last executing test programs: 9.386130822s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "8385d5f985270c08", "ff0000000000000000000600", '\x00', "d656898a4c9ae4cd"}, 0x28) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 5.712396725s ago: executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x102000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4d00, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0xd}, 0x1ff, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x50, 0x9, 0x2, &(0x7f00000005c0)="4592ee79e2dde4d97c537b6ffb721421ab9d7f54f39100b8ae52d181bd372891fbaedca71c56579b938ce4dd1e718552ff5ce8899385a8d40db11d6e57a825aec99186c2722a47b062f8d633f61bf5342a3f0a047e53b1cc2788392e4e0e2274294f0718", [{0x5, 0x1, 0x1f}, {0x0, 0x0, 0x7}, {0x0, 0xffff, 0x5}, {0x10000, 0x4236, 0x8}, {0xffffffff, 0x0, 0x3}, {0x0, 0xf4, 0x1f}, {0x9, 0xfff, 0x3}, {0x64, 0x0, 0x800}, {0x0, 0xfffffffe}, {0x9, 0x2, 0x141a}, {0x1, 0x10001, 0x7}, {0x651a, 0xfffffff7, 0x3e3}, {0x4, 0x8, 0x1}, {0x2, 0x4, 0x200}, {0x5cc, 0x8, 0x9}, {0x40, 0x400, 0x4}, {0x9, 0x6dcd, 0x80000000}, {0x9, 0x2, 0xe2}, {0xf17a, 0x7ff, 0x3}, {0xfff80000, 0xffff2d95, 0x5}, {0x1, 0xffff, 0xffffff79}, {0xffff, 0x1, 0xc02}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7, 0x3ff}, {0x100, 0xd44c, 0xffffffff}, {0x0, 0x9, 0xa9f}, {0xffc00000, 0x5, 0x8000}, {0x0, 0x5}, {0xf9, 0x1000, 0x5}, {0x7, 0x3ff, 0x7}, {0x3ff, 0x0, 0x3}, {0x9, 0x9}, {0x7f, 0x0, 0x5}, {0x2, 0x1, 0x4}, {0xa4, 0x40, 0xffff}, {0x6}, {0x0, 0xfffffffa, 0x7}, {0x0, 0x1, 0x8}, {0x7fffffff, 0x63, 0xffffffff}, {}, {0x84, 0x7, 0xb8}, {0x0, 0x0, 0xfff}, {}, {0x9, 0x9}, {0x7ff00, 0x5, 0x8}, {}, {}, {0x9, 0x90000000, 0x4}, {}, {0x10000, 0x0, 0x7ff}, {0x71f, 0x0, 0x8}, {0x100, 0xdbd0, 0x7f}, {0x0, 0x101, 0x4}, {0x7fffffff, 0xfff, 0xcd}, {0x2, 0x9ed3, 0x1}, {0x1}, {0xb91, 0x0, 0x10001}, {0x0, 0x8000}, {0x0, 0x9}, {}, {}, {}, {0xb6f1, 0x8001, 0x400}, {}, {0x6, 0x62, 0x2}, {0x2}, {0x2, 0x9, 0xfffffffd}, {0x8, 0x1, 0xfffff70b}, {0x2, 0x0, 0xcb}, {0x1, 0x1ff, 0x3}, {0xfad, 0xfffffffd, 0x2}, {0x1, 0xff, 0x5}, {0x9d, 0x8, 0xffffffff}, {0x81, 0x7, 0x6}, {0x0, 0x7, 0x1}, {0x0, 0xf26c, 0x1}, {0x8}, {0x2, 0x8}, {0x0, 0x1, 0x10001}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000000002050002160000000008000140000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) 5.669419552s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x20, r6, 0x321, 0x0, 0x0, {0x13, 0x0, 0x11}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)={0x1bc, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x2, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x895}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x1c}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80200000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa8}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa}}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r11}, 0x10) getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r12, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688120033000201000a000002a257fce46d0a00d65ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547ae81f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568311ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b6", 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000700000000000000af2000000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250}, 0x23) close_range(r7, 0xffffffffffffffff, 0x0) 5.324269234s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000030000085000000060000003d8a7c005f2ad2c08a29f4fff6ffffff18270000", @ANYRES32=r2, @ANYBLOB="0000000005000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x6c, &(0x7f0000000340)=""/108, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xf74, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x36, 0xb3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r2, r2], &(0x7f0000000580)=[{0x1, 0x1, 0x2, 0xc}, {0x5, 0x1, 0xc, 0x1}, {0x5, 0x3, 0x8, 0x6}, {0x4, 0x2, 0xa, 0xc}, {0x0, 0x1, 0xf}], 0x10, 0x34}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1393}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000340)=ANY=[], 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='svcsock_tcp_state\x00', r4}, 0x10) mmap(&(0x7f0000059000/0x2000)=nil, 0x2000, 0x2, 0x2010, r3, 0x1000) r8 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x80800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) r11 = openat$cgroup_procs(r10, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000100), 0x12) setsockopt$inet_tcp_int(r9, 0x6, 0x9, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000140)={0x3, 0x4, 0x89, &(0x7f0000000080)=""/137}) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) 4.732568116s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x89a1, &(0x7f0000001e80)) 