last executing test programs: 7.027956745s ago: executing program 1 (id=282): socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x8000000000000001, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 6.153627566s ago: executing program 1 (id=292): socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x8000000000000001, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 5.739340976s ago: executing program 2 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x7f) 5.14566569s ago: executing program 1 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='base=0x20000000 size=0', 0x16) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x7f) 4.974116384s ago: executing program 0 (id=301): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f0000000100)='&\x00', 0x1, 0x5f, 0x0) mq_notify(r2, &(0x7f0000000340)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000440, &(0x7f0000000340), 0x1, 0x593, &(0x7f0000002a40)="$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") r3 = fsmount(r1, 0x0, 0x5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000340)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x57) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) close_range(r0, 0xffffffffffffffff, 0x0) 4.966231374s ago: executing program 4 (id=302): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, r3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10a0804, &(0x7f00000000c0)={[], [{@fowner_gt={'fowner>', r3}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '802.15.4 MAC\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}, 0x1, 0xb69, &(0x7f0000000c00)="$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") signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0xe}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x24, &(0x7f0000000000), 0x4) listen(r8, 0x800) epoll_pwait2(r7, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r9 = syz_genetlink_get_family_id$tipc2(0x0, r6) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x80, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11631523}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) syz_emit_ethernet(0xe5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa001101aa33e5c1a846020040ebaa3dc429e541670df6c0c2cf54258153fe19035b0467154deec72639b407ade0abadcec38b0ac75ac5f8e3356a11d5adc9dcb41e2ad6fc891c439c23d79cff8a1de15426b42981136eba3ab3a973f5a2e6b45398d62f9995471aab3835bb3c3acd088aea96147529df8a734bb912d94fed82df3f10a1f211d31df4c6753639383aea75c6c27db0e012cef7ef9dd4a5e932edf9a6283155fdf93c10d9209bce1c68d3e7502c3f20480285352d9835a40053486cc9974d81b192ea74e3498c26814d6bf6ea94ed7ccb4141c9cd"], 0x0) 4.927407385s ago: executing program 3 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x150, 0x0, 0x2, 0x401, 0x0, 0x0, {0x4, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x0, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x5, 0x1, 0x1, 0x0, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="dc8dc38d760c0b8caacbfa19c6a35a18883775d272c579ff3386effc0c4934000000000000000000", 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) fsopen(0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.71934794s ago: executing program 2 (id=304): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xa}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000700000009"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, 0x0, 0x0, 0x26181ae3cde4511b}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020"], 0xfe33) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x29}}, @ip_retopts={{0x14, 0x0, 0x34, {[@ra={0x94, 0x4}]}}}], 0x30}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2b02, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000002600), 0x40000, 0x0) fchown(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) ioperm(0x0, 0x3, 0x2) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1981}, &(0x7f0000000140), 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x4d]}}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32, @ANYBLOB="100006"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) syz_emit_ethernet(0x76, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "17c1ff2bbd7f1499f26ff189e3606b5d"}}}}}}}, 0x0) 4.471594196s ago: executing program 3 (id=305): ioperm(0x6, 0x9, 0x824) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x240441c6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc3f30da9804009d7b1038330f5132c3ffb13706a771a25c0792bb8ff4c7e220bc1b0857395cd18b08c83ceb7354eae7370b7cc311ba5b5ae0098c6bae837b6bd4b04c07041bef8a6db8825ea3235fbc608d9ab644cae749f9bd6688511d23e7a0d0fa555a2e8234b6b26c61267bbee25552363359509f76ca5414", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0x0, 0xfffffffffffffffc, 0x0, 0xcfc, 0x7}, {0xfffffffffffffffa, 0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d5, 0x2b}, 0x0, @in=@local, 0x0, 0x3}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="022d000002c89a80851d37d8451f7d33b83408d716dcaa3021069888982ce14d659cfe841290c705522985d94c1e6a7379a8b7abfb1a650504adadd0ddb12a13a9c9ee5080c931542b8b2864c03a16eb362a09e5d9b831d4e79a3dcdcfe26033fac529fad8b47e7d179d8c2800818bd4a39d30945011e425a39710d3342ae2335ba05a204042aa77df2d3dd83d5cdb96dacbe8bfb92b4b9f9f2a61f9e7fdf868740aae6c39d0496317cf048faf53d217de65ccf0bdd703887af2be786f4f44b81e703d026f47c8d34da4dc1bc9b1ab4778668cef8b682e5bf3bb8220309e"], 0x10}}, 0x8c0) close(r5) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001800128008000100677265000c00028008000700ac1414aa08000a00", @ANYRES32=r4, @ANYBLOB="2c82b1857a4ca91c086ad210c219dcd1ad5ac7db76efbb6c3fa9218cf122d5d8278fce2bfeabfaf84ba7795cfd73586c13c90a19f5411e737a1c912a130fcc962a566bff8219621ccc67548466c5966e03d4c56e83b20ae8d5e1fcedd8a785a50c453b80fa6daf4da921302dcb56d065007d0a5e5977758c35dad3d434d09ee70797d0805d210f172c2dc6484b34a681e8362e84a86d23fc0367e5c913763dca8568f1a875c7c3116ce9c8ded10dd47bea2e1771ac23ba2488671ee206c843fe"], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4040040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01004800000000000000280000002800000008000000000000000200000d02"], 0x0, 0x48}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.175743873s ago: executing program 1 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x150, 0x0, 0x2, 0x401, 0x0, 0x0, {0x4, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x0, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x5, 0x1, 0x1, 0x0, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000780)={0x0, 0x5}, 0x8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="dc8dc38d760c0b8caacbfa19c6a35a18883775d272c579ff3386effc0c4934000000000000000000", 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) fsopen(0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.173558622s ago: executing program 2 (id=307): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f0000000100)='&\x00', 0x1, 0x5f, 0x0) mq_notify(r2, &(0x7f0000000340)={0x0, 0xd, 0x2, @thr={0x0, 0x0}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000440, &(0x7f0000000340), 0x1, 0x593, &(0x7f0000002a40)="$eJzs3U1sHFcdAPD/bGzvOnGaFHooCGgohYCirmOnjape2lyQoKpAKpx6SC17Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQAooAtVICA2a8Wyyu9lNtvHHxPbvJ432vfn6vzfandl58/ECOLEuRMR2RExFxHsRcS6SfHxSDPHm7pDN9+m9rcWde1uLSaTpO/+cKNawtdidv+tMRPxkSKxqT7q9sbmy0Gw21or8bGf19mx7Y/Plm6sLy43lxq35+atzVy+/duXV+X2r6wurv7377Ztv/fD3v/vyJ3/a/taPszK/UUzL6tYza5Km6d4DvtHdLpMxU4yqRES25d7a+9qfCqeK+kyVXRCeSPZ9/FxEvFik76uVVyYA4GCl6blIz/XmH6j05dI0GTIPAHD0ZOf8M5FU6sX5/0xUKvV63oZXey5OV5qtdufSjdb6raTbxDdZuXGz2bictxVGVGMyyfJzEXE+H3bz8wP5KxHxbET8rDqd5+uLreZSKf94AIAzA8f/f1ez4391nEVdIQCAo8yRHABOnoeP/5OllAMAODzO/wHg5Ok5/o915R8AOPpqA8/+D5Umh1IWAOBwDG3/f/fsg/TzycArvgCAo871fwA4Ub7/9tvZkO6kSf7+66X3N9ZXWu+/vNRor9RX1xfri6212/XlVms5f2fP6pBV3OnNNFut23OvxPoHs51GuzPb3ti8vtpav9W5nr/X+3rDgwUAUL5nX/j4L0lEbL8+nQ/R7cvh8TcEAEdcJWK67DIA5ThVdgGA0kyUXQCgNNrjgcfd3Dv0FqHpiPhw9DIaFuDpdvELI9r/B/8b9F8P+N8+9I4NlKz4WWsGgBNob+3/Wg/gKHv0gd+DQXCcpWmiP38AOGHGOIN3iyAcc090/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOuJl8SCr1oi/wmahU6vWIsxFxPiaTGzebjcsR8UxE/Lk6Wc3yc2UXGgDYo8rfk6L/r4vnXpoZnDqV/Keaf0bEj37xzs8/WOh0uw68P77zYT6+szY/NED14OsAAPSYGBzRPU7nnz0n8p/e21rsDodZwLvXpu/H37m3tfigP+KJovC1yMad/lfSV5lknzom3r4TEc8P1r9yf/r5oufTwfhZ7LMHFj/yGs70xe//G1XJp+1+Ztvi89NjxtuHMsNx8fG1iHhz2O+vEhfyz+L3N9G/M63FTx/euT6Bu9d2Q+yku/u/nZ742fq/d7aW72uG7f8ujBvjlT98Z+S0O6fSL05EdGPv9Ox/dtXy1LD4L40Oeb4389cvfeXFURsr/WXExXhU/N3UbGf19mx7Y/M33/3oj8uN5cat+fmrc1cvv3bl1fnZvI16tmipHtJR9T9ev/TM6PpHnB4Rv9Zb/6mH6//10fXv86v/vvfuVx8R/5tfGxa/Es/1xh/Y/tkx8RuxNlb8hdMfjey+O4u/NKL+E33xp/qWy8ZdGlzZiC/kJ3/bXBqroADAoWhvbK4sNJuNtXESldhcWeieaI69VF9i+omWGjMRB7bm4YnJvo1QO6hYZ0ZM+vVnXuFkHOr22bfEnc8wc7Wcop6KZrc96rEzF/Nt7yVomu6hzBfGmKekHRJwaB786MsuCQAAAAAAAAAAAAAAMEr7B8Ur//b5oajeh+HKriMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADH1/8DAAD//7RVxko=") r3 = fsmount(r1, 0x0, 0x5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000340)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x57) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) close_range(r0, 0xffffffffffffffff, 0x0) 4.131323344s ago: executing program 0 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl(0xffffffffffffffff, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x7f) 3.700421044s ago: executing program 2 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}, {0x85, 0x0, 0x0, 0x4b}}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 3.605369246s ago: executing program 4 (id=310): socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x8000000000000001, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3.041462059s ago: executing program 0 (id=311): ftruncate(0xffffffffffffffff, 0x51a9497) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 3.02652188s ago: executing program 3 (id=312): r0 = socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0xc1551c105750eff5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "aba2b7b7b11fc4ad5e816cab0514add574b9414076303d49964218ca5dcc5f8d79a411921b0dba5f9e8af5352ec2f587073c18986d7ba53e618edb728b96c92f699a34a1f3261591675047102e6d24aa737803c7d8031c08ae178a1c3eb0f4b8f2c8a694ba03148f0618b26ef70aecde34db323a138a3979b1e9a1736523958906747955073a97f977fcd02e8b756529755a70e0388498e1f9583cbfb2395e392a036618d5023a2ebf34e0dc4c899500f131714a417010fcbb110c018af73140bd5dae310f44770dcfb51d88a2af6e1c4363d99a595aaedd979a7f16632f352bff836140198b5aa2fdf53ea7da88c3dd4c9ebad22a98c2fa0a0cc63c48a876c7"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xffffffdffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb, 0x400000}, {0x1ff, 0xffffffffe, 0x4053e5, 0x2}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x3502, 0x1, 0x3, 0x0, 0x6, 0xffbffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 2.398133064s ago: executing program 3 (id=313): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x300, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28004014}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000)=r8, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0xff09, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$NILFS_IOCTL_GET_VINFO(r6, 