last executing test programs: 11.233280525s ago: executing program 2 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000380)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@map_acorn}, {@hide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@session={'session', 0x3d, 0x35}}, {@nojoliet}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$eJzs3V1vFOf1APCzBAvLf/1R1VYIIUIm0EogEbO7Do6s3HS7HtuTrHdWM+sIrlIU7AhhkhZSqXAFN2krtR8it/0Q7SeKets7qp3dJQt+WYcQL6G/3yqZZ3fOzHNmvMzRY89LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRa6/W641adLLu1o3kYO3VIt88ZP54ff96bnJIvxG1wX8xPx9nhx+d/eV3s88M/ncxzg/fnY/5wWQ+Hv3fmZ99+IuTJ8bLH5LQsXjw8NHdW7u72/dnnciMrKfdrMyzzdZ6mmRlnqwsL9evbayVyVrWScubZT/dTNpF2urnRXK5fSVprKwsJenizXyru77a6qTjDz94r1mvLycfLfbSVlHm3WsfLZbtjazTybrrVcxg9vzou1F8nPWTftraTJKdO7vbS9OSHAQ1jhLUnBbUrDebjUaz2Vi+vnL9g3r95J4P6i+IPRGz/9IyW6/w6A0/zIlR/Y9OZNGNrbgRyb6vdqxGEXlsHjB/ZFz/f30tHbYe79/vZP0fV/mz380+F1X9vzB8d+Gg+n9ALsf3ehAP41HcjVuxG7uxHfdnntHxvtYjjW5kUUYeWWxGK9af/Qzzx0msxHIsRz0+jY1YizKSWDuZRSfSKONmlNGPtPpGtaOINFrRjzyKSOJytONKJNGIlViJpUgijcW4GXlsRTfWYzVa1Vp24k6135cOyfFZUOMoQc1DgtR/vq/5PZ+86kM4vLSn4/oPAAAAvLFq1W/fB+P/uXi7aq1lnbQ+67QAAACAV6j6y//5wWRu0Ho7asb/AAAA8KapVdfY1SJiId4ZtsZXQo1/CTA34xQBAACAH6j6+/+FwWRh0HonanvG/wAAAMBP3F+m3mN/vneq9s9/R1HM1Z70bvyqdq81iGvde2u4XDX5z9OhQbu/dq52erSSarJ8cvSunZ6vje5++ewmmKOTC77dmZZH7dAEJh2cQPwt3h3GvHt7OL09njPsZWEt66SL7bzzYSNardMn+umN/h+/uPOnqDb/r93N07XYubO7vfjZl7u3q1yeDNby5N7oBop77qO4Ty7jWV9V91uorrnYd4vnqgsxRv0uDPutT27/ieHiJ77H9n8dF4cxFxfi6amIWHh+++cHfTYWD9r6URaNKov55zodbfn/Hy2LS8OYS5cvDSf7ZNGclkVzcv+/1L44QhZL07JYOmIWg2/pflkAzMrOlCpU21v4X+JYezzV/eu4PIy5fK46sJ48t88RvT7tiF5/ybo+7usfcWUYc2UcfFCNHfT79xeq6jeDBb45sN+y06wNduFbX937fZx58PDRe3fu3fp8+/PtL5rNpeX6+/X69WbMVZsxmhySKQD/u6Y/Y2dqRO39KaPqnz87pWAxPosvYzdux9XqaoPqjIN917oQO7+J0WkIVydGrZUXRq0LE094uTplVLcw8aCXo8cuHcNPAgCOz8Updfgo9f/qlHH3wsQphVenjI4nazkA8ONIi29rC/0/14oi633aWFlptPobaVLk7Y+TIltdT5Os20+L9karu54mvSLv5+28M2h8kq2mZVJu9Xp50U/W8iLp5WV2o3ryezJ69HuZbra6/axd9jppq0yTdt7tt9r9ZDUr20lv67edrNxIi2rhspe2s7Ws3epneTcp862inS4mSZmmE4HZatrtZ2vZoNlNekW22SpuJp/kna3NNFlNy3aR9fr5cIXjvrLuWl5sVqtdnPXOBoDXxIOHj+7e2t3dvv8jNuLUrLcSAJg0UaUBAAAAAAAAAAAAAIDX1HFc//cGNv7wU951p16PNDRm0nj8u+G//GnBsz4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBe/w0AAP//UiVW8Q==") setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) unshare(0x64000600) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xbaf, &(0x7f0000000a40)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000294080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 7.289909727s ago: executing program 2 (id=391): write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x73, &(0x7f00000002c0)}, 0x10) 7.115348931s ago: executing program 2 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000004010ff020000000000000000000000000001"], 0x340a) 6.941375565s ago: executing program 2 (id=400): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x5, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x9, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a00000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c00010070687973646576004b0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000a00000a"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$eJzs3cFqE0EYB/CvaZKNvdizeFjw4qmoJ69BKogBIZKDgmCgemlF2F6ipzyGT+DBR/IxeipeVppdmza2xYRs1ia/H4T9yD+7mWFgZw8zyfv7nw4PPh9/zH9+i04njWbEOM8jdqMR21HYKo+NSd2Oi8Yxv9YC5wAAy9PvD7t1t4HFff+Hz2RZd3j2zJX8lQx+VNIoAAAAAAAAAAAAKnfV+v84rXb9PwBQL+v/11+WdYc75fPbZdb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU5zfO7+Q2vutsHACyf+R8ANo/5HwA2j/kfADbP6zdvX3Z7vf1+mnYiTsajwWhQHIv8+Yve/qN0Ynd61sloNNg+zx8XeXo5b8VOmT+5Mm/HwwdFfpY9e9WbyZM4qL77AAAAAAAAAAAAAAAAAAAA8F/YS9PJzv+4Zn//XhLl7v3ZvKgu/D7AzP79ZtxrrqwbAAAAAAAAAAAAAAAAAAAAcKsdf/l6ODw6+pDNUdxZ6Kxril95YWkXXLBIYsVfuhXn77TKwVjSleNptY1/165vmG4oYtUjuN7FnztEo76bEwAAAAAAAAAAAAAAAAAAbJjppt+6WwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Zn+/38FRVIUETHOC3V3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhjvwMAAP//cUGYlA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x6, 0x6, 0x7, 0x7ffffffd}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) syz_open_dev$evdev(&(0x7f00000021c0), 0xc1, 0x101000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)="2ae0", 0x2}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_gettime(0x7, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_clone(0x22040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 3.843106109s ago: executing program 2 (id=410): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000001740), 0x12) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c00000002060500000000000000000005000003120003006269746d61703a69702c6d616300ffff05000400010000000900020073797a310000000020000780050003001f0000000c00018008000100ffffffff08000840000001dd05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0xc88c4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close(0xffffffffffffffff) r4 = fsmount(r2, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) unshare(0x10080) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.616331894s ago: executing program 3 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="7c541a4e3e561efda7648786521406", 0xf}, {&(0x7f0000000200)="54a750962e312d3fb23b5260530dd13bf588e4e89b462a2c037e5c301ee50c6f7eddab86e935f97ff2bf90936384e16585b51bbcfdc59f8276dcb699ea6f9a53d39642b1340c6ad7c9ba684e24daeed352c1418344c543ce1309ba4d2e5e5d9b50403105d4984cfaace51b464f9cd3cc95b0d093b11118dd932531c97da9", 0x7e}], 0x2, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="c79a5cc6fa6b6ae7911636c2919fc47b760f016f58ac7e3d1a0ad7076fbe3b798979f73ecf25afd2965d7d05dc197e0cd1937419143f630877ab2ccdbce811ecadc07422c3b0ea5ffe7871f4fb82bfd14057f659dd8dea7efb1e50b757b4b69fae3424c88df5cdfc12b12e785225bddc167896687fdb2b9c3655cd4798a8df206c1ac9ea60e54513503d5ae940e8e2a3b294b1cf62b13384e1cb9f30d52715920412e8d0bfdbb30b2e9ed4dde3618c5758f776f0b9c5fa6606b1e4389a5402ae55773088c1ec280cb859dcd714d5e81d24a36efcf86201dcdb2edab90e61a4ee4ad7f79f3b37f0ab2e7018", 0xeb}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa218}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x83, 0xc, "50215e37374b00ece604"}, @cipso={0x86, 0x1d, 0x0, [{0x0, 0x6, "4634dbc6"}, {0x1, 0x11, "35d6ec8d7eb418d930b4a43faa314d"}]}, @noop]}}}], 0xa0}}, {{&(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="4a4fdfa1dd381fbb1b33faf12d6c644f38fa2a6fc224a73a0bd412977d7c2f9efc41990c76af237a0b6adcdd811ab15b6a5b71c01fe19ad98704962a8638dfce3ae355945853858ab41a81c9df123bd2a6675dadb4cd671d7d34b56edf4d1466be4b95f8f1199d21168955f688c5238866d54b903ef71b1864ae166bbfec68080817f5842f1183573de6988f1367353b2bf6df6485dd4b9c23065bdd386b92c3d35646757de7bedae028f00ae5522ffae2a1359b761618dc8691fc8ca7abfdea1ea705aa710d9a205dfa318dd15e417892deb3a2e39fbb7b1143ba", 0xdb}], 0x1, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x43, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0xc, [0x0, 0x10]}]}}}], 0x40}}], 0x3, 0x8000) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="7c541a4e3e561efda7648786521406", 0xf}, {&(0x7f0000000200)="54a750962e312d3fb23b5260530dd13bf588e4e89b462a2c037e5c301ee50c6f7eddab86e935f97ff2bf90936384e16585b51bbcfdc59f8276dcb699ea6f9a53d39642b1340c6ad7c9ba684e24daeed352c1418344c543ce1309ba4d2e5e5d9b50403105d4984cfaace51b464f9cd3cc95b0d093b11118dd932531c97da9", 0x7e}], 0x2, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="c79a5cc6fa6b6ae7911636c2919fc47b760f016f58ac7e3d1a0ad7076fbe3b798979f73ecf25afd2965d7d05dc197e0cd1937419143f630877ab2ccdbce811ecadc07422c3b0ea5ffe7871f4fb82bfd14057f659dd8dea7efb1e50b757b4b69fae3424c88df5cdfc12b12e785225bddc167896687fdb2b9c3655cd4798a8df206c1ac9ea60e54513503d5ae940e8e2a3b294b1cf62b13384e1cb9f30d52715920412e8d0bfdbb30b2e9ed4dde3618c5758f776f0b9c5fa6606b1e4389a5402ae55773088c1ec280cb859dcd714d5e81d24a36efcf86201dcdb2edab90e61a4ee4ad7f79f3b37f0ab2e7018", 0xeb}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa218}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x83, 0xc, "50215e37374b00ece604"}, @cipso={0x86, 0x1d, 0x0, [{0x0, 0x6, "4634dbc6"}, {0x1, 0x11, "35d6ec8d7eb418d930b4a43faa314d"}]}, @noop]}}}], 0xa0}}, {{&(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="4a4fdfa1dd381fbb1b33faf12d6c644f38fa2a6fc224a73a0bd412977d7c2f9efc41990c76af237a0b6adcdd811ab15b6a5b71c01fe19ad98704962a8638dfce3ae355945853858ab41a81c9df123bd2a6675dadb4cd671d7d34b56edf4d1466be4b95f8f1199d21168955f688c5238866d54b903ef71b1864ae166bbfec68080817f5842f1183573de6988f1367353b2bf6df6485dd4b9c23065bdd386b92c3d35646757de7bedae028f00ae5522ffae2a1359b761618dc8691fc8ca7abfdea1ea705aa710d9a205dfa318dd15e417892deb3a2e39fbb7b1143ba", 0xdb}], 0x1, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x43, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0xc, [0x0, 0x10]}]}}}], 0x40}}], 0x3, 0x8000) (async) close(0x3) (async) 3.485406457s ago: executing program 3 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_driver={0x23e5, 0x101, &(0x7f0000000580)="a8f1515c639244bf95829930ba73c003ca3740b145e8feec91a10a961118a1fd9f8d1886afd319bf4ea5a2b1f71f26f174f05f2804232a5c4e13f0c9be789e1677e1a041db6ff2f183d8f8e05f8909a0f4a35f24a9b5ecbb1ed7bf5a38586c681ddd2bc1fc99319c808ca6227d9cf6251d4c9c8f3efe0dfe4825f45808326040b9c951e90265ac9349a079d2e82881575e3b95c689868bfaaa01098c3acbd6a10846bb76a9ba409b70a5272edc9cf007fc8a3fcaca8a1cc93e7fd6cb32ed00ae3d203207e579d3e713"}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 3.485223717s ago: executing program 2 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c000240010000000000000008000440000000010c0001"], 0xf8}}, 0x0) 3.309639371s ago: executing program 4 (id=421): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x63db, 0x401}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x137, 0x0, &(0x7f0000000180)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getregset(0x4204, r2, 0x200, &(0x7f00000002c0)={0xfffffffffffffffd}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002680)={r3, 0xffffffffffffffff, 0x1f}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 2.532624927s ago: executing program 32 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c000240010000000000000008000440000000010c0001"], 0xf8}}, 0x0) 2.513648667s ago: executing program 4 (id=423): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000440)={0x0, 0x0, @d}, 0x18, r0) keyctl$unlink(0x9, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = syz_io_uring_setup(0x6616, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x8) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x31}]}, &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}, 0x94) 2.225416213s ago: executing program 3 (id=425): eventfd(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.072320757s ago: executing program 4 (id=426): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="84010000100001000000000800000000ac1414aa0000000000000000000000007f00000100000000000000000000000000140004200000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac14143b000000000000000000000000000000000200000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000050000000000000010000000000000000a0000000000000000000000000000000000000000000000000000000a0001060000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001200"], 0x184}}, 0x20000000) 1.563043667s ago: executing program 4 (id=429): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230228bd7002ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003801c0003800c000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/29, 0x1d, 0x1, &(0x7f0000000040)=""/247, 0xf7}, &(0x7f0000000180)=0x40) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001ac0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}}, 0x20004040) 1.45162168s ago: executing program 4 (id=433): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff070000050007"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000400000009848dd0fd09cc"], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000400)={{0x33, @loopback, 0x4e23, 0x1, 'nq\x00', 0x3b, 0x9, 0x19}, {@rand_addr=0x64010100, 0x4e24, 0x10000, 0x7fff, 0x25, 0x3}}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000800)='cgroup.stat\x00', 0x0, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x2c, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r6 = syz_io_uring_setup(0x2ca8, &(0x7f0000000600)={0x0, 0x9879, 0x400, 0x1, 0x363}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x498f, &(0x7f0000000740)={0x0, 0x4c9e, 0x20000, 0x1, 0x3a3, 0x0, r6}) 1.42092028s ago: executing program 0 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_driver={0x23e5, 0x101, &(0x7f0000000580)="a8f1515c639244bf95829930ba73c003ca3740b145e8feec91a10a961118a1fd9f8d1886afd319bf4ea5a2b1f71f26f174f05f2804232a5c4e13f0c9be789e1677e1a041db6ff2f183d8f8e05f8909a0f4a35f24a9b5ecbb1ed7bf5a38586c681ddd2bc1fc99319c808ca6227d9cf6251d4c9c8f3efe0dfe4825f45808326040b9c951e90265ac9349a079d2e82881575e3b95c689868bfaaa01098c3acbd6a10846bb76a9ba409b70a5272edc9cf007fc8a3fcaca8a1cc93e7fd6cb32ed00ae3d203207e579d3e713"}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) 1.338822132s ago: executing program 3 (id=435): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000002e00000008000200", @ANYRES32=0x0, @ANYBLOB="08002c008000000005002b0002000000"], 0x2c}}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="3800000000001200000000000000000095b725cc1e362f39f40932053eab93b5525b995ad3745e933e8f67fb0d1b8f5308218c10fe3a075e6bf062909d85e50a981719be180d30b0b29cdb1dc6f6cea53f148a9171de07f6608a20f2f4f83f4779771a60e479e59f95baf8b853e6c567b5ba58c0ca2f03a8f6e76c09de703ec0a789d6b2a6ee969501af108946b3cf00ae4095559a3aa35463a08029c0a3928fd2c245bde366eab043d0e0382de6be69aff4c58ba3153d9e641aa0162ebb23a45ecd2f61aca0a3d5"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r7 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000044000)) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="af28000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x40040d4) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x280080, &(0x7f0000000280)={[{@grpquota}], [{@hash}, {@smackfsdef={'smackfsdef', 0x3d, '\xff({'}}]}, 0x1, 0xbbe, &(0x7f0000000c40)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xbc9d, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.165598246s ago: executing program 