4.713499088s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x10, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) setxattr$security_evm(&(0x7f0000001140)='./bus\x00', &(0x7f00000011c0), &(0x7f0000001340)=ANY=[@ANYBLOB="0400c07844cbfb3c9e443b0aca85cc95e5f8f42d0000000000"], 0xe, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0x5}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000009c0)={[{@data_err_abort}, {@noblock_validity}]}, 0x5, 0x517, &(0x7f0000000140)="$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") openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x1f2f, 0xe, 0x0, &(0x7f00000012c0)="9f44940800000080684010a40500", 0x0, 0x241, 0x0, 0x1b, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0x25, &(0x7f0000000000), 0x8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000001300)={0x8, 0x1, 0x73, 0x0, 0x59, 0xd5, 0x8000}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21bffffff7f06eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf0948573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 4.539153535s ago: executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x102000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4d00, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0xd}, 0x1ff, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x51, 0x9, 0x2, &(0x7f00000005c0)="4592ee79e2dde4d97c537b6ffb721421ab9d7f54f39100b8ae52d181bd372891fbaedca71c56579b938ce4dd1e718552ff5ce8899385a8d40db11d6e57a825aec99186c2722a47b062f8d633f61bf5342a3f0a047e53b1cc2788392e4e0e2274294f0718", [{0x5, 0x1, 0x1f}, {0x0, 0x0, 0x7}, {0x0, 0xffff, 0x5}, {0x10000, 0x4236, 0x8}, {0xffffffff, 0x0, 0x3}, {0x0, 0xf4, 0x1f}, {0x9, 0xfff, 0x3}, {0x64, 0x0, 0x800}, {0x0, 0xfffffffe}, {0x9, 0x2, 0x141a}, {0x1, 0x10001, 0x7}, {0x651a, 0xfffffff7, 0x3e3}, {0x4, 0x8, 0x1}, {0x2, 0x4, 0x200}, {0x5cc, 0x8, 0x9}, {0x40, 0x400, 0x4}, {0x9, 0x6dcd, 0x80000000}, {0x9, 0x2, 0xe2}, {0xf17a, 0x7ff, 0x3}, {0xfff80000, 0xffff2d95, 0x5}, {0x1, 0xffff, 0xffffff79}, {0xffff, 0x1, 0xc02}, {0x0, 0x6, 0x2c9d}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7, 0x3ff}, {0x100, 0xd44c, 0xffffffff}, {0x0, 0x9, 0xa9f}, {0xffc00000, 0x5, 0x8000}, {0x0, 0x5}, {0xf9, 0x1000, 0x5}, {0x7, 0x3ff, 0x7}, {0x3ff, 0x0, 0x3}, {0x9, 0x9}, {0x7f, 0x0, 0x5}, {0x2, 0x1, 0x4}, {0xa4, 0x40, 0xffff}, {0x6}, {0x0, 0xfffffffa, 0x7}, {0x0, 0x1, 0x8}, {0x7fffffff, 0x63, 0xffffffff}, {}, {0x84, 0x7, 0xb8}, {0x0, 0x0, 0xfff}, {}, {0x9, 0x9}, {0x7ff00, 0x5, 0x8}, {}, {}, {0x9, 0x90000000, 0x4}, {}, {0x10000, 0x0, 0x7ff}, {0x71f, 0x0, 0x8}, {0x100, 0xdbd0, 0x7f}, {0x0, 0x101, 0x4}, {0x7fffffff, 0xfff, 0xcd}, {0x2, 0x9ed3, 0x1}, {0x1}, {0xb91, 0x0, 0x10001}, {0x0, 0x8000}, {0x0, 0x9}, {}, {}, {}, {0xb6f1, 0x8001, 0x400}, {}, {0x6, 0x62, 0x2}, {0x2}, {0x2, 0x9, 0xfffffffd}, {0x8, 0x1, 0xfffff70b}, {0x2, 0x0, 0xcb}, {0x1, 0x1ff, 0x3}, {0xfad, 0xfffffffd, 0x2}, {0x1, 0xff, 0x5}, {0x9d, 0x8, 0xffffffff}, {0x81, 0x7, 0x6}, {0x0, 0x7, 0x1}, {0x0, 0xf26c, 0x1}, {0x8}, {0x2, 0x8}, {0x0, 0x1, 0x10001}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000000002050002160000000008000140000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73b9e561c5"}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55) 4.476132025s ago: executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000340)=@name, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) 4.446182079s ago: executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73650000726974792e6e6c383a893f5542bdc4ba3032010000"], 0x0, 0x0) ioperm(0x0, 0x9, 0x5) set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000313000/0x1000)=nil, 0x100c00) shmat(r2, &(0x7f0000070000/0x3000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) 4.37621099s ago: executing program 2: perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 4.364814952s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000dc00070000876a42bf080000232657baeabc007748f25d00000000000008be2d2fbcd7723b715eb3e34585311aa1fc66ccd38c1fe03d9a68bbeb60cb43a3d93e79f2acc0683373fff8d9de6d115bc265e8a4ca3388d1e87e5aed279984af6beceb82c4a1b9d8a027"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1a, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd08, 0x10, &(0x7f0000000000)={0x4, 0x6}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100), 0xb) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, r0, 0xf, 0x10, 0x0, @prog_fd=r2}, 0x20) setsockopt(0xffffffffffffffff, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x19) write$binfmt_misc(r7, 0x0, 0x4) write(r5, 0x0, 0x0) 4.214796124s ago: executing program 4: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x11) 4.17760714s ago: executing program 2: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x11) 3.073738189s ago: executing program 1: perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 3.049713383s ago: executing program 1: socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001480)={{'\x00', 