0xc0186e86, &(0x7f0000000440)={&(0x7f0000000300)=[{0xffffffff, 0xfffffffffffffff0, 0x4, 0x10001}, {0x6, 0x3, 0x7fffffff}, {0x25, 0xfffffffeffffffff, 0xffffffff, 0x7fffffffffffffff}, {0x10, 0x7, 0x100000000, 0x1}, {0x5, 0x5, 0x7ff, 0x8}, {0x9, 0x9, 0x3, 0x9}, {0xfffffffffffffffc, 0x40, 0x7f, 0x7fff}, {0xfffffffffffffffd, 0x100, 0x10001, 0x50}, {0x7a83, 0x10001, 0x0, 0x2}, {0x8, 0x9, 0x1000, 0x9e}], 0xa, 0x20, 0x5, 0xa}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.345600515s ago: executing program 3 (id=314): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbcec228000000080002000140"], 0x2c}}, 0x4004850) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20482, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="746172676574205043493a303a3130d4f6003a89"], 0x14) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) 2.14499731s ago: executing program 4 (id=315): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@setlink={0x28, 0x13, 0x25, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x560c, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) open_tree(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x7, 0xa}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wlan0\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 1.991457094s ago: executing program 4 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0', 0x16) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x7f) 1.834718217s ago: executing program 1 (id=317): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {0xb, 0xd}, {0x655e660f020c6d2a, 0xd}}}, 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x59) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080047f50024006500000502907864010102e000007a150fb26593a40f7701019404e25a00000014009078ac"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.817225658s ago: executing program 0 (id=318): socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0xc1551c105750eff5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.682673371s ago: executing program 2 (id=319): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xa}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000700000009"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, 0x0, 0x0, 0x26181ae3cde4511b}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x29}}, @ip_retopts={{0x14, 0x0, 0x34, {[@ra={0x94, 0x4}]}}}], 0x30}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2b02, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000002600), 0x40000, 0x0) fchown(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) ioperm(0x0, 0x3, 0x2) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x13290}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1981}, &(0x7f0000000140), 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x4d]}}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32, @ANYBLOB="100006"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) syz_emit_ethernet(0x76, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "17c1ff2bbd7f1499f26ff189e3606b5d"}}}}}}}, 0x0) 1.247460522s ago: executing program 3 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0d02, 0x0) socket(0xa, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 1.239631592s ago: executing program 0 (id=321): bpf$PROG_LOAD(0x5, 0x0, 0xc1551c105750eff5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xffffffdffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb, 0x400000}, {0x1ff, 0xffffffffe, 0x4053e5, 0x2}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in6=@empty, 0x3502, 0x1, 0x3, 0x0, 0x6, 0xffbffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 1.065558376s ago: executing program 4 (id=322): ftruncate(0xffffffffffffffff, 0x51a9497) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 583.411167ms ago: executing program 2 (id=323): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000"], 0x24, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newchain={0x0, 0x64, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {0xb, 0xd}, {0x655e660f020c6d2a, 0xd}}}, 0x50}, 0x1, 0x0, 0x0, 0x88000}, 0x59) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080047f50024006500000502907864010102e000007a150fb26593a40f7701019404e25a00000014009078ac"], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000030c0)={@local, @random="d1c7c73cf1bf", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x88f7}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 189.806156ms ago: executing program 1 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x150, 0x0, 0x2, 0x401, 0x0, 0x0, {0x4, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x0, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x5, 0x1, 0x1, 0x0, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="dc8dc38d760c0b8caacbfa19c6a35a18883775d272c579ff3386effc0c4934000000000000000000", 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) fsopen(0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.020551ms ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0', 0x16) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x7f) 0s ago: executing program 0 (id=326): socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x1, 0x40000}, 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): [ 19.532647][ T28] audit: type=1400 audit(1785468195.696:95): avc: denied { write } for pid=3146 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.600712][ T28] audit: type=1400 audit(1785468195.766:96): avc: denied { write } for pid=3146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.636983][ T28] audit: type=1400 audit(1785468195.806:97): avc: denied { write } for pid=3160 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.212767][ T28] audit: type=1400 audit(1785468198.376:98): avc: denied { transition } for pid=3170 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.235352][ T28] audit: type=1400 audit(1785468198.376:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.259725][ T28] audit: type=1400 audit(1785468198.376:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[2598]" dev="pipefs" ino=2598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.282152][ T28] audit: type=1400 audit(1785468198.376:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.301120][ T28] audit: type=1400 audit(1785468198.376:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.201508][ T28] audit: type=1400 audit(1785468199.366:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.248435][ T28] audit: type=1400 audit(1785468199.366:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.545402][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 24.545419][ T28] audit: type=1400 audit(1785468200.706:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 31.227487][ T28] audit: type=1400 audit(1785468207.396:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.250628][ T28] audit: type=1400 audit(1785468207.416:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.253039][ T3286] cgroup: Unknown subsys name 'net' [ 31.278480][ T28] audit: type=1400 audit(1785468207.446:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.416851][ T3286] cgroup: Unknown subsys name 'cpuset' [ 31.423108][ T3286] cgroup: Unknown subsys name 'rlimit' [ 31.533918][ T28] audit: type=1400 audit(1785468207.696:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.558393][ T28] audit: type=1400 audit(1785468207.696:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.585027][ T28] audit: type=1400 audit(1785468207.696:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.605554][ T28] audit: type=1400 audit(1785468207.696:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.624225][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.626022][ T28] audit: type=1400 audit(1785468207.696:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.659435][ T28] audit: type=1400 audit(1785468207.696:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.682759][ T28] audit: type=1400 audit(1785468207.726:135): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.697777][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.956921][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.964059][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.971352][ T3298] bridge_slave_0: entered allmulticast mode [ 32.977793][ T3298] bridge_slave_0: entered promiscuous mode [ 32.998032][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.005301][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.012500][ T3298] bridge_slave_1: entered allmulticast mode [ 33.019094][ T3298] bridge_slave_1: entered promiscuous mode [ 33.031365][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.038601][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.045966][ T3303] bridge_slave_0: entered allmulticast mode [ 33.052451][ T3303] bridge_slave_0: entered promiscuous mode [ 33.072205][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.079445][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.086621][ T3303] bridge_slave_1: entered allmulticast mode [ 33.093081][ T3303] bridge_slave_1: entered promiscuous mode [ 33.134397][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.151892][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.164059][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.175126][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.200615][ T3298] team0: Port device team_slave_0 added [ 33.219580][ T3298] team0: Port device team_slave_1 added [ 33.256752][ T3303] team0: Port device team_slave_0 added [ 33.268868][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.275867][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.301971][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.316083][ T3303] team0: Port device team_slave_1 added [ 33.328878][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.335919][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.361933][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.413126][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.420317][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.427482][ T3300] bridge_slave_0: entered allmulticast mode [ 33.433986][ T3300] bridge_slave_0: entered promiscuous mode [ 33.443503][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.450614][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.457820][ T3304] bridge_slave_0: entered allmulticast mode [ 33.464294][ T3304] bridge_slave_0: entered promiscuous mode [ 33.471248][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.478293][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.504377][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.515986][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.523008][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.548974][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.562522][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.569845][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.577072][ T3300] bridge_slave_1: entered allmulticast mode [ 33.583569][ T3300] bridge_slave_1: entered promiscuous mode [ 33.592967][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.600259][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.607450][ T3304] bridge_slave_1: entered allmulticast mode [ 33.614149][ T3304] bridge_slave_1: entered promiscuous mode [ 33.633373][ T3298] hsr_slave_0: entered promiscuous mode [ 33.639461][ T3298] hsr_slave_1: entered promiscuous mode [ 33.682751][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.692982][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.702281][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.709442][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.716654][ T3306] bridge_slave_0: entered allmulticast mode [ 33.723235][ T3306] bridge_slave_0: entered promiscuous mode [ 33.736842][ T3303] hsr_slave_0: entered promiscuous mode [ 33.742962][ T3303] hsr_slave_1: entered promiscuous mode [ 33.748857][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.754638][ T3303] Cannot create hsr debugfs directory [ 33.761136][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.771299][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.789942][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.797091][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.804277][ T3306] bridge_slave_1: entered allmulticast mode [ 33.810774][ T3306] bridge_slave_1: entered promiscuous mode [ 33.832169][ T3300] team0: Port device team_slave_0 added [ 33.845937][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.860486][ T3300] team0: Port device team_slave_1 added [ 33.874795][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.889938][ T3304] team0: Port device team_slave_0 added [ 33.914720][ T3304] team0: Port device team_slave_1 added [ 33.936748][ T3306] team0: Port device team_slave_0 added [ 33.947112][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.954128][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.980127][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.997068][ T3306] team0: Port device team_slave_1 added [ 34.002962][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.009971][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.035974][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.047020][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.053997][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.079962][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.101649][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.108646][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.134614][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.162705][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.169804][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.195946][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.207806][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.214763][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.240752][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.288795][ T3300] hsr_slave_0: entered promiscuous mode [ 34.294828][ T3300] hsr_slave_1: entered promiscuous mode [ 34.300795][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.306557][ T3300] Cannot create hsr debugfs directory [ 34.333039][ T3304] hsr_slave_0: entered promiscuous mode [ 34.339113][ T3304] hsr_slave_1: entered promiscuous mode [ 34.345094][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.350880][ T3304] Cannot create hsr debugfs directory [ 34.374127][ T3306] hsr_slave_0: entered promiscuous mode [ 34.380245][ T3306] hsr_slave_1: entered promiscuous mode [ 34.386096][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.391946][ T3306] Cannot create hsr debugfs directory [ 34.451730][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.460315][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.486616][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.495233][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.520424][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.529057][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.554258][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.563210][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.599932][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.608847][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.616603][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.625266][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.644586][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.653208][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.665204][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.674094][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.700496][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.709226][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.717092][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.725716][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.733498][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.742182][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.750048][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.758810][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.798454][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.807766][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.815294][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.824087][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.832592][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.841263][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.858794][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.867737][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.890264][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.898854][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.906838][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.915228][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.930797][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.939875][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.948231][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.956944][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.984837][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.998344][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.015370][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.022479][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.035305][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.058934][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.066028][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.076217][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.106848][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.126713][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.137061][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.145629][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.152750][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.165073][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.172238][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.188204][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.195410][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.204123][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.211216][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.224732][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.242120][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.249224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.258184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.265281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.293973][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.341947][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.362793][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.369935][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.397161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.404284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.578700][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.609113][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.621246][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.646290][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.697260][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.804706][ T3298] veth0_vlan: entered promiscuous mode [ 35.823761][ T3306] veth0_vlan: entered promiscuous mode [ 35.838631][ T3298] veth1_vlan: entered promiscuous mode [ 35.849798][ T3306] veth1_vlan: entered promiscuous mode [ 35.876592][ T3298] veth0_macvtap: entered promiscuous mode [ 35.888474][ T3298] veth1_macvtap: entered promiscuous mode [ 35.895683][ T3303] veth0_vlan: entered promiscuous mode [ 35.912132][ T3306] veth0_macvtap: entered promiscuous mode [ 35.920223][ T3306] veth1_macvtap: entered promiscuous mode [ 35.935036][ T3303] veth1_vlan: entered promiscuous mode [ 35.942986][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.952531][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.973601][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.981499][ T3304] veth0_vlan: entered promiscuous mode [ 35.992311][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.003607][ T2111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.024279][ T3300] veth0_vlan: entered promiscuous mode [ 36.030419][ T3304] veth1_vlan: entered promiscuous mode [ 36.058499][ T3300] veth1_vlan: entered promiscuous mode [ 36.066974][ T3303] veth0_macvtap: entered promiscuous mode [ 36.080425][ T3303] veth1_macvtap: entered promiscuous mode [ 36.105204][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.122548][ T3304] veth0_macvtap: entered promiscuous mode [ 36.132778][ T3300] veth0_macvtap: entered promiscuous mode [ 36.143023][ T3304] veth1_macvtap: entered promiscuous mode [ 36.150881][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.184571][ T3300] veth1_macvtap: entered promiscuous mode [ 36.190811][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.198369][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.210888][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.220494][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.241416][ T3505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3505 comm=syz.1.2 [ 36.253662][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.268455][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 36.268488][ T28] audit: type=1400 audit(1785468212.436:166): avc: denied { append } for pid=3504 comm="syz.1.2" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.283236][ T3506] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.317458][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.330693][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.384466][ T28] audit: type=1326 audit(1785468212.546:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.410793][ T28] audit: type=1326 audit(1785468212.546:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.432385][ T3506] tmpfs: Bad value for 'size' [ 36.439912][ T28] audit: type=1326 audit(1785468212.546:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.474300][ T28] audit: type=1326 