1 (id=436): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e0000002cbd7000ffdbdf2505000600000000000a004e2400000008ff010000000000000000020000000001810000000000000005000500000000000a004e24000000050000b0bedc4c1d96efd10000000000000680000000000000020013001f"], 0x70}, 0x1, 0x7}, 0x0) 780.024204ms ago: executing program 0 (id=437): setreuid(0xffffffffffffffff, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8b80102bfa300000000000007030000fcffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000100001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 779.571924ms ago: executing program 1 (id=438): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000000)={0x5474, 0x9}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x0f'}, {0x20, 'mptcp_pm\x00'}], 0xa, "18b42c5d76595f549aa137df1d8347c6a79adc1dc468c789378ad99a212e87978d1fae4eee74e848fffd7502cbcc94874eb0f605c44e5a2aff8f4d03e2c13bf040b3cef70b49b5c141ec417594a2e42ae702dc70d64cbe5d2731e1d49d5b13ad8a992dc056a290d15d0a7a8e226518bc7db9a7ad20ad9f71ea10f8060a275586fad44ac99e4ae9e809115635"}, 0xa3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x230240, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x4, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000005c0)={0xfffa, 0xf, 0x6, 0x0, 0x6, 0x4}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8050) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000700)=0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740), 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000780)="7d71dd5afe5ed9bd2e80c62ed1e03a3f33112a469a59822ee096758f3f784575ab8c6b95dce8616777def1076609331297373d946c4942bdf13daf7c988a5696358623fbef11d5d489c492542ed1b120155df411d1a137e33768bff74a59aa71ca6e8f63557121b5098df5992825cc2603b5f6d627c573cc1a0c549448202127d67c215181ec6b4f983895032c600d4672", 0x91, 0x4, &(0x7f0000000880)={0x11, 0x10, r8, 0x1, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) mq_unlink(&(0x7f00000008c0)=':](\'\'*\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000900)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000940)='attr\x00') r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r11, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) getpid() setsockopt$inet6_icmp_ICMP_FILTER(r10, 0x1, 0x1, &(0x7f0000000a80)={0xb}, 0x4) syz_clone(0x200000, &(0x7f0000000ac0)="a7a321c51cd91533f83117bc9977dc80db6422d06d72708996a5b40f7f2f7d33fc4d4a1ee3d322289381bbf1d98841eff94c71e95a0c149240b29c143940d2fb3fa12158f2e9c42dd4c6329d844ec5baaedefcbbc6e3f66f084ff9b8aaf8b4c158515262233704ead7a4cf857a06e848c65a8cc079b905ccbcd6c2a568d2bb8efbbf020beab0724a1102b72281b9146323df3a96494a02769962505af360c64ea71599fd9020ef3b77976dc4c34970ebf2bb9f25ed1a08a05c30f500316892d33b5a1f2ef4fc3d95ac66ee73a55f247818b063eb387fbeb3d7b219d7c24a867c708a8b7d01e24eff0ca2b2d33781", 0xee, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)="a07430d264fee2afa12bd7718110982abd9520aa8f10d28fbdf03d255f2e1fe99671a945aa0fe0927f337768e4e6e4983567a5af04f5e0e77101bcdefacb87a4e15369f71e17a4578f7a9e1a951ecbfd91ffb7012564e1ea7f4ba100c945984b92226079278245e7e8a612435ee3d3aa22bf7cd9cd97cdc3c5d2b74c480a78737a38a059566cc3101e1eb29beb742768d333484d9971c45919c5a7025949cadbc57be57544d1e24e50c1d72d6e161eddc5c3819e9b89e33f320b647cfc668a4e00d2") ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r3, {0x4f, 0xffffffff}}, './file0\x00'}) 650.303366ms ago: executing program 0 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000014c0)={0x3, &(0x7f0000000000)=[{0x50, 0x6, 0x8}, {0x28, 0x80, 0x1a, 0x3}, {0x6, 0x5, 0xf9, 0x207}]}, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{0x200}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000240), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000280)='syz1\x00', 0x1ff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x1, 0x6, {{0x21, 0x4, 0x0, 0x2d, 0x84, 0x65, 0x0, 0xf, 0x4, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x4, 0x70}, @generic={0x88, 0xc, '*\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x7, 0x70, [@multicast1]}, @generic={0x88, 0xd, "24121af782c3d0b75107aa"}, @ssrr={0x89, 0x1b, 0x38, [@multicast2, @broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1]}, @generic={0x83, 0xd, "c4bf234a2784c0f4786bb1"}, @timestamp_addr={0x44, 0x1c, 0x7b, 0x1, 0x9, [{@private=0xa010100, 0x1}, {@multicast2, 0xa461}, {@private=0xa010102, 0x87a}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500"/20, @ANYRES32=0x1, @ANYBLOB="04000000000000000000000000000000000000004ec3cbe00ffe752bf11d690e7b9ac8892a2eb45a5abe5853ee0dcab6730d04ac6d4af7ba2bf5c0ea0cfe8bc98129cba62d9e53a08a090e968608f091e63c0e8293954daf3e50861606", @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="03000000030000000400"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb98b35cf22bf3087a00000c0000000c000000020000000000c0"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @none}, 0x8) gettid() 445.384911ms ago: executing program 1 (id=440): geteuid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000880) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf81000000009225a462ac34fc99a697d8142f29b8cda7f942e093fc56b55b6880c0d10c30b281f63a34dff6f7cccbe9fa02d1d334f016bd1301000000000000009bb319b191d03f4caf7f31e84caf850fadc328a19f1577aeb2661ea23e61c10f22d35f471886e1"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3216, 0x40100) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008"], 0x48}}, 0x20000034) 443.601591ms ago: executing program 3 (id=441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) r1 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a453d30783030303030303030363831a4ccb3a8333b36323464352c0090032b173db27cdc85a89e4075f6c96af507c557a07c60f6987bc95fb16ced0ffa08577b35c0ba7d7b0e24f09109649da3cf96befb4a658b2e239c0ff9abe2ad2fba8bc2fb1325425b6ebf45d90832d2304bdb4a5ec996b66972e1d898df31b9020def3122acb438919365c3da0b1520dbd9a67fb5d1fff743e4"]) 391.400212ms ago: executing program 0 (id=442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0xfeff, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x5, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 373.571412ms ago: executing program 1 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000005050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 346.640023ms ago: executing program 0 (id=444): unshare(0x6a040000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xee9, 0x2, 0x3b40000, 0x6, 0x9, 0x513, "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"}}, 0x1001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r2) 346.157523ms ago: executing program 3 (id=445): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000000105050000000002ff00000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x3) writev(r2, &(0x7f0000001500)=[{&(0x7f0000000000)='R', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x5}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r3, 0x2) 233.583025ms ago: executing program 1 (id=446): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 219.658735ms ago: executing program 1 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_driver={0x23e5, 0x101, &(0x7f0000000580)="a8f1515c639244bf95829930ba73c003ca3740b145e8feec91a10a961118a1fd9f8d1886afd319bf4ea5a2b1f71f26f174f05f2804232a5c4e13f0c9be789e1677e1a041db6ff2f183d8f8e05f8909a0f4a35f24a9b5ecbb1ed7bf5a38586c681ddd2bc1fc99319c808ca6227d9cf6251d4c9c8f3efe0dfe4825f45808326040b9c951e90265ac9349a079d2e82881575e3b95c689868bfaaa01098c3acbd6a10846bb76a9ba409b70a5272edc9cf007fc8a3fcaca8a1cc93e7fd6cb32ed00ae3d203207e579d3e713"}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x88000cc, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) 3.4262ms ago: executing program 0 (id=448): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80000) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_read_part_table(0x5e5, &(0x7f0000001340)="$eJzs279r1GccB/DPnR5ndXDJ5FQdHIqL4ugNVe5ORSGcZpEOCgYRbzpBONsDQYd4g9YbxNFFhFv8MeVyQ6aEBELHEDKkBA7apSUZGsiSK9c+gRBK2pRLofB6wfG558Pned7P8wd8g/+1bPza7/czEdHPRxwZtL7de0dmx/+xdrF0ZbDr5h/9bMT3P42P7JwanDpwKq1X0vrd26Pd5+uXc+3lGxunb880s9vXiYgnEXHsfWfsb64+sd+3MnwfCrPHnz6rlV/UC/eXyo3exOLC9Y9rxUrnWrP16Wru0t00N5fq4VQfRj0ex4O4E9WoxnjUhpF/JHpv2qtnt06U25P3LmyWui+nz6W50d0bf/vhXybukV9u9B6dfHWr1bh45vPI6/P1qfl8HPpzrpofShwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfsQ2H2+NNntfKLeiEfEb2JxYXrH9eKlc61ZuvT1dylu2luLtXDqT6MejyOB3EnqlGN8ahtH9jv/5PYL/4i//5SudF70149u3Wi3J68d2Gz1H05fS7NjQ7rwbvszn908tWtVuPimc8jr8/Xp+YrPx+K2IyIav6ALgAAAAAAAAAAAAAAAAAAAAARUSxd+XL068rNiEx8ExFf/fJddtDvp+/dM2nuVKorqf/u7dHu8/XLufbyjY3Tt2eaP6b+k/Q79r4z9p8/hn37PQAA//9lUJXW") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd28, 0x25dfdbfc, 0x800, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x4040000) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000020f003040040000102030109e91a0001010940090904000a0207010105090501020002010601"], 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r4 = timerfd_create(0x8, 0x80800) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) unshare(0x2000080) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x80}, &(0x7f0000000040)=[0x0], 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[]) r6 = dup3(r0, r5, 0x0) ioctl$XFS_IOC_INUMBERS(r6, 0x80405880, &(0x7f0000000240)={{0x1, 0x7, 0xfffffffb, 0x7, 0x6}, [{0x0, 0xf, 0x8, 0x9}, {0x8, 0x7f, 0x5, 0x4}, {0x50a, 0x2, 0x9, 0x4}, {0x0, 0xffffffff, 0xf9, 0x6}, {0x71c2, 0x0, 0x40, 0x6}, {0x2fd, 0x1, 0xf, 0x4}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001022bbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="2408003e1b02040008001d0040000000"], 0x28}, 0x1, 0x0, 0x0, 0xc840}, 0x880) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)="3c2d8f166d164f6dad834ae54303419b4dc511a2514527733d2dfd1be3d6", 0x1e, r5}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r6], 0x50) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x8, 0x4, 0x5}, 0x10) 0s ago: executing program 4 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0xc000) ioprio_get$pid(0x2, r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x20, 0x70, 0x100000}, 0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) syz_usbip_server_init(0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 30.805801][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 30.805815][ T28] audit: type=1400 audit(1784619290.148:117): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.835032][ T28] audit: type=1400 audit(1784619290.178:118): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.836320][ T3284] cgroup: Unknown subsys name 'net' [ 30.862938][ T28] audit: type=1400 audit(1784619290.208:119): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.983384][ T3284] cgroup: Unknown subsys name 'cpuset' [ 30.989621][ T3284] cgroup: Unknown subsys name 'rlimit' [ 31.098453][ T28] audit: type=1400 audit(1784619290.438:120): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.122878][ T28] audit: type=1400 audit(1784619290.438:121): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.143671][ T28] audit: type=1400 audit(1784619290.438:122): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.151642][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.164343][ T28] audit: type=1400 audit(1784619290.438:123): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.182052][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.193204][ T28] audit: type=1400 audit(1784619290.438:124): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.222952][ T28] audit: type=1400 audit(1784619290.438:125): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.247949][ T28] audit: type=1400 audit(1784619290.438:126): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.194175][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.201361][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.208618][ T3299] bridge_slave_0: entered allmulticast mode [ 33.215038][ T3299] bridge_slave_0: entered promiscuous mode [ 33.231407][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.238575][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.245726][ T3299] bridge_slave_1: entered allmulticast mode [ 33.252162][ T3299] bridge_slave_1: entered promiscuous mode [ 33.306505][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.313685][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.320954][ T3296] bridge_slave_0: entered allmulticast mode [ 33.327375][ T3296] bridge_slave_0: entered promiscuous mode [ 33.336808][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.343898][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.351091][ T3304] bridge_slave_0: entered allmulticast mode [ 33.357518][ T3304] bridge_slave_0: entered promiscuous mode [ 33.365237][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.376665][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.383858][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.390977][ T3296] bridge_slave_1: entered allmulticast mode [ 33.397354][ T3296] bridge_slave_1: entered promiscuous mode [ 33.407175][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.414295][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.421419][ T3304] bridge_slave_1: entered allmulticast mode [ 33.427816][ T3304] bridge_slave_1: entered promiscuous mode [ 33.435000][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.486707][ T3299] team0: Port device team_slave_0 added [ 33.493441][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.503791][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.515749][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.525971][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.535198][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.542272][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.549445][ T3297] bridge_slave_0: entered allmulticast mode [ 33.555998][ T3297] bridge_slave_0: entered promiscuous mode [ 33.563287][ T3299] team0: Port device team_slave_1 added [ 33.579491][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.586619][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.593795][ T3297] bridge_slave_1: entered allmulticast mode [ 33.600296][ T3297] bridge_slave_1: entered promiscuous mode [ 33.633311][ T3296] team0: Port device team_slave_0 added [ 33.643619][ T3304] team0: Port device team_slave_0 added [ 