last executing test programs: 2.068714647s ago: executing program 4 (id=445): open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x48000011, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x45, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) syz_open_dev$MSR(0x0, 0x8000000000000000, 0x0) 1.79623089s ago: executing program 2 (id=451): r0 = socket$kcm(0xa, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='netlink_extack\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe40, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072beb3014cd3ec8a755c1e1380081ffad000027e8d50000000100000014000005002421106558d320d98a61a90021c9bf", 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x22) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@ipv6_getnetconf={0x14, 0x48, 0x601}, 0x14}}, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, 0x0}, 0x240020d9) r5 = socket$kcm(0x10, 0x2, 0x4) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="0836b8f544f7228f885e4906180723bf2d4548f6620a8c48c61670c81d107ea4f03696c5360c8a080a44a0a4629de4fce7b9bbc1f84bc7e6f0606f64a78e49cc638ff11d5edb73bf941eca67cb24791c8dde1af0912e8f87ac6d8294d6e29037ad2b9f5cdb02fb8cd291dc61a739f2d975ba5216d07f0edc75bd8cdf9949b5a72396972d1ed24ad23f504c02b31f69282a1c9a06f49af9b989d3d9df440d1fe598c7823c86fac1f76f5adeb345d3421ae3cbbf9c50f43bca03074f5af4392673209054804ef5585b8c0f", 0xca, r0}, 0x68) r6 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80800) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000ed000095000000000000007d7611017c9d9ee3a64edd4219e6702606f6353cdfb643fc2ecfc3f1137a80eff9b834d827dfbdd1fa3efd55a8889fd22634a9d59d63a2b89ab3b0a827067a0b42d2aa9e936cac"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 1.593169672s ago: executing program 2 (id=453): unshare(0x20040600) bpf$MAP_DELETE_ELEM(0x1e, 0x0, 0x0) 1.573501014s ago: executing program 2 (id=454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002880)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "097e75356ca793"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000880)={0x0, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x1, "4580369210c923"}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='ext4_free_blocks\x00', r14}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r17 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x101a02, 0x0) sendfile(r17, r17, 0x0, 0x6) setresuid(0x0, r16, 0x0) r18 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef6a80277bec001208000300ff000000bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955f947ee2b49e33538afa8af92347510f0b56a20ff27fff70fdd02f0fa5", 0x89}], 0x1}, 0x0) 1.500051116s ago: executing program 2 (id=456): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0xb, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/158, 0x9e}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) 1.40798791s ago: executing program 4 (id=458): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='io_uring_create\x00', r1}, 0x10) syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) 1.284316089s ago: executing program 1 (id=461): add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @exit], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xf) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b521f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 1.265633582s ago: executing program 0 (id=463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500), 0x10}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, 0x0, &(0x7f0000000b40)=""/31}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x500000000000000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x10, 0x0, 0xfffffffffffffd25) 1.184342855s ago: executing program 1 (id=465): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.170850897s ago: executing program 4 (id=467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000003000000", 0xfe60) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) pipe(&(0x7f0000000040)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c000280140007000000000000000000000000000000010106000500000000000400060008000b"], 0x5c}}, 0x0) 1.128377704s ago: executing program 1 (id=468): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/meminfo\x00', 0x0, 0x0) syz_io_uring_setup(0x4394, &(0x7f0000000240), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f}, 0x20) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 964.575499ms ago: executing program 3 (id=469): socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xc0}}, 0x20}, 0x1, 0x0, 0x0, 0x40d5}, 0x4000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0xfffffe1a, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x81, &(0x7f0000000680)=""/129}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000300)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@nobh}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4b9, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 964.14704ms ago: executing program 1 (id=470): socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100}}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x84}}, 0x0) 919.244627ms ago: executing program 1 (id=471): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000000000000000000001a000000180001801400020076657468305f746f5f626f6e6400000080a9e2aab228657dc01dd215be9f578372ac45f19fdb1de4f83d8972bc45d962da3f916f03904d6afaea17beb19e6e7bff35e2a02cd5e4ba32a89ba91374e5f14fc2f2fc08f5dedbe8fb41e2749ee019d30300077412ff8c88c089927e8bd70418e8e1070eaa1b5569e5c0c7dfb94aeb62080bf96de23de85a57586b027dbc7d04d25b8da12f8b48ab0d6ec778ed64a4b0cb46e1902af4a7e99b2e1ea289e0c68e680c6a4de71b6f3f821b56c1db"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xd201}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)="9335126a6a85d722a912eac708ad1d", 0x7ffff000}, {0x0}], 0x2) 782.920648ms ago: executing program 1 (id=472): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x102, &(0x7f000000cf3d)=""/195}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') close_range(r0, 0xffffffffffffffff, 0x2) pread64(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r3, 0x3, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xa9fb, r2, &(0x7f00000000c0), 0x0, 0x3, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0xfffe, r1, &(0x7f0000000600)="d455efaf83d980bea30d61576c84af3ea347aed683ca9b9764395b77e1c2ced4bfc9fff821b21ae50431847d01282ec028076fd0ac4af1f5ff71b76e6267182ab2fb9aad5aa1360928450a5fcf1501488332f645f183368d59e4a51ee0e3331972a8eea6be208dea6da667f054ee405a54fa3ad0c62b77f167c1a8eb8831faaee8a7b9eab26716b8f27f3a6562696928070aebb9a49fbe7131a43800edcc7afdcb243b19f3f60eb5514fb2546728a1643a42d9b44453b4fbe8e4411260423aa31bbc7f6d57bf531b40cb9d16a0e0b752bc81da0a9317b4032a9e58ebd5406494e9e725fe3aa200afdb15ff065c1f64", 0xef, 0x4, 0x0, 0x2, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000002000)="be30f6bb330f90899448662117ad22467397b7d3a0c8b05d419b0054cdf5d25d860e4474510fe581f3748ff4d60213462d504051570a863d0750de112b419f520d2209d82b62aa68f2c927e371b6f85b0ba471b41c8e5ee5ac104d1fb58240e982c9d9146f6066d1ddc62b62d2d342e4af67c0beea4e7fcbe553dbc06b91887fa81cabf9f62bd1033e0797a354ac90f407", 0x91, 0x3ff, 0x0, 0x1, r1}]) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{}, {}, {0x0, 0x0, 0x1, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0xc0182101, 0x20000000) fstatfs(r1, &(0x7f0000000380)=""/31) r6 = openat$cgroup_procs(r1, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) fallocate(r6, 0x3, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x1010000, 0x1, 0x200, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r8, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="81424ac32e53a6a1dd183ac47b5993a35bf8e40e7da817bfc31aa18a2d55e1b47b71c8dd6ab0e2c17400e7137b06bf81c13ee5d7cd4bb775535e911ce6810a670416e79f9136bb82f02fc4c3f6db7b5e7c1766c68c750c916f005a3959e891215923114534fe7731f6b5e5209de7560cb3723d729b527d85def0cec96cc3786a54f0d07ab7d17253d8c644b75c5ff9f84b0ecf11a57c2ef80fe4714dcfe357d4238f07f8fb1c9dcdb40c5397350d1eeb6df4d3b2b6e5f18febb3a4d9137cd45989f2993f4f95fed98f", 0xc9}, {&(0x7f0000001f00)="fb7dd7a2a84cf369100607e9c24d738b5e152bfe9b0607d42b7ce1d21a9fa281bc1f5984a4a4149f55a90fa281b36d6ccb6e49f2b6b07d509d8a94af7c4359e9900235eaffdf73a6b2464b94fdc6300be0f695e721225d1c67b9417417891956ce82e0d579575b72b8ad9ee243f2482c4993acb92f298e7fe4a42f06f2f5b3392cf1c401035885c99d98730c570807ec7f7663c0d2b3ff03000000000000077a236496417147402556147afe719226d00b49510cc8e6607de60819fcfe054da8d45b415996f5f7199e6a316bf5e756d792bad482047d732f1d8ab96fb2048ffbcf823b0e044671c08cccb0041a1462c4040172288ea84dc0", 0xf8}, {&(0x7f0000000400)="e1eb2f4cad90f670289c7028643a2ec3861a0ea7b4910c4abef15c0114457fceca9f66743477bc3ad695761b403b5051797fa7e27dbffd36c6069cb6698ac3563a2ecb841dabbf6c413a20569057375ea09e75594ede0954660829500c1d65d5ec4018e8433aeb", 0x67}, {&(0x7f0000001ac0)="807a9a22088c5d8949ac82eb1d8cd334eb501c19d5d784268260b352dff63f02d880dfb2b6051404f0450694ae029ec9f1e10729d8c6c59fc6294e7906bc9fe423ef8016d291e4162bc4255892567e06bb9e1c5076938467fdc682ac566eeced6545b7000b5d638bbfe9cda45e294cb678c82f09a1808ebabb46444e1bb41c4439512592cd834613", 0x88}, {&(0x7f0000001b80)="b6c2f14b538108a4764c35d0041911b23a24abd639d5effe59bf236ea16cf18a9367c4bcdf11c386f6561545908213bd9b309e807a734d30d80876a946fee28c9b3d49b0e226e61b9a75aa390aa001068e0532353d37926b4faa613d913a7ff65b1e5bbfbebffe475f20a3211908c9491f58c125d95c021651d4c235e53963f6134c914b9d80905e0c70d770b55e6c3b8ae418a87001a05d70b10be4a212ef55860496dc3192c333848cca81e95e7938a0d4fd989ca280ff", 0xb8}, {&(0x7f0000001c40)="439c426f7642e317c2a7cee63df3a131a61015c7cb2d2cbed360d8d53ebfd132b3deeca26b974cab17fc8fe6f9246cd6cbac7e75994af4fbb3e065f50b89f23182c3a5bb25b7f4cefb68d83717559dad7adbfb3ce115d32aaa8cc89891bdcc1ab7b0da92680eacdc58741b18e2478508b61a5a9c1a18124b68ebe603b83a3083070992866c4265ce36f486cb5638c488ed0c06d096003e790bf56dfba82215980fcf4b124947b45b46b03ba93e13b68c4d6ddee80feccc46f72fe624397523a7be30c0bd5b566917b382da7048961f9f629b59", 0xd3}, {&(0x7f0000001d40)="4e2226c2b9c0ccaf5dea571898db2b39c0aa1e44266b2a20c6ec39b0262f9a14f246d0fc87221b6ae22d69f642ac5742f43a06c2edaf9e6558c3145c8585aa6111529f43216809457fffbbefbd97b3e8b9fff2beb0f5ef13965659353e9ff44b8d8baef07c6e99b02981dbbbf2840a474d93c4a5c26d1ee350b7d149edf4342c7394b21e58584deae682c4a6a02094736c5130652be5e908515082b5775c3fbf7c99c9bdbad318eda4e8947603284179425f02", 0xb3}, {&(0x7f0000000180)="0c5abbbf3ec250d6d487f682137045ab5d23bc0b9c07", 0x16}], 0x9, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @rand_addr=0x64010100}}}], 0x98}, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000e3ff940000000000000024df45e5306726c2f0f5b793"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r10}}, 0x20}}, 0x0) perf_event_open(&(0x7f0000001200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 642.22986ms ago: executing program 2 (id=473): perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}}, 0x0, 0xf, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000007100f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x8, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000237b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x1f00, 0x15, 0x0, &(0x7f00000000c0)="fb97899f4494872191958068401099960ff88e77a8", 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f00000003c0)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x3, 0x0, 0xffff}, 0x50) 496.299203ms ago: executing program 3 (id=474): socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000300)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x1, {{{@in6=@local, @in=@loopback}, {@in6=@mcast2, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x20}}, 0x0, 0x64f}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$inet6(0xa, 0x80002, 0x88) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x19028}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 451.938689ms ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000f06010300000000000000000700000906000b000100000006000b000000000006000b000400000006000b03000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306050000fdffffff0000000000000005000100070000000900020073797a30"], 0x28}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000580)={{}, {0x6}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 414.827345ms ago: executing program 0 (id=476): syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) 352.378804ms ago: executing program 0 (id=477): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='io_uring_create\x00', r1}, 0x10) syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) 316.835671ms ago: executing program 3 (id=478): add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42041, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b521f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 246.006451ms ago: executing program 0 (id=479): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r1) 189.44637ms ago: executing program 3 (id=480): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x118}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x1}, 0x6, 0x7, 0x0, 0x0, "2501e15700c5063c"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40004010) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r5, @ANYRESDEC, @ANYRES32=r9, @ANYRES16=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x44}}, 0x0) r12 = socket(0x2, 0x3, 0x9) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 