audit(1785468212.546:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.500535][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.513269][ T28] audit: type=1326 audit(1785468212.546:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.539096][ T28] audit: type=1326 audit(1785468212.546:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.565339][ T28] audit: type=1326 audit(1785468212.546:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.592847][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.609528][ T28] audit: type=1326 audit(1785468212.546:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.638226][ T28] audit: type=1326 audit(1785468212.546:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3504 comm="syz.1.2" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8157e0e019 code=0x7ffc0000 [ 36.683572][ T3511] loop1: detected capacity change from 0 to 512 [ 36.686512][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.714361][ T3511] ======================================================= [ 36.714361][ T3511] WARNING: The mand mount option has been deprecated and [ 36.714361][ T3511] and is ignored by this kernel. Remove the mand [ 36.714361][ T3511] option from the mount to silence this warning. [ 36.714361][ T3511] ======================================================= [ 36.720153][ T318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.897918][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.917638][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.927282][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.951644][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.979440][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.226958][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.238448][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.275524][ T3511] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 37.426855][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.449465][ T3511] EXT4-fs (loop1): mount failed [ 37.797311][ T3519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3519 comm=syz.3.4 [ 37.810164][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.283821][ T3521] syz.2.3 (3521) used greatest stack depth: 10872 bytes left [ 38.343031][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.352189][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490928][ T318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.518263][ T3511] 9p: Bad value for 'wfdno' [ 38.528846][ T3535] Zero length message leads to an empty skb [ 38.578450][ T318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.636553][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.659878][ T3535] loop2: detected capacity change from 0 to 4096 [ 38.664364][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.728817][ T318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.751262][ T318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.775028][ T3539] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11'. [ 38.818435][ T318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.866915][ T3545] loop0: detected capacity change from 0 to 512 [ 38.909268][ T3545] ------------[ cut here ]------------ [ 38.914818][ T3545] EA inode 11 i_nlink=0 [ 38.914856][ T3545] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.0.12/3545 [ 38.929823][ T3545] Modules linked in: [ 38.933769][ T3545] CPU: 1 UID: 0 PID: 3545 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.943095][ T3545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.953344][ T3545] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 38.960102][ T3545] Code: 96 ba 96 ff 49 8d 7e 40 4c 8d 2d db 9a 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 e1 41 da 03 90 90 90 90 90 90 90 [ 38.979921][ T3545] RSP: 0018:ffffc900018bb648 EFLAGS: 00010246 [ 38.986026][ T3545] RAX: ffff888101712db0 RBX: ffff88810766cdf8 RCX: ffffffff81c29d66 [ 38.994152][ T3545] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3830 [ 39.002186][ T3545] RBP: 000000000000000b R08: 000188810766cdab R09: 0000000000000000 [ 39.010270][ T3545] R10: ffffc900018bb578 R11: 0001c900018bb578 R12: ffff88810766cda8 [ 39.018312][ T3545] R13: ffffffff871d3830 R14: ffff88810766cd60 R15: 0000000000000001 [ 39.026337][ T3545] FS: 00007fb60af276c0(0000) GS:ffff8882ae9cb000(0000) knlGS:0000000000000000 [ 39.035312][ T3545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.041958][ T3545] CR2: 00007f420df5f000 CR3: 000000011bcf4000 CR4: 00000000003506f0 [ 39.049982][ T3545] Call Trace: [ 39.053342][ T3545] [ 39.056358][ T3545] ext4_xattr_set_entry+0x78a/0x1050 [ 39.061696][ T3545] ext4_xattr_ibody_set+0x156/0x390 [ 39.066952][ T3545] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 39.072817][ T3545] __ext4_expand_extra_isize+0x246/0x280 [ 39.078615][ T3545] __ext4_mark_inode_dirty+0x290/0x3d0 [ 39.084148][ T3545] ext4_evict_inode+0x8b6/0xdf0 [ 39.089114][ T3545] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.094573][ T3545] evict+0x2a5/0x510 [ 39.098614][ T3545] iput+0x430/0x5a0 [ 39.102499][ T3545] ext4_process_orphan+0x1a4/0x1c0 [ 39.107726][ T3545] ext4_orphan_cleanup+0x6a6/0xa10 [ 39.112912][ T3545] ? ext4_register_li_request+0x403/0x440 [ 39.118778][ T3545] ext4_fill_super+0x33ab/0x3760 [ 39.123776][ T3545] ? set_blocksize+0x14c/0x270 [ 39.128716][ T3545] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.134100][ T3545] get_tree_bdev_flags+0x291/0x300 [ 39.139308][ T3545] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.144642][ T3545] get_tree_bdev+0x1f/0x30 [ 39.149146][ T3545] ext4_get_tree+0x1c/0x30 [ 39.153600][ T3545] vfs_get_tree+0x57/0x1d0 [ 39.158291][ T3545] do_new_mount+0x288/0x8d0 [ 39.162893][ T3545] path_mount+0x4ad/0xb90 [ 39.167333][ T3545] __se_sys_mount+0x28c/0x2e0 [ 39.172062][ T3545] __x64_sys_mount+0x67/0x80 [ 39.176778][ T3545] x64_sys_call+0x2d61/0x3020 [ 39.181568][ T3545] do_syscall_64+0x136/0x3c0 [ 39.186333][ T3545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.192351][ T3545] RIP: 0033:0x7fb60c4cf28a [ 39.196846][ T3545] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.216539][ T3545] RSP: 002b:00007fb60af26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.224989][ T3545] RAX: ffffffffffffffda RBX: 00007fb60af26ee0 RCX: 00007fb60c4cf28a [ 39.233053][ T3545] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb60af26ea0 [ 39.241101][ T3545] RBP: 0000200000000180 R08: 00007fb60af26ee0 R09: 0000000000000000 [ 39.249134][ T3545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 39.257165][ T3545] R13: 00007fb60af26ea0 R14: 000000000000047a R15: 00002000000001c0 [ 39.265204][ T3545] [ 39.268289][ T3545] ---[ end trace 0000000000000000 ]--- [ 39.280221][ T3545] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.12: bit already cleared for inode 11 [ 39.291342][ T3545] loop0: lost filesystem error report for type 5 error -117 [ 39.292587][ T3550] loop4: detected capacity change from 0 to 512 [ 39.300124][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 39.300155][ C1] EXT4-fs (loop0): initial error at time 1785468215: ext4_free_inode:356 [ 39.300184][ C1] EXT4-fs (loop0): last error at time 1785468215: ext4_free_inode:356 [ 39.356435][ T3545] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 39.370717][ T3545] loop0: lost filesystem error report for type 5 error -117 [ 39.372309][ T3545] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 39.397478][ T3545] loop0: lost filesystem error report for type 5 error -117 [ 39.399640][ T3545] EXT4-fs (loop0): 1 orphan inode deleted [ 39.421598][ T3545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.434483][ T3550] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 39.441886][ T3550] EXT4-fs (loop4): mount failed [ 39.455878][ T3556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 39.492724][ T3550] 9p: Bad value for 'wfdno' [ 39.509467][ T3545] cgroup: noprefix used incorrectly [ 39.560851][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 39.585757][ T3558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.611481][ T3558] syz.4.16 (3558) used greatest stack depth: 10176 bytes left [ 39.636216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.723465][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.777643][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.838322][ T3574] tipc: Started in network mode [ 39.851643][ T3574] tipc: Node identity 2007ff, cluster identity 4711 [ 39.874454][ T3575] loop0: detected capacity change from 0 to 4096 [ 39.887635][ T3574] tipc: Node number set to 2099199 [ 39.930195][ T3580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 39.966786][ T3580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3580 comm=syz.1.21 [ 39.994451][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 40.055297][ T3578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.367557][ T3591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 41.200459][ T3598] loop0: detected capacity change from 0 to 4096 [ 41.316308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.647113][ T3613] loop2: detected capacity change from 0 to 512 [ 41.654081][ T3613] EXT4-fs: Ignoring removed i_version option [ 41.660159][ T3613] EXT4-fs: Ignoring removed bh option [ 41.666329][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 41.666362][ T28] audit: type=1400 audit(1785468217.806:399): avc: denied { create } for pid=3602 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.124949][ T3613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.139664][ T3613] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.159943][ T3613] ªªªªªª: renamed from vlan0 (while UP) [ 42.636257][ T3624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3624 comm=syz.0.31 [ 43.085036][ T3624] vlan2: entered allmulticast mode [ 43.097643][ T3624] geneve0: entered allmulticast mode [ 43.343314][ T3627] loop3: detected capacity change from 0 to 512 [ 43.350402][ T3627] EXT4-fs: Ignoring removed i_version option [ 43.356626][ T3627] EXT4-fs: Ignoring removed bh option [ 43.440241][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.520395][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.533415][ T3627] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.552298][ T3627] ªªªªªª: renamed from vlan0 (while UP) [ 44.068115][ T28] audit: type=1400 audit(1785468219.626:400): avc: denied { bind } for pid=3623 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.087749][ T28] audit: type=1400 audit(1785468220.126:401): avc: denied { load_policy } for pid=3623 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.848128][ T3643] loop1: detected capacity change from 0 to 512 [ 44.855049][ T3643] EXT4-fs: Ignoring removed i_version option [ 44.861271][ T3643] EXT4-fs: Ignoring removed bh option [ 44.881714][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.906844][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.920111][ T3643] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.275621][ T3648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 45.311584][ T3624] SELinux: policydb