33.653891][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.660862][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.686842][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.698407][ T3296] team0: Port device team_slave_1 added [ 33.704096][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.711164][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.718358][ T3306] bridge_slave_0: entered allmulticast mode [ 33.724743][ T3306] bridge_slave_0: entered promiscuous mode [ 33.731647][ T3304] team0: Port device team_slave_1 added [ 33.738269][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.747722][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.754722][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.780707][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.795280][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.802382][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.809516][ T3306] bridge_slave_1: entered allmulticast mode [ 33.816076][ T3306] bridge_slave_1: entered promiscuous mode [ 33.827553][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.860174][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.867178][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.893411][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.908468][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.915453][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.941524][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.953396][ T3297] team0: Port device team_slave_0 added [ 33.959406][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.966377][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.992381][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.004172][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.013612][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.020658][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.046664][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.063885][ T3297] team0: Port device team_slave_1 added [ 34.077695][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.097031][ T3306] team0: Port device team_slave_0 added [ 34.109489][ T3299] hsr_slave_0: entered promiscuous mode [ 34.115636][ T3299] hsr_slave_1: entered promiscuous mode [ 34.133456][ T3306] team0: Port device team_slave_1 added [ 34.148592][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.155631][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.181696][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.205085][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.212095][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.238543][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.249490][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.256541][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.282513][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.304454][ T3296] hsr_slave_0: entered promiscuous mode [ 34.310535][ T3296] hsr_slave_1: entered promiscuous mode [ 34.316430][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 34.322157][ T3296] Cannot create hsr debugfs directory [ 34.327917][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.334929][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.361003][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.376875][ T3304] hsr_slave_0: entered promiscuous mode [ 34.382934][ T3304] hsr_slave_1: entered promiscuous mode [ 34.388918][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.394654][ T3304] Cannot create hsr debugfs directory [ 34.434551][ T3297] hsr_slave_0: entered promiscuous mode [ 34.440626][ T3297] hsr_slave_1: entered promiscuous mode [ 34.446592][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.452331][ T3297] Cannot create hsr debugfs directory [ 34.490825][ T3306] hsr_slave_0: entered promiscuous mode [ 34.497171][ T3306] hsr_slave_1: entered promiscuous mode [ 34.503056][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.508811][ T3306] Cannot create hsr debugfs directory [ 34.666279][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.674695][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.684805][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.693529][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.703964][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.712498][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.724112][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.732997][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.746726][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.755260][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.766589][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.775725][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.783511][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.791979][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.799696][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.808487][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.836464][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.845021][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.860982][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.869614][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.877636][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.885985][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.893753][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.902221][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.922367][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.930894][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.939180][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.947660][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.955554][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.964156][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.972919][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.981165][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.014718][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.023156][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.030772][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.040340][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.051836][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.060860][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.068883][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.077788][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.114688][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.143651][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.151585][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.167451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.174545][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.188800][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.202199][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.210643][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.217722][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.231749][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.244626][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.252533][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.259617][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.270099][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.277200][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.300163][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.307298][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.326509][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.341299][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.352485][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.359628][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.369642][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.376708][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.386593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.393654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.416428][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.435546][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.442663][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.465926][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.473004][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.522173][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.533766][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.612891][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.641677][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.744824][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.755783][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.812360][ T3296] veth0_vlan: entered promiscuous mode [ 35.824721][ T3299] veth0_vlan: entered promiscuous mode [ 35.832606][ T3296] veth1_vlan: entered promiscuous mode [ 35.843801][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.856490][ T3299] veth1_vlan: entered promiscuous mode [ 35.887392][ T3296] veth0_macvtap: entered promiscuous mode [ 35.899272][ T3299] veth0_macvtap: entered promiscuous mode [ 35.908525][ T3296] veth1_macvtap: entered promiscuous mode [ 35.918128][ T3299] veth1_macvtap: entered promiscuous mode [ 35.938074][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.946570][ T3297] veth0_vlan: entered promiscuous mode [ 35.957063][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.967018][ T3297] veth1_vlan: entered promiscuous mode [ 35.981880][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.991589][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.004894][ T3453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.014541][ T3453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025925][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.042299][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.056164][ T3453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.064922][ T3453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.082190][ T3453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.092398][ T3453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.104682][ T3304] veth0_vlan: entered promiscuous mode [ 36.111669][ T3297] veth0_macvtap: entered promiscuous mode [ 36.128474][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 36.128489][ T28] audit: type=1400 audit(1784619295.468:140): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0DD5Nc/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.135120][ T3304] veth1_vlan: entered promiscuous mode [ 36.162349][ T28] audit: type=1400 audit(1784619295.468:141): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.186977][ T28] audit: type=1400 audit(1784619295.468:142): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0DD5Nc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.213783][ T3297] veth1_macvtap: entered promiscuous mode [ 36.223152][ T3306] veth0_vlan: entered promiscuous mode [ 36.232336][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.236982][ T28] audit: type=1400 audit(1784619295.468:143): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.269743][ T28] audit: type=1400 audit(1784619295.468:144): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0DD5Nc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.278059][ T3304] veth0_macvtap: entered promiscuous mode [ 36.297923][ T28] audit: type=1400 audit(1784619295.468:145): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0DD5Nc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.306380][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.331825][ T28] audit: type=1400 audit(1784619295.468:146): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.357193][ T3306] veth1_vlan: entered promiscuous mode [ 36.359705][ T28] audit: type=1400 audit(1784619295.508:147): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.371409][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.387323][ T28] audit: type=1400 audit(1784619295.508:148): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=4044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.424305][ T3306] veth0_macvtap: entered promiscuous mode [ 36.436207][ T3304] veth1_macvtap: entered promiscuous mode [ 36.442190][ T28] audit: type=1400 audit(1784619295.778:149): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.475488][ T3306] veth1_macvtap: entered promiscuous mode [ 36.484330][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.486564][ T3504] loop0: detected capacity change from 0 to 512 [ 36.500190][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.513826][ T3504] EXT4-fs (loop0): Invalid log block size: 16777215 [ 36.521889][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532133][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.551931][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.561885][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.570624][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.590107][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.611863][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.641963][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.663698][ T3505] loop3: detected capacity change from 0 to 128 [ 36.673974][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.691933][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.712393][ T3505] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.716865][ T3516] netlink: 'syz.2.7': attribute type 21 has an invalid length. [ 36.717673][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.737253][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.749610][ T3505] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.772176][ T3516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.786746][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.807971][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.892140][ T3526] loop2: detected capacity change from 0 to 512 [ 36.945499][ T3526] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.996298][ T3535] loop4: detected capacity change from 0 to 256 [ 37.008486][ T3535] msdos: Unknown parameter 'i' [ 37.009607][ T3526] EXT4-fs (loop2): 1 orphan inode deleted [ 37.023392][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 