189.24657ms ago: executing program 3 (id=481): socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100}}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x84}}, 0x0) 188.821ms ago: executing program 4 (id=482): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000000000000000000001a000000180001801400020076657468305f746f5f626f6e6400000080a9e2aab228657dc01dd215be9f578372ac45f19fdb1de4f83d8972bc45d962da3f916f03904d6afaea17beb19e6e7bff35e2a02cd5e4ba32a89ba91374e5f14fc2f2fc08f5dedbe8fb41e2749ee019d30300077412ff8c88c089927e8bd70418e8e1070eaa1b5569e5c0c7dfb94aeb62080bf96de23de85a57586b027dbc7d04d25b8da12f8b48ab0d6ec778ed64a4b0cb46e1902af4a7e99b2e1ea289e0c68e680c6a4de71b6f3f821b56c1db"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xd201}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)="9335126a6a85d722a912eac708ad1d", 0x7ffff000}, {0x0}], 0x2) 150.137407ms ago: executing program 3 (id=483): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0xb, 0x0, 0x1}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/158, 0x9e}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) 61.05493ms ago: executing program 0 (id=484): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffb, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x48}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) r4 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0x503}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffc}, 0x20004801) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x33, 0x0, 0x0) socketpair(0x0, 0x20000000000001, 0x0, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000900e8ff0000000000ff000000850000000e00000085b2acd9fa3d2f38b112ff8ba53b761bde630c59847753f9ea486656d64c4be552e6d027e631de194e25ed32c8ebf358e1da6b4b40a5af8c9f14020a786687d802de9a1bfbc14af6ceb1e0a82d3691fdca42c7a333bb3dc8c7e5272ff7f7a018c1c591a9a89c616df155bb9091882207dc14b596e84360"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x1900}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800002309ff07000000000000e07a23cd440010", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000f00000000000400120006000e0000000000"], 0x48}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000015000095000000000000008cdf70ff2c3f2a62a0bc955ab9ccaa41171025ed2ab2af7377e2849b7e2d03303aa6258e886ee4e22ceaa320a99323ad65668dc9ca709eebef9b963bdf7a137c0b89045748bd2a5863d354cb06a4ceb39980b3bb18be9c46ffb2badbb450e3c42e60d326c8ff5933c754ce804aa6f707a84db2bf56"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) fallocate(r0, 0x100000003, 0x7, 0x2811fffe) 60.84582ms ago: executing program 4 (id=485): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x84}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f05fe7f7028120006001e0789e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 327.32µs ago: executing program 4 (id=486): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r2, 0x540c, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) 0s ago: executing program 0 (id=487): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000122, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000000)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @dev}, 0x20) kernel console output (not intermixed with test programs): [ 20.874968][ T29] audit: type=1400 audit(1719631275.361:81): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.255' (ED25519) to the list of known hosts. [ 23.977559][ T29] audit: type=1400 audit(1719631278.461:82): avc: denied { mounton } for pid=3068 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.978811][ T3068] cgroup: Unknown subsys name 'net' [ 24.000292][ T29] audit: type=1400 audit(1719631278.461:83): avc: denied { mount } for pid=3068 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.028064][ T29] audit: type=1400 audit(1719631278.511:84): avc: denied { unmount } for pid=3068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.137991][ T3068] cgroup: Unknown subsys name 'rlimit' [ 24.261898][ T29] audit: type=1400 audit(1719631278.741:85): avc: denied { create } for pid=3068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.282590][ T29] audit: type=1400 audit(1719631278.741:86): avc: denied { write } for pid=3068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.299007][ T3070] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.302974][ T29] audit: type=1400 audit(1719631278.741:87): avc: denied { read } for pid=3068 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.326067][ T3070] mkswap (3070) used greatest stack depth: 11568 bytes left [ 24.331758][ T29] audit: type=1400 audit(1719631278.751:88): avc: denied { mounton } for pid=3068 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.340085][ T3068] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.363774][ T29] audit: type=1400 audit(1719631278.751:89): avc: denied { mount } for pid=3068 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.396074][ T29] audit: type=1400 audit(1719631278.791:90): avc: denied { relabelto } for pid=3070 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.421845][ T29] audit: type=1400 audit(1719631278.791:91): avc: denied { write } for pid=3070 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.009695][ T3088] chnl_net:caif_netlink_parms(): no params data found [ 25.018556][ T3080] chnl_net:caif_netlink_parms(): no params data found [ 25.053338][ T3078] chnl_net:caif_netlink_parms(): no params data found [ 25.134927][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.142091][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.149254][ T3088] bridge_slave_0: entered allmulticast mode [ 25.155870][ T3088] bridge_slave_0: entered promiscuous mode [ 25.164664][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.171852][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.179110][ T3088] bridge_slave_1: entered allmulticast mode [ 25.185539][ T3088] bridge_slave_1: entered promiscuous mode [ 25.192017][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.199161][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.206517][ T3080] bridge_slave_0: entered allmulticast mode [ 25.212717][ T3080] bridge_slave_0: entered promiscuous mode [ 25.221182][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.228321][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.235409][ T3080] bridge_slave_1: entered allmulticast mode [ 25.241832][ T3080] bridge_slave_1: entered promiscuous mode [ 25.248003][ T3079] chnl_net:caif_netlink_parms(): no params data found [ 25.263593][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 25.291415][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.320467][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.335336][ T3080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.359424][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.366553][ T3078] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.373679][ T3078] bridge_slave_0: entered allmulticast mode [ 25.380310][ T3078] bridge_slave_0: entered promiscuous mode [ 25.387799][ T3080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.396972][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.404032][ T3078] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.411288][ T3078] bridge_slave_1: entered allmulticast mode [ 25.417788][ T3078] bridge_slave_1: entered promiscuous mode [ 25.424642][ T3088] team0: Port device team_slave_0 added [ 25.445183][ T3088] team0: Port device team_slave_1 added [ 25.479497][ T3080] team0: Port device team_slave_0 added [ 25.491115][ T3078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.510528][ T3080] team0: Port device team_slave_1 added [ 25.521477][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.528640][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.535888][ T3082] bridge_slave_0: entered allmulticast mode [ 25.542401][ T3082] bridge_slave_0: entered promiscuous mode [ 25.549859][ T3078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.559248][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.566241][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.592173][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.612845][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.619955][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.627181][ T3082] bridge_slave_1: entered allmulticast mode [ 25.633540][ T3082] bridge_slave_1: entered promiscuous mode [ 25.644808][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.651845][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.678118][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.689055][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.696141][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.703359][ T3079] bridge_slave_0: entered allmulticast mode [ 25.709928][ T3079] bridge_slave_0: entered promiscuous mode [ 25.716703][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.723744][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.749841][ T3080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.779251][ T3078] team0: Port device team_slave_0 added [ 25.785149][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.792367][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.799654][ T3079] bridge_slave_1: entered allmulticast mode [ 25.806261][ T3079] bridge_slave_1: entered promiscuous mode [ 25.812904][ T3080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.819950][ T3080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.846007][ T3080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.860768][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.871687][ T3078] team0: Port device team_slave_1 added [ 25.889000][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.913779][ T3078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.920789][ T3078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.946744][ T3078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.958350][ T3078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.965303][ T3078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.991350][ T3078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.012763][ T3082] team0: Port device team_slave_0 added [ 26.019367][ T3082] team0: Port device team_slave_1 added [ 26.046337][ T3079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.062383][ T3080] hsr_slave_0: entered promiscuous mode [ 26.068626][ T3080] hsr_slave_1: entered promiscuous mode [ 26.081531][ T3088] hsr_slave_0: entered promiscuous mode [ 26.087741][ T3088] hsr_slave_1: entered promiscuous mode [ 26.093666][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.101264][ T3088] Cannot create hsr debugfs directory [ 26.113702][ T3079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.156993][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.163966][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.189911][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.206223][ T3079] team0: Port device team_slave_0 added [ 26.212766][ T3079] team0: Port device team_slave_1 added [ 26.226038][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.233093][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.259013][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.271963][ T3078] hsr_slave_0: entered promiscuous mode [ 26.278103][ T3078] hsr_slave_1: entered promiscuous mode [ 26.283973][ T3078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.291587][ T3078] Cannot create hsr debugfs directory [ 26.339976][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.347021][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.372975][ T3079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.384748][ T3079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.391746][ T3079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.417774][ T3079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.458800][ T3082] hsr_slave_0: entered promiscuous mode [ 26.464720][ T3082] hsr_slave_1: entered promiscuous mode [ 26.470849][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.478432][ T3082] Cannot create hsr debugfs directory [ 26.548177][ T3079] hsr_slave_0: entered promiscuous mode [ 26.554241][ T3079] hsr_slave_1: entered promiscuous mode [ 26.560267][ T3079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.567864][ T3079] Cannot create hsr debugfs directory [ 26.600952][ T3080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.611669][ T3080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.626137][ T3080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.636106][ T3080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.691779][ T3088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.703039][ T3088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.714220][ T3088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.740773][ T3088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.779525][ T3078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.790653][ T3078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.800108][ T3078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.808847][ T3078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.829153][ T3079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.837970][ T3079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.847026][ T3079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.856423][ T3079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.896767][ T3082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.905386][ T3082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.914728][ T3082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.929931][ T3082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.966947][ T3080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.992564][ T3080] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.020199][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.027393][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.050886][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.058018][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.081279][ T3079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.098605][ T3078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.109173][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.128959][ T3078] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.144061][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.151196][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.164781][ T3079] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.180044][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.187158][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.196860][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.203931][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.214027][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.221180][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.234091][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.257776][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.285166][ T3079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.295661][ T3079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.309665][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.316782][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.325424][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.332648][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.354893][ T3088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.365343][ T3088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.407542][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.427806][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.434957][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.461340][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468447][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.488643][ T3079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.507694][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.518179][ T3082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.531251][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.568143][ T3080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.632563][ T3078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.718384][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.732777][ T3079] veth0_vlan: entered promiscuous mode [ 27.763211][ T3079] veth1_vlan: entered promiscuous mode [ 27.792345][ T3079] veth0_macvtap: entered promiscuous mode [ 27.808522][ T3079] veth1_macvtap: entered promiscuous mode [ 27.822574][ T3078] veth0_vlan: entered promiscuous mode [ 27.830448][ T3080] veth0_vlan: entered promiscuous mode [ 27.848674][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.857826][ T3078] veth1_vlan: entered promiscuous mode [ 27.866741][ T3080] veth1_vlan: entered promiscuous mode [ 27.875319][ T3088] veth0_vlan: entered promiscuous mode [ 27.896502][ T3080] veth0_macvtap: entered promiscuous mode [ 27.909512][ T3079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.919515][ T3088] veth1_vlan: entered promiscuous mode [ 27.934681][ T3080] veth1_macvtap: entered promiscuous mode [ 27.943300][ T3078] veth0_macvtap: entered promiscuous mode [ 27.952143][ T3078] veth1_macvtap: entered promiscuous mode [ 27.960267][ T3079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.969069][ T3079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.977953][ T3079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.986913][ T3079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.005410][ T3078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.015983][ T3078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.027251][ T3078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.039369][ T3082] veth0_vlan: entered promiscuous mode [ 28.054634][ T3078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.065232][ T3078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.076883][ T3078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.087648][ T3082] veth1_vlan: entered promiscuous mode [ 28.098283][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.108857][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.118889][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.129395][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.140062][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.148916][ T3078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.157756][ T3078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.166490][ T3078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.175306][ T3078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.188833][ T3088] veth0_macvtap: entered promiscuous mode [ 28.203707][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.214236][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.224157][ T3080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.234686][ T3080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.245453][ T3080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.257596][ T3088] veth1_macvtap: entered promiscuous mode [ 28.268988][ T3080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.277971][ T3080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.287007][ T3080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.295813][ T3080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.329190][ T3082] veth0_macvtap: entered promiscuous mode [ 28.338970][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.349556][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.359396][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.369879][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.379861][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.390741][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.401846][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.415371][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.426119][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.436022][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.446723][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.456709][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.467208][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.479737][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.488460][ T3082] veth1_macvtap: entered promiscuous mode [ 28.503901][ T3088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.512867][ T3088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.521745][ T3088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.530700][ T3088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600812][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.611386][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.621290][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.623778][ T3238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.631849][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.631862][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.631876][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.631893][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.659013][ T3239] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 28.664222][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.701800][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.714527][ T3239] syzkaller1: entered promiscuous mode [ 28.720184][ T3239] syzkaller1: entered allmulticast mode [ 28.736956][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.747627][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.757522][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.767994][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.778066][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.788558][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.798650][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.805082][ T3229] syz.3.6 (3229) used greatest stack depth: 11456 bytes left [ 28.809147][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.813302][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.869623][ T3082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.878486][ T3082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.887399][ T3082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.891955][ T3254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3254 comm=syz.4.5 [ 28.896124][ T3082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.955576][ T3254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.965024][ T3254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.973865][ T3254] netem: change failed [ 28.987578][ C0] hrtimer: interrupt took 16165 ns [ 29.020168][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 29.020185][ T29] audit: type=1400 audit(1719631283.501:134): avc: denied { setopt } for pid=3260 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.099719][ T29] audit: type=1400 audit(1719631283.561:135): avc: denied { create } for pid=3265 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 29.112027][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 29.120011][ T29] audit: type=1400 audit(1719631283.571:136): avc: denied { ioctl } for pid=3265 comm="syz.4.15" path="socket:[3945]" dev="sockfs" ino=3945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 29.135229][ T3272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 29.154174][ T29] audit: type=1400 audit(1719631283.571:137): avc: denied { create } for pid=3265 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 29.182949][ T29] audit: type=1400 audit(1719631283.571:138): avc: denied { write } for pid=3265 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 29.202830][ T29] audit: type=1400 audit(1719631283.571:139): avc: denied { create } for pid=3265 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.222574][ T29] audit: type=1400 audit(1719631283.571:140): avc: denied { write } for pid=3265 comm="syz.4.15" path="socket:[3953]" dev="sockfs" ino=3953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.245913][ T29] audit: type=1400 audit(1719631283.571:141): avc: denied { getopt } for pid=3265 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 29.305065][ T3278] loop4: detected capacity change from 0 to 4096 [ 29.317046][ T29] audit: type=1400 audit(1719631283.731:142): avc: denied { create } for pid=3267 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.323315][ T3285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 29.336933][ T29] audit: type=1326 audit(1719631283.791:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b25f4b99 code=0x7ffc0000 [ 29.370185][ T3278] ======================================================= [ 29.370185][ T3278] WARNING: The mand mount option has been deprecated and [ 29.370185][ T3278] and is ignored by this kernel. Remove the mand [ 29.370185][ T3278] option from the mount to silence this warning. [ 29.370185][ T3278] ======================================================= [ 29.481742][ T3286] syz.0.17 (3286) used greatest stack depth: 10552 bytes left [ 29.515410][ T3290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.585623][ T3303] loop4: detected capacity change from 0 to 128 [ 29.721845][ T3309] loop2: detected capacity change from 0 to 2048 [ 29.797542][ T3309] loop2: p2 p3 p7 [ 30.000374][ T3082] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 30.000995][ T3157] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.017409][ T3064] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.048149][ T3329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.059043][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.070104][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.080057][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.080925][ T3064] I/O error, dev loop2, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.090633][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.099945][ T3064] Buffer I/O error on dev loop2p7, logical block 8, async page read [ 30.109731][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.109749][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.138183][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.147494][ T3157] I/O error, dev loop2, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.148706][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.157975][ T3157] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 30.167921][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.177734][ T3157] I/O error, dev loop2, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.186201][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.189498][ T3064] I/O error, dev