version -1236717033 does not match my version range 15-35 [ 45.345328][ T3624] SELinux: failed to load policy [ 46.214921][ T28] audit: type=1400 audit(1785468221.656:402): avc: denied { name_bind } for pid=3651 comm="syz.4.36" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.260852][ T3659] loop3: detected capacity change from 0 to 512 [ 46.268251][ T3659] EXT4-fs: Ignoring removed i_version option [ 46.274419][ T3659] EXT4-fs: Ignoring removed bh option [ 46.319362][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.368953][ T3659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.382161][ T3659] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.432572][ T28] audit: type=1400 audit(1785468221.656:403): avc: denied { node_bind } for pid=3651 comm="syz.4.36" saddr=::ffff:172.20.20.34 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.455420][ T28] audit: type=1400 audit(1785468222.476:404): avc: denied { wake_alarm } for pid=3651 comm="syz.4.36" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.801959][ T3669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 46.831025][ T3667] loop1: detected capacity change from 0 to 4096 [ 46.886924][ T3671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 46.929870][ T3671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3671 comm=syz.0.39 [ 47.148741][ T28] audit: type=1326 audit(1785468223.316:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 47.156329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.766349][ T28] audit: type=1326 audit(1785468223.346:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 47.791643][ T28] audit: type=1326 audit(1785468223.346:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 47.830373][ T3680] loop4: detected capacity change from 0 to 512 [ 47.837434][ T3680] EXT4-fs: Ignoring removed i_version option [ 47.843565][ T3680] EXT4-fs: Ignoring removed bh option [ 47.900384][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.913380][ T3680] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.951284][ T3680] ªªªªªª: renamed from vlan0 (while UP) [ 47.988138][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.254128][ T28] audit: type=1326 audit(1785468223.346:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 48.863949][ T28] audit: type=1326 audit(1785468223.346:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 49.263433][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.545420][ T28] audit: type=1326 audit(1785468223.346:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 49.570744][ T28] audit: type=1326 audit(1785468223.346:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 49.699811][ T28] audit: type=1326 audit(1785468223.856:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 49.726513][ T28] audit: type=1326 audit(1785468223.856:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 49.824137][ T28] audit: type=1326 audit(1785468223.856:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.0.39" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60c4ce019 code=0x7ffc0000 [ 50.356933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.610073][ T3703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.45'. [ 51.013561][ T3700] loop4: detected capacity change from 0 to 512 [ 51.021475][ T3700] EXT4-fs: Ignoring removed i_version option [ 51.027561][ T3700] EXT4-fs: Ignoring removed bh option [ 51.083203][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.096238][ T3700] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.150871][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.637423][ T3723] loop4: detected capacity change from 0 to 512 [ 52.653663][ T3713] --map-set only usable from mangle table [ 52.665052][ T3723] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.49: bit already cleared for inode 11 [ 52.686616][ T3723] loop4: lost filesystem error report for type 5 error -117 [ 52.688812][ T3723] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 52.696211][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 52.696226][ C1] EXT4-fs (loop4): initial error at time 1785468228: ext4_free_inode:356 [ 52.696256][ C1] EXT4-fs (loop4): last error at time 1785468228: ext4_free_inode:356 [ 52.728211][ T3723] loop4: lost filesystem error report for type 5 error -117 [ 52.730958][ T3723] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 52.751170][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 52.751185][ T28] audit: type=1400 audit(1785468228.906:447): avc: denied { create } for pid=3712 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.779518][ T3723] loop4: lost filesystem error report for type 5 error -117 [ 52.784325][ T3723] EXT4-fs (loop4): 1 orphan inode deleted [ 52.800581][ T3726] loop3: detected capacity change from 0 to 4096 [ 52.807518][ T3723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.893162][ T3723] cgroup: noprefix used incorrectly [ 52.907077][ T28] audit: type=1400 audit(1785468229.076:448): avc: denied { mounton } for pid=3715 comm="syz.0.47" path="/9/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 52.949324][ T3732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 52.992550][ T3732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3732 comm=syz.1.51 [ 53.017240][ T3734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 53.026352][ T28] audit: type=1400 audit(1785468229.186:449): avc: denied { write } for pid=3722 comm="syz.4.49" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.165262][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.332405][ T3747] loop4: detected capacity change from 0 to 512 [ 55.339622][ T3747] EXT4-fs: Ignoring removed i_version option [ 55.345751][ T3747] EXT4-fs: Ignoring removed bh option [ 55.357765][ T3748] loop1: detected capacity change from 0 to 512 [ 55.364697][ T3748] EXT4-fs: Ignoring removed i_version option [ 55.370869][ T3748] EXT4-fs: Ignoring removed bh option [ 56.486355][ T3748] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1. [ 56.498207][ T3747] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 56.733123][ T3756] loop3: detected capacity change from 0 to 512 [ 56.899400][ T3756] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 56.906990][ T3756] EXT4-fs (loop3): mount failed [ 57.935415][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 58.043998][ T3770] loop2: detected capacity change from 0 to 512 [ 58.058875][ T3756] 9p: Bad value for 'wfdno' [ 58.065931][ T3770] EXT4-fs: Ignoring removed i_version option [ 58.072393][ T3770] EXT4-fs: Ignoring removed bh option [ 58.392373][ T3764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.546849][ T3770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.559842][ T3770] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.902967][ T28] audit: type=1400 audit(1785468235.066:450): avc: denied { create } for pid=3779 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.938833][ T28] audit: type=1400 audit(1785468235.066:451): avc: denied { create } for pid=3779 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.934236][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 60.147103][ T3786] ªªªªªª: renamed from vlan0 (while UP) [ 60.194201][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.215535][ T3792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3792 comm=syz.4.62 [ 60.265500][ T28] audit: type=1400 audit(1785468235.096:452): avc: denied { connect } for pid=3779 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.463525][ T3802] netlink: 180 bytes leftover after parsing attributes in process `syz.2.64'. [ 60.522393][ T3802] cgroup: Bad value for 'name' [ 60.927346][ T28] audit: type=1400 audit(1785468236.616:453): avc: denied { mount } for pid=3801 comm="syz.2.64" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.959982][ T28] audit: type=1400 audit(1785468236.616:454): avc: denied { search } for pid=3801 comm="syz.2.64" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.981988][ T28] audit: type=1400 audit(1785468236.616:455): avc: denied { search } for pid=3801 comm="syz.2.64" name="usb_gadget" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.004867][ T28] audit: type=1400 audit(1785468236.616:456): avc: denied { write search } for pid=3801 comm="syz.2.64" name="usb_gadget" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.030965][ T3802] UDC core: g1: couldn't find an available UDC or it's busy [ 61.032428][ T3809] loop4: detected capacity change from 0 to 512 [ 61.044767][ T28] audit: type=1400 audit(1785468236.616:457): avc: denied { add_name } for pid=3801 comm="syz.2.64" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.131131][ T3809] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.67: bit already cleared for inode 11 [ 62.042867][ T3809] loop4: lost filesystem error report for type 5 error -117 [ 62.044271][ T28] audit: type=1400 audit(1785468236.616:458): avc: denied { create } for pid=3801 comm="syz.2.64" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 62.051795][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 62.051815][ C1] EXT4-fs (loop4): initial error at time 1785468238: ext4_free_inode:356 [ 62.051927][ C1] EXT4-fs (loop4): last error at time 1785468238: ext4_free_inode:356 [ 62.150016][ T3809] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 62.192005][ T28] audit: type=1400 audit(1785468236.616:459): avc: denied { search } for pid=3801 comm="syz.2.64" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.214110][ T3809] loop4: lost filesystem error report for type 5 error -117 [ 62.233545][ T3809] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 62.263695][ T3809] loop4: lost filesystem error report for type 5 error -117 [ 62.263840][ T3809] EXT4-fs (loop4): 1 orphan inode deleted [ 62.278244][ T3809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.298625][ T3809] cgroup: noprefix used incorrectly [ 62.326513][ T3823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.340507][ T3809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 62.355963][ T3823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.378954][ T3800] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 62.395701][ T3823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3823 comm=syz.0.71 [ 62.429371][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.434815][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 62.528282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.785491][ T3842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 62.941878][ T3847] loop4: detected capacity change from 0 to 512 [ 62.949179][ T3847] EXT4-fs: Ignoring removed i_version option [ 62.955368][ T3847] EXT4-fs: Ignoring removed bh option [ 63.298793][ T3854] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.78'. [ 63.390572][ T3857] tmpfs: Bad value for 'size' [ 63.620348][ T3859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 63.669164][ T3859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3859 comm=syz.3.80 [ 63.784149][ T3847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.798074][ T3847] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.231876][ T3866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3866 comm=syz.1.81 [ 64.302801][ T3866] vlan0: entered allmulticast mode [ 64.325407][ T3866] geneve0: entered allmulticast mode [ 64.714007][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.115865][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 65.144591][ T3879] SELinux: policydb version -1236717033 does not match my version range 15-35 [ 65.334935][ T3884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.346110][ T3879] SELinux: failed to load policy [ 66.416267][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 66.416361][ T28] audit: type=1400 audit(1785468242.486:491): avc: denied { write } for pid=3885 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.626128][ T28] audit: type=1400 audit(1785468242.496:492): avc: denied { connect } for pid=3885 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.689736][ T28] audit: type=1400 audit(1785468242.496:493): avc: denied { name_connect } for pid=3885 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.716390][ T3895] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.87'. [ 66.791190][ T3897] tmpfs: Bad value for 'size' [ 67.646991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.069752][ T3913] loop3: detected capacity change from 0 to 512 [ 68.076934][ T3913] EXT4-fs: Ignoring removed i_version option [ 68.083107][ T3913] EXT4-fs: Ignoring removed bh option [ 68.102195][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.115084][ T3913] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.286684][ T3919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 68.351626][ T3914] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.93'. [ 68.718824][ T3921] tmpfs: Bad value for 'size' [ 68.773653][ T3891] --map-set only usable from mangle table [ 69.724174][ T28] audit: type=1400 audit(1785468245.796:494): avc: denied { create } for pid=3925 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.781471][ T3928] loop1: detected capacity change from 0 to 512 [ 69.836899][ T3928] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.94: invalid indirect mapped block 11 (level 0) [ 69.850437][ T3928] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.853333][ T3928] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.94: attempt to clear invalid blocks 1024 len 1 [ 69.863129][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 69.863232][ C0] EXT4-fs (loop1): initial error at time 1785468246: ext4_free_branches:1023: inode 13 [ 69.863310][ C0] EXT4-fs (loop1): last error at time 1785468246: ext4_free_branches:1023: inode 13 [ 69.903617][ T3928] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.906723][ T3928] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 69.932406][ T3928] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.94: invalid indirect mapped block 1819239214 (level 0) [ 69.946613][ T3928] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.949629][ T3928] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.94: invalid indirect mapped block 33554432 (level 2) [ 69.973489][ T3928] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.977387][ T3928] EXT4-fs (loop1): 1 truncate cleaned up [ 70.000672][ T3928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.143539][ T28] audit: type=1400 audit(1785468246.306:495): avc: denied { kexec_image_load } for pid=3929 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 70.473655][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 70.506487][ T28] audit: type=1400 audit(1785468246.346:496): avc: denied { create } for pid=3929 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.530234][ T3939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3939 comm=syz.4.97 [ 70.610938][ T28] audit: type=1400 audit(1785468246.566:497): avc: denied { read } for pid=3929 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.690637][ T3943] loop2: detected capacity change from 0 to 4096 [ 70.726047][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.785788][ T28] audit: type=1326 audit(1785468246.926:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 71.459695][ T3954] loop3: detected capacity change from 0 to 512 [ 71.472721][ T3954] EXT4-fs: Ignoring removed i_version option [ 71.482127][ T3954] EXT4-fs: Ignoring removed bh option [ 71.560637][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.575944][ T3954] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.634525][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.720969][ T28] audit: type=1326 audit(1785468246.986:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 71.841972][ T28] audit: type=1326 audit(1785468246.986:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 71.922436][ T28] audit: type=1326 audit(1785468246.986:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 71.985238][ T3960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 72.066631][ T3960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3960 comm=syz.1.99 [ 72.128905][ T28] audit: type=1326 audit(1785468247.156:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 72.295027][ T28] audit: type=1326 audit(1785468247.156:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 72.331964][ T3968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3968 comm=syz.4.102 [ 72.792178][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.801795][ T3968] vlan0: entered allmulticast mode [ 72.810038][ T28] audit: type=1326 audit(1785468247.156:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 73.043813][ T3971] loop2: detected capacity change from 0 to 512 [ 73.050505][ T3971] EXT4-fs: Ignoring removed i_version option [ 73.056605][ T3971] EXT4-fs: Ignoring removed bh option [ 73.079318][ T3968] geneve0: entered allmulticast mode [ 73.178663][ T3971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.192765][ T3971] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.218761][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.250692][ T3968] bond2: (slave vlan0): Error -34 calling dev_set_mtu [ 73.553022][ T3979] SELinux: policydb version -1236717033 does not match my version range 15-35 [ 73.567492][ T3979] SELinux: failed to load policy [ 73.617069][ T3962] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 73.681269][ T3982] loop0: detected capacity change from 0 to 4096 [ 73.715958][ T3982] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 73.783240][ T28] audit: type=1326 audit(1785468247.166:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3938 comm="syz.4.97" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705773e019 code=0x7ffc0000 [ 73.843797][ T3982] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.862547][ T3984] loop3: detected capacity change from 0 to 256 [ 73.881946][ T3982] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 73.899068][ T3984] vfat: Unknown parameter 'uni_xlat' [ 73.917559][ T3982] audit: backlog limit exceeded [ 74.101925][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 74.127286][ T3987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3987 comm=syz.4.105 [ 74.526823][ T3994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3994 comm=syz.1.106 [ 74.541563][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.551883][ T3994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 74.590136][ T3996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3996 comm=syz.2.107 [ 74.988803][ T4006] loop1: detected capacity change from 0 to 512 [ 74.996251][ T4006] EXT4-fs: Ignoring removed i_version option [ 75.002451][ T4006] EXT4-fs: Ignoring removed bh option [ 75.235214][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.248293][ T4006] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.838286][ T4013] loop0: detected capacity change from 0 to 512 [ 75.877511][ T4013] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.111: bit already cleared for inode 11 [ 75.932932][ T4013] loop0: lost filesystem error report for type 5 error -117 [ 75.933255][ T4013] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 75.940631][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 75.940647][ C0] EXT4-fs (loop0): initial error at time 1785468252: ext4_free_inode:356 [ 75.940675][ C0] EXT4-fs (loop0): last error at time 1785468252: ext4_free_inode:356 [ 76.027369][ T4019] loop4: detected capacity change from 0 to 512 [ 76.088006][ T4013] loop0: lost filesystem error report for type 5 error -117 [ 76.089756][ T4013] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 76.143021][ T4013] loop0: lost filesystem error report for type 5 error -117 [ 76.143275][ T4013] EXT4-fs (loop0): 1 orphan inode deleted [ 76.169374][ T4019] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.113: bit already cleared for inode 11 [ 76.203639][ T4019] loop4: lost filesystem error report for type 5 error -117 [ 76.204055][ T4019] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 76.211493][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.211510][ C0] EXT4-fs (loop4): initial error at time 1785468252: ext4_free_inode:356 [ 76.211535][ C0] EXT4-fs (loop4): last error at time 1785468252: ext4_free_inode:356 [ 76.251414][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.323382][ T4013] cgroup: noprefix used incorrectly [ 76.386974][ T4019] loop4: lost filesystem error report for type 5 error -117 [ 76.387237][ T4019] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 76.417945][ T4027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 76.464095][ T4019] loop4: lost filesystem error report for type 5 error -117 [ 76.464308][ T4019] EXT4-fs (loop4): 1 orphan inode deleted [ 76.525105][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.600539][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.636843][ T4019] cgroup: noprefix used incorrectly [ 76.712939][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.774751][ T4030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 76.939872][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.359730][ T4035] loop4: detected capacity change from 0 to 512 [ 77.945897][ T4035] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 77.982118][ T4035] EXT4-fs (loop4): mount failed [ 78.087440][ T4035] 9p: Bad value for 'wfdno' [ 79.540803][ T4058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 79.701394][ T4058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4058 comm=syz.1.121 [ 79.715835][ T4057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 79.971877][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 80.260376][ T4065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.373875][ T4071] ªªªªªª: renamed from vlan0 (while UP) [ 80.581260][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 80.847753][ T4065] syz.2.124 (4065) used greatest stack depth: 9984 bytes left [ 80.866571][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4080 comm=syz.4.127 [ 80.909582][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 80.945879][ T4085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4085 