37.041446][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.054209][ T12] loop2: lost filesystem error report for type 5 error -117 [ 37.071318][ T3526] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.165233][ T3548] loop1: detected capacity change from 0 to 512 [ 37.166670][ T3546] netlink: 'syz.4.13': attribute type 5 has an invalid length. [ 37.179736][ T3548] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.179875][ T3548] ------------[ cut here ]------------ [ 37.179884][ T3548] EA inode 11 i_nlink=2 [ 37.179900][ T3548] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.12/3548 [ 37.179990][ T3548] Modules linked in: [ 37.180014][ T3548] CPU: 0 UID: 0 PID: 3548 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.224523][ T3546] netlink: 45 bytes leftover after parsing attributes in process `syz.4.13'. [ 37.226598][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 37.226616][ T3548] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 37.226723][ T3548] Code: f6 c1 96 ff 49 8d 7e 40 4c 8d 2d 5b a0 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 71 d9 d9 03 90 90 90 90 90 90 90 [ 37.271861][ T3548] RSP: 0018:ffffc9000188f7f8 EFLAGS: 00010246 [ 37.278011][ T3548] RAX: ffff888104a5d030 RBX: ffff88810765c5a8 RCX: ffffffff81c295d6 [ 37.286086][ T3548] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3620 [ 37.294102][ T3548] RBP: 000000000000000b R08: 000188810765c55b R09: 0000000000000000 [ 37.302099][ T3548] R10: ffffc9000188f728 R11: 0001c9000188f728 R12: ffff88810765c558 [ 37.310120][ T3548] R13: ffffffff871d3620 R14: ffff88810765c510 R15: 0000000000000001 [ 37.318159][ T3548] FS: 00007fcffa2166c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 37.327220][ T3548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.333904][ T3548] CR2: 0000001b3301bff8 CR3: 000000011b938000 CR4: 00000000003506f0 [ 37.341906][ T3548] Call Trace: [ 37.345228][ T3548] [ 37.348166][ T3548] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 37.354298][ T3548] ext4_xattr_delete_inode+0x6b5/0x790 [ 37.359798][ T3548] ext4_evict_inode+0xb18/0xdf0 [ 37.364701][ T3548] ? __pfx_ext4_evict_inode+0x10/0x10 [ 37.370197][ T3548] evict+0x2a5/0x510 [ 37.374228][ T3548] iput+0x430/0x5a0 [ 37.378126][ T3548] ext4_process_orphan+0x1a4/0x1c0 [ 37.383540][ T3548] ext4_orphan_cleanup+0x6a6/0xa10 [ 37.388682][ T3548] ? ext4_register_li_request+0x14c/0x440 [ 37.394458][ T3548] ext4_fill_super+0x33ab/0x3760 [ 37.399492][ T3548] ? set_blocksize+0x14c/0x270 [ 37.404328][ T3548] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.409672][ T3548] get_tree_bdev_flags+0x291/0x300 [ 37.414881][ T3548] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.420322][ T3548] get_tree_bdev+0x1f/0x30 [ 37.424806][ T3548] ext4_get_tree+0x1c/0x30 [ 37.429309][ T3548] vfs_get_tree+0x57/0x1d0 [ 37.433789][ T3548] do_new_mount+0x288/0x8d0 [ 37.438319][ T3548] path_mount+0x4ad/0xb90 [ 37.442794][ T3548] __se_sys_mount+0x28c/0x2e0 [ 37.447559][ T3548] __x64_sys_mount+0x67/0x80 [ 37.452224][ T3548] x64_sys_call+0x2d61/0x3020 [ 37.457472][ T3548] do_syscall_64+0x136/0x3c0 [ 37.462341][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.468292][ T3548] RIP: 0033:0x7fcffb7df10a [ 37.472798][ T3548] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.492451][ T3548] RSP: 002b:00007fcffa215e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.500964][ T3548] RAX: ffffffffffffffda RBX: 00007fcffa215ee0 RCX: 00007fcffb7df10a [ 37.508975][ T3548] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fcffa215ea0 [ 37.517057][ T3548] RBP: 00002000000009c0 R08: 00007fcffa215ee0 R09: 0000000000800718 [ 37.525195][ T3548] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 37.533291][ T3548] R13: 00007fcffa215ea0 R14: 000000000000048d R15: 0000200000000200 [ 37.541341][ T3548] [ 37.544386][ T3548] ---[ end trace 0000000000000000 ]--- [ 37.550736][ T3548] EXT4-fs (loop1): 1 orphan inode deleted [ 37.557049][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.594683][ T3548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.650743][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.688506][ T3555] tmpfs: Bad value for 'nr_inodes' [ 37.979908][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.047154][ T3581] Zero length message leads to an empty skb [ 38.057166][ T3580] loop1: detected capacity change from 0 to 512 [ 38.083891][ T3580] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.20: inode has both inline data and extents flags [ 38.109935][ T3580] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.111334][ T3580] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.20: couldn't read orphan inode 15 (err -117) [ 38.120544][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 38.120573][ C1] EXT4-fs (loop1): initial error at time 1784619297: ext4_orphan_get:1399: inode 15 [ 38.120623][ C1] EXT4-fs (loop1): last error at time 1784619297: ext4_orphan_get:1399: inode 15 [ 38.158227][ T3580] loop1: lost filesystem error report for type 5 error -117 [ 38.162270][ T3580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.192957][ T3580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.339224][ T3599] netlink: 56 bytes leftover after parsing attributes in process `syz.1.22'. [ 38.495345][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 38.516761][ T3612] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 38.516761][ T3612] Please contact the netfilter-devel mailing list or update your nftables rules. [ 38.580924][ T3619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=3619 comm=syz.4.28 [ 38.744113][ T3628] loop3: detected capacity change from 0 to 512 [ 38.777996][ T3632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33'. [ 38.847118][ T3635] capability: warning: `syz.4.35' uses 32-bit capabilities (legacy support in use) [ 38.864979][ T3637] netlink: 'syz.3.37': attribute type 21 has an invalid length. [ 38.878126][ T3637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37'. [ 38.896550][ T3637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 39.127921][ T3648] netlink: 124 bytes leftover after parsing attributes in process `syz.2.38'. [ 39.689838][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 40.987171][ T3659] netlink: zone id is out of range [ 40.992386][ T3659] netlink: zone id is out of range [ 40.997608][ T3659] netlink: zone id is out of range [ 41.002726][ T3659] netlink: zone id is out of range [ 41.007868][ T3659] netlink: zone id is out of range [ 41.013008][ T3659] netlink: zone id is out of range [ 41.018131][ T3659] netlink: zone id is out of range [ 41.023250][ T3659] netlink: zone id is out of range [ 41.028409][ T3659] netlink: zone id is out of range [ 41.034286][ T3659] netlink: set zone limit has 4 unknown bytes [ 41.288273][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 41.288287][ T28] audit: type=1400 audit(1784619300.628:240): avc: denied { create } for pid=3667 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 41.341580][ T3668] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20003 [ 41.354433][ T3384] IPVS: starting estimator thread 0... [ 41.375262][ T28] audit: type=1400 audit(1784619300.658:241): avc: denied { create } for pid=3662 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.441649][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 41.462859][ T3673] IPVS: using max 2400 ests per chain, 120000 per kthread [ 41.542882][ T28] audit: type=1400 audit(1784619300.888:242): avc: denied { create } for pid=3681 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.656316][ T3686] netlink: 'syz.0.51': attribute type 5 has an invalid length. [ 41.672065][ T28] audit: type=1400 audit(1784619301.008:243): avc: denied { bind } for pid=3681 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.842089][ T28] audit: type=1400 audit(1784619301.178:244): avc: denied { relabelfrom } for pid=3692 comm="syz.4.54" name="NETLINK" dev="sockfs" ino=5002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.879223][ T3694] loop0: detected capacity change from 0 to 256 [ 41.957352][ T3696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3696 comm=syz.4.54 [ 42.002660][ T28] audit: type=1400 audit(1784619301.178:245): avc: denied { relabelto } for pid=3692 comm="syz.4.54" name="NETLINK" dev="sockfs" ino=5002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 42.090399][ T3700] __nla_validate_parse: 2 callbacks suppressed [ 42.090417][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 42.169284][ T28] audit: type=1400 audit(1784619301.218:246): avc: denied { name_bind } for pid=3692 comm="syz.4.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.244634][ T3698] hub 5-0:1.0: USB hub found [ 42.268816][ T3698] hub 5-0:1.0: 8 ports detected [ 42.275780][ T28] audit: type=1400 audit(1784619301.388:247): avc: denied { write } for pid=3697 comm="syz.3.55" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.314703][ T3702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 42.321962][ T3702] IPv6: NLM_F_CREATE should be set when creating new route [ 42.329212][ T3702] IPv6: NLM_F_CREATE should be set when creating new route [ 42.336429][ T3702] IPv6: NLM_F_CREATE should be set when creating new route [ 42.366642][ T28] audit: type=1400 audit(1784619301.478:248): avc: denied { create } for pid=3697 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.386138][ T28] audit: type=1400 audit(1784619301.648:249): avc: denied { create } for pid=3704 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 42.508745][ T3717] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 42.615828][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 42.629846][ T3724] netlink: 'syz.2.63': attribute type 5 has an invalid length. [ 42.645149][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 42.654061][ T392] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.663155][ T3724] netlink: 45 bytes leftover after parsing attributes in process `syz.2.63'. [ 42.672327][ T392] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.683184][ T392] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.792771][ T392] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.892629][ T3736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.68'. [ 43.482072][ T3753] loop3: detected capacity change from 0 to 128 [ 43.581967][ T3760] netlink: 216 bytes leftover after parsing attributes in process `syz.0.75'. [ 43.588404][ T3759] ======================================================= [ 43.588404][ T3759] WARNING: The mand mount option has been deprecated and [ 43.588404][ T3759] and is ignored by this kernel. Remove the mand [ 43.588404][ T3759] option from the mount to silence this warning. [ 43.588404][ T3759] ======================================================= [ 43.637164][ T3759] 9p: Bad value for 'wfdno' [ 43.671770][ T3756] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 43.719233][ T891] Process accounting resumed [ 43.727137][ T3765] netlink: 'syz.0.77': attribute type 5 has an invalid length. [ 43.751779][ T3765] netlink: 45 bytes leftover after parsing attributes in process `syz.0.77'. [ 44.823290][ T3802] loop3: detected capacity change from 0 to 1764 [ 44.890017][ T3804] netlink: 160 bytes leftover after parsing attributes in process `syz.2.89'. [ 45.042658][ T3805] loop3: detected capacity change from 0 to 764 [ 45.053047][ T3805] rock: directory entry would overflow storage [ 45.059496][ T3805] rock: sig=0x5245, size=8, remaining=5 [ 45.092732][ T3807] netlink: 'syz.2.90': attribute type 5 has an invalid length. [ 45.110379][ T3807] netlink: 45 bytes leftover after parsing attributes in process `syz.2.90'. [ 45.130586][ T3805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 45.205868][ T3809] loop4: detected capacity change from 0 to 1764 [ 45.269555][ T3818] capability: warning: `syz.2.94' uses deprecated v2 capabilities in a way that may be insecure [ 45.653795][ T3822] loop4: detected capacity change from 0 to 764 [ 45.720648][ T3822] rock: directory entry would overflow storage [ 45.726938][ T3822] rock: sig=0x5245, size=8, remaining=5 [ 46.099037][ T3831] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 46.109093][ T3822] syz.4.91 (3822) used greatest stack depth: 10464 bytes left [ 46.218829][ T3831] loop3: detected capacity change from 0 to 512 [ 46.305957][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 46.305972][ T28] audit: type=1400 audit(1784619305.648:367): avc: denied { ioctl } for pid=3850 comm="syz.4.100" path="socket:[5604]" dev="sockfs" ino=5604 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.347489][ T28] audit: type=1400 audit(1784619305.688:368): avc: denied { create } for pid=3853 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.405943][ T28] audit: type=1400 audit(1784619305.688:369): avc: denied { bind } for pid=3853 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.437606][ T28] audit: type=1400 audit(1784619305.728:370): avc: denied { setopt } for pid=3855 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.601678][ T3858] netlink: 'syz.4.103': attribute type 4 has an invalid length. [ 46.650775][ T3870] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 46.651821][ T3866] netlink: 'syz.4.103': attribute type 4 has an invalid length. [ 46.693889][ T3877] loop3: detected capacity change from 0 to 256 [ 46.763779][ T28] audit: type=1400 audit(1784619306.098:371): avc: denied { create } for pid=3869 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.879636][ T28] audit: type=1400 audit(1784619306.218:372): avc: denied { ioctl } for pid=3869 comm="syz.3.106" path="socket:[5641]" dev="sockfs" ino=5641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.929441][ T28] audit: type=1400 audit(1784619306.248:373): avc: denied { bind } for pid=3869 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.961683][ T3881] loop3: detected capacity change from 0 to 512 [ 46.980164][ T28] audit: type=1400 audit(1784619306.298:374): avc: denied { write } for pid=3869 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.045515][ T3881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.071271][ T3881] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.135113][ T28] audit: type=1400 audit(1784619306.468:375): avc: denied { setattr } for pid=3869 