loop2, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.195504][ T3157] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 30.205307][ T3064] Buffer I/O error on dev loop2p7, logical block 9, async page read [ 30.281495][ T3157] I/O error, dev loop2, sector 210 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.291047][ T3157] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 30.316858][ T3335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 30.335250][ T3064] I/O error, dev loop2, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.344691][ T3064] Buffer I/O error on dev loop2p7, logical block 10, async page read [ 30.353925][ T3064] I/O error, dev loop2, sector 411 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.363302][ T3064] Buffer I/O error on dev loop2p7, logical block 11, async page read [ 30.380429][ T3064] I/O error, dev loop2, sector 412 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.388987][ T3157] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 30.389781][ T3064] Buffer I/O error on dev loop2p7, logical block 12, async page read [ 30.407636][ T3064] Buffer I/O error on dev loop2p7, logical block 13, async page read [ 30.539038][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 30.559491][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 30.578371][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 30.658146][ T3338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3338 comm=syz.0.37 [ 30.705888][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 30.707181][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 30.715961][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 30.767211][ T3342] netlink: 47 bytes leftover after parsing attributes in process `syz.3.38'. [ 30.799238][ T3338] Zero length message leads to an empty skb [ 30.809723][ T3346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3346 comm=syz.0.37 [ 30.890969][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 31.075901][ T11] bond0: (slave bond_slave_0): interface is now down [ 31.082624][ T11] bond0: (slave bond_slave_1): interface is now down [ 31.097788][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 31.151871][ T3161] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.152469][ T3387] syzkaller1: entered promiscuous mode [ 31.159329][ T3161] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.164778][ T3387] syzkaller1: entered allmulticast mode [ 31.188340][ T3161] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 31.568017][ T3410] random: crng reseeded on system resumption [ 31.670271][ T50] bond0: (slave bond_slave_0): interface is now down [ 31.672767][ T3415] capability: warning: `syz.4.60' uses 32-bit capabilities (legacy support in use) [ 31.677247][ T50] bond0: (slave bond_slave_1): interface is now down [ 31.694248][ T50] bond0: now running without any active interface! [ 31.745210][ T3417] capability: warning: `syz.4.61' uses deprecated v2 capabilities in a way that may be insecure [ 31.856822][ T3419] mmap: syz.3.62 (3419) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.967592][ T3431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3431 comm=syz.1.66 [ 32.069594][ T28] bond0: (slave bond_slave_0): interface is now down [ 32.076409][ T28] bond0: (slave bond_slave_1): interface is now down [ 32.083809][ T28] bond0: now running without any active interface! [ 32.085535][ T3440] loop3: detected capacity change from 0 to 2048 [ 32.101729][ T3440] EXT4-fs: Ignoring removed orlov option [ 32.130861][ T3440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.146835][ T3440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.162355][ T3440] EXT4-fs (loop3): Remounting filesystem read-only [ 32.178692][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.217547][ T3455] loop1: detected capacity change from 0 to 1764 [ 32.227198][ T3455] iso9660: Unknown parameter 'þ' [ 32.256882][ T3460] x_tables: duplicate underflow at hook 2 [ 32.335412][ T3460] loop2: detected capacity change from 0 to 512 [ 32.341213][ T3472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3472 comm=syz.0.80 [ 32.344474][ T3460] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.368505][ T3460] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.381628][ T3460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.394031][ T3460] EXT4-fs (loop2): 1 truncate cleaned up [ 32.400349][ T3460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.420709][ T3478] tipc: Started in network mode [ 32.425753][ T3478] tipc: Node identity ac1414aa, cluster identity 4711 [ 32.432999][ T3478] tipc: New replicast peer: 100.1.1.1 [ 32.438647][ T3478] tipc: Enabled bearer , priority 10 [ 32.450592][ T3478] loop1: detected capacity change from 0 to 512 [ 32.457872][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.459253][ T3478] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.84: invalid block [ 32.479367][ T3478] EXT4-fs (loop1): Remounting filesystem read-only [ 32.486519][ T3478] EXT4-fs (loop1): 2 truncates cleaned up [ 32.492846][ T3478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.505644][ T3478] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 32.512869][ T3478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.595708][ T3491] loop1: detected capacity change from 0 to 256 [ 32.670663][ T3494] loop1: detected capacity change from 0 to 512 [ 32.689145][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.704188][ T3494] ext4 filesystem being mounted at /root/syzkaller.V6KN4d/23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.719226][ T3494] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.88: corrupted inode contents [ 32.731366][ T3494] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.88: mark_inode_dirty error [ 32.742797][ T3494] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.88: corrupted inode contents [ 32.755492][ T3494] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.88: mark_inode_dirty error [ 32.770191][ T3494] syz.1.88 (3494) used greatest stack depth: 10512 bytes left [ 32.780689][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.861600][ T3508] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 32.861600][ T3508] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 32.861600][ T3508] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 32.861600][ T3508] csum(0x350e2a11 start=10769 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 32.861600][ T3508] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 32.861600][ T3508] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 32.861600][ T3508] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 32.911288][ T3508] dev name=veth0 feat=0x000061164fdd19e9 [ 32.916972][ T3508] skb linear: 00000000: 45 02 29 89 54 6a 00 00 0f 2f 8d aa ac 14 14 18 [ 32.925512][ T3508] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 32.934074][ T3508] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 32.942616][ T3508] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 32.951172][ T3508] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 32.959825][ T3508] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 32.968506][ T3508] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.977067][ T3508] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.985587][ T3508] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 32.987166][ T3509] loop1: detected capacity change from 0 to 4096 [ 32.994171][ T3508] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.009113][ T3508] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.011766][ T3509] EXT4-fs (loop1): invalid inodes per group: 0 [ 33.011766][ T3509] [ 33.017775][ T3508] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.017797][ T3508] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.017819][ T3508] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.051706][ T3508] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.060318][ T3508] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.068858][ T3508] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.077480][ T3508] ------------[ cut here ]------------ [ 33.082995][ T3508] offset (10633) >= skb_headlen() (10633) [ 33.089439][ T3508] WARNING: CPU: 0 PID: 3508 at net/core/dev.c:3325 skb_checksum_help+0x3bd/0x450 [ 33.098605][ T3508] Modules linked in: [ 33.102490][ T3508] CPU: 0 PID: 3508 Comm: syz.1.92 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 33.112422][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.122588][ T3508] RIP: 0010:skb_checksum_help+0x3bd/0x450 [ 33.128375][ T3508] Code: 19 3e 60 fd 41 8b 5d 00 48 8b 6c 24 08 48 89 ef e8 08 3e 60 fd 2b 5d 00 48 c7 c7 67 5b e1 85 44 89 e6 89 da e8 d4 de 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 c3 fe ff ff e8 60 b7 48 fd 48 c7 c7 [ 33.148097][ T3508] RSP: 0018:ffffc90000e73410 EFLAGS: 00010246 [ 33.154193][ T3508] RAX: 38c810f1da16a400 RBX: 0000000000002989 RCX: 0000000000040000 [ 33.162186][ T3508] RDX: ffffc90001e73000 RSI: 000000000003ffff RDI: 0000000000040000 [ 33.170208][ T3508] RBP: ffff888103cdc074 R08: ffffffff81110bd7 R09: 0000000000000000 [ 33.178311][ T3508] R10: 0001ffffffffffff R11: ffff88811384e300 R12: 0000000000002989 [ 33.186340][ T3508] R13: ffff888103cdc070 R14: ffff888103cdc000 R15: 0000000000000000 [ 33.194321][ T3508] FS: 00007f45017cf6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 33.203389][ T3508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.210004][ T3508] CR2: 000000002000e000 CR3: 0000000112d7c000 CR4: 00000000003506f0 [ 33.218004][ T3508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.226015][ T3508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.233994][ T3508] Call Trace: [ 33.237294][ T3508] [ 33.240235][ T3508] ? __warn+0x13c/0x350 [ 33.244492][ T3508] ? report_bug+0x315/0x420 [ 33.249102][ T3508] ? skb_checksum_help+0x3bd/0x450 [ 33.254233][ T3508] ? handle_bug+0x3e/0x70 [ 33.258596][ T3508] ? exc_invalid_op+0x1a/0x50 [ 33.263358][ T3508] ? asm_exc_invalid_op+0x1a/0x20 [ 33.268461][ T3508] ? __warn_printk+0x167/0x1b0 [ 33.273363][ T3508] ? skb_checksum_help+0x3bd/0x450 [ 33.278567][ T3508] ip_do_fragment+0xdb/0xd00 [ 33.283195][ T3508] ? __folio_put+0x114/0x150 [ 33.287831][ T3508] ? free_large_kmalloc+0x8c/0xb0 [ 33.292949][ T3508] ? kfree+0x148/0x290 [ 33.297142][ T3508] ? __pfx_ip_finish_output2+0x10/0x10 [ 33.302628][ T3508] ? skb_release_data+0x583/0x5a0 [ 33.307787][ T3508] ip_fragment+0xd2/0x140 [ 33.312129][ T3508] ip_finish_output+0x1c4/0x2a0 [ 33.317003][ T3508] ip_output+0xab/0x170 [ 33.321207][ T3508] ? __pfx_ip_finish_output+0x10/0x10 [ 33.326700][ T3508] ? __pfx_ip_output+0x10/0x10 [ 33.331594][ T3508] ip_local_out+0xab/0xd0 [ 33.335972][ T3508] iptunnel_xmit+0x33f/0x460 [ 33.340694][ T3508] ip_tunnel_xmit+0x1685/0x1740 [ 33.345660][ T3508] ipgre_xmit+0x5f4/0x6d0 [ 33.350123][ T3508] dev_hard_start_xmit+0x119/0x3f0 [ 33.355327][ T3508] __dev_queue_xmit+0xf83/0x1e50 [ 33.360375][ T3508] ? __dev_queue_xmit+0x161/0x1e50 [ 33.365532][ T3508] packet_xmit+0x4b/0x1e0 [ 33.369943][ T3508] packet_sendmsg+0x2ae1/0x3320 [ 33.374872][ T3508] ? avc_has_perm+0x129/0x160 [ 33.379620][ T3508] ? selinux_socket_sendmsg+0x182/0x1b0 [ 33.385232][ T3508] ? __pfx_packet_sendmsg+0x10/0x10 [ 33.390581][ T3508] __sock_sendmsg+0x140/0x180 [ 33.395298][ T3508] ____sys_sendmsg+0x312/0x410 [ 33.400189][ T3508] __sys_sendmsg+0x1e9/0x280 [ 33.404801][ T3508] ? futex_wait+0x18e/0x1c0 [ 33.409353][ T3508] __x64_sys_sendmsg+0x46/0x50 [ 33.414139][ T3508] x64_sys_call+0xb25/0x2d70 [ 33.418800][ T3508] do_syscall_64+0xc9/0x1c0 [ 33.423357][ T3508] ? clear_bhb_loop+0x55/0xb0 [ 33.428082][ T3508] ? clear_bhb_loop+0x55/0xb0 [ 33.432787][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.438789][ T3508] RIP: 0033:0x7f450254db99 [ 33.443289][ T3508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.462935][ T3508] RSP: 002b:00007f45017cf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.471396][ T3508] RAX: ffffffffffffffda RBX: 00007f45026dbfa0 RCX: 00007f450254db99 [ 33.479471][ T3508] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000004 [ 33.487468][ T3508] RBP: 00007f45025ce77e R08: 0000000000000000 R09: 0000000000000000 [ 33.495485][ T3508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.503552][ T3508] R13: 000000000000000b R14: 00007f45026dbfa0 R15: 00007ffd0e66b828 [ 33.511562][ T3508] [ 33.514625][ T3508] ---[ end trace 0000000000000000 ]--- [ 33.525372][ T3160] tipc: Node number set to 2886997162 [ 33.578816][ T3513] loop0: detected capacity change from 0 to 1024 [ 33.591133][ T3508] syz.1.92 (3508) used greatest stack depth: 10328 bytes left [ 33.591323][ T3513] ext4: Unknown parameter '`' [ 33.779849][ T3541] loop3: detected capacity change from 0 to 256 [ 33.794981][ T3541] FAT-fs (loop3): bogus number of directory entries (4) [ 33.802091][ T3541] FAT-fs (loop3): Can't find a valid FAT filesystem [ 33.894992][ T3552] loop4: detected capacity change from 0 to 512 [ 33.941361][ T3552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.971089][ T3552] ext4 filesystem being mounted at /root/syzkaller.9DzpXR/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.979532][ T3559] bond1: entered promiscuous mode [ 33.988570][ T3559] bond1: entered allmulticast mode [ 33.998914][ T3559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.029204][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 34.029220][ T29] audit: type=1400 audit(1719631288.511:363): avc: denied { create } for pid=3570 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.056750][ T29] audit: type=1400 audit(1719631288.541:364): avc: denied { bind } for pid=3570 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 34.083430][ T29] audit: type=1400 audit(1719631288.541:365): avc: denied { setopt } for pid=3570 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.102827][ T29] audit: type=1400 audit(1719631288.541:366): avc: denied { connect } for pid=3570 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.122242][ T29] audit: type=1400 audit(1719631288.581:367): avc: denied { accept } for pid=3570 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.174527][ T3578] __nla_validate_parse: 5 callbacks suppressed [ 34.174544][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 34.183291][ T3580] loop3: detected capacity change from 0 to 1024 [ 34.198045][ T3582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'. [ 34.206965][ T3582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'. [ 34.217244][ T29] audit: type=1400 audit(1719631288.701:368): avc: denied { create } for pid=3581 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 34.221808][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.239620][ T3583] loop1: detected capacity change from 0 to 256 [ 34.264525][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.269166][ T29] audit: type=1400 audit(1719631288.731:369): avc: denied { setattr } for pid=3570 comm="syz.3.118" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.295311][ T29] audit: type=1400 audit(1719631288.741:370): avc: denied { write } for pid=3581 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 34.306086][ T3583] FAT-fs (loop1): bogus number of directory entries (4) [ 34.323264][ T3583] FAT-fs (loop1): Can't find a valid FAT filesystem [ 34.332828][ T29] audit: type=1400 audit(1719631288.811:371): avc: denied { name_bind } for pid=3585 comm="syz.0.122" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 34.449360][ T29] audit: type=1400 audit(1719631288.931:372): avc: denied { write } for pid=3589 comm="syz.0.125" name="001" dev="devtmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.473909][ T3597] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.550318][ T3605] loop3: detected capacity change from 0 to 2048 [ 34.670591][ T3617] loop3: detected capacity change from 0 to 256 [ 34.694184][ T3619] program syz.1.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.742389][ T3088] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.749538][ T3622] bridge0: port 3(vlan2) entered blocking state [ 34.757788][ T3622] bridge0: port 3(vlan2) entered disabled state [ 34.788383][ T3622] vlan2: entered allmulticast mode [ 34.818131][ T3622] vlan2: left allmulticast mode [ 34.841361][ T3626] netlink: 320 bytes leftover after parsing attributes in process `syz.2.136'. [ 34.858496][ T3630] 9pnet_fd: Insufficient options for proto=fd [ 34.869339][ T3631] 9pnet_fd: Insufficient options for proto=fd [ 34.887336][ T3634] loop0: detected capacity change from 0 to 256 [ 34.908427][ T3634] FAT-fs (loop0): bogus number of directory entries (4) [ 34.915517][ T3634] FAT-fs (loop0): Can't find a valid FAT filesystem [ 34.926133][ T3626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 34.951146][ T3626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 34.981952][ T3626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 35.143753][ T3666] loop3: detected capacity change from 0 to 512 [ 35.151883][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.164163][ T3666] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 35.175687][ T3666] EXT4-fs (loop3): mount failed [ 35.210512][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.241922][ T3672] netlink: 320 bytes leftover after parsing attributes in process `syz.2.153'. [ 35.253345][ T3672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'. [ 35.273210][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.287791][ T3666] loop3: detected capacity change from 0 to 256 [ 35.291534][ T3672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'. [ 35.304480][ T3666] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.330202][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.474306][ T3689] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.482079][ T3689] vhci_hcd: invalid port number 23 [ 35.510840][ T50] bridge_slave_1: left allmulticast mode [ 35.516770][ T50] bridge_slave_1: left promiscuous mode [ 35.522968][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.533746][ T50] bridge_slave_0: left allmulticast mode [ 35.539547][ T50] bridge_slave_0: left promiscuous mode [ 35.545235][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.639308][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.650010][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.660606][ T50] bond0 (unregistering): Released all slaves [ 35.708655][ T3158] kernel read not supported for file bpf-map (pid: 3158 comm: kworker/1:4) [ 35.730905][ T3673] chnl_net:caif_netlink_parms(): no params data found [ 35.750936][ T50] hsr_slave_0: left promiscuous mode [ 35.763849][ T50] hsr_slave_1: left promiscuous mode [ 35.775984][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.783467][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.791786][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.799312][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.813970][ T50] veth1_macvtap: left promiscuous mode [ 35.819649][ T50] veth0_macvtap: left promiscuous mode [ 35.825207][ T50] veth1_vlan: left promiscuous mode [ 35.830500][ T50] veth0_vlan: left promiscuous mode [ 35.859670][ T3733] loop1: detected capacity change from 0 to 256 [ 35.882860][ T3733] FAT-fs (loop1): bogus number of directory entries (4) [ 35.889995][ T3733] FAT-fs (loop1): Can't find a valid FAT filesystem [ 36.014844][ T3746] 9pnet_fd: Insufficient options for proto=fd [ 36.052790][ T3748] 9pnet: p9_errstr2errno: server reported unknown error _exclusive [ 36.084780][ T50] team0 (unregistering): Port device team_slave_1 removed [ 36.100257][ T50] team0 (unregistering): Port device team_slave_0 removed [ 36.257263][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.264448][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.294890][ T3673] bridge_slave_0: entered allmulticast mode [ 36.302328][ T3673] bridge_slave_0: entered promiscuous mode [ 36.309838][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.317012][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.334004][ T3760] loop1: detected capacity change from 0 to 1764 [ 36.340630][ T3673] bridge_slave_1: entered allmulticast mode [ 36.347429][ T3673] bridge_slave_1: entered promiscuous mode [ 36.360651][ T3760] iso9660: Bad value for 'sbsector' [ 36.374419][ T3757] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 36.408709][ T3757] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 36.450910][ T3673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.464693][ T3760] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 36.464693][ T3760] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 36.464693][ T3760] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 36.464693][ T3760] csum(0x350e00a0 start=160 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 36.464693][ T3760] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 36.464693][ T3760] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 36.464693][ T3760] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 36.488611][ T3673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.514218][ T3760] dev name=veth0 feat=0x000061164fdd19e9 [ 36.514238][ T3760] skb linear: 00000000: 45 02 29 89 55 2c 00 00 0f 2f 8c e8 ac 14 14 18 [ 36.537730][ T3760] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 36.546320][ T3760] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 36.554956][ T3760] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 36.563516][ T3760] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 36.572171][ T3760] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 32 00 00 4c 80 14 00 [ 36.580908][ T3760] skb linear: 00000060: 00 00 11 00 01 00 00 00 00 00 00 00 00 00 00 00 [ 36.589453][ T3760] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.598240][ T3760] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.606836][ T3760] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.615460][ T3760] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.624017][ T3760] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.632611][ T3760] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.641260][ T3760] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.649825][ T3760] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.658366][ T3760] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.666938][ T3760] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.675469][ T3760] ------------[ cut here ]------------ [ 36.680959][ T3760] offset+2 (13608) > skb_headlen() (10633) [ 36.688400][ T3760] WARNING: CPU: 1 PID: 3760 at net/core/dev.c:3334 skb_checksum_help+0x43b/0x450 [ 36.697699][ T3760] Modules linked in: [ 36.701605][ T3760] CPU: 1 PID: 3760 Comm: syz.1.169 Tainted: G W 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 36.713128][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.723306][ T3760] RIP: 0010:skb_checksum_help+0x43b/0x450 [ 36.729139][ T3760] Code: 90 4c 89 ff e8 96 3d 60 fd 41 8b 1f 4c 89 e7 e8 8b 3d 60 fd 41 2b 1c 24 48 c7 c7 8a 5b e1 85 48 89 ee 89 da e8 56 de 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 45 fe ff ff 0f 1f 80 00 00 00 00 90 [ 36.748925][ T3760] RSP: 0018:ffffc9000122f410 EFLAGS: 00010246 [ 36.755087][ T3760] RAX: 927e150499031500 RBX: 0000000000002989 RCX: ffff8881042cd280 [ 36.763111][ T3760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.771178][ T3760] RBP: 0000000000003528 R08: ffffffff81110bd7 R09: 0000000000000000 [ 36.779277][ T3760] R10: 0001ffffffffffff R11: 0001c9000122f24f R12: ffff888103cda274 [ 36.787379][ T3760] R13: 0000000055fb430e R14: ffff888103cda200 R15: ffff888103cda270 [ 36.795453][ T3760] FS: 00007f45017cf6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 36.804540][ T3760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.811386][ T3760] CR2: 000000002000e000 CR3: 000000012b6f0000 CR4: 00000000003506f0 [ 36.819421][ T3760] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.827449][ T3760] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.835475][ T3760] Call Trace: [ 36.838811][ T3760] [ 36.841830][ T3760] ? __warn+0x13c/0x350 [ 36.846079][ T3760] ? report_bug+0x315/0x420 [ 36.850613][ T3760] ? skb_checksum_help+0x43b/0x450 [ 36.855755][ T3760] ? handle_bug+0x3e/0x70 [ 36.860170][ T3760] ? exc_invalid_op+0x1a/0x50 [ 36.864954][ T3760] ? asm_exc_invalid_op+0x1a/0x20 [ 36.870038][ T3760] ? __warn_printk+0x167/0x1b0 [ 36.874837][ T3760] ? skb_checksum_help+0x43b/0x450 [ 36.880002][ T3760] ip_do_fragment+0xdb/0xd00 [ 36.884628][ T3760] ? __folio_put+0x114/0x150 [ 36.889287][ T3760] ? free_large_kmalloc+0x8c/0xb0 [ 36.894354][ T3760] ? __slab_free+0x67/0x2b0 [ 36.898936][ T3760] ? __pfx_ip_finish_output2+0x10/0x10 [ 36.904443][ T3760] ip_fragment+0xd2/0x140 [ 36.908953][ T3760] ip_finish_output+0x1c4/0x2a0 [ 36.913829][ T3760] ip_output+0xab/0x170 [ 36.918091][ T3760] ? __pfx_ip_finish_output+0x10/0x10 [ 36.923491][ T3760] ? __pfx_ip_output+0x10/0x10 [ 36.928358][ T3760] ip_local_out+0xab/0xd0 [ 36.932714][ T3760] iptunnel_xmit+0x33f/0x460 [ 36.937408][ T3760] ip_tunnel_xmit+0x1685/0x1740 [ 36.942363][ T3760] ipgre_xmit+0x5f4/0x6d0 [ 36.946758][ T3760] dev_hard_start_xmit+0x119/0x3f0 [ 36.951900][ T3760] __dev_queue_xmit+0xf83/0x1e50 [ 36.956942][ T3760] ? __dev_queue_xmit+0x161/0x1e50 [ 36.962088][ T3760] packet_xmit+0x4b/0x1e0 [ 36.966591][ T3760] packet_sendmsg+0x2ae1/0x3320 [ 36.971484][ T3760] ? selinux_socket_sendmsg+0x182/0x1b0 [ 36.977460][ T3760] ? __pfx_packet_sendmsg+0x10/0x10 [ 36.982725][ T3760] __sock_sendmsg+0x140/0x180 [ 36.987511][ T3760] ____sys_sendmsg+0x312/0x410 [ 36.992350][ T3760] __sys_sendmsg+0x1e9/0x280 [ 36.997141][ T3760] __x64_sys_sendmsg+0x46/0x50 [ 37.002014][ T3760] x64_sys_call+0xb25/0x2d70 [ 37.006710][ T3760] do_syscall_64+0xc9/0x1c0 [ 37.011317][ T3760] ? clear_bhb_loop+0x55/0xb0 [ 37.016135][ T3760] ? clear_bhb_loop+0x55/0xb0 [ 37.020843][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.026820][ T3760] RIP: 0033:0x7f450254db99 [ 37.031253][ T3760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.051107][ T3760] RSP: 002b:00007f45017cf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.059567][ T3760] RAX: ffffffffffffffda RBX: 00007f45026dbfa0 RCX: 00007f450254db99 [ 37.067624][ T3760] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000007 [ 37.075613][ T3760] RBP: 00007f45025ce77e R08: 0000000000000000 R09: 0000000000000000 [ 37.083620][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.091784][ T3760] R13: 000000000000000b R14: 00007f45026dbfa0 R15: 00007ffd0e66b828 [ 37.099802][ T3760] [ 37.102825][ T3760] ---[ end trace 0000000000000000 ]--- [ 37.131770][ T3673] team0: Port device team_slave_0 added [ 37.140044][ T3673] team0: Port device team_slave_1 added [ 37.163619][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.170670][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.196721][ T3673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.199816][ T3787] loop2: detected capacity change from 0 to 1024 [ 37.208404][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.220870][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.246834][ T3673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.260871][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.329006][ T3798] loop1: detected capacity change from 0 to 256 [ 37.349458][ T3673] hsr_slave_0: entered promiscuous mode [ 37.355380][ T3798] FAT-fs (loop1): bogus number of directory entries (4) [ 37.362488][ T3798] FAT-fs (loop1): Can't find a valid FAT filesystem [ 37.376416][ T3673] hsr_slave_1: entered promiscuous mode [ 37.383669][ T3673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.399719][ T3673] Cannot create hsr debugfs directory [ 37.420860][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.559326][ T3821] geneve0: entered promiscuous mode [ 37.591132][ T3821] geneve0: left promiscuous mode [ 37.619768][ T3847] loop0: detected capacity change from 0 to 512 [ 37.651055][ T3847] EXT4-fs (loop0): 1 truncate cleaned up [ 37.663004][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.768449][ T3857] loop1: detected capacity change from 0 to 1024 [ 37.821206][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.869590][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.938587][ T3876] loop3: detected capacity change from 0 to 256 [ 37.950304][ T3876] FAT-fs (loop3): bogus number of directory entries (4) [ 37.957332][ T3876] FAT-fs (loop3): Can't find a valid FAT filesystem [ 37.990560][ T3673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.996045][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.022843][ T3880] loop0: detected capacity change from 0 to 2048 [ 38.032444][ T3673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.073612][ T3673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.089443][ T3880] loop0: p2 p3 p7 [ 38.095280][ T3883] loop2: detected capacity change from 0 to 1024 [ 38.095639][ T3673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.105469][ T3883] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 38.128482][ T3891] random: crng reseeded on system resumption [ 38.236218][ T3078] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 38.243416][ T3157] blk_print_req_error: 10 callbacks suppressed [ 38.243428][ T3157] I/O error, dev loop0, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.259870][ T3072] I/O error, dev loop0, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.269857][ T3328] I/O error, dev loop0, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.285034][ T3673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.298282][ T3072] I/O error, dev loop0, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.307752][ T3072] buffer_io_error: 6 callbacks suppressed [ 38.307766][ T3072] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 38.321698][ T3328] I/O error, dev loop0, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.331174][ T3328] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 38.343515][ T3912] loop1: detected capacity change from 0 to 512 [ 38.353634][ T3157] I/O error, dev loop0, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.356589][ T3673] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.363128][ T3157] Buffer I/O error on dev loop0p7, logical block 8, async page read [ 38.399067][ T3328] I/O error, dev loop0, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.408566][ T3328] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 38.417335][ T3072] I/O error, dev loop0, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.425521][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.426789][ T3072] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 38.433809][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.444695][ T3157] I/O error, dev loop0, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.451038][ T3328] I/O error, dev loop0, sector 610 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.458379][ T3157] Buffer I/O error on dev loop0p7, logical block 9, async page read [ 38.467847][ T3328] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 38.475697][ T3912] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 38.475725][ T3912] EXT4-fs (loop1): mount failed [ 38.499363][ T3328] Buffer I/O error on dev loop0p2, logical block 11, async page read [ 38.507846][ T3328] Buffer I/O error on dev loop0p2, logical block 12, async page read [ 38.517879][ T3673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.528352][ T3673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.535843][ T3328] Buffer I/O error on dev loop0p2, logical block 13, async page read [ 38.555384][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.562508][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.568041][ T3933] loop0: detected capacity change from 0 to 256 [ 38.580361][ T3912] loop1: detected capacity change from 0 to 256 [ 38.595094][ T3912] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.623077][ T3930] loop2: detected capacity change from 0 to 1024 [ 38.639697][ T3933] FAT-fs (loop0): bogus number of directory entries (4) [ 38.639716][ T3933] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.687983][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.712571][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.713924][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.733961][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.769983][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.770294][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.780459][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.799730][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.839982][ T3673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.910218][ T3955] loop1: detected capacity change from 0 to 2048 [ 39.005457][ T3978] random: crng reseeded on system resumption [ 39.021378][ T3955] loop1: p2 p3 p7 [ 39.118511][ T3673] veth0_vlan: entered promiscuous mode [ 39.148174][ T3673] veth1_vlan: entered promiscuous mode [ 39.188425][ T3673] veth0_macvtap: entered promiscuous mode [ 39.195474][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 39.195486][ T29] audit: type=1400 audit(1719631293.671:437): avc: denied { ioctl } for pid=3995 comm="syz.2.212" path="socket:[6079]" dev="sockfs" ino=6079 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.229619][ T3673] veth1_macvtap: entered promiscuous mode [ 39.265869][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.276457][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.286379][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.287600][ T29] audit: type=1400 audit(1719631293.731:438): avc: denied { lock } for pid=3995 comm="syz.2.212" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.296801][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.296816][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.296834][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.344220][ T4010] loop1: detected capacity change from 0 to 512 [ 39.351270][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.368274][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.390296][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.402887][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.403531][ T4011] loop0: detected capacity change from 0 to 1024 [ 39.413372][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.413387][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.413404][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.413421][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.413435][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.466085][ T4010] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 39.470375][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.478094][ T29] audit: type=1400 audit(1719631293.821:439): avc: denied { name_bind } for pid=3995 comm="syz.2.212" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.487252][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.521530][ T4010] EXT4-fs (loop1): mount failed [ 39.525348][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.540863][ T3673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549700][ T3673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.554628][ T4017] loop3: detected capacity change from 0 to 256 [ 39.558488][ T3673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.573433][ T3673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.584908][ T4011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.614265][ T4017] FAT-fs (loop3): bogus number of directory entries (4) [ 39.616837][ T4010] loop1: detected capacity change from 0 to 256 [ 39.621336][ T4017] FAT-fs (loop3): Can't find a valid FAT filesystem [ 39.702033][ T4010] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.720615][ T4030] loop4: detected capacity change from 0 to 512 [ 39.770915][ T4030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.782885][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.800843][ T29] audit: type=1400 audit(1719631294.281:440): avc: denied { bind } for pid=4035 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.830239][ T4030] EXT4-fs (loop4): 1 orphan inode deleted [ 39.836146][ T4030] EXT4-fs (loop4): 1 truncate cleaned up [ 39.842178][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.895490][ T4030] EXT4-fs error (device loop4): ext4_lookup:1854: inode #15: comm syz.4.152: iget: bad extra_isize 46 (inode size 256) [ 39.902241][ T4048] random: crng reseeded on system resumption [ 39.931223][ T4030] EXT4-fs (loop4): Remounting filesystem read-only [ 39.985081][ T4030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 40.033371][ T4059] __nla_validate_parse: 15 callbacks suppressed [ 40.033389][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 40.048620][ T4059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.222'. [ 40.077395][ T29] audit: type=1400 audit(1719631294.551:441): avc: denied { bind } for pid=4070 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.134955][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.147011][ T4079] loop3: detected capacity change from 0 to 256 [ 40.175930][ T29] audit: type=1400 audit(1719631294.571:442): avc: denied { read } for pid=4073 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.195212][ T29] audit: type=1400 audit(1719631294.641:443): avc: denied { connect } for pid=4073 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.232416][ T4088] netlink: 320 bytes leftover after parsing attributes in process `syz.1.229'. [ 40.232564][ T4079] FAT-fs (loop3): bogus number of directory entries (4) [ 40.248765][ T4079] FAT-fs (loop3): Can't find a valid FAT filesystem [ 40.265584][ T4089] loop4: detected capacity change from 0 to 1024 [ 40.286229][ T4088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.229'. [ 40.324697][ T4089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.337561][ T4088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.229'. [ 40.382192][ T4088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.229'. [ 40.404562][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.441949][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 40.456815][ T4110] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 40.456863][ T4113] random: crng reseeded on system resumption [ 40.470708][ T4110] netlink: 'syz.1.235': attribute type 2 has an invalid length. [ 40.497519][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 40.581898][ T4125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 40.588033][ T4127] loop3: detected capacity change from 0 to 164 [ 40.613530][ T4125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 40.684404][ T29] audit: type=1400 audit(1719631295.161:444): avc: denied { read } for pid=4133 comm="syz.3.243" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.686754][ T4121] loop1: detected capacity change from 0 to 8192 [ 40.707103][ T29] audit: type=1400 audit(1719631295.161:445): avc: denied { open } for pid=4133 comm="syz.3.243" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.741531][ T29] audit: type=1400 audit(1719631295.221:446): avc: denied { ioctl } for pid=4133 comm="syz.3.243" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.769920][ T4121] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.819600][ T4141] loop0: detected capacity change from 0 to 1024 [ 40.832289][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.883789][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.959925][ T4145] loop1: detected capacity change from 0 to 128 [ 40.975516][ T4152] loop0: detected capacity change from 0 to 2048 [ 41.016414][ T4152] loop0: p1 < > p3 [ 41.023096][ T4152] loop0: p3 size 134217728 extends beyond EOD, truncated [ 41.038548][ T2782] loop0: p1 < > p3 [ 41.043149][ T2782] loop0: p3 size 134217728 extends beyond EOD, truncated [ 41.075428][ T2782] loop0: p1 < > p3 [ 41.080815][ T2782] loop0: p3 size 134217728 extends beyond EOD, truncated [ 41.177128][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.178231][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.212077][ T4166] tmpfs: Bad value for 'nr_blocks' [ 41.222521][ T4166] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 41.238090][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.245498][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.326762][ T4182] loop4: detected capacity change from 0 to 1024 [ 41.341382][ T4182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.373376][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.471055][ T4194] loop4: detected capacity change from 0 to 256 [ 41.487174][ T4194] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 41.644154][ T4220] loop3: detected capacity change from 0 to 2048 [ 41.696407][ T4220] loop3: p1 < > p3 [ 41.708040][ T4220] loop3: p3 size 134217728 extends beyond EOD, truncated [ 41.895551][ T4253] loop4: detected capacity change from 0 to 1024 [ 41.903974][ T2782] loop3: p1 < > p3 [ 41.913206][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.916583][ T2782] loop3: p3 size 134217728 extends beyond EOD, truncated [ 41.944152][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.970015][ T4259] loop3: detected capacity change from 0 to 512 [ 41.989174][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 42.000690][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.018163][ T4259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.034765][ T4259] ext4 filesystem being mounted at /root/syzkaller.gebsSQ/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.381088][ T4300] loop1: detected capacity change from 0 to 1024 [ 42.391937][ T4300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.415805][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.610953][ T4314] sctp: [Deprecated]: syz.1.287 (pid 4314) Use of int in max_burst socket option. [ 42.610953][ T4314] Use struct sctp_assoc_value instead [ 42.814353][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.937920][ T4329] syz.3.291 (4329) used greatest stack depth: 10200 bytes left [ 42.979185][ T3103] bond0: (slave bond_slave_0): interface is now down [ 42.986082][ T3103] bond0: (slave bond_slave_1): interface is now down [ 43.016164][ T3103] bond0: (slave bond_slave_0): interface is now down [ 43.016530][ T4337] loop3: detected capacity change from 0 to 1024 [ 43.023036][ T3103] bond0: (slave bond_slave_1): interface is now down [ 43.038964][ T3103] bond0: now running without any active interface! [ 43.052190][ T4337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.085866][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.401617][ T4354] loop4: detected capacity change from 0 to 256 [ 43.422285][ T4354] FAT-fs (loop4): bogus number of directory entries (4) [ 43.429586][ T4354] FAT-fs (loop4): Can't find a valid FAT filesystem [ 43.774341][ T4367] loop3: detected capacity change from 0 to 2048 [ 43.835566][ T4374] loop0: detected capacity change from 0 to 1024 [ 43.838716][ T4367] loop3: p2 p3 p7 [ 43.850888][ T4374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.880123][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.900708][ T2782] loop3: p2 p3 p7 [ 43.915734][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.927112][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.949281][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.949415][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.974638][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 44.087241][ T4391] loop0: detected capacity change from 0 to 256 [ 44.089413][ T4391] FAT-fs (loop0): bogus number of directory entries (4) [ 44.089479][ T4391] FAT-fs (loop0): Can't find a valid FAT filesystem [ 44.127234][ T3327] blk_print_req_error: 19 callbacks suppressed [ 44.127251][ T3327] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 44.234386][ T4405] vlan3: entered promiscuous mode [ 44.239549][ T4405] syz_tun: entered promiscuous mode [ 44.241122][ T4402] loop3: detected capacity change from 0 to 2048 [ 44.271787][ T4408] loop2: detected capacity change from 0 to 1024 [ 44.282468][ T4408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.317863][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.323443][ T4402] loop3: p2 p3 p7 [ 44.361417][ T4412] loop0: detected capacity change from 0 to 2048 [ 44.394622][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 44.430078][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 44.444421][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 44.481711][ T4412] loop0: p2 p3 p7 [ 44.614079][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 44.614096][ T29] audit: type=1400 audit(1719631299.091:535): avc: denied { write } for pid=4418 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.632635][ T4428] loop4: detected capacity change from 0 to 256 [ 44.647696][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.660083][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.686580][ T29] audit: type=1400 audit(1719631299.161:536): avc: denied { write } for pid=4418 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.715558][ T29] audit: type=1400 audit(1719631299.191:537): avc: denied { connect } for pid=4418 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.716541][ T4428] FAT-fs (loop4): bogus number of directory entries (4) [ 44.742577][ T4428] FAT-fs (loop4): Can't find a valid FAT filesystem [ 44.847262][ T4445] vlan2: entered promiscuous mode [ 44.852434][ T4445] syz_tun: entered promiscuous mode [ 44.871145][ T4450] loop3: detected capacity change from 0 to 1024 [ 44.906215][ T4450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.993564][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.059623][ T4475] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 99999999 (only 8 groups) [ 45.074137][ T4465] __nla_validate_parse: 45 callbacks suppressed [ 45.074152][ T4465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.338'. [ 45.356951][ T29] audit: type=1400 audit(1719631299.841:538): avc: denied { read } for pid=4482 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.400203][ T4492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.345'. [ 45.412061][ T4492] vlan2: entered promiscuous mode [ 45.417462][ T4492] syz_tun: entered promiscuous mode [ 45.425168][ T4492] netlink: 92 bytes leftover after parsing attributes in process `syz.4.345'. [ 45.439450][ T4492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 45.445222][ T4425] syz.0.323 (4425) used greatest stack depth: 10056 bytes left [ 45.468955][ T4490] loop3: detected capacity change from 0 to 8192 [ 45.489929][ T4490] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.513999][ T29] audit: type=1400 audit(1719631299.991:539): avc: denied { mount } for pid=4489 comm="syz.3.344" name="/" dev="mqueue" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.539196][ T4497] loop4: detected capacity change from 0 to 1024 [ 45.556161][ T4497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.616565][ T4505] loop0: detected capacity change from 0 to 2048 [ 45.623396][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.666666][ T4505] loop0: p2 p3 p7 [ 45.738725][ T4512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'. [ 45.758837][ T29] audit: type=1400 audit(1719631300.241:540): avc: denied { create } for pid=4511 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.786338][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 45.794022][ T4512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'. [ 45.800155][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 45.850445][ T4512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'. [ 45.888698][ T4522] vhci_hcd: default hub control req: 6010 v0009 i0002 l79 [ 45.904529][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 45.944450][ T4530] loop2: detected capacity change from 0 to 512 [ 45.955108][ T29] audit: type=1400 audit(1719631300.431:541): avc: denied { create } for pid=4531 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.007527][ T29] audit: type=1400 audit(1719631300.471:542): avc: denied { checkpoint_restore } for pid=4531 comm="syz.0.359" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.029352][ T29] audit: type=1400 audit(1719631300.471:543): avc: denied { ioctl } for pid=4531 comm="syz.0.359" path="socket:[7936]" dev="sockfs" ino=7936 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.069491][ T4539] loop4: detected capacity change from 0 to 512 [ 46.076765][ T4530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.080382][ T4539] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.098429][ T4530] ext4 filesystem being mounted at /root/syzkaller.OZ7lUi/68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.111169][ T4539] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.131613][ T4539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 46.141031][ T4539] System zones: 1-12 [ 46.146795][ T4539] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.361: corrupted in-inode xattr: e_value size too large [ 46.161635][ T4539] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.361: couldn't read orphan inode 15 (err -117) [ 46.181199][ T4539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.201606][ T29] audit: type=1400 audit(1719631300.681:544): avc: denied { remove_name } for pid=4536 comm="syz.4.361" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.225495][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.270109][ T4545] loop3: detected capacity change from 0 to 2048 [ 46.328063][ T4545] loop3: p2 p3 p7 [ 46.404258][ T4567] netlink: 'syz.0.370': attribute type 2 has an invalid length. [ 46.412838][ T4566] loop0: detected capacity change from 0 to 256 [ 46.497827][ T4578] loop0: detected capacity change from 0 to 512 [ 46.502426][ T4575] loop1: detected capacity change from 0 to 1024 [ 46.507616][ T4578] EXT4-fs: Ignoring removed oldalloc option [ 46.515678][ T4575] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 46.540193][ T4578] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.373: Failed to acquire dquot type 1 [ 46.552056][ T4578] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.373: Failed to acquire dquot type 1 [ 46.564569][ T4578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.373: bg 0: block 248: padding at end of block bitmap is not set [ 46.593966][ T4578] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 46.606104][ T4578] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.373: Failed to acquire dquot type 1 [ 46.617992][ T4578] EXT4-fs (loop0): 1 orphan inode deleted [ 46.630019][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.642852][ T4578] ext4 filesystem being mounted at /root/syzkaller.WNSqrz/81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.689770][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.711344][ T4594] x_tables: ip_tables: udp match: only valid for protocol 17 [ 46.751423][ T4598] loop1: detected capacity change from 0 to 512 [ 46.760864][ T4598] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 46.767648][ T4598] EXT4-fs (loop1): mount failed [ 46.783376][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.819947][ T4598] loop1: detected capacity change from 0 to 256 [ 46.832206][ T4598] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.892468][ T4609] random: crng reseeded on system resumption [ 46.955219][ T4611] loop0: detected capacity change from 0 to 128 [ 46.983273][ T4611] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.008754][ T4611] ext4 filesystem being mounted at /root/syzkaller.WNSqrz/83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.130360][ T4629] loop1: detected capacity change from 0 to 512 [ 47.132569][ T3078] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.157473][ T4629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.170273][ T4629] ext4 filesystem being mounted at /root/syzkaller.V6KN4d/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.178341][ T4634] loop4: detected capacity change from 0 to 512 [ 47.191577][ T4634] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 47.198563][ T4634] EXT4-fs (loop4): mount failed [ 47.248362][ T4634] loop4: detected capacity change from 0 to 256 [ 47.270451][ T4634] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.303707][ T4644] loop0: detected capacity change from 0 to 512 [ 47.311590][ T4644] EXT4-fs: Ignoring removed nobh option [ 47.319206][ T4644] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.330791][ T4644] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 47.340979][ T4644] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.399: Corrupt directory, running e2fsck is recommended [ 47.370352][ T4644] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 47.378792][ T4644] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.399: corrupted in-inode xattr: invalid ea_ino [ 47.392453][ T4644] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.399: couldn't read orphan inode 15 (err -117) [ 47.405051][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.434087][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.507000][ T4650] loop0: detected capacity change from 0 to 512 [ 47.514787][ T4650] EXT4-fs: Ignoring removed i_version option [ 47.521067][ T4650] EXT4-fs: Ignoring removed nobh option [ 47.527567][ T4650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.539441][ T4650] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.553196][ T4650] EXT4-fs (loop0): 1 truncate cleaned up [ 47.560741][ T4650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.589138][ T4654] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 47.610909][ T4657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.628616][ T4654] loop4: detected capacity change from 0 to 512 [ 47.639003][ T4654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.649990][ T4654] EXT4-fs (loop4): 1 truncate cleaned up [ 47.656843][ T4654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.673849][ T4657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.721613][ T4657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.751564][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.789865][ T4657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.816043][ T4663] loop0: detected capacity change from 0 to 1024 [ 47.824371][ T4663] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 47.834409][ T4663] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 47.844224][ T4663] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 47.854821][ T4663] EXT4-fs error (device loop0): ext4_get_journal_inode:5752: inode #5: comm syz.0.404: unexpected bad inode w/o EXT4_IGET_BAD [ 47.868203][ T4663] EXT4-fs (loop0): no journal found [ 47.873492][ T4663] EXT4-fs (loop0): can't get journal size [ 47.884163][ T4663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.891272][ T4657] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.901000][ T4663] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 47.921248][ T4657] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.933701][ T4657] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.942631][ T4663] EXT4-fs error (device loop0): __ext4_iget:4906: inode #15: block 1803188595: comm syz.0.404: invalid block [ 47.957402][ T4657] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.985392][ T3080] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032321][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.079867][ T4670] loop1: detected capacity change from 0 to 256 [ 48.088453][ T4670] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.172076][ T4677] loop0: detected capacity change from 0 to 8192 [ 48.228680][ T3103] bond0: (slave bond_slave_0): interface is now down [ 48.235424][ T3103] bond0: (slave bond_slave_1): interface is now down [ 48.270670][ T3103] bond0: (slave bond_slave_0): interface is now down [ 48.277488][ T3103] bond0: (slave bond_slave_1): interface is now down [ 48.295324][ T3103] bond0: now running without any active interface! [ 48.435396][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.484154][ T4696] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 48.544650][ T4709] random: crng reseeded on system resumption [ 48.569870][ T4707] loop4: detected capacity change from 0 to 512 [ 48.632750][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.668825][ T4707] ext4 filesystem being mounted at /root/syzkaller.fkKeTi/44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.716105][ T3103] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 48.725625][ T3103] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 48.734934][ T3103] bond0: active interface up! [ 48.822753][ T4729] loop3: detected capacity change from 0 to 1024 [ 48.831012][ T4729] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 48.843742][ T4729] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.854759][ T4729] EXT4-fs (loop3): invalid journal inode [ 48.887131][ T4733] loop0: detected capacity change from 0 to 512 [ 48.904973][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.939396][ T4729] Invalid ELF header type: 0 != 1 [ 48.950944][ T4733] ext4 filesystem being mounted at /root/syzkaller.WNSqrz/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.984286][ T4733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.062647][ T4740] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 49.078107][ T4744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4744 comm=syz.0.431 [ 49.113502][ T4740] team0: Port device dummy0 added [ 49.290643][ T3103] bond0: (slave bond_slave_0): interface is now down [ 49.293932][ T4767] loop3: detected capacity change from 0 to 2048 [ 49.297665][ T3103] bond0: (slave bond_slave_1): interface is now down [ 49.366557][ T4767] loop3: p2 p3 p7 [ 49.400756][ T3673] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.489039][ T4786] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.510368][ T4790] random: crng reseeded on system resumption [ 49.565864][ T4786] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.601758][ T4792] loop0: detected capacity change from 0 to 8192 [ 49.620263][ T4796] loop3: detected capacity change from 0 to 512 [ 49.641319][ T4796] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 49.648261][ T4796] EXT4-fs (loop3): mount failed [ 49.657084][ T4786] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.667945][ T4792] loop0: p1 p2[DM] p4 [ 49.672147][ T4792] loop0: p1 size 196608 extends beyond EOD, truncated [ 49.679873][ T4792] loop0: p2 size 150994946 extends beyond EOD, truncated [ 49.687943][ T4792] loop0: p4 size 50331648 extends beyond EOD, truncated [ 49.695020][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 49.695033][ T29] audit: type=1400 audit(1719631304.171:566): avc: denied { accept } for pid=4798 comm="syz.2.451" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.726135][ T4796] loop3: detected capacity change from 0 to 256 [ 49.727325][ T29] audit: type=1400 audit(1719631304.171:567): avc: denied { ioctl } for pid=4798 comm="syz.2.451" path="socket:[9509]" dev="sockfs" ino=9509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.745879][ T4786] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.758809][ T4792] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 49.781569][ T4796] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.785383][ T29] audit: type=1400 audit(1719631304.261:568): avc: denied { relabelto } for pid=4791 comm="syz.0.449" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 49.818197][ T29] audit: type=1400 audit(1719631304.261:569): avc: denied { associate } for pid=4791 comm="syz.0.449" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:policy_config_t:s0" [ 49.908159][ T4786] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.924721][ T29] audit: type=1400 audit(1719631304.401:570): avc: denied { read } for pid=4802 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.956509][ T4786] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.972739][ T4808] loop2: detected capacity change from 0 to 512 [ 49.975537][ T4786] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.000791][ T4786] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.028139][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.048061][ T4811] io-wq is not configured for unbound workers [ 50.049736][ T29] audit: type=1400 audit(1719631304.531:571): avc: denied { read } for pid=4810 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.068447][ T4808] ext4 filesystem being mounted at /root/syzkaller.OZ7lUi/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.093684][ T4815] __nla_validate_parse: 80 callbacks suppressed [ 50.093698][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 50.123774][ T4817] loop4: detected capacity change from 0 to 2048 [ 50.150468][ T4823] random: crng reseeded on system resumption [ 50.164585][ T4825] netlink: 'syz.0.462': attribute type 64 has an invalid length. [ 50.172618][ T4825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 50.212369][ T4817] loop4: p2 p3 p7 [ 50.235468][ T2782] loop4: p2 p3 p7 [ 50.304797][ T4832] ref_ctr_offset mismatch. inode: 0x7b9 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 50.313557][ T4835] loop3: detected capacity change from 0 to 2048 [ 50.340063][ T4835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.354399][ T3328] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.367820][ T29] audit: type=1400 audit(1719631304.851:572): avc: denied { read write } for pid=4834 comm="syz.3.466" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.391677][ T29] audit: type=1400 audit(1719631304.851:573): avc: denied { open } for pid=4834 comm="syz.3.466" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.423569][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.425276][ T3157] udevd[3157]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 50.437785][ T3328] udevd[3328]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.467701][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.546362][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 50.581123][ T4849] loop3: detected capacity change from 0 to 512 [ 50.587508][ T29] audit: type=1400 audit(1719631305.051:574): avc: denied { read } for pid=4848 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.610342][ T4849] EXT4-fs: Ignoring removed nobh option [ 50.623214][ T4849] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.634795][ T4849] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 50.644933][ T4849] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.469: Corrupt directory, running e2fsck is recommended [ 50.696010][ T4849] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 50.704513][ T4849] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.469: corrupted in-inode xattr: invalid ea_ino [ 50.718146][ T4849] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.469: couldn't read orphan inode 15 (err -117) [ 50.734423][ T29] audit: type=1326 audit(1719631305.211:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4855 comm="syz.1.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450254db99 code=0x0 [ 50.760185][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.781488][ T4849] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.793080][ T4849] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 50.803292][ T4849] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.469: Corrupt directory, running e2fsck is recommended [ 50.823696][ T3082] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.836509][ T4849] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.848054][ T4849] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 50.858245][ T4849] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.469: Corrupt directory, running e2fsck is recommended [ 50.871865][ T4849] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #2: block 3: comm syz.3.469: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 50.936988][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.091094][ T4867] loop0: detected capacity change from 0 to 2048 [ 51.138313][ T4867] loop0: p2 p3 p7 [ 51.171249][ T4871] random: crng reseeded on system resumption [ 51.471636][ T4891] ================================================================== [ 51.472804][ T4896] loop0: detected capacity change from 0 to 2048 [ 51.479738][ T4891] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 51.479773][ T4891] [ 51.479778][ T4891] read-write to 0xffff888237c1ff94 of 4 bytes by interrupt on cpu 0: [ 51.479796][ T4891] hrtimer_interrupt+0x72/0x7b0 [ 51.479823][ T4891] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 51.479857][ T4891] sysvec_apic_timer_interrupt+0x6e/0x80 [ 51.519879][ T4891] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.525879][ T4891] _raw_spin_unlock_irqrestore+0x3d/0x60 [ 51.531533][ T4891] folio_batch_move_lru+0x280/0x2c0 [ 51.536740][ T4891] folio_add_lru+0xd4/0x130 [ 51.541252][ T4891] shmem_get_folio_gfp+0x7dc/0xb70 [ 51.546376][ T4891] shmem_write_begin+0xa0/0x1c0 [ 51.551241][ T4891] generic_perform_write+0x1d5/0x410 [ 51.556537][ T4891] shmem_file_write_iter+0xc8/0xf0 [ 51.561653][ T4891] vfs_write+0x78f/0x900 [ 51.565904][ T4891] ksys_write+0xeb/0x1b0 [ 51.570153][ T4891] __x64_sys_write+0x42/0x50 [ 51.574750][ T4891] x64_sys_call+0x27ef/0x2d70 [ 51.579439][ T4891] do_syscall_64+0xc9/0x1c0 [ 51.583954][ T4891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.589855][ T4891] [ 51.592176][ T4891] read to 0xffff888237c1ff94 of 4 bytes by task 4891 on cpu 1: [ 51.599716][ T4891] print_cpu+0x348/0x670 [ 51.603962][ T4891] timer_list_show+0x115/0x180 [ 51.608763][ T4891] seq_read_iter+0x65b/0x940 [ 51.613367][ T4891] proc_reg_read_iter+0x11e/0x190 [ 51.618395][ T4891] copy_splice_read+0x3a4/0x5d0 [ 51.623261][ T4891] splice_direct_to_actor+0x26c/0x670 [ 51.628647][ T4891] do_splice_direct+0xd7/0x150 [ 51.633428][ T4891] do_sendfile+0x3ab/0x960 [ 51.637842][ T4891] __x64_sys_sendfile64+0x110/0x150 [ 51.643052][ T4891] x64_sys_call+0x2c9f/0x2d70 [ 51.647740][ T4891] do_syscall_64+0xc9/0x1c0 [ 51.652256][ T4891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.658156][ T4891] [ 51.660473][ T4891] value changed: 0x00005d4b -> 0x00005d4c [ 51.666183][ T4891] [ 51.668501][ T4891] Reported by Kernel Concurrency Sanitizer on: [ 51.674644][ T4891] CPU: 1 PID: 4891 Comm: syz.4.486 Tainted: G W 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 51.686116][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.696178][ T4891] ================================================================== [ 51.718039][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.337607][ T3078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.