comm=syz.2.128 [ 80.977457][ T4088] loop1: detected capacity change from 0 to 512 [ 81.036544][ T4088] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 81.065764][ T4088] EXT4-fs (loop1): mount failed [ 81.120121][ T4094] loop3: detected capacity change from 0 to 512 [ 81.160592][ T4088] 9p: Bad value for 'wfdno' [ 81.323759][ T4094] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.132: bit already cleared for inode 11 [ 81.496191][ T4094] loop3: lost filesystem error report for type 5 error -117 [ 81.506176][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.520044][ C1] EXT4-fs (loop3): initial error at time 1785468257: ext4_free_inode:356 [ 81.528529][ C1] EXT4-fs (loop3): last error at time 1785468257: ext4_free_inode:356 [ 81.549310][ T4094] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 81.800301][ T4094] loop3: lost filesystem error report for type 5 error -117 [ 81.810497][ T4094] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 81.831572][ T4108] loop4: detected capacity change from 0 to 512 [ 81.838302][ T4108] EXT4-fs: Ignoring removed i_version option [ 81.844316][ T4108] EXT4-fs: Ignoring removed bh option [ 81.872002][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.886259][ T4108] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.032287][ T4094] loop3: lost filesystem error report for type 5 error -117 [ 82.290570][ T4094] EXT4-fs (loop3): 1 orphan inode deleted [ 82.351316][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 82.405626][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.492704][ T4119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.529155][ T4094] cgroup: noprefix used incorrectly [ 82.639397][ T4094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 82.657576][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 82.657593][ T28] audit: type=1400 audit(1785468258.776:596): avc: denied { write } for pid=4093 comm="syz.3.132" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.907755][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.404289][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.752719][ T4130] loop3: detected capacity change from 0 to 512 [ 83.764173][ T4130] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 83.828874][ T4130] EXT4-fs (loop3): mount failed [ 83.944068][ T4130] 9p: Bad value for 'wfdno' [ 84.508025][ T4143] loop3: detected capacity change from 0 to 4096 [ 84.663103][ T4152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.695085][ T4152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.707325][ T4152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4152 comm=syz.4.145 [ 84.745721][ T4152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 84.837376][ T4156] vlan0: entered allmulticast mode [ 85.494452][ T28] audit: type=1400 audit(1785468261.656:597): avc: denied { append } for pid=4177 comm="syz.0.152" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.541712][ T4178] loop3: detected capacity change from 0 to 512 [ 85.686684][ T28] audit: type=1400 audit(1785468261.696:598): avc: denied { open } for pid=4177 comm="syz.0.152" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.762602][ T4178] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.151: bit already cleared for inode 11 [ 85.774782][ T4178] loop3: lost filesystem error report for type 5 error -117 [ 85.775465][ T4178] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 85.782945][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 85.782961][ C1] EXT4-fs (loop3): initial error at time 1785468261: ext4_free_inode:356 [ 85.782979][ C1] EXT4-fs (loop3): last error at time 1785468261: ext4_free_inode:356 [ 85.837304][ T4178] loop3: lost filesystem error report for type 5 error -117 [ 85.845696][ T4178] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 85.861901][ T4178] loop3: lost filesystem error report for type 5 error -117 [ 85.868521][ T4178] EXT4-fs (loop3): 1 orphan inode deleted [ 85.882397][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.988461][ T4178] cgroup: noprefix used incorrectly [ 86.079428][ T4178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.151'. [ 86.096303][ T28] audit: type=1400 audit(1785468262.186:599): avc: denied { write } for pid=4176 comm="syz.3.151" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.381350][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.614006][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 86.770102][ T4195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.126931][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 87.177187][ T4209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4209 comm=syz.3.159 [ 87.921901][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 88.069711][ T4220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.426616][ T4261] loop0: detected capacity change from 0 to 512 [ 90.433266][ T4261] EXT4-fs: Ignoring removed i_version option [ 90.439337][ T4261] EXT4-fs: Ignoring removed bh option [ 90.650244][ T4261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.663128][ T4261] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.894736][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'. [ 90.937440][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 91.015926][ T4276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.383293][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 91.453255][ T4291] 8021q: adding VLAN 0 to HW filter on device bond5 [ 91.750916][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.956992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.970301][ T4300] loop4: detected capacity change from 0 to 512 [ 92.067870][ T4300] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 92.282488][ T4300] EXT4-fs (loop4): mount failed [ 92.456777][ T4313] loop2: detected capacity change from 0 to 512 [ 92.464003][ T4313] EXT4-fs: Ignoring removed i_version option [ 92.470110][ T4313] EXT4-fs: Ignoring removed bh option [ 92.521142][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.534709][ T4313] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.850984][ T4314] 9p: Bad value for 'wfdno' [ 94.100062][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.246678][ T4328] loop4: detected capacity change from 0 to 512 [ 94.303251][ T4328] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 94.322038][ T4328] EXT4-fs (loop4): mount failed [ 94.341694][ T4328] 9p: Bad value for 'wfdno' [ 94.372119][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 94.426782][ T4336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.442246][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 94.478290][ T4347] loop2: detected capacity change from 0 to 512 [ 94.539063][ T4347] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.189: bit already cleared for inode 11 [ 94.565020][ T4347] loop2: lost filesystem error report for type 5 error -117 [ 94.566079][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 94.579926][ C0] EXT4-fs (loop2): initial error at time 1785468270: ext4_free_inode:356 [ 94.588409][ C0] EXT4-fs (loop2): last error at time 1785468270: ext4_free_inode:356 [ 94.598665][ T4347] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 94.611617][ T4347] loop2: lost filesystem error report for type 5 error -117 [ 94.611954][ T4347] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 94.616189][ T4345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.619331][ T4347] loop2: lost filesystem error report for type 5 error -117 [ 94.624873][ T4357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.191'. [ 94.651041][ T4347] EXT4-fs (loop2): 1 orphan inode deleted [ 94.660359][ T4347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.721939][ T4347] cgroup: noprefix used incorrectly [ 94.748100][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 94.801242][ T4360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 94.999787][ T28] audit: type=1400 audit(1785468271.166:600): avc: denied { write } for pid=4343 comm="syz.2.189" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.011061][ T4375] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.195'. [ 95.024904][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 96.034479][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.436174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.723700][ T4380] loop3: detected capacity change from 0 to 512 [ 96.730424][ T4380] EXT4-fs: Ignoring removed i_version option [ 96.736697][ T4380] EXT4-fs: Ignoring removed bh option [ 96.746053][ T4375] tmpfs: Bad value for 'size' [ 96.784815][ T4380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.808399][ T4380] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.716277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.135897][ T4411] loop1: detected capacity change from 0 to 512 [ 98.149970][ T4411] EXT4-fs: Ignoring removed i_version option [ 98.156777][ T4411] EXT4-fs: Ignoring removed bh option [ 98.757125][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.178446][ T4411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.193395][ T4411] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.399303][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.860328][ T4441] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.210'. [ 100.916611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.978883][ T4441] tmpfs: Bad value for 'size' [ 101.313324][ T4465] loop3: detected capacity change from 0 to 512 [ 101.320851][ T4465] EXT4-fs: Ignoring removed i_version option [ 101.326957][ T4465] EXT4-fs: Ignoring removed bh option [ 101.353332][ T4465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.367118][ T4465] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.600141][ T4466] loop2: detected capacity change from 0 to 4096 [ 102.308688][ T4458] --map-set only usable from mangle table [ 102.978067][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.311502][ T4490] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.220'. [ 103.472129][ T4498] tmpfs: Bad value for 'size' [ 104.838991][ T4504] --map-set only usable from mangle table [ 104.877388][ T4517] loop0: detected capacity change from 0 to 512 [ 104.884462][ T4517] EXT4-fs: Ignoring removed i_version option [ 104.890583][ T4517] EXT4-fs: Ignoring removed bh option [ 104.954277][ T4517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.968329][ T4517] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.110768][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.230599][ T4526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4526 comm=syz.1.227 [ 106.871381][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.082463][ T4549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 107.111781][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.131415][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.161677][ T4553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4553 comm=syz.4.236 [ 107.200185][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 107.442276][ T4564] loop3: detected