ignoring removed orlov option [ 49.657477][ T4049] vhci_hcd: connection reset by peer [ 49.657702][ T31] vhci_hcd vhci_hcd.4: stop threads [ 49.657716][ T31] vhci_hcd vhci_hcd.4: release socket [ 49.657734][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 49.660488][ T4051] vhci_hcd: connection closed [ 49.660676][ T31] vhci_hcd vhci_hcd.4: stop threads [ 49.660692][ T31] vhci_hcd vhci_hcd.4: release socket [ 49.660735][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 49.664613][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.883038][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.020836][ T4069] syzkaller0: entered promiscuous mode [ 50.020853][ T4069] syzkaller0: entered allmulticast mode [ 50.144228][ T4071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 50.232597][ T4076] loop4: detected capacity change from 0 to 1024 [ 50.243013][ T4076] EXT4-fs: Ignoring removed orlov option [ 50.263684][ T4076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.306177][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.330152][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 50.330167][ T29] audit: type=1400 audit(1789484864.067:485): avc: denied { create } for pid=4080 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.477958][ T29] audit: type=1400 audit(1789484864.207:486): avc: denied { mount } for pid=4073 comm="syz.2.162" name="/" dev="ramfs" ino=6888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.980978][ T4092] netlink: 168 bytes leftover after parsing attributes in process `syz.0.168'. [ 51.050968][ T29] audit: type=1400 audit(1789484864.787:487): avc: denied { mount } for pid=4094 comm="syz.0.169" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.301649][ T29] audit: type=1400 audit(1789484865.037:488): avc: denied { map } for pid=4104 comm="syz.3.173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.301682][ T29] audit: type=1400 audit(1789484865.037:489): avc: denied { read write } for pid=4104 comm="syz.3.173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.432915][ T29] audit: type=1400 audit(1789484865.147:490): avc: denied { read } for pid=4104 comm="syz.3.173" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.532555][ T4109] loop3: detected capacity change from 0 to 1024 [ 51.548104][ T4109] EXT4-fs: Ignoring removed orlov option [ 51.562325][ T4109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.682389][ T29] audit: type=1400 audit(1789484865.417:491): avc: denied { write } for pid=4034 comm="syz.1.152" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.685036][ T29] audit: type=1400 audit(1789484865.417:492): avc: denied { write } for pid=4034 comm="syz.1.152" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.685133][ T29] audit: type=1400 audit(1789484865.417:493): avc: denied { rename } for pid=4034 comm="syz.1.152" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.685204][ T29] audit: type=1400 audit(1789484865.417:494): avc: denied { unlink } for pid=4034 comm="syz.1.152" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.785955][ T4113] team0: Port device bond0 removed [ 51.822632][ T4113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.852434][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.911651][ T4115] syzkaller0: entered promiscuous mode [ 51.911672][ T4115] syzkaller0: entered allmulticast mode [ 51.962831][ T4115] tc action pedit 'at' offset 5 out of bounds [ 51.964099][ T4102] loop2: detected capacity change from 0 to 8192 [ 52.171748][ T4122] loop1: detected capacity change from 0 to 1024 [ 52.188699][ T4122] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.188718][ T4122] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 52.188815][ T4122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (240!=20869) [ 52.188933][ T4122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.190286][ T4122] EXT4-fs error (device loop1): ext4_get_journal_inode:5927: inode #3: comm syz.1.177: iget: bad extra_isize 65535 (inode size 1024) [ 52.190316][ T4122] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.190392][ T4122] EXT4-fs (loop1): no journal found [ 52.190450][ T4122] EXT4-fs (loop1): can't get journal size [ 52.190582][ T4122] EXT4-fs error (device loop1): __ext4_fill_super:5621: inode #2: comm syz.1.177: iget: bad extra_isize 65535 (inode size 1024) [ 52.190661][ T4122] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 52.190803][ T4122] EXT4-fs (loop1): get root inode failed [ 52.190816][ T4122] EXT4-fs (loop1): mount failed [ 52.501536][ T4122] bridge0: port 3(team0) entered disabled state [ 52.501617][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.501847][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.704663][ T4122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.840039][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.840120][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.840165][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.840201][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.081360][ T4139] loop0: detected capacity change from 0 to 256 [ 53.082012][ T4139] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.082942][ T4139] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.119274][ T4141] geneve1: entered promiscuous mode [ 53.174711][ T4143] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 53.175985][ T4143] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 53.560851][ T4154] loop2: detected capacity change from 0 to 512 [ 53.584512][ T4154] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.188: iget: bad i_size value: 38620345925642 [ 53.584572][ T4154] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.585036][ T4154] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.188: couldn't read orphan inode 15 (err -117) [ 53.585135][ T4154] loop2: lost filesystem error report for type 5 error -117 [ 53.804054][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.035026][ T4154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.119523][ T4165] loop3: detected capacity change from 0 to 1024 [ 54.123643][ T4165] EXT4-fs: dax option not supported [ 54.178032][ T4154] netlink: 'syz.2.188': attribute type 21 has an invalid length. [ 54.178100][ T4154] netlink: 128 bytes leftover after parsing attributes in process `syz.2.188'. [ 54.178358][ T4154] netlink: 'syz.2.188': attribute type 5 has an invalid length. [ 54.178452][ T4154] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 54.178559][ T4154] netlink: 3 bytes leftover after parsing attributes in process `syz.2.188'. [ 54.244568][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.314049][ T4174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.328321][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 54.417881][ T4172] loop3: detected capacity change from 0 to 1164 [ 54.438785][ T4172] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 54.449236][ T4172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 54.449390][ T4172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.193'. [ 54.525901][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 54.593980][ T4180] loop0: detected capacity change from 0 to 512 [ 54.596992][ T4180] EXT4-fs: test_dummy_encryption option not supported [ 54.669634][ T11] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 54.676411][ T4172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.750864][ T4188] syzkaller0: entered promiscuous mode [ 54.750877][ T4188] syzkaller0: entered allmulticast mode [ 54.759712][ T4196] syzkaller0: entered promiscuous mode [ 54.759730][ T4196] syzkaller0: entered allmulticast mode [ 55.039966][ T314] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.040007][ T314] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.040038][ T314] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.040086][ T314] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.077938][ T4204] geneve1: entered promiscuous mode [ 55.091757][ T4206] loop2: detected capacity change from 0 to 1024 [ 55.092094][ T4206] EXT4-fs: dax option not supported [ 55.122491][ T4208] syzkaller0: entered promiscuous mode [ 55.122557][ T4208] syzkaller0: entered allmulticast mode [ 55.128628][ T4208] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 55.265076][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 55.381442][ T4219] loop4: detected capacity change from 0 to 128 [ 55.483898][ T4223] syzkaller0: entered promiscuous mode [ 55.483921][ T4223] syzkaller0: entered allmulticast mode [ 55.622904][ T4220] EXT4-fs: test_dummy_encryption option not supported [ 55.651397][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.676660][ T4214] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #12: block 2: comm syz.0.208: lblock 0 mapped to illegal pblock 2 (length 1) [ 55.677457][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 55.677471][ T29] audit: type=1400 audit(1789484869.407:509): avc: denied { read } for pid=4213 comm="syz.0.208" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 55.718815][ T29] audit: type=1400 audit(1789484869.437:510): avc: denied { write } for pid=4213 comm="syz.0.208" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.781739][ T29] audit: type=1400 audit(1789484869.517:511): avc: denied { execute } for pid=4230 comm="syz.4.213" path="/36/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.783532][ T4233] EXT4-fs: Ignoring removed nobh option [ 55.783623][ T4233] EXT4-fs: Ignoring removed oldalloc option [ 55.783640][ T4233] EXT4-fs: Ignoring removed oldalloc option [ 55.824761][ T4233] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 55.845722][ T4233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.852320][ T29] audit: type=1400 audit(1789484869.587:512): avc: denied { write } for pid=4232 comm="syz.3.214" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.941638][ T29] audit: type=1400 audit(1789484869.667:513): avc: denied { setopt } for pid=4238 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.944058][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 55.949175][ T4240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.216'. [ 56.272354][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.288693][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.324687][ T29] audit: type=1400 audit(1789484870.057:514): avc: denied { remount } for pid=4246 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.348098][ T4247] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.678631][ T4247] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.868016][ T4247] capability: warning: `syz.0.218' uses 32-bit capabilities (legacy support in use) [ 56.882518][ T29] audit: type=1400 audit(1789484870.617:515): avc: denied { read write } for pid=4246 comm="syz.0.218" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.883081][ T4247] program syz.0.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.985745][ T4253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 57.098889][ T4259] set_capacity_and_notify: 4 callbacks suppressed [ 57.098902][ T4259] loop1: detected capacity change from 0 to 512 [ 57.115155][ T4259] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.224: inode has both inline data and extents flags [ 57.115181][ T4259] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.115283][ T4259] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.224: couldn't read orphan inode 15 (err -117) [ 57.115317][ T4259] loop1: lost filesystem error report for type 5 error -117 [ 57.115685][ T4259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.185645][ T29] audit: type=1400 audit(1789484870.917:516): avc: denied { write } for pid=4258 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.188691][ T29] audit: type=1400 audit(1789484870.917:517): avc: denied { watch } for pid=4258 comm="syz.1.224" path="/55/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.313864][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.392629][ T4271] lo: entered promiscuous mode [ 57.393410][ T4271] bond0: entered promiscuous mode [ 57.412955][ T4271] dummy0: entered promiscuous mode [ 57.414497][ T4271] eql: entered promiscuous mode [ 57.414885][ T4271] ifb0: entered promiscuous mode [ 57.415279][ T4271] ifb1: entered promiscuous mode [ 57.415616][ T4271] virtio_net virtio1 eth0: entered promiscuous mode [ 57.425619][ T4271] ieee802154 phy0 wpan0: entered promiscuous mode [ 57.456571][ T4271] ieee802154 phy1 wpan1: entered promiscuous mode [ 57.456971][ T4271] teql0: entered promiscuous mode [ 57.457342][ T4271] tunl0: entered promiscuous mode [ 57.459676][ T4271] gre0: entered promiscuous mode [ 57.459899][ T4271] gretap0: entered promiscuous mode [ 57.460186][ T4271] erspan0: entered promiscuous mode [ 57.460406][ T4271] ip_vti0: entered promiscuous mode [ 57.460689][ T4271] ip6_vti0: entered promiscuous mode [ 57.460930][ T4271] sit0: entered promiscuous mode [ 57.461745][ T4271] ip6tnl0: entered promiscuous mode [ 57.462010][ T4271] ip6gre0: entered promiscuous mode [ 57.463009][ T4271] lapb0: entered promiscuous mode [ 57.464250][ T4271] lapb1: entered promiscuous mode [ 57.465341][ T4271] lapb2: entered promiscuous mode [ 57.466532][ T4271] lapb3: entered promiscuous mode [ 57.466851][ T4271] lowpan0: entered promiscuous mode [ 57.467073][ T4271] veth0: entered promiscuous mode [ 57.467698][ T4271] veth1: entered promiscuous mode [ 57.469085][ T4271] lapb4: entered promiscuous mode [ 57.470269][ T4271] lapb5: entered promiscuous mode [ 57.693178][ T4278] syzkaller0: entered promiscuous mode [ 57.693194][ T4278] syzkaller0: entered allmulticast mode [ 57.894278][ T4287] loop4: detected capacity change from 0 to 512 [ 57.908608][ T4287] EXT4-fs: Ignoring removed orlov option [ 57.908868][ T4287] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.929272][ T4287] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz.4.234: corrupted xattr block 252: invalid header [ 57.929304][ T4287] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.929579][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 57.929598][ C1] EXT4-fs (loop4): initial error at time 1789484871: ext4_xattr_delete_inode:2933: inode 15 [ 57.929630][ C1] EXT4-fs (loop4): last error at time 1789484871: ext4_xattr_delete_inode:2933: inode 15 [ 57.929695][ T4287] EXT4-fs (loop4): Remounting filesystem read-only [ 57.929709][ T4287] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 57.929754][ T4287] EXT4-fs (loop4): 1 orphan inode deleted [ 57.930196][ T4287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.022836][ T29] audit: type=1400 audit(1789484871.757:518): avc: denied { write } for pid=4286 comm="syz.4.234" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.032605][ T42] IPVS: starting estimator thread 0... [ 58.119769][ T4291] IPVS: using max 2544 ests per chain, 127200 per kthread [ 58.191371][ T4299] syzkaller0: entered promiscuous mode [ 58.191703][ T4299] syzkaller0: entered allmulticast mode [ 58.302515][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.450582][ T4324] process 'syz.3.240' launched './file1' with NULL argv: empty string added [ 58.619361][ T4341] syzkaller0: entered promiscuous mode [ 58.619380][ T4341] syzkaller0: entered allmulticast mode [ 58.671943][ T4339] veth1_to_team: entered promiscuous mode [ 58.678860][ T4339] gretap0: entered promiscuous mode [ 58.689749][ T4339] hsr1: entered promiscuous mode [ 59.092506][ T4356] loop1: detected capacity change from 0 to 512 [ 59.173350][ T4356] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.177718][ T4356] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.179960][ T4356] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 59.182479][ T4356] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.247: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.182714][ T4356] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.190810][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 59.190836][ C1] EXT4-fs (loop1): last error at time 1789484872: ext4_ext_check_inode:521: inode 13 [ 59.261341][ T4356] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.247: couldn't read orphan inode 13 (err -117) [ 59.261479][ T4356] loop1: lost filesystem error report for type 5 error -117 [ 59.314513][ T4356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.392733][ T4356] __nla_validate_parse: 4 callbacks suppressed [ 59.392856][ T4356] netlink: 80 bytes leftover after parsing attributes in process `syz.1.247'. [ 59.451657][ T4372] loop0: detected capacity change from 0 to 256 [ 59.730656][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.785603][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 59.794855][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.795248][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.919513][ T4410] fido_id[4410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.002800][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 60.003509][ T4417] loop2: detected capacity change from 0 to 256 [ 60.067632][ T4421] loop1: detected capacity change from 0 to 512 [ 60.074162][ T4421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.074241][ T4421] EXT4-fs (loop1): invalid #clusters per group: 95 [ 60.155552][ T4421] PM: suspend entry (deep) [ 60.336458][ T314] Filesystems sync: 0.185 seconds [ 60.387900][ T4421] Freezing user space processes [ 60.390157][ T4421] Freezing user space processes completed (elapsed 0.002 seconds) [ 60.390183][ T4421] OOM killer disabled. [ 60.390186][ T4421] Freezing remaining freezable tasks [ 60.391657][ T4421] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 60.391738][ T4421] printk: Suspending console(s) (use no_console_suspend to debug) [ 60.474937][ T4421] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 60.475096][ T4421] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 60.475255][ T4421] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 60.475368][ T4421] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 60.475465][ T4421] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 60.475544][ T4421] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 60.476236][ T4421] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 60.476336][ T4421] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 60.476400][ T4421] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 60.476495][ T4421] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 60.476574][ T4421] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 60.476655][ T4421] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 60.476696][ T4421] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 60.476761][ T4421] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 60.476815][ T4421] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 60.476924][ T4421] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 60.512696][ T4440] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 61.023164][ T4421] ACPI: PM: Preparing to enter system sleep state S3 [ 61.023391][ T4421] ACPI: PM: Saving platform NVS memory [ 61.023504][ T4421] Disabling non-boot CPUs ... [ 61.031512][ T4421] smpboot: CPU 1 is now offline [ 61.038064][ T4421] ACPI: PM: Low-level resume complete [ 61.038109][ T4421] ACPI: PM: Restoring platform NVS memory [ 61.048873][ T4421] Enabling non-boot CPUs ... [ 61.049288][ T4421] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 61.053239][ T4421] CPU1 is up [ 61.053523][ T4421] ACPI: PM: Waking up from system sleep state S3 [ 61.094232][ T42] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 61.255971][ T4421] OOM killer enabled. [ 61.255999][ T4421] Restarting tasks: Starting [ 61.266647][ T4421] Restarting tasks: Done [ 61.266795][ T4421] random: crng reseeded on system resumption [ 61.268280][ T4421] PM: suspend exit [ 61.356360][ T4594] loop3: detected capacity change from 0 to 164 [ 61.357200][ T4435] loop0: detected capacity change from 0 to 8192 [ 61.357542][ T4435] msdos: Bad value for 'umask' [ 61.379611][ T4596] loop2: detected capacity change from 0 to 1024 [ 61.379873][ T4596] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 61.542238][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 61.542254][ T29] audit: type=1400 audit(1789484875.351:537): avc: denied { write } for pid=4601 comm="syz.4.269" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.574840][ T4610] file system registered [ 61.574885][ T29] audit: type=1400 audit(1789484875.382:538): avc: denied { write } for pid=4601 comm="syz.4.269" name="functions" dev="configfs" ino=6594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.734676][ T4606] loop1: detected capacity change from 0 to 1024 [ 61.776759][ T4606] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 61.794578][ T4600] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.794987][ T4600] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.795162][ T4600] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.268: bad orphan inode 15 [ 61.795221][ T4600] loop3: lost filesystem error report for type 5 error -117 [ 61.795873][ T4600] ext4_test_bit(bit=14, block=5) = 0 [ 61.813160][ T4600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.817156][ T4606] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.271: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.817623][ T4606] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.818095][ T4606] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 61.818654][ T4606] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.271: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.818700][ T4606] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.823911][ T4606] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 61.824039][ T4606] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.271: Failed to acquire dquot type 0 [ 61.824193][ T4606] loop1: lost filesystem error report for type 5 error -117 [ 61.825612][ T4606] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 61.825639][ T4606] loop1: lost filesystem error report for type 5 error -117 [ 61.826002][ T4606] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.271: mark_inode_dirty error [ 61.826122][ T4606] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.826546][ T4606] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 61.826771][ T4606] EXT4-fs (loop1): 1 orphan inode deleted [ 61.833427][ T4606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.862395][ T4573] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:144: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.863355][ T4573] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 61.863374][ T4573] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:144: Failed to release dquot type 0 [ 61.864654][ T29] audit: type=1400 audit(1789484875.690:539): avc: denied { watch_reads } for pid=4598 comm="syz.3.268" path="/53/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.884513][ T4622] program syz.4.