comm="syz.3.106" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.226443][ T3858] syz.4.103 (3858) used greatest stack depth: 10176 bytes left [ 47.253165][ T3870] syz.3.106 (3870) used greatest stack depth: 9728 bytes left [ 47.262381][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.322924][ T3892] process 'syz.2.112' launched '/dev/fd/7' with NULL argv: empty string added [ 47.332122][ T28] audit: type=1400 audit(1784619306.658:376): avc: denied { execute } for pid=3890 comm="syz.2.112" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.342414][ T3893] loop1: detected capacity change from 0 to 256 [ 47.384943][ T3893] msdos: Unknown parameter 'i' [ 47.611671][ T3908] __nla_validate_parse: 4 callbacks suppressed [ 47.611696][ T3908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.117'. [ 47.829951][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 48.372576][ T3918] loop2: detected capacity change from 0 to 512 [ 48.404955][ T3918] EXT4-fs (loop2): 1 truncate cleaned up [ 48.466541][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.550897][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.633829][ T3925] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 48.738388][ T3927] FAULT_INJECTION: forcing a failure. [ 48.738388][ T3927] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.851207][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: syz.2.123 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 48.851239][ T3927] Tainted: [W]=WARN [ 48.851246][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 48.851276][ T3927] Call Trace: [ 48.851283][ T3927] [ 48.851293][ T3927] __dump_stack+0x1d/0x30 [ 48.851366][ T3927] dump_stack_lvl+0x95/0xd0 [ 48.851389][ T3927] dump_stack+0x15/0x1b [ 48.851411][ T3927] should_fail_ex+0x25e/0x270 [ 48.851525][ T3927] should_fail+0xb/0x20 [ 48.851554][ T3927] should_fail_usercopy+0x1a/0x20 [ 48.851594][ T3927] strncpy_from_user+0x27/0x250 [ 48.851622][ T3927] do_getname+0x59/0x1c0 [ 48.851717][ T3927] getname_flags+0x1d/0x30 [ 48.851743][ T3927] do_sys_openat2+0x6c/0x130 [ 48.851777][ T3927] __x64_sys_openat+0xf2/0x120 [ 48.851808][ T3927] x64_sys_call+0x1e39/0x3020 [ 48.851834][ T3927] do_syscall_64+0x136/0x3c0 [ 48.851942][ T3927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.852047][ T3927] RIP: 0033:0x7f2ce5f1de99 [ 48.852065][ T3927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.852161][ T3927] RSP: 002b:00007f2ce4977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.852223][ T3927] RAX: ffffffffffffffda RBX: 00007f2ce61a5fa0 RCX: 00007f2ce5f1de99 [ 48.852238][ T3927] RDX: 0000000000511001 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 48.852254][ T3927] RBP: 00007f2ce4977090 R08: 0000000000000000 R09: 0000000000000000 [ 48.852269][ T3927] R10: 0000000000000488 R11: 0000000000000246 R12: 0000000000000001 [ 48.852284][ T3927] R13: 00007f2ce61a6038 R14: 00007f2ce61a5fa0 R15: 00007ffd1dd04638 [ 48.852304][ T3927] [ 49.516775][ T3936] loop2: detected capacity change from 0 to 256 [ 49.926597][ T3915] mmap: syz.4.119 (3915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.296999][ T3949] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 50.296999][ T3949] program syz.3.131 not setting count and/or reply_len properly [ 50.450771][ T3955] loop3: detected capacity change from 0 to 512 [ 50.489393][ T3957] loop4: detected capacity change from 0 to 2048 [ 50.527850][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.558100][ T3957] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.657630][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.019717][ T3968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 51.026375][ T3968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.034609][ T3968] vhci_hcd vhci_hcd.0: Device attached [ 51.293548][ T3974] loop2: detected capacity change from 0 to 512 [ 51.332785][ T11] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 51.394207][ T3974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.431964][ T3969] vhci_hcd: connection reset by peer [ 51.438114][ T68] vhci_hcd vhci_hcd.3: stop threads [ 51.450804][ T68] vhci_hcd vhci_hcd.3: release socket [ 51.485418][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 51.491973][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 51.492039][ T28] audit: type=1400 audit(1784619310.828:387): avc: denied { bind } for pid=3977 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.531718][ T3978] netlink: 'syz.0.139': attribute type 10 has an invalid length. [ 51.577153][ T3974] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.590360][ T3978] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.633722][ T3978] bond0: (slave team0): Enslaving as an active interface with an up link [ 51.676718][ T3981] loop4: detected capacity change from 0 to 256 [ 51.871416][ T3986] loop0: detected capacity change from 0 to 256 [ 51.914439][ T28] audit: type=1400 audit(1784619311.258:388): avc: denied { setopt } for pid=3987 comm="syz.4.142" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.939004][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 52.007327][ T28] audit: type=1400 audit(1784619311.278:389): avc: denied { connect } for pid=3987 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.147903][ T3992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.143'. [ 52.157553][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 52.190084][ T3992] geneve2: entered promiscuous mode [ 52.225228][ T28] audit: type=1400 audit(1784619311.568:390): avc: denied { listen } for pid=3993 comm="syz.3.144" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.261685][ T3994] C: renamed from veth1_to_team (while UP) [ 52.289584][ T3994] netlink: 152 bytes leftover after parsing attributes in process `syz.3.144'. [ 52.364740][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.386459][ T4000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 52.404926][ T4000] netlink: 'syz.1.145': attribute type 5 has an invalid length. [ 52.450411][ T3999] loop3: detected capacity change from 0 to 512 [ 52.526648][ T3999] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.146: Bad quota inum: 1, type: 2 [ 52.542289][ T3999] loop3: lost filesystem error report for type 5 error -117 [ 52.542717][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.556758][ C1] EXT4-fs (loop3): initial error at time 1784619311: ext4_quota_enable:7228 [ 52.565810][ C1] EXT4-fs (loop3): last error at time 1784619311: ext4_quota_enable:7228 [ 52.574807][ T3999] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 52.575572][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.600156][ T3999] EXT4-fs (loop3): mount failed [ 52.652533][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 52.686963][ T28] audit: type=1400 audit(1784619312.028:391): avc: denied { getopt } for pid=4007 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.708191][ T4016] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 52.716891][ T28] audit: type=1400 audit(1784619312.048:392): avc: denied { setopt } for pid=3998 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.727381][ T3999] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 52.745975][ T28] audit: type=1400 audit(1784619312.088:393): avc: denied { write } for pid=4012 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.786736][ T4016] loop3: detected capacity change from 0 to 512 [ 52.793125][ T4013] syzkaller0: entered promiscuous mode [ 52.798743][ T4013] syzkaller0: entered allmulticast mode [ 52.817046][ T4015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4015 comm=syz.1.152 [ 52.818673][ T4016] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.146: inode has both inline data and extents flags [ 52.833868][ T4024] loop2: detected capacity change from 0 to 512 [ 52.843224][ T4013] tipc: Started in network mode [ 52.853725][ T4013] tipc: Node identity ea0ff7dd1cc5, cluster identity 4711 [ 52.854167][ T4016] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.861257][ T4013] tipc: Enabled bearer , priority 0 [ 52.865514][ T4016] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.146: couldn't read orphan inode 15 (err -117) [ 52.877143][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.877161][ C1] EXT4-fs (loop3): initial error at time 1784619312: ext4_orphan_get:1399: inode 15 [ 52.877191][ C1] EXT4-fs (loop3): last error at time 1784619312: ext4_orphan_get:1399: inode 15 [ 52.894741][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.896260][ T4016] loop3: lost filesystem error report for type 5 error -117 [ 52.905746][ T4024] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.914786][ T4016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.927693][ T4011] tipc: Resetting bearer [ 52.971230][ T28] audit: type=1400 audit(1784619312.308:394): avc: denied { write } for pid=4022 comm="syz.2.153" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.996504][ T4011] tipc: Disabling bearer [ 53.000156][ T28] audit: type=1400 audit(1784619312.308:395): avc: denied { add_name } for pid=4022 comm="syz.2.153" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.023067][ T28] audit: type=1400 audit(1784619312.308:396): avc: denied { create } for pid=4022 comm="syz.2.153" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.080608][ T4029] bridge_slave_0: left allmulticast mode [ 53.087085][ T4029] bridge_slave_0: left promiscuous mode [ 53.093149][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.109051][ T4029] bridge_slave_1: left allmulticast mode [ 53.119241][ T4029] bridge_slave_1: left promiscuous mode [ 53.125141][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.133443][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.157755][ T4029] bond0: (slave bond_slave_0): Releasing backup interface [ 53.173803][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.196285][ T4029] bond0: (slave bond_slave_1): Releasing backup interface [ 53.227124][ T4029] team0: Port device team_slave_0 removed [ 53.256518][ T4029] team0: Port device team_slave_1 removed [ 53.271024][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.293088][ T4048] netlink: 388 bytes leftover after parsing attributes in process `syz.1.155'. [ 53.309276][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.340055][ T4029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.347660][ T4029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.361341][ T4029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.440220][ T4055] loop3: detected capacity change from 0 to 512 [ 53.490349][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.503166][ T4055] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.524139][ T4055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 53.576050][ T4055] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 53.640682][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 53.821379][ T4055] bond2 (unregistering): Released all slaves [ 53.867866][ T4063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.881609][ T4064] bond1: (slave batadv1): Opening slave failed [ 53.892335][ T4074] loop4: detected capacity change from 0 to 512 [ 53.916949][ T4074] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.164: corrupted in-inode xattr: e_value out of bounds [ 53.938242][ T4074] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.938400][ T4074] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.164: couldn't read orphan inode 15 (err -117) [ 53.947615][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.947640][ C0] EXT4-fs (loop4): initial error at time 1784619313: ext4_iget_extra_inode:5180: inode 15 [ 53.947675][ C0] EXT4-fs (loop4): last error at time 1784619313: ext4_iget_extra_inode:5180: inode 15 [ 53.952654][ T4078] syzkaller0: entered promiscuous mode [ 53.976279][ T4074] loop4: lost filesystem error report for type 5 error -117 [ 53.991652][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.006299][ T4078] syzkaller0: entered allmulticast mode [ 54.027390][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 54.041822][ T4078] tipc: Started in network mode [ 54.046992][ T4078] tipc: Node identity 1e507810977e, cluster identity 4711 [ 54.054509][ T4078] tipc: Enabled bearer , priority 0 [ 54.068655][ T4077] tipc: Resetting bearer [ 54.086104][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.097867][ T4077] tipc: Disabling bearer [ 54.115354][ T4085] 9pnet_fd: Insufficient options for proto=fd [ 54.116298][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.130801][ T4085] loop2: detected capacity change from 0 to 512 [ 54.138895][ T4085] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 54.147456][ T4082] lo: entered allmulticast mode [ 54.902057][ T4088] loop4: detected capacity change from 0 to 512 [ 55.049355][ T4094] loop2: detected capacity change from 0 to 128 [ 55.077344][ T4088] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.168: Bad quota inum: 1, type: 2 [ 55.654281][ T4103] loop3: detected capacity change from 0 to 512 [ 55.706345][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.719150][ T4103] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.759729][ T4103] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 55.774710][ T4103] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.170: corrupted inode contents [ 55.796249][ T4103] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.170: mark_inode_dirty error [ 55.807938][ T4103] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.170: corrupted inode contents [ 55.820471][ T4103] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.170: mark_inode_dirty error [ 55.831857][ T4103] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.170: corrupted inode contents [ 55.849090][ T4103] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.170: mark_inode_dirty error [ 55.849115][ T4088] loop4: lost filesystem error report for type 5 error -117 [ 55.852722][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 55.867668][ T4103] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.170: corrupted inode contents [ 55.874045][ C0] EXT4-fs (loop4): initial error at time 1784619315: ext4_quota_enable:7228 [ 55.874071][ C0] EXT4-fs (loop4): last error at time 1784619315: ext4_quota_enable:7228 [ 55.905445][ T4103] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.170: mark_inode_dirty error [ 55.917162][ T4103] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 56.036539][ T4088] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 56.087090][ T4088] EXT4-fs (loop4): mount failed [ 56.202854][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.214162][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 56.248512][ T4119] loop1: detected capacity change from 0 to 1024 [ 56.260761][ T4119] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.272800][ T4124] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 56.279829][ T4119] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 56.300099][ T4088] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 56.396564][ T11] usb 7-1: enqueue for inactive port 0 [ 56.533881][ T11] usb 7-1: enqueue for inactive port 0 [ 57.234355][ T4133] EXT4-fs (loop3): Invalid log block size: 16777215 [ 57.546259][ T4124] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.168: inode has both inline data and extents flags [ 57.566385][ T11] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 58.325121][ T4124] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.327508][ T4124] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.168: couldn't read orphan inode 15 (err -117) [ 58.336769][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 58.336785][ C1] EXT4-fs (loop4): initial error at time 1784619317: ext4_orphan_get:1399: inode 15 [ 58.336836][ C1] EXT4-fs (loop4): last error at time 1784619317: ext4_orphan_get:1399: inode 15 [ 58.421497][ T4124] loop4: lost filesystem error report for type 5 error -117 [ 58.421967][ T4124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.498128][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 58.635900][ T4146] ipvlan2: entered allmulticast mode [ 58.648360][ T4146] syz_tun: entered allmulticast mode [ 59.522678][ T4162] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 59.617552][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.643078][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 59.643096][ T28] audit: type=1400 audit(1784619318.978:418): avc: denied { search } for pid=4165 comm="syz.2.191" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.740255][ T28] audit: type=1400 audit(1784619318.978:419): avc: denied { search } for pid=4165 comm="syz.2.191" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.763204][ T28] audit: type=1400 audit(1784619318.978:420): avc: denied { search } for pid=4165 comm="syz.2.191" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.939496][ T4178] set_capacity_and_notify: 2 callbacks suppressed [ 59.939515][ T4178] loop4: detected capacity change from 0 to 8192 [ 59.996212][ T28] audit: type=1400 audit(1784619319.338:421): avc: denied { mounton } for pid=4168 comm="syz.4.192" path="/41/file1/bus" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 60.008576][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.037351][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.062372][ T28] audit: type=1400 audit(1784619319.338:422): avc: denied { read write } for pid=4174 comm="syz.2.195" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.127494][ T28] audit: type=1400 audit(1784619319.338:423): avc: denied { open } for pid=4174 comm="syz.2.195" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.162759][ T28] audit: type=1400 audit(1784619319.338:424): avc: denied { ioctl } for pid=4174 comm="syz.2.195" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.206607][ T28] audit: type=1400 audit(1784619319.388:425): avc: denied { getopt } for pid=4168 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.226405][ T28] audit: type=1326 audit(1784619319.448:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.4.192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5b08fde99 code=0x0 [ 60.234592][ T4162] syz.3.189 (4162) used greatest stack depth: 9664 bytes left [ 60.328156][ T3306] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 60.339505][ T3306] FAT-fs (loop4): Filesystem has been set read-only [ 60.361788][ T28] audit: type=1400 audit(1784619319.698:427): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.781466][ T4203] loop4: detected capacity change from 0 to 512 [ 60.889380][ T4203] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.203: Bad quota inum: 1, type: 2 [ 60.952012][ T4203] loop4: lost filesystem error report for type 5 error -117 [ 60.958399][ T4203] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 60.966047][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 60.966136][ C0] EXT4-fs (loop4): initial error at time 1784619320: ext4_quota_enable:7228 [ 60.966339][ C0] EXT4-fs (loop4): last error at time 1784619320: ext4_quota_enable:7228 [ 61.116065][ T4203] EXT4-fs (loop4): mount failed [ 61.158042][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 61.209116][ T4221] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 61.233620][ T4203] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 61.328137][ T4221] loop4: detected capacity change from 0 to 512 [ 61.378424][ T4221] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.203: inode has both inline data and extents flags [ 61.391680][ T4221] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.391857][ T4221] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.203: couldn't read orphan inode 15 (err -117) [ 61.401016][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 61.401039][ C0] EXT4-fs (loop4): initial error at time 1784619320: ext4_orphan_get:1399: inode 15 [ 61.401088][ C0] EXT4-fs (loop4): last error at time 1784619320: ext4_orphan_get:1399: inode 15 [ 61.446630][ T3398] bridge0: entered promiscuous mode [ 61.506119][ T4221] loop4: lost filesystem error report for type 5 error -117 [ 61.508041][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.706217][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.822584][ T4238] netlink: 'syz.2.214': attribute type 13 has an invalid length. [ 61.930213][ T4243] loop3: detected capacity change from 0 to 512 [ 61.954112][ T4243] EXT4-fs: Ignoring removed i_version option [ 61.974823][ T4243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.005444][ T4243] EXT4-fs (loop3): 1 truncate cleaned up [ 62.047883][ T4243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.134500][ T4248] xt_CONNSECMARK: invalid mode: 66 [ 62.359881][ T4254] loop2: detected capacity change from 0 to 512 [ 62.369686][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.442371][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 62.490722][ T4266] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 62.515810][ T4278] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 62.523120][ T4276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 62.566709][ T4276] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 62.815039][ T4299] netlink: zone id is out of range [ 62.828589][ T4299] netlink: zone id is out of range [ 62.833789][ T4299] netlink: zone id is out of range [ 62.838983][ T4299] netlink: zone id is out of range [ 62.844233][ T4299] netlink: zone id is out of range [ 62.849561][ T4299] netlink: zone id is out of range [ 62.854746][ T4299] netlink: zone id is out of range [ 62.860103][ T4299] netlink: zone id is out of range [ 62.865504][ T4299] netlink: zone id is out of range [ 62.872426][ T4299] netlink: set zone limit has 4 unknown bytes [ 63.057203][ T4309] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 63.146234][ T4313] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 64.386449][ T4346] loop2: detected capacity change from 0 to 512 [ 64.438812][ T4346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.707587][ T4376] loop3: detected capacity change from 0 to 256 [ 64.722950][ T4371] FAULT_INJECTION: forcing a failure. [ 64.722950][ T4371] name failslab, interval 1, probability 0, space 0, times 1 [ 64.756438][ T4371] CPU: 1 UID: 0 PID: 4371 Comm: syz.3.258 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 64.756490][ T4371] Tainted: [W]=WARN [ 64.756497][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 64.756510][ T4371] Call Trace: [ 64.756517][ T4371] [ 64.756525][ T4371] __dump_stack+0x1d/0x30 [ 64.756574][ T4371] dump_stack_lvl+0x95/0xd0 [ 64.756601][ T4371] dump_stack+0x15/0x1b [ 64.756623][ T4371] should_fail_ex+0x25e/0x270 [ 64.756684][ T4371] should_failslab+0x8c/0xb0 [ 64.756708][ T4371] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 64.756786][ T4371] ? dup_task_struct+0x5a/0x6a0 [ 64.756810][ T4371] ? dup_task_struct+0x5a/0x6a0 [ 64.756834][ T4371] dup_task_struct+0x5a/0x6a0 [ 64.756933][ T4371] copy_process+0x5a0/0x2310 [ 64.757006][ T4371] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 64.757036][ T4371] ? add_wait_queue+0x4b/0x80 [ 64.757132][ T4371] ? avc_policy_seqno+0x15/0x30 [ 64.757203][ T4371] ? selinux_file_permission+0x1dc/0x310 [ 64.757249][ T4371] ? __pfx_io_wq_worker+0x10/0x10 [ 64.757276][ T4371] create_io_thread+0x8f/0xc0 [ 64.757305][ T4371] ? __pfx_io_wq_worker+0x10/0x10 [ 64.757414][ T4371] create_io_worker+0xde/0x360 [ 64.757442][ T4371] io_wq_enqueue+0x461/0x540 [ 64.757467][ T4371] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 64.757496][ T4371] io_queue_iowq+0x24e/0x320 [ 64.757559][ T4371] ? io_queue_async+0x2ed/0x330 [ 64.757586][ T4371] io_queue_async+0x2f5/0x330 [ 64.757610][ T4371] ? __pfx_io_req_task_submit+0x10/0x10 [ 64.757757][ T4371] io_req_task_submit+0x9b/0xa0 [ 64.757797][ T4371] tctx_task_work_run+0x3a9/0x500 [ 64.757829][ T4371] tctx_task_work+0x3f/0x60 [ 64.757896][ T4371] task_work_run+0x130/0x1a0 [ 64.757922][ T4371] get_signal+0xdc1/0xf10 [ 64.757980][ T4371] ? __pfx_default_wake_function+0x10/0x10 [ 64.758011][ T4371] ? snd_seq_read+0x3ca/0x420 [ 64.758058][ T4371] arch_do_signal_or_restart+0x96/0x480 [ 64.758094][ T4371] exit_to_user_mode_loop+0x15d/0x8c0 [ 64.758123][ T4371] ? ksys_read+0x194/0x1a0 [ 64.758215][ T4371] do_syscall_64+0x23c/0x3c0 [ 64.758240][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.758315][ T4371] RIP: 0033:0x7f164bb7de99 [ 64.758349][ T4371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.758443][ T4371] RSP: 002b:00007f164a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.758466][ T4371] RAX: fffffffffffffe00 RBX: 00007f164be05fa0 RCX: 00007f164bb7de99 [ 64.758482][ T4371] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000004 [ 64.758498][ T4371] RBP: 00007f164a5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.758513][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.758528][ T4371] R13: 00007f164be06038 R14: 00007f164be05fa0 R15: 00007ffd075dc088 [ 64.758598][ T4371] [ 65.162484][ T4380] loop4: detected capacity change from 0 to 256 [ 65.321872][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 65.321888][ T28] audit: type=1400 audit(1784619324.658:453): avc: denied { create } for pid=4386 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 65.454794][ T28] audit: type=1400 audit(1784619324.698:454): avc: denied { sys_admin } for pid=4386 comm="syz.3.262" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 65.532407][ T28] audit: type=1326 audit(1784619324.748:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.557922][ T28] audit: type=1326 audit(1784619324.748:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.606538][ T28] audit: type=1326 audit(1784619324.748:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.682910][ T28] audit: type=1326 audit(1784619324.758:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.734183][ T28] audit: type=1326 audit(1784619324.818:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.788615][ T4399] netlink: 120 bytes leftover after parsing attributes in process `syz.4.266'. [ 65.813354][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 65.835577][ T28] audit: type=1326 audit(1784619324.818:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.892367][ T4408] audit: audit_backlog=65 > audit_backlog_limit=64 [ 65.909087][ T28] audit: type=1326 audit(1784619324.788:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.261" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61cf0de99 code=0x7ffc0000 [ 65.935531][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 66.006921][ T4412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 66.289307][ T4421] loop1: detected capacity change from 0 to 256 [ 66.343778][ T4415] netlink: 388 bytes leftover after parsing attributes in process `syz.4.272'. [ 66.468669][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.469197][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.479034][ T4421] FAT-fs (loop1): Filesystem has been set read-only [ 66.495668][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.515896][ T4421] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 66.627823][ T4441] syzkaller1: entered promiscuous mode [ 66.633529][ T4441] syzkaller1: entered allmulticast mode [ 66.743932][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 67.022681][ T4454] gretap0: entered promiscuous mode [ 67.067642][ T4454] vlan2: entered promiscuous mode [ 67.269901][ T4459] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 67.340044][ T4459] SELinux: failed to load policy [ 68.279622][ T4469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'. [ 68.288581][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 68.743812][ T4477] loop1: detected capacity change from 0 to 128 [ 68.991806][ T4476] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 68.998475][ T4476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.016791][ T4476] vhci_hcd vhci_hcd.0: Device attached [ 69.038897][ T4481] loop4: detected capacity change from 0 to 128 [ 69.078302][ T4481] FAULT_INJECTION: forcing a failure. [ 69.078302][ T4481] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.139988][ T4478] vhci_hcd: connection closed [ 69.142832][ T392] vhci_hcd vhci_hcd.3: stop threads [ 69.171349][ T4481] CPU: 1 UID: 0 PID: 4481 Comm: syz.4.292 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 69.171466][ T4481] Tainted: [W]=WARN [ 69.171474][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 69.171489][ T4481] Call Trace: [ 69.171496][ T4481] [ 69.171504][ T4481] __dump_stack+0x1d/0x30 [ 69.171579][ T4481] dump_stack_lvl+0x95/0xd0 [ 69.171600][ T4481] dump_stack+0x15/0x1b [ 69.171616][ T4481] should_fail_ex+0x25e/0x270 [ 69.171642][ T4481] should_fail_alloc_page+0xf2/0x100 [ 69.171697][ T4481] __alloc_frozen_pages_noprof+0x108/0x350 [ 69.171732][ T4481] alloc_pages_mpol+0xa9/0x1d0 [ 69.171771][ T4481] folio_alloc_noprof+0x96/0x150 [ 69.171826][ T4481] filemap_alloc_folio_noprof+0x92/0x220 [ 69.171864][ T4481] __filemap_get_folio_mpol+0x2a0/0x840 [ 69.171898][ T4481] ? __mark_inode_dirty+0x1f5/0x700 [ 69.171936][ T4481] cont_write_begin+0x58b/0x920 [ 69.171974][ T4481] ? generic_write_end+0x133/0x150 [ 69.172024][ T4481] fat_write_begin+0x52/0xe0 [ 69.172045][ T4481] ? __pfx_fat_get_block+0x10/0x10 [ 69.172080][ T4481] cont_write_begin+0x18d/0x920 [ 69.172150][ T4481] fat_write_begin+0x52/0xe0 [ 69.172172][ T4481] ? __pfx_fat_get_block+0x10/0x10 [ 69.172222][ T4481] generic_perform_write+0x186/0x490 [ 69.172262][ T4481] __generic_file_write_iter+0x9e/0x120 [ 69.172284][ T4481] generic_file_write_iter+0x77/0x1f0 [ 69.172308][ T4481] do_iter_readv_writev+0x4f6/0x5a0 [ 69.172338][ T4481] vfs_writev+0x2d1/0x8b0 [ 69.172509][ T4481] ? get_pid_task+0x92/0xc0 [ 69.172540][ T4481] __se_sys_pwritev2+0xfc/0x1c0 [ 69.172563][ T4481] __x64_sys_pwritev2+0x67/0x80 [ 69.172584][ T4481] x64_sys_call+0xe07/0x3020 [ 69.172680][ T4481] do_syscall_64+0x136/0x3c0 [ 69.172705][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.172766][ T4481] RIP: 0033:0x7fe5b08fde99 [ 69.172781][ T4481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.172800][ T4481] RSP: 002b:00007fe5af357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 69.172820][ T4481] RAX: ffffffffffffffda RBX: 00007fe5b0b85fa0 RCX: 00007fe5b08fde99 [ 69.172835][ T4481] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 69.172898][ T4481] RBP: 00007fe5af357090 R08: 0000000000000000 R09: 0000000000000000 [ 69.172910][ T4481] R10: 0000000000005401 R11: 0000000000000246 R12: 0000000000000001 [ 69.172924][ T4481] R13: 00007fe5b0b86038 R14: 00007fe5b0b85fa0 R15: 00007ffdf5e90aa8 [ 69.172974][ T4481] [ 69.176809][ T392] vhci_hcd vhci_hcd.3: release socket [ 69.275637][ T4463] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 69.296579][ T392] vhci_hcd vhci_hcd.3: disconnect device [ 69.714510][ T4502] loop4: detected capacity change from 0 to 512 [ 69.770522][ T4502] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.300: Bad quota inum: 1, type: 2 [ 69.796544][ T4502] loop4: lost filesystem error report for type 5 error -117 [ 69.797096][ T4502] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 69.804557][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.804631][ C1] EXT4-fs (loop4): initial error at time 1784619329: ext4_quota_enable:7228 [ 69.804766][ C1] EXT4-fs (loop4): last error at time 1784619329: ext4_quota_enable:7228 [ 69.936127][ T4502] EXT4-fs (loop4): mount failed [ 70.132859][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 70.333046][ T4513] loop1: detected capacity change from 0 to 512 [ 70.353033][ T4515] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 70.401595][ T4502] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 70.440553][ T4513] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 70.450573][ T4513] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.302: invalid block [ 70.462683][ T4513] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 70.464789][ T4513] EXT4-fs (loop1): 1 truncate cleaned up [ 70.474179][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 70.474320][ C1] EXT4-fs (loop1): initial error at time 1784619329: ext4_get_branch:178: inode 13: block 1024 [ 70.474459][ C1] EXT4-fs (loop1): last error at time 1784619329: ext4_get_branch:178: inode 13: block 1024 [ 70.511513][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.547532][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 70.547547][ T28] audit: type=1400 audit(1784619329.878:685): avc: denied { setattr } for pid=4507 comm="syz.1.302" path="/49/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.700102][ T4518] loop4: detected capacity change from 0 to 512 [ 70.744797][ T4518] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.300: inode has both inline data and extents flags [ 70.781175][ T4518] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.782949][ T4518] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.300: couldn't read orphan inode 15 (err -117) [ 70.804080][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 70.804103][ C1] EXT4-fs (loop4): initial error at time 1784619330: ext4_orphan_get:1399: inode 15 [ 70.804144][ C1] EXT4-fs (loop4): last error at time 1784619330: ext4_orphan_get:1399: inode 15 [ 70.921255][ T4518] loop4: lost filesystem error report for type 5 error -117 [ 70.921895][ T4518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.149769][ T28] audit: type=1400 audit(1784619330.488:686): avc: denied { append } for pid=4521 comm="syz.0.303" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.192807][ T4522] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 71.205140][ T4522] syzkaller0: linktype set to 24 [ 71.212633][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.455972][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.309'. [ 71.518435][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.544366][ T28] audit: type=1400 audit(1784619330.878:687): avc: denied { create } for pid=4534 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.584205][ T28] audit: type=1400 audit(1784619330.878:688): avc: denied { mount } for pid=4534 comm="syz.4.309" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.649819][ T4551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.677985][ T4551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.707483][ T4553] loop4: detected capacity change from 0 to 1764 [ 71.724089][ T4547] netlink: 192 bytes leftover after parsing attributes in process `syz.2.314'. [ 71.908592][ T28] audit: type=1400 audit(1784619331.248:689): avc: denied { write } for pid=4544 comm="syz.0.313" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 71.994187][ T4557] loop4: detected capacity change from 0 to 764 [ 72.006955][ T4557] rock: directory entry would overflow storage [ 72.013307][ T4557] rock: sig=0x5245, size=8, remaining=5 [ 72.269656][ T4557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 72.278655][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 72.332426][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.361126][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.395155][ T28] audit: type=1400 audit(1784619331.738:690): avc: denied { getopt } for pid=4544 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.572713][ T4547] loop2: detected capacity change from 0 to 128 [ 72.625126][ T4558] IPVS: set_ctl: invalid protocol: 205 127.0.0.1:20000 [ 72.641192][ T4547] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.663054][ T4547] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.855908][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.055799][ T4580] loop2: detected capacity change from 0 to 1764 [ 73.156610][ T4585] loop3: detected capacity change from 0 to 512 [ 73.189145][ T4585] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 73.325697][ T4589] loop2: detected capacity change from 0 to 764 [ 73.337038][ T4589] rock: directory entry would overflow storage [ 73.343334][ T4589] rock: sig=0x5245, size=8, remaining=5 [ 73.595806][ T4589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'. [ 73.605018][ T4589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 73.642841][ T28] audit: type=1400 audit(1784619332.768:691): avc: denied { getopt } for pid=4584 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.711720][ T28] audit: type=1400 audit(1784619332.768:692): avc: denied { setopt } for pid=4584 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.955716][ T4592] netlink: 160 bytes leftover after parsing attributes in process `syz.0.327'. [ 74.047943][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 74.071916][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 74.129100][ T4610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.143980][ T4610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.154891][ T4610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.164247][ T4610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.196300][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 74.392968][ T4463] usb 7-1: enqueue for inactive port 0 [ 74.405128][ T4463] usb 7-1: enqueue for inactive port 0 [ 74.549904][ T4625] net_ratelimit: 1 callbacks suppressed [ 74.549922][ T4625] netlink: set zone limit has 4 unknown bytes [ 74.562179][ T4463] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 76.629238][ T28] audit: type=1400 audit(1784619335.968:693): avc: denied { ioctl } for pid=4631 comm="syz.3.338" path="socket:[8797]" dev="sockfs" ino=8797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.359839][ T4647] tipc: Started in network mode [ 77.372960][ T4647] tipc: Node identity 4e80f9f22b7d, cluster identity 4711 [ 77.403943][ T4647] tipc: Enabled bearer , priority 0 [ 77.421300][ T4647] syzkaller0: entered promiscuous mode [ 77.437564][ T4647] syzkaller0: entered allmulticast mode [ 77.470895][ T4647] tipc: Resetting bearer [ 77.507758][ T4647] tipc: Resetting bearer [ 77.526521][ T4647] tipc: Disabling bearer [ 77.624903][ T4659] loop4: detected capacity change from 0 to 512 [ 77.634723][ T4659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.676489][ T4659] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.349: bad orphan inode 131083 [ 77.703245][ T4659] loop4: lost filesystem error report for type 5 error -117 [ 77.705388][ T4659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.767659][ T28] audit: type=1400 audit(1784619337.108:694): avc: denied { write } for pid=4658 comm="syz.4.349" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.865950][ T28] audit: type=1400 audit(1784619337.108:695): avc: denied { read } for pid=4658 comm="syz.4.349" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.911720][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.288428][ T4673] loop1: detected capacity change from 0 to 128 [ 79.238119][ T4678] __nla_validate_parse: 1 callbacks suppressed [ 79.238145][ T4678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 80.193051][ T28] audit: type=1400 audit(1784619339.538:696): avc: denied { setopt } for pid=4688 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.222688][ T28] audit: type=1400 audit(1784619339.538:697): avc: denied { map } for pid=4688 comm="syz.0.360" path="socket:[8923]" dev="sockfs" ino=8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.247794][ T28] audit: type=1400 audit(1784619339.538:698): avc: denied { read accept } for pid=4688 comm="syz.0.360" path="socket:[8923]" dev="sockfs" ino=8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.303134][ T28] audit: type=1400 audit(1784619339.538:699): avc: denied { ioctl } for pid=4688 comm="syz.0.360" path="socket:[8923]" dev="sockfs" ino=8923 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.378567][ T4707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 80.573471][ T4715] C: renamed from veth1_to_team (while UP) [ 81.204560][ T4715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.368'. [ 81.293178][ T4724] 9pnet_virtio: no channels available for device  [ 81.308181][ T28] audit: type=1400 audit(1784619340.648:700): avc: denied { write } for pid=4720 comm="syz.3.371" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.361828][ T4727] loop1: detected capacity change from 0 to 256 [ 81.405228][ T4731] loop4: detected capacity change from 0 to 256 [ 81.658747][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.669713][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.692020][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.701473][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.722690][ T4753] syzkaller0: entered promiscuous mode [ 81.728369][ T4753] syzkaller0: entered allmulticast mode [ 81.737501][ T4753] tipc: Started in network mode [ 81.742581][ T4753] tipc: Node identity 1ee9e9d6a864, cluster identity 4711 [ 81.750174][ T4753] tipc: Enabled bearer , priority 0 [ 81.758085][ T4752] tipc: Resetting bearer [ 81.766393][ T4752] tipc: Disabling bearer [ 81.843718][ T4755] loop2: detected capacity change from 0 to 1764 [ 82.051607][ T4757] loop2: detected capacity change from 0 to 764 [ 82.062902][ T4757] rock: directory entry would overflow storage [ 82.069320][ T4757] rock: sig=0x5245, size=8, remaining=5 [ 82.216399][ T4757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 82.225701][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 82.428419][ T4760] loop4: detected capacity change from 0 to 1764 [ 82.616134][ T4775] loop3: detected capacity change from 0 to 1764 [ 82.709874][ T4777] loop4: detected capacity change from 0 to 764 [ 82.931257][ T28] audit: type=1400 audit(1784619342.078:701): avc: denied { create } for pid=4770 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 83.166584][ T4777] rock: directory entry would overflow storage [ 83.172857][ T4777] rock: sig=0x5245, size=8, remaining=5 [ 83.526413][ T4777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 83.535437][ T4777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 85.313332][ T28] audit: type=1400 audit(1784619344.648:702): avc: denied { read } for pid=4789 comm="syz.1.390" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.601486][ T4791] loop3: detected capacity change from 0 to 764 [ 85.678474][ T4791] rock: directory entry would overflow storage [ 85.684739][ T4791] rock: sig=0x5245, size=8, remaining=5 [ 85.784623][ T28] audit: type=1400 audit(1784619344.658:703): avc: denied { open } for pid=4789 comm="syz.1.390" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.857672][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.388'. [ 85.866917][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 85.893158][ T28] audit: type=1400 audit(1784619345.228:704): avc: denied { mount } for pid=4793 comm="syz.0.393" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.990216][ T4807] loop4: detected capacity change from 0 to 164 [ 86.005874][ T4807] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 86.042786][ T4807] isofs_fill_super: root inode is not a directory. Corrupted media? [ 86.227019][ T4821] loop3: detected capacity change from 0 to 512 [ 86.235564][ T4821] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.243917][ T4821] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.216597][ T4819] loop2: detected capacity change from 0 to 512 [ 87.223012][ T4821] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 87.235924][ T4821] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 87.246236][ T4821] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.401: Failed to acquire dquot type 1 [ 87.257710][ T4821] loop3: lost filesystem error report for type 5 error -5 [ 87.262764][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 87.276353][ C1] EXT4-fs (loop3): initial error at time 1784619346: ext4_acquire_dquot:7041 [ 87.285155][ C1] EXT4-fs (loop3): last error at time 1784619346: ext4_acquire_dquot:7041 [ 88.211383][ T4821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.401: bg 0: block 40: padding at end of block bitmap is not set [ 88.233982][ T4821] loop3: lost filesystem error report for type 5 error -117 [ 88.234156][ T4821] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.264253][ T4821] loop3: lost filesystem error report for type 5 error -117 [ 88.265435][ T4826] loop1: detected capacity change from 0 to 1764 [ 88.265783][ T4821] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.401: data will be lost [ 88.355856][ T4821] EXT4-fs (loop3): 1 truncate cleaned up [ 88.464714][ T4823] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 88.471422][ T4823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.479095][ T4823] vhci_hcd vhci_hcd.0: Device attached [ 88.495591][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.508206][ T4827] vhci_hcd: connection closed [ 88.508409][ T12] vhci_hcd vhci_hcd.4: stop threads [ 88.605269][ T4830] loop1: detected capacity change from 0 to 764 [ 88.615862][ T4830] rock: directory entry would overflow storage [ 88.622141][ T4830] rock: sig=0x5245, size=8, remaining=5 [ 88.769622][ T4830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 88.778766][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 88.842800][ T11] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 88.945646][ T12] vhci_hcd vhci_hcd.4: release socket [ 89.012640][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 89.094366][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.381565][ T28] audit: type=1400 audit(1784619348.718:705): avc: denied { setopt } for pid=4835 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.736146][ T4875] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 89.742843][ T4875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.751309][ T4875] vhci_hcd vhci_hcd.0: Device attached [ 89.903985][ T28] audit: type=1400 audit(1784619349.228:706): avc: denied { create } for pid=4866 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.005422][ T4884] program syz.4.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.018218][ T3377] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 90.381544][ T4877] vhci_hcd: connection reset by peer [ 90.388785][ T392] vhci_hcd vhci_hcd.0: stop threads [ 90.395901][ T392] vhci_hcd vhci_hcd.0: release socket [ 90.407268][ T392] vhci_hcd vhci_hcd.0: disconnect device [ 90.446503][ T392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.574088][ T392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.668968][ T28] audit: type=1400 audit(1784619350.008:707): avc: denied { allowed } for pid=4888 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.805651][ T392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.990096][ T4891] loop1: detected capacity change from 0 to 256 [ 91.017294][ T392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.182095][ T392] bridge_slave_1: left allmulticast mode [ 91.209407][ T392] bridge_slave_1: left promiscuous mode [ 91.230724][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.256191][ T392] bridge_slave_0: left allmulticast mode [ 91.272285][ T392] bridge_slave_0: left promiscuous mode [ 91.279253][ T4891] loop1: detected capacity change from 0 to 512 [ 91.290187][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.319738][ T392] lo: left allmulticast mode [ 91.362954][ T4891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.404814][ T4891] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.417246][ T28] audit: type=1400 audit(1784619350.748:708): avc: denied { write } for pid=4909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.439527][ T28] audit: type=1400 audit(1784619350.768:709): avc: denied { write } for pid=4923 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.520031][ T28] audit: type=1400 audit(1784619350.858:710): avc: denied { setopt } for pid=4890 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.540881][ T392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.554000][ T392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.566207][ T392] bond0 (unregistering): Released all slaves [ 91.576267][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 91.619251][ T4943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.424'. [ 91.626492][ T392] tipc: Left network mode [ 91.643793][ T392] hsr_slave_0: left promiscuous mode [ 91.656578][ T392] hsr_slave_1: left promiscuous mode [ 91.665034][ T392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.672575][ T392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.694722][ T392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.704699][ T392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.739869][ T4942] loop4: detected capacity change from 0 to 512 [ 91.756635][ T392] veth1_macvtap: left promiscuous mode [ 91.883185][ T392] veth0_macvtap: left promiscuous mode [ 91.891255][ T392] veth1_vlan: left promiscuous mode [ 91.892878][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.902449][ T392] veth0_vlan: left promiscuous mode [ 92.125704][ T4964] loop3: detected capacity change from 0 to 4096 [ 92.356360][ T392] team0 (unregistering): Port device team_slave_1 removed [ 92.422197][ T392] team0 (unregistering): Port device team_slave_0 removed [ 92.427560][ T28] audit: type=1400 audit(1784619351.278:711): avc: denied { write } for pid=4944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.460758][ T28] audit: type=1400 audit(1784619351.598:712): avc: denied { write } for pid=4963 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.465148][ T4942] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.433: Bad quota inum: 1, type: 2 [ 92.483088][ T28] audit: type=1400 audit(1784619351.768:713): avc: denied { read write } for pid=4969 comm="syz.1.438" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.483161][ T28] audit: type=1400 audit(1784619351.768:714): avc: denied { open } for pid=4969 comm="syz.1.438" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.543067][ T4942] loop4: lost filesystem error report for type 5 error -117 [ 92.545059][ T4942] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 92.553200][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 92.553290][ C1] EXT4-fs (loop4): initial error at time 1784619351: ext4_quota_enable:7228 [ 92.553377][ C1] EXT4-fs (loop4): last error at time 1784619351: ext4_quota_enable:7228 [ 92.598993][ T4942] EXT4-fs (loop4): mount failed [ 92.603593][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.718985][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 92.756934][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 92.782453][ T4999] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 92.791627][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 92.853913][ T4942] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 92.903120][ T5013] loop4: detected capacity change from 0 to 512 [ 92.942498][ T5013] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.433: inode has both inline data and extents flags [ 92.960454][ T5013] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.960656][ T5013] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.433: couldn't read orphan inode 15 (err -117) [ 92.969853][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 92.969872][ C0] EXT4-fs (loop4): initial error at time 1784619352: ext4_orphan_get:1399: inode 15 [ 92.969904][ C0] EXT4-fs (loop4): last error at time 1784619352: ext4_orphan_get:1399: inode 15 [ 93.010656][ T5013] loop4: lost filesystem error report for type 5 error -117 [ 93.011130][ T5013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.017375][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 93.106910][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.123185][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.131879][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.139341][ T4894] bridge_slave_0: entered allmulticast mode [ 93.152378][ T4894] bridge_slave_0: entered promiscuous mode [ 93.159746][ T2980] ================================================================== [ 93.167858][ T2980] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 93.169863][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.174916][ T2980] [ 93.174924][ T2980] read-write to 0xffff88810763c240 of 4 bytes by task 3288 on cpu 1: [ 93.174942][ T2980] d_delete+0x15a/0x180 [ 93.182240][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.184348][ T2980] d_delete_notify+0x32/0x100 [ 93.184371][ T2980] vfs_unlink+0x287/0x490 [ 93.184389][ T2980] filename_unlinkat+0x1dc/0x410 [ 93.184409][ T2980] __se_sys_unlink+0x2b/0xe0 [ 93.192663][ T4894] bridge_slave_1: entered allmulticast mode [ 93.196609][ T2980] __x64_sys_unlink+0x1f/0x30 [ 93.196634][ T2980] x64_sys_call+0x2eb6/0x3020 [ 93.208484][ T4894] bridge_slave_1: entered promiscuous mode [ 93.212774][ T2980] do_syscall_64+0x136/0x3c0 [ 93.212797][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.229204][ T4894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.232901][ T2980] [ 93.232908][ T2980] read to 0xffff88810763c240 of 4 bytes by task 2980 on cpu 0: [ 93.232924][ T2980] step_into_slowpath+0xea/0x4c0 [ 93.239109][ T4894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.243374][ T2980] path_lookupat+0x2eb/0x4c0 [ 93.291420][ T2980] filename_lookup+0x18f/0x390 [ 93.296189][ T2980] do_readlinkat+0x74/0x2f0 [ 93.300706][ T2980] __x64_sys_readlink+0x47/0x60 [ 93.305566][ T2980] x64_sys_call+0x2b51/0x3020 [ 93.310246][ T2980] do_syscall_64+0x136/0x3c0 [ 93.314828][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.320717][ T2980] [ 93.323029][ T2980] value changed: 0x00300180 -> 0x00004080 [ 93.328732][ T2980] [ 93.331047][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 93.337200][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 93.347607][ T2980] Tainted: [W]=WARN [ 93.351395][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 93.361713][ T2980] ================================================================== [ 93.424581][ T4894] team0: Port device team_slave_0 added [ 93.441243][ T4894] team0: Port device team_slave_1 added [ 93.512084][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.614626][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.627447][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.691903][ T5040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 93.698561][ T5040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.707143][ T5040] vhci_hcd vhci_hcd.0: Device attached [ 93.784972][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.811729][ T4894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.854402][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.861561][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.888780][ T4894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.944005][ T4894] hsr_slave_0: entered promiscuous mode [ 93.950503][ T4894] hsr_slave_1: entered promiscuous mode [ 93.958233][ T4894] debugfs: 'hsr0' already exists in 'hsr' [ 93.964558][ T4894] Cannot create hsr debugfs directory [ 94.105608][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 94.240476][ T5043] vhci_hcd: connection reset by peer [ 94.247086][ T12] vhci_hcd vhci_hcd.4: stop threads [ 94.252562][ T12] vhci_hcd vhci_hcd.4: release socket [ 94.259087][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 94.272378][ T4894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.284212][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.295713][ T4894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.306679][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.317116][ T4894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.328953][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.347530][ T4894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.380469][ T4894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.550491][ T4894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.575658][ T4894] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.588713][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.595887][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.615382][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.622555][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.813016][ T4894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.948302][ T4894] veth0_vlan: entered promiscuous mode [ 94.957363][ T4894] veth1_vlan: entered promiscuous mode [ 94.976937][ T4894] veth0_macvtap: entered promiscuous mode [ 94.985123][ T4894] veth1_macvtap: entered promiscuous mode [ 94.996915][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.009151][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.020316][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.029396][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.048475][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057635][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.112827][ T3377] usb 1-1: enqueue for inactive port 0 [ 95.118390][ T3377] usb 1-1: enqueue for inactive port 0 [ 95.192867][ T3377] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 99.272839][ T11] usb 9-1: enqueue for inactive port 0 [ 99.342829][ T11] vhci_hcd vhci_hcd.4: vhci_device speed not set