capacity change from 0 to 512 [ 107.449399][ T4564] EXT4-fs: Ignoring removed i_version option [ 107.455595][ T4564] EXT4-fs: Ignoring removed bh option [ 107.489625][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.502930][ T4564] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.571744][ T4558] vlan0: entered allmulticast mode [ 108.467394][ T4576] --map-set only usable from mangle table [ 108.563604][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 108.584518][ T4587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4587 comm=syz.4.241 [ 108.827465][ T4593] loop0: detected capacity change from 0 to 512 [ 108.856681][ T4593] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.242: bit already cleared for inode 11 [ 108.901512][ T4593] loop0: lost filesystem error report for type 5 error -117 [ 108.901803][ T4593] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 108.909214][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 108.909245][ C1] EXT4-fs (loop0): initial error at time 1785468285: ext4_free_inode:356 [ 108.909270][ C1] EXT4-fs (loop0): last error at time 1785468285: ext4_free_inode:356 [ 108.982864][ T4596] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.243'. [ 109.030833][ T4593] loop0: lost filesystem error report for type 5 error -117 [ 109.031086][ T4593] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 109.078029][ T4593] loop0: lost filesystem error report for type 5 error -117 [ 109.078275][ T4593] EXT4-fs (loop0): 1 orphan inode deleted [ 109.100362][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.100953][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.147091][ T4596] tmpfs: Bad value for 'size' [ 109.210155][ T28] audit: type=1400 audit(1785468285.376:601): avc: denied { write } for pid=4592 comm="syz.0.242" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.233800][ T4600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 109.332698][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.373733][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 109.387660][ T4610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4610 comm=syz.0.247 [ 109.409325][ T4608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 109.567398][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 109.695422][ T4613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.779406][ T4624] loop4: detected capacity change from 0 to 512 [ 109.786563][ T4624] EXT4-fs: Ignoring removed i_version option [ 109.792681][ T4624] EXT4-fs: Ignoring removed bh option [ 109.853654][ T4624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.868140][ T4624] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.190571][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.364899][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.709339][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4637 comm=syz.0.252 [ 111.733560][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 111.984318][ T4637] vlan0: entered allmulticast mode [ 111.998649][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.243028][ T4650] loop4: detected capacity change from 0 to 512 [ 112.284841][ T4650] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 112.291652][ T4650] EXT4-fs (loop4): mount failed [ 112.340050][ T4650] 9p: Bad value for 'wfdno' [ 112.549144][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 112.601227][ T4652] --map-set only usable from mangle table [ 112.843561][ T4673] loop1: detected capacity change from 0 to 4096 [ 114.840503][ T4708] loop4: detected capacity change from 0 to 512 [ 114.847233][ T4708] EXT4-fs: Ignoring removed i_version option [ 114.853310][ T4708] EXT4-fs: Ignoring removed bh option [ 115.247661][ T4708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.260896][ T4708] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.803709][ T4731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.272'. [ 116.074704][ T4741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.131074][ T4741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.155544][ T4743] loop0: detected capacity change from 0 to 512 [ 116.172740][ T4741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4741 comm=syz.1.275 [ 116.218624][ T4743] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.276: bit already cleared for inode 11 [ 116.237954][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 116.275367][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 116.276086][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 116.289923][ C1] EXT4-fs (loop0): initial error at time 1785468292: ext4_free_inode:356 [ 116.298385][ C1] EXT4-fs (loop0): last error at time 1785468292: ext4_free_inode:356 [ 116.306985][ T4743] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 116.336229][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 116.340619][ T4743] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 116.355192][ T4741] vlan0: entered allmulticast mode [ 116.371295][ T4743] loop0: lost filesystem error report for type 5 error -117 [ 116.371509][ T4743] EXT4-fs (loop0): 1 orphan inode deleted [ 116.384024][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.388006][ T4743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.613233][ T28] audit: type=1400 audit(1785468292.776:602): avc: denied { write } for pid=4742 comm="syz.0.276" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.618340][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 116.732558][ T4753] loop4: detected capacity change from 0 to 512 [ 116.740179][ T4753] EXT4-fs: Ignoring removed i_version option [ 116.746344][ T4753] EXT4-fs: Ignoring removed bh option [ 116.880891][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.894218][ T4753] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.076755][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.632355][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.851257][ T4769] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.280'. [ 119.481117][ T4783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 119.620355][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 120.136946][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 120.178966][ T4805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4805 comm=syz.3.289 [ 120.361598][ T4816] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.293'. [ 120.453793][ T4816] tmpfs: Bad value for 'size' [ 120.600830][ T4822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 121.179050][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 121.332330][ T4840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.497883][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 121.508343][ T4851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4851 comm=syz.3.303 [ 121.715905][ T4846] loop0: detected capacity change from 0 to 512 [ 121.814577][ T4849] loop4: detected capacity change from 0 to 4096 [ 121.826542][ T4854] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.304'. [ 122.033556][ T4846] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 122.067034][ T4846] EXT4-fs (loop0): mount failed [ 122.218011][ T4846] 9p: Bad value for 'wfdno' [ 122.261742][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.271697][ T4862] loop2: detected capacity change from 0 to 512 [ 122.409943][ T4862] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 122.416746][ T4862] EXT4-fs (loop2): mount failed [ 122.443943][ T4871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4871 comm=syz.1.306 [ 122.569047][ T4862] 9p: Bad value for 'wfdno' [ 123.348753][ T4878] loop2: detected capacity change from 0 to 512 [ 123.355858][ T4878] EXT4-fs: Ignoring removed i_version option [ 123.362033][ T4878] EXT4-fs: Ignoring removed bh option [ 123.389763][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.402659][ T4878] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.150086][ T4905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 124.382449][ T4907] --map-set only usable from mangle table [ 124.595806][ T4912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.733318][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.796353][ T4912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.806473][ T4912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4912 comm=syz.1.317 [ 124.819295][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 124.837521][ T4912] vlan0: entered allmulticast mode [ 125.514855][ T4932] loop3: detected capacity change from 0 to 512 [ 125.521928][ T4932] EXT4-fs: Ignoring removed i_version option [ 125.527993][ T4932] EXT4-fs: Ignoring removed bh option [ 125.560869][ T4932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.573963][ T4932] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.971097][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.224849][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.259856][ T4948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 126.272821][ T4945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4945 comm=syz.2.323 [ 126.304446][ T4948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4948 comm=syz.1.324 [ 126.328164][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 126.373555][ T4945] vlan0: entered allmulticast mode [ 126.396878][ T4945] geneve0: entered allmulticast mode [ 126.583372][ T2983] ================================================================== [ 126.591539][ T2983] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 126.599917][ T2983] [ 126.602257][ T2983] write to 0xffff888103c28910 of 8 bytes by task 3288 on cpu 0: [ 126.609905][ T2983] inode_set_ctime_current+0x600/0x8e0 [ 126.615398][ T2983] simple_unlink+0x2d/0x80 [ 126.619846][ T2983] shmem_unlink+0x12d/0x140 [ 126.624382][ T2983] vfs_unlink+0x1c3/0x490 [ 126.628735][ T2983] filename_unlinkat+0x1dc/0x410 [ 126.633691][ T2983] __se_sys_unlink+0x2b/0xe0 [ 126.638311][ T2983] __x64_sys_unlink+0x1f/0x30 [ 126.643006][ T2983] x64_sys_call+0x2eb6/0x3020 [ 126.647707][ T2983] do_syscall_64+0x136/0x3c0 [ 126.652321][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.658231][ T2983] [ 126.660570][ T2983] read to 0xffff888103c28910 of 8 bytes by task 2983 on cpu 1: [ 126.668147][ T2983] atime_needs_update+0x2ef/0x3e0 [ 126.673211][ T2983] touch_atime+0x4a/0x300 [ 126.677565][ T2983] do_readlinkat+0x137/0x2f0 [ 126.682190][ T2983] __x64_sys_readlink+0x47/0x60 [ 126.687074][ T2983] x64_sys_call+0x2b51/0x3020 [ 126.691770][ T2983] do_syscall_64+0x136/0x3c0 [ 126.696375][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.702317][ T2983] [ 126.704660][ T2983] value changed: 0x000000006a6c158b -> 0x000000006a6c158e [ 126.711772][ T2983] [ 126.714104][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 126.720293][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 126.730733][ T2983] Tainted: [W]=WARN [ 126.734566][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.744647][ T2983] ================================================================== [ 127.556545][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.