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.902172][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.085862][ T4625] set_capacity_and_notify: 2 callbacks suppressed [ 62.085964][ T4625] loop3: detected capacity change from 0 to 512 [ 62.132807][ T29] audit: type=1400 audit(1789484875.967:540): avc: denied { cpu } for pid=4628 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.173941][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.174304][ T4625] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.182049][ T4625] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.277: iget: bad i_size value: 2533274857506816 [ 62.282798][ T4633] loop0: detected capacity change from 0 to 512 [ 62.285181][ T4633] EXT4-fs (loop0): invalid #clusters per group: 95 [ 62.302229][ T4633] PM: suspend entry (deep) [ 62.373813][ T4577] Filesystems sync: 0.073 seconds [ 62.768385][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.768445][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 62.768470][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 62.769175][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.769424][ T3299] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 62.769441][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 62.772109][ T3299] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 62.772175][ T3299] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.774160][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 62.774185][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 62.791070][ T4635] syzkaller0: entered promiscuous mode [ 62.791089][ T4635] syzkaller0: entered allmulticast mode [ 62.802514][ T4633] Freezing user space processes [ 62.846486][ T4633] Freezing user space processes completed (elapsed 0.045 seconds) [ 62.846508][ T4633] OOM killer disabled. [ 62.846511][ T4633] Freezing remaining freezable tasks [ 62.848259][ T4633] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 62.848374][ T4633] printk: Suspending console(s) (use no_console_suspend to debug) [ 62.905897][ T4633] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 62.905955][ T4633] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 62.906038][ T4633] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 62.906115][ T4633] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 62.906200][ T4633] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 62.906637][ T4633] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 62.906831][ T4633] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 62.906877][ T4633] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 62.906988][ T4633] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 62.907091][ T4633] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 62.907215][ T4633] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 62.907293][ T4633] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 62.907328][ T4633] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 62.907440][ T4633] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 62.907473][ T4633] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 62.907551][ T4633] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 62.952498][ T4580] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 63.459727][ T4633] ACPI: PM: Preparing to enter system sleep state S3 [ 63.460081][ T4633] ACPI: PM: Saving platform NVS memory [ 63.460168][ T4633] Disabling non-boot CPUs ... [ 63.464018][ T4633] smpboot: CPU 1 is now offline [ 63.469806][ T4633] ACPI: PM: Low-level resume complete [ 63.469850][ T4633] ACPI: PM: Restoring platform NVS memory [ 63.480439][ T4633] Enabling non-boot CPUs ... [ 63.480654][ T4633] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 63.484788][ T4633] CPU1 is up [ 63.485038][ T4633] ACPI: PM: Waking up from system sleep state S3 [ 63.517418][ T4582] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 63.659426][ T4633] OOM killer enabled. [ 63.659453][ T4633] Restarting tasks: Starting [ 63.676447][ T4633] Restarting tasks: Done [ 63.676587][ T4633] random: crng reseeded on system resumption [ 63.681122][ T4633] PM: suspend exit [ 63.769784][ T4642] ip_tables: iptables: counters copy to user failed while replacing table [ 63.794569][ T29] audit: type=1400 audit(1789484877.645:541): avc: denied { mount } for pid=4637 comm="syz.1.282" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.848664][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 63.860444][ T29] audit: type=1400 audit(1789484877.717:542): avc: denied { setopt } for pid=4646 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.861522][ T29] audit: type=1400 audit(1789484877.717:543): avc: denied { connect } for pid=4646 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.946289][ T4654] lo speed is unknown, defaulting to 1000 [ 63.946387][ T4654] lo speed is unknown, defaulting to 1000 [ 63.947803][ T4654] lo speed is unknown, defaulting to 1000 [ 63.950057][ T4654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.958016][ T4654] infiniband syzþ: RDMA CMA: cma_listen_on_dev, error -98 [ 64.330724][ T4654] lo speed is unknown, defaulting to 1000 [ 64.351409][ T4654] lo speed is unknown, defaulting to 1000 [ 64.374971][ T4654] lo speed is unknown, defaulting to 1000 [ 64.401394][ T4654] lo speed is unknown, defaulting to 1000 [ 64.420469][ T4654] lo speed is unknown, defaulting to 1000 [ 64.445565][ T4656] loop0: detected capacity change from 0 to 512 [ 64.668249][ T4656] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.675142][ T4656] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 64.679791][ T4656] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 64.683140][ T4656] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.286: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 64.683260][ T4656] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 64.689403][ T4656] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.286: couldn't read orphan inode 13 (err -117) [ 64.689501][ T4656] loop0: lost filesystem error report for type 5 error -117 [ 64.697449][ T4656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.706602][ T4656] netlink: 80 bytes leftover after parsing attributes in process `syz.0.286'. [ 64.910026][ T4669] loop4: detected capacity change from 0 to 1024 [ 64.924079][ T4669] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 64.970719][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.994730][ T4669] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.292: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.994827][ T4669] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 64.999005][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 64.999032][ C1] EXT4-fs (loop4): initial error at time 1789484878: ext4_map_blocks:790: inode 3: block 2 [ 64.999259][ C1] EXT4-fs (loop4): last error at time 1789484878: ext4_map_blocks:790: inode 3: block 2 [ 64.999591][ T4669] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.292: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.999817][ T4669] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.008384][ T4669] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.292: Failed to acquire dquot type 0 [ 65.008795][ T4669] loop4: lost filesystem error report for type 5 error -117 [ 65.020213][ T4669] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 65.020334][ T4669] loop4: lost filesystem error report for type 5 error -117 [ 65.021405][ T4669] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.292: mark_inode_dirty error [ 65.021723][ T4669] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.025504][ T4669] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 65.025915][ T4669] EXT4-fs (loop4): 1 orphan inode deleted [ 65.032576][ T4669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.047995][ T4470] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:41: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.048161][ T4470] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:41: Failed to release dquot type 0 [ 65.113204][ T4673] loop2: detected capacity change from 0 to 512 [ 65.192348][ T4673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.282354][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.376258][ T4661] loop1: detected capacity change from 0 to 8192 [ 65.599151][ T4689] kernel profiling enabled (shift: 23) [ 65.620560][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.620893][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.620920][ T3306] loop4: lost filesystem error report for type 5 error -117 [ 65.621067][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 65.621149][ T3306] loop4: lost filesystem error report for type 5 error -117 [ 65.621374][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 65.621399][ T3306] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.621491][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.621516][ T3306] loop4: lost filesystem error report for type 5 error -117 [ 65.670025][ T4685] loop0: detected capacity change from 0 to 512 [ 65.679868][ T4685] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.680330][ T4685] ext4: Bad value for 'max_dir_size_kb' [ 65.722318][ T4691] FAULT_INJECTION: forcing a failure. [ 65.722318][ T4691] name failslab, interval 1, probability 0, space 0, times 1 [ 65.722374][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.4.299 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.722399][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.722444][ T4691] Call Trace: [ 65.722451][ T4691] [ 65.722458][ T4691] __dump_stack+0x1d/0x30 [ 65.722484][ T4691] dump_stack_lvl+0x95/0xd0 [ 65.722505][ T4691] dump_stack+0x15/0x1b [ 65.722529][ T4691] should_fail_ex+0x262/0x280 [ 65.722596][ T4691] should_failslab+0x8c/0xb0 [ 65.722625][ T4691] __kvmalloc_node_noprof+0x168/0x5c0 [ 65.722658][ T4691] ? bpf_check_cfg+0x81/0x1eb0 [ 65.722750][ T4691] ? bpf_check_cfg+0x81/0x1eb0 [ 65.722853][ T4691] bpf_check_cfg+0x81/0x1eb0 [ 65.722889][ T4691] ? __free_contig_range+0x14d/0x190 [ 65.722926][ T4691] ? vfree+0x2db/0x340 [ 65.722971][ T4691] ? kfree+0x143/0x3b0 [ 65.723001][ T4691] ? vfree+0x2db/0x340 [ 65.723049][ T4691] ? bpf_prog_calc_tag+0x1c7/0x1e0 [ 65.723076][ T4691] ? check_and_resolve_insns+0x121f/0x15d0 [ 65.723107][ T4691] bpf_check+0x1a2c/0x1d00 [ 65.723134][ T4691] bpf_prog_load+0xefb/0x1060 [ 65.723344][ T4691] ? avc_has_perm_noaudit+0xa3/0x120 [ 65.723447][ T4691] __sys_bpf+0xbae/0xc30 [ 65.723472][ T4691] ? do_futex+0x2c0/0x460 [ 65.723509][ T4691] __x64_sys_bpf+0x69/0x80 [ 65.723605][ T4691] x64_sys_call+0xf26/0x2550 [ 65.723635][ T4691] do_syscall_64+0x112/0x360 [ 65.723672][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.723740][ T4691] RIP: 0033:0x7fcd749ee159 [ 65.723763][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.723783][ T4691] RSP: 002b:00007fcd73447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.723855][ T4691] RAX: ffffffffffffffda RBX: 00007fcd74c75fa0 RCX: 00007fcd749ee159 [ 65.723868][ T4691] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 65.723881][ T4691] RBP: 00007fcd74a8506b R08: 0000000000000000 R09: 0000000000000000 [ 65.723894][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.723988][ T4691] R13: 00007fcd74c76038 R14: 00007fcd74c75fa0 R15: 00007fff4ba460e8 [ 65.724005][ T4691] [ 65.891423][ T4697] loop4: detected capacity change from 0 to 512 [ 65.918782][ T4697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.927517][ T4697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 65.927685][ T4697] System zones: 1-12 [ 65.928322][ T4697] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.301: bad orphan inode 131072 [ 65.928457][ T4697] loop4: lost filesystem error report for type 5 error -117 [ 65.930039][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.930063][ C1] EXT4-fs (loop4): initial error at time 1789484879: ext4_orphan_get:1429 [ 65.930084][ C1] EXT4-fs (loop4): last error at time 1789484879: ext4_orphan_get:1429 [ 65.943580][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.031816][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.305780][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.305871][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.495757][ T4720] netlink: 52 bytes leftover after parsing attributes in process `syz.2.308'. [ 66.526176][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 66.526192][ T29] audit: type=1326 audit(1789484880.432:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.526217][ T29] audit: type=1326 audit(1789484880.432:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.526241][ T29] audit: type=1326 audit(1789484880.432:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.528663][ T29] audit: type=1326 audit(1789484880.432:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.531497][ T4724] syzkaller0: entered promiscuous mode [ 66.531514][ T4724] syzkaller0: entered allmulticast mode [ 66.534311][ T29] audit: type=1326 audit(1789484880.442:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.534340][ T29] audit: type=1326 audit(1789484880.442:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.534367][ T29] audit: type=1326 audit(1789484880.442:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.539280][ T4722] netlink: 14 bytes leftover after parsing attributes in process `syz.4.309'. [ 66.539560][ T29] audit: type=1326 audit(1789484880.442:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.585428][ T29] audit: type=1326 audit(1789484880.493:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd749ee159 code=0x7ffc0000 [ 66.585462][ T29] audit: type=1326 audit(1789484880.493:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.4.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcd749edec2 code=0x7ffc0000 [ 66.720516][ T4745] siw: device registration error -23 [ 66.721408][ T4722] bond0 (unregistering): Released all slaves [ 66.777478][ T4729] tipc: Enabled bearer , priority 0 [ 66.779007][ T4744] tipc: Resetting bearer [ 66.783284][ T4723] tipc: Resetting bearer [ 66.788328][ T4723] tipc: Disabling bearer [ 66.913758][ T4765] tc action pedit 'at' offset 5 out of bounds [ 67.061891][ T4761] loop2: detected capacity change from 0 to 512 [ 67.088969][ T4761] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.089441][ T4761] ext4: Bad value for 'max_dir_size_kb' [ 67.134084][ T4767] loop3: detected capacity change from 0 to 512 [ 67.152426][ T4767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.163194][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 67.163967][ T4767] System zones: 1-12 [ 67.168459][ T4767] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.314: bad orphan inode 131072 [ 67.168545][ T4767] loop3: lost filesystem error report for type 5 error -117 [ 67.188020][ T4767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.429713][ T4820] tipc: Enabled bearer , priority 0 [ 67.430014][ T4820] syzkaller0: entered promiscuous mode [ 67.430036][ T4820] syzkaller0: entered allmulticast mode [ 67.437208][ T4820] tipc: Resetting bearer [ 67.513537][ T4819] tipc: Resetting bearer [ 67.515867][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.518438][ T4819] tipc: Disabling bearer [ 67.601612][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 67.609326][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.610193][ T37] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.698297][ T4831] loop4: detected capacity change from 0 to 512 [ 67.751989][ T4831] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 67.769990][ T4833] loop2: detected capacity change from 0 to 128 [ 68.261235][ T4833] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.261663][ T4843] loop0: detected capacity change from 0 to 512 [ 68.265641][ T4833] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.271051][ T4843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 68.271081][ T4843] System zones: 1-12 [ 68.271681][ T4843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.325: missing EA_INODE flag [ 68.271706][ T4843] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.271864][ T4843] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.325: error while reading EA inode 12 err=-117 [ 68.271944][ T4843] loop0: lost filesystem error report for type 5 error -117 [ 68.272091][ T4843] EXT4-fs (loop0): 1 orphan inode deleted [ 68.272463][ T4843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.285183][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 68.312044][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.379435][ T4847] hub 1-0:1.0: USB hub found [ 68.381985][ T4847] hub 1-0:1.0: 8 ports detected [ 68.395832][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.411575][ T4847] netlink: 108 bytes leftover after parsing attributes in process `syz.3.326'. [ 68.583436][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 69.255368][ T4877] loop1: detected capacity change from 0 to 512 [ 69.274477][ T4877] EXT4-fs: Invalid want_extra_isize 1969 [ 69.370339][ T4881] loop3: detected capacity change from 0 to 128 [ 69.585256][ T4881] syz.3.338: attempt to access beyond end of device [ 69.585256][ T4881] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 69.590836][ T4881] syz.3.338: attempt to access beyond end of device [ 69.590836][ T4881] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 69.609886][ T4881] syz.3.338: attempt to access beyond end of device [ 69.609886][ T4881] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 69.610024][ T4881] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 69.610159][ T4881] syz.3.338: attempt to access beyond end of device [ 69.610159][ T4881] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 69.610209][ T4881] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 69.627277][ T4881] syz.3.338: attempt to access beyond end of device [ 69.627277][ T4881] loop3: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 69.642846][ T4881] syz.3.338: attempt to access beyond end of device [ 69.642846][ T4881] loop3: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 69.643113][ T4881] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 69.643238][ T4881] syz.3.338: attempt to access beyond end of device [ 69.643238][ T4881] loop3: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 69.643874][ T4881] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 69.649523][ T4881] syz.3.338: attempt to access beyond end of device [ 69.649523][ T4881] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 69.804000][ T4887] syz.3.338: attempt to access beyond end of device [ 69.804000][ T4887] loop3: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 69.804744][ T4887] syz.3.338: attempt to access beyond end of device [ 69.804744][ T4887] loop3: rw=2049, sector=218, nr_sectors = 32 limit=128 [ 69.807845][ T4881] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 69.807975][ T4881] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 69.856719][ T4881] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 69.858127][ T4881] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 69.886211][ T4881] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 69.886739][ T4881] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 70.065308][ T4868] loop0: detected capacity change from 0 to 8192 [ 70.322049][ T4892] syzkaller0: entered promiscuous mode [ 70.322080][ T4892] syzkaller0: entered allmulticast mode [ 70.510479][ T4907] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 70.510565][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.510632][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 70.523466][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 70.533254][ T4907] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 70.533276][ T4907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.533343][ T4907] vhci_hcd vhci_hcd.0: Device attached [ 70.577884][ T4573] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.616534][ T4905] team1: entered promiscuous mode [ 70.616657][ T4905] team1: entered allmulticast mode [ 70.618197][ T4905] 8021q: adding VLAN 0 to HW filter on device team1 [ 70.846564][ T4921] lo: entered promiscuous mode [ 71.058577][ T4921] tunl0: entered promiscuous mode [ 71.059697][ T4921] gre0: entered promiscuous mode [ 71.070761][ T4921] gretap0: entered promiscuous mode [ 71.078871][ T4921] erspan0: entered promiscuous mode [ 71.084973][ T4921] ip_vti0: entered promiscuous mode [ 71.086134][ T4921] ip6_vti0: entered promiscuous mode [ 71.087703][ T4921] sit0: entered promiscuous mode [ 71.094026][ T4921] ip6tnl0: entered promiscuous mode [ 71.095292][ T4921] ip6gre0: entered promiscuous mode [ 71.099441][ T4921] syz_tun: entered promiscuous mode [ 71.101264][ T4921] ip6gretap0: entered promiscuous mode [ 71.104012][ T4921] bridge0: entered promiscuous mode [ 71.105547][ T4921] vcan0: entered promiscuous mode [ 71.108592][ T4921] bond0: entered promiscuous mode [ 71.108727][ T4921] tipc: Resetting bearer [ 71.108761][ T4921] team0: entered promiscuous mode [ 71.111984][ T4921] dummy0: entered promiscuous mode [ 71.113164][ T4921] nlmon0: entered promiscuous mode [ 71.114114][ T4921] batadv0: entered promiscuous mode [ 71.115939][ T4921] vxcan0: entered promiscuous mode [ 71.116527][ T4921] vxcan1: entered promiscuous mode [ 71.117246][ T4921] veth0: entered promiscuous mode [ 71.118833][ T4921] veth1: entered promiscuous mode [ 71.121332][ T4921] wg0: entered promiscuous mode [ 71.123640][ T4921] wg1: entered promiscuous mode [ 71.127734][ T4921] wg2: entered promiscuous mode [ 71.128781][ T4921] veth0_to_bridge: entered promiscuous mode [ 71.130037][ T4921] bridge_slave_0: entered promiscuous mode [ 71.134893][ T4921] veth1_to_bridge: entered promiscuous mode [ 71.136075][ T4921] bridge_slave_1: entered promiscuous mode [ 71.137027][ T4921] veth0_to_bond: entered promiscuous mode [ 71.137226][ T4921] bond_slave_0: entered promiscuous mode [ 71.138365][ T4921] veth1_to_bond: entered promiscuous mode [ 71.139627][ T4921] bond_slave_1: entered promiscuous mode [ 71.144024][ T4921] veth0_to_team: entered promiscuous mode [ 71.145181][ T4921] team_slave_0: entered promiscuous mode [ 71.147961][ T4921] veth1_to_team: entered promiscuous mode [ 71.148948][ T4921] team_slave_1: entered promiscuous mode [ 71.149110][ T4921] veth0_to_batadv: entered promiscuous mode [ 71.150618][ T4921] batadv_slave_0: entered promiscuous mode [ 71.151961][ T4921] veth1_to_batadv: entered promiscuous mode [ 71.157343][ T4921] batadv_slave_1: entered promiscuous mode [ 71.159881][ T4921] xfrm0: entered promiscuous mode [ 71.161585][ T4921] veth0_to_hsr: entered promiscuous mode [ 71.164024][ T4921] veth1_to_hsr: entered promiscuous mode [ 71.171493][ T4921] hsr0: entered promiscuous mode [ 71.172391][ T3971] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 71.173287][ T4921] veth1_virt_wifi: entered promiscuous mode [ 71.174361][ T4921] veth0_virt_wifi: entered promiscuous mode [ 71.186683][ T4921] vlan1: entered promiscuous mode [ 71.189432][ T4921] macvlan0: entered promiscuous mode [ 71.192759][ T4921] macvlan1: entered promiscuous mode [ 71.193567][ T4921] ipvlan0: entered promiscuous mode [ 71.193747][ T4921] ipvlan1: entered promiscuous mode [ 71.198698][ T4921] macvtap0: entered promiscuous mode [ 71.199492][ T4921] macsec0: entered promiscuous mode [ 71.200714][ T4921] geneve0: entered promiscuous mode [ 71.202632][ T4921] geneve1: entered promiscuous mode [ 71.206446][ T4921] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 71.209930][ T4921] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 71.215907][ T4921] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 71.222138][ T4921] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 71.225800][ T4921] bond1: entered promiscuous mode [ 71.226427][ T4921] vrf0: entered promiscuous mode [ 71.226488][ T4921] vrf1: entered promiscuous mode [ 71.242607][ T4573] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.242664][ T4573] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.242747][ T4573] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.242782][ T4573] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.335086][ T4910] vhci_hcd: connection closed [ 71.335279][ T4470] vhci_hcd vhci_hcd.4: stop threads [ 71.335298][ T4470] vhci_hcd vhci_hcd.4: release socket [ 71.335317][ T4470] vhci_hcd vhci_hcd.4: disconnect device [ 71.336461][ T4908] vhci_hcd: connection reset by peer [ 71.338662][ T4470] vhci_hcd vhci_hcd.4: stop threads [ 71.338678][ T4470] vhci_hcd vhci_hcd.4: release socket [ 71.338699][ T4470] vhci_hcd vhci_hcd.4: disconnect device [ 71.907156][ T4934] loop2: detected capacity change from 0 to 1024 [ 71.907816][ T4934] EXT4-fs: Ignoring removed orlov option [ 71.965826][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.984344][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 71.984366][ T29] audit: type=1400 audit(1789484885.990:716): avc: denied { read append } for pid=4936 comm="syz.1.363" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.984419][ T29] audit: type=1400 audit(1789484885.990:717): avc: denied { ioctl open } for pid=4936 comm="syz.1.363" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.995496][ T4941] loop1: detected capacity change from 0 to 1024 [ 71.997092][ T4941] EXT4-fs: Ignoring removed orlov option [ 71.997206][ T4941] EXT4-fs: Ignoring removed orlov option [ 72.005965][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.057716][ T4937] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 72.099509][ T29] audit: type=1400 audit(1789484886.061:718): avc: denied { mac_admin } for pid=4936 comm="syz.1.363" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.099583][ T29] audit: type=1400 audit(1789484886.061:719): avc: denied { relabelto } for pid=4936 comm="syz.1.363" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 72.248586][ T4928] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 72.378173][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.557080][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.565727][ T3644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.232649][ T4958] loop1: detected capacity change from 0 to 512 [ 73.302259][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 73.314357][ T4958] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.357: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 73.314467][ T4958] loop1: lost filesystem error report for type 5 error -117 [ 73.322808][ T4958] EXT4-fs (loop1): Remounting filesystem read-only [ 73.323194][ T4958] EXT4-fs (loop1): 1 orphan inode deleted [ 73.342565][ T4958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.347635][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 73.347651][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 73.347876][ T4965] bond0: left promiscuous mode [ 73.348626][ T4965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.351215][ T4965] bond2: (slave bond0): Enslaving as an active interface with an up link [ 73.364673][ T4965] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 73.364729][ T4965] netlink: 152 bytes leftover after parsing attributes in process `syz.3.360'. [ 73.366141][ T4965] .`: renamed from bond0 (while UP) [ 73.368930][ T29] audit: type=1400 audit(1789484887.387:720): avc: denied { write } for pid=4957 comm="syz.1.357" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.369227][ T29] audit: type=1400 audit(1789484887.387:721): avc: denied { lock } for pid=4969 comm="syz.4.362" path="socket:[8863]" dev="sockfs" ino=8863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 73.462923][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.479010][ T4967] loop0: detected capacity change from 0 to 512 [ 73.484742][ T4967] EXT4-fs: dax option not supported [ 73.529108][ T4980] loop0: detected capacity change from 0 to 512 [ 73.539326][ T4980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.539439][ T4980] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.591625][ T29] audit: type=1400 audit(1789484887.610:722): avc: denied { remount } for pid=4979 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.594220][ T4980] ext4: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777ž®·¾åct±]òBð+ Åvr”Q JÏ_+�³;žF;Ð5}¸Ûùõœ»ÅkÖ¶%FZo’ò'É!$1@Ç«ñ•éó|nÓ7Ñá!q»Edzê0Øæép' [ 73.609293][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609308][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609318][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609328][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609337][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609347][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609432][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609442][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609451][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609461][ T4985] tc action pedit unable to extract header offset for header type (0x4) [ 73.609502][ T4985] 0: reclassify loop, rule prio 0, protocol 800 [ 73.626584][ T29] audit: type=1400 audit(1789484887.651:723): avc: denied { write } for pid=4979 comm="syz.0.368" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.733468][ T29] audit: type=1400 audit(1789484887.752:724): avc: denied { bind } for pid=4989 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.733509][ T29] audit: type=1400 audit(1789484887.752:725): avc: denied { name_bind } for pid=4989 comm="syz.1.370" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.861467][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.868226][ T4992] batman_adv: batadv0: Adding interface: vlan0 [ 73.868237][ T4992] batman_adv: batadv0: The MTU of interface vlan0 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.868330][ T4992] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 73.998342][ T4998] hub 1-0:1.0: USB hub found [ 73.998598][ T4998] hub 1-0:1.0: 8 ports detected [ 74.195321][ T4997] loop0: detected capacity change from 0 to 512 [ 74.361181][ T4997] EXT4-fs: test_dummy_encryption option not supported [ 74.372772][ T5000] loop1: detected capacity change from 0 to 512 [ 74.759757][ T4997] loop0: detected capacity change from 0 to 512 [ 74.821770][ T4997] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.826682][ T4997] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 74.831429][ T4997] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 74.832973][ T4997] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.833023][ T4997] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.836267][ T4997] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.372: couldn't read orphan inode 13 (err -117) [ 74.836306][ T4997] loop0: lost filesystem error report for type 5 error -117 [ 74.843767][ T4997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.887416][ T5019] loop1: detected capacity change from 0 to 512 [ 74.888158][ T5019] EXT4-fs: Ignoring removed orlov option [ 74.888647][ T5019] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.309537][ T5019] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.378: corrupted xattr block 252: invalid header [ 75.309570][ T5019] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.310192][ T5019] EXT4-fs (loop1): Remounting filesystem read-only [ 75.310212][ T5019] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 75.310268][ T5019] EXT4-fs (loop1): 1 orphan inode deleted [ 75.310707][ T5019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.320366][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.379992][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.388301][ T5028] loop0: detected capacity change from 0 to 512 [ 75.442913][ T5028] EXT4-fs (loop0): 1 orphan inode deleted [ 75.447525][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.449303][ T5028] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.452700][ T5032] loop4: detected capacity change from 0 to 8192 [ 75.473173][ T4573] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:144: Failed to release dquot type 1 [ 75.478778][ T5036] syzkaller0: entered promiscuous mode [ 75.478795][ T5036] syzkaller0: entered allmulticast mode [ 75.613460][ T5044] : port 1(ip6gretap0) entered blocking state [ 75.613495][ T5044] : port 1(ip6gretap0) entered disabled state [ 75.613554][ T5044] ip6gretap0: entered allmulticast mode [ 75.621005][ T5039] ip6gretap0: left allmulticast mode [ 75.621978][ T5039] : port 1(ip6gretap0) entered disabled state [ 75.658037][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.753917][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753928][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753937][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753945][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753954][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753961][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753969][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753977][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753986][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.753994][ T5059] tc action pedit offset must be on 32 bit boundaries [ 75.754091][ T5059] TC_ACT_REPEAT abuse ? [ 75.993417][ T5068] ext4: Unknown parameter 'euid' [ 76.049238][ T5074] EXT4-fs (loop1): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.049304][ T5074] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.088025][ T5068] FAULT_INJECTION: forcing a failure. [ 76.088025][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 76.088148][ T5068] CPU: 1 UID: 0 PID: 5068 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.088236][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.088307][ T5068] Call Trace: [ 76.088314][ T5068] [ 76.088322][ T5068] __dump_stack+0x1d/0x30 [ 76.088374][ T5068] dump_stack_lvl+0x95/0xd0 [ 76.088399][ T5068] dump_stack+0x15/0x1b [ 76.088459][ T5068] should_fail_ex+0x262/0x280 [ 76.088505][ T5068] ? virtual_ncidev_open+0x34/0x130 [ 76.088589][ T5068] should_failslab+0x8c/0xb0 [ 76.088624][ T5068] __kmalloc_cache_noprof+0x7a/0x400 [ 76.088706][ T5068] ? virtual_ncidev_open+0x34/0x130 [ 76.088741][ T5068] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 76.088777][ T5068] virtual_ncidev_open+0x34/0x130 [ 76.088856][ T5068] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 76.088924][ T5068] misc_open+0x1df/0x220 [ 76.088954][ T5068] chrdev_open+0x2eb/0x3a0 [ 76.089045][ T5068] do_dentry_open+0x49f/0xa60 [ 76.089067][ T5068] ? __pfx_chrdev_open+0x10/0x10 [ 76.089126][ T5068] vfs_open+0x37/0x1e0 [ 76.089149][ T5068] path_openat+0xc01/0x10d0 [ 76.089182][ T5068] ? tick_program_event+0x79/0xc0 [ 76.089216][ T5068] do_file_open+0x16c/0x290 [ 76.089256][ T5068] do_sys_openat2+0xa0/0x130 [ 76.089283][ T5068] __x64_sys_openat+0xf2/0x120 [ 76.089327][ T5068] x64_sys_call+0x1f72/0x2550 [ 76.089357][ T5068] do_syscall_64+0x112/0x360 [ 76.089444][ T5068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.089468][ T5068] RIP: 0033:0x7fc0e153e159 [ 76.089483][ T5068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.089533][ T5068] RSP: 002b:00007fc0dff97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.089553][ T5068] RAX: ffffffffffffffda RBX: 00007fc0e17c5fa0 RCX: 00007fc0e153e159 [ 76.089568][ T5068] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 76.089584][ T5068] RBP: 00007fc0e15d506b R08: 0000000000000000 R09: 0000000000000000 [ 76.089597][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.089610][ T5068] R13: 00007fc0e17c6038 R14: 00007fc0e17c5fa0 R15: 00007fffd17041c8 [ 76.089644][ T5068] [ 76.097806][ T5072] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.116693][ T5072] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.129949][ T5072] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 76.131195][ T5072] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.395: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.131247][ T5072] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 76.134257][ T5072] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.395: couldn't read orphan inode 13 (err -117) [ 76.134296][ T5072] loop0: lost filesystem error report for type 5 error -117 [ 76.146838][ T5072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.191853][ T3971] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 76.331758][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 76.529795][ T5068] loop2: p1 p2 p3 [ 76.595964][ T5063] ================================================================== [ 76.596002][ T5063] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 76.596043][ T5063] [ 76.596046][ T5063] read-write to 0xffff88811ace1900 of 8 bytes by interrupt on cpu 1: [ 76.596065][ T5063] __xa_clear_mark+0xf5/0x1e0 [ 76.596088][ T5063] __folio_end_writeback+0xe7/0x530 [ 76.596122][ T5063] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 76.596148][ T5063] folio_end_writeback+0x1c/0x70 [ 76.596171][ T5063] ext4_finish_bio+0x454/0x770 [ 76.596196][ T5063] ext4_end_bio+0x281/0x3a0 [ 76.596214][ T5063] bio_endio+0x390/0x570 [ 76.596239][ T5063] blk_update_request+0x33a/0x710 [ 76.596263][ T5063] scsi_end_request+0x4b/0x4c0 [ 76.596287][ T5063] scsi_io_completion+0x7f/0x1d0 [ 76.596311][ T5063] scsi_finish_command+0x1c7/0x1e0 [ 76.596340][ T5063] scsi_complete+0x155/0x4d0 [ 76.596366][ T5063] blk_done_softirq+0x77/0xb0 [ 76.596384][ T5063] handle_softirqs+0xcc/0x2a0 [ 76.596403][ T5063] __irq_exit_rcu+0x44/0xe0 [ 76.596424][ T5063] common_interrupt+0x83/0x90 [ 76.596445][ T5063] asm_common_interrupt+0x26/0x40 [ 76.596468][ T5063] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 76.596488][ T5063] hrtimer_start_range_ns_user+0x12e/0x150 [ 76.596507][ T5063] do_nanosleep+0x73/0x360 [ 76.596537][ T5063] hrtimer_nanosleep+0xf2/0x290 [ 76.596560][ T5063] common_nsleep+0x62/0x80 [ 76.596581][ T5063] __se_sys_clock_nanosleep+0x223/0x260 [ 76.596600][ T5063] __x64_sys_clock_nanosleep+0x55/0x70 [ 76.596618][ T5063] x64_sys_call+0x244d/0x2550 [ 76.596645][ T5063] do_syscall_64+0x112/0x360 [ 76.596673][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.596693][ T5063] [ 76.596700][ T5063] read to 0xffff88811ace1900 of 8 bytes by task 5063 on cpu 0: [ 76.596719][ T5063] xas_find_marked+0x211/0x650 [ 76.596755][ T5063] filemap_get_folios_tag+0xf7/0x400 [ 76.596783][ T5063] filemap_write_and_wait_range+0x1f5/0x370 [ 76.596819][ T5063] ext4_file_write_iter+0xc93/0x1020 [ 76.596843][ T5063] vfs_write+0x57f/0x9a0 [ 76.596868][ T5063] ksys_write+0xdc/0x1a0 [ 76.596895][ T5063] __x64_sys_write+0x40/0x50 [ 76.596927][ T5063] x64_sys_call+0x154e/0x2550 [ 76.596967][ T5063] do_syscall_64+0x112/0x360 [ 76.597000][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.597019][ T5063] [ 76.597023][ T5063] value changed: 0x00000000fffffff0 -> 0x00000000ffff0000 [ 76.597036][ T5063] [ 76.597040][ T5063] Reported by Kernel Concurrency Sanitizer on: [ 76.597052][ T5063] CPU: 0 UID: 0 PID: 5063 Comm: syz.4.390 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.597081][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.597093][ T5063] ================================================================== [ 76.607598][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.631794][ T5096] syzkaller0: entered promiscuous mode [ 76.631843][ T5096] syzkaller0: entered allmulticast mode [ 76.715503][ T5100] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 76.721290][ T5100] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.725224][ T5100] ext2 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.763406][ T3801] udevd[3801]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.764123][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 76.793012][ T5025] udevd[5025]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 77.477318][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.