0x6}, {}, 0x28, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="cbd72503bd573760de8142513276edc82a5ad4f0ea66e354ea18fee3e4a9158418bf08d210d17cba58ebb77118557c34210e677f54e9c7e16e0d84de01b30ad5cd07b00f7ab54dca49e03ade8c17273fc1ea930db4ea7c280f0b0613d83565b3a4f9ec4b0fbba3491a4d9588dff9803d9332125d4807f5c3365a1748e2c43dac88e3ec9c54fe8f3c9870d051cdddd94702d65b72a00a6c072d81c646a394a8e14b38", 0xa2, 0x0, &(0x7f0000000340)={0x2, 0x10a7, {0x0, 0xc, 0x1000, "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", 0x9a, "5fb5435a81fc5b94a338a91839abc85bfa7dded2e8be90a7a614d87858e160531a83fd770417c26d64f4e42bb78425036944de6b9c58f03a9f5b4b5e9d1548accfb369c6b479e721f0822f32b48096ea54e4e6cb05c244d75d530f4d767362e95ec3477321f727c4751ce23e61ef88a846a589d13af011c7303c61de8131a94609e7fef46ecfa6577024c84918809400d84e2362b9aa91257659"}, 0x64, "71cb5d7bdd1aa718cae2cb0ddefa9774d2bce2169ca8cd7b1e0b2aa25a5211a920a3aa641621e3ab931b4b3312239fe3a808cf2079c80f8530687d96f0f9f9c89a976e2e1bdc1deb80db674b6fe5b7ea2a6822c347db86efb20b257e55857e0ccf496285"}, 0x1117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000380)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x689, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @jmp={0x6, 0x0, 0xd}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 2.697564157s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) getitimer(0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x1b0000019}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r4, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='xen_mmu_flush_tlb_one_user\x00', r4}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x7) set_tid_address(0x0) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) memfd_create(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x1008844, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x3, 0x352, &(0x7f0000000480)="$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") socketpair$unix(0x1, 0x4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000400)=0x2, &(0x7f00000006c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.144621372s ago: executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 2.103506768s ago: executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000340)=@name, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f00000001c0)) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) 2.072518903s ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x450}], 0x2}, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0xfffff801}, 0x10}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) 2.056882235s ago: executing program 3: socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "8385d5f985270c08", "ff0000000000000000000600", '\x00', "d656898a4c9ae4cd"}, 0x28) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 1.996415714s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0xb) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") 1.492894951s ago: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffd) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = open(&(0x7f0000000300)='./bus\x00', 0x104200, 0x84) sendfile(r1, r4, 0x0, 0x100000001) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x3ac9, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0x180}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0xb15, 0x0, 0x3, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r9, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000180), 0x4) 1.265630186s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES16], 0x3}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x4ffe7, 0x0) r4 = socket(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000001580)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000001480)=""/242, 0xf2}, {&(0x7f0000000200)}], 0x7, 0xfff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) accept4$nfc_llcp(r0, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/fscreate\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = io_uring_setup(0x1895, &(0x7f00000002c0)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000812185e8d555e914abfca2ae36ec73d57d72a39be1818af8bd891ca10deae2d2bee073607549d5f7d5d743fe9ff06387e51991794b86115c5c4218a9359a5948eaad5ddbbac88a14c056bb1a44afd7e79cc781e87a4740a44f06c36f15cdabdfd17fbac5ba9d14feed5ee4466db33dfe13e7ad2d63049b", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.232584481s ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000782db0ae4d5947f6f6ab41980000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000007c9637a2c8018c52ba7900000000002164744f69000000009500000083000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) (async, rerun: 64) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) close(r4) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000000000000711db700000000008510000002000000850983c686c3ca138fae46a3708b60e8720000007d000000950033000000000095ce0d61f233c4e86d8c8d00a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (rerun: 32) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x2, 0x73) (rerun: 64) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000280)=ANY=[], 0xfffffcdd) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r7, 0x2) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r8, 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfffffcdd) (async, rerun: 32) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') (rerun: 32) sendfile(r9, r10, 0x0, 0x37) 1.04251973s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") 1.015146815s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r2, &(0x7f00000000c0)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 944.862696ms ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) socket$inet(0x2, 0xa, 0x0) r3 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x3, 0x9, 0x228, 0xe, "2e4d4a6023ea38ff8ff2c0986478f7dee5ffca"}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0xa, "b7"}], 0x18}, 0x0) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x4b45, 0x3) 113.919083ms ago: executing program 1: socket$inet6(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001480)={{'\x00', 0x6}, {}, 0x28, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="cbd72503bd573760de8142513276edc82a5ad4f0ea66e354ea18fee3e4a9158418bf08d210d17cba58ebb77118557c34210e677f54e9c7e16e0d84de01b30ad5cd07b00f7ab54dca49e03ade8c17273fc1ea930db4ea7c280f0b0613d83565b3a4f9ec4b0fbba3491a4d9588dff9803d9332125d4807f5c3365a1748e2c43dac88e3ec9c54fe8f3c9870d051cdddd94702d65b72a00a6c072d81c646a394a8e14b38", 0xa2, 0x0, &(0x7f0000000340)={0x2, 0x10a7, {0x0, 0xc, 0x1000, "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", 0x9a, "5fb5435a81fc5b94a338a91839abc85bfa7dded2e8be90a7a614d87858e160531a83fd770417c26d64f4e42bb78425036944de6b9c58f03a9f5b4b5e9d1548accfb369c6b479e721f0822f32b48096ea54e4e6cb05c244d75d530f4d767362e95ec3477321f727c4751ce23e61ef88a846a589d13af011c7303c61de8131a94609e7fef46ecfa6577024c84918809400d84e2362b9aa91257659"}, 0x64, "71cb5d7bdd1aa718cae2cb0ddefa9774d2bce2169ca8cd7b1e0b2aa25a5211a920a3aa641621e3ab931b4b3312239fe3a808cf2079c80f8530687d96f0f9f9c89a976e2e1bdc1deb80db674b6fe5b7ea2a6822c347db86efb20b257e55857e0ccf496285"}, 0x1117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000380)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x689, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @jmp={0x6, 0x0, 0xd}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 23.027777ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newnexthop={0x18, 0x1a, 0x1}, 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="00000095ad00", 0x6}], 0x2}, 0x0) socket(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000340)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=""/3, 0x2c, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad8900000000001800000000000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f0000000c40)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) 0s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000300)={0xa, &(0x7f0000000280)=[{0x3f, 0xa1, 0x81, 0x5}, {0x8001, 0x0, 0xa3, 0xac}, {0x6fd7, 0x7, 0x6, 0x401}, {0x4, 0x3f, 0x7, 0x5}, {0x7, 0x0, 0xff, 0x400}, {0x9, 0x6, 0x7f, 0x4}, {0x100, 0x53}, {0x26, 0x0, 0x6, 0x9}, {0x1, 0x1f, 0xfd, 0x80000001}, {0x0, 0x1, 0x11, 0xa53d}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x76}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x100840, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r4 = io_uring_setup(0x31d3, &(0x7f00000000c0)) r5 = socket$qrtr(0x2a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x10) connect$qrtr(r5, &(0x7f0000000080), 0xc) read(r5, &(0x7f0000000180)=""/52, 0xfffffdef) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)=@qipcrtr, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6920][ T6629] bridge_slave_1: entered allmulticast mode [ 98.573378][ T6629] bridge_slave_1: entered promiscuous mode [ 98.583217][ T28] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.611997][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.629112][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.644717][ T28] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.669247][ T6629] team0: Port device team_slave_0 added [ 98.680309][ T6629] team0: Port device team_slave_1 added [ 98.705523][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.712568][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.738558][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.750851][ T5745] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 98.761246][ T28] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.775927][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.782848][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.808783][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.856619][ T6629] hsr_slave_0: entered promiscuous mode [ 98.862853][ T6629] hsr_slave_1: entered promiscuous mode [ 98.869184][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.876785][ T6629] Cannot create hsr debugfs directory [ 98.882251][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.948272][ T29] audit: type=1326 audit(1717889981.755:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe56dff69 code=0x0 [ 98.975691][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 99.025356][ T6592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.033481][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.040587][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.047761][ T6653] bridge_slave_0: entered allmulticast mode [ 99.054440][ T6653] bridge_slave_0: entered promiscuous mode [ 99.061119][ T6592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.070244][ T6592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.078877][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.085966][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.093081][ T6653] bridge_slave_1: entered allmulticast mode [ 99.099484][ T6653] bridge_slave_1: entered promiscuous mode [ 99.106246][ T6592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.126903][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.137599][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.157315][ T6653] team0: Port device team_slave_0 added [ 99.163637][ T6653] team0: Port device team_slave_1 added [ 99.180433][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.187511][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.213458][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.225225][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.232189][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.258096][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.288675][ T6653] hsr_slave_0: entered promiscuous mode [ 99.294740][ T6653] hsr_slave_1: entered promiscuous mode [ 99.300598][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.308146][ T6653] Cannot create hsr debugfs directory [ 99.353055][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.384036][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.393937][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.400991][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.411966][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.419029][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.442871][ T6592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.489821][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.548496][ T6592] veth0_vlan: entered promiscuous mode [ 99.560360][ T6592] veth1_vlan: entered promiscuous mode [ 99.576767][ T6592] veth0_macvtap: entered promiscuous mode [ 99.584853][ T6592] veth1_macvtap: entered promiscuous mode [ 99.595847][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.606425][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.616240][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.626724][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.636520][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.646999][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.656786][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.667492][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.678873][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.690191][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.700618][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.710420][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.720820][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.730687][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.741110][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.750917][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.761529][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.772525][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.783209][ T6592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.792048][ T6592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.800876][ T6592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.809587][ T6592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.850617][ T6691] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.985059][ T6697] loop3: detected capacity change from 0 to 512 [ 100.055808][ T29] audit: type=1400 audit(1717889982.845:3304): avc: denied { shutdown } for pid=6698 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.075925][ T29] audit: type=1400 audit(1717889982.845:3305): avc: denied { write } for pid=3172 comm="kworker/1:2" path="socket:[18314]" dev="sockfs" ino=18314 scontext=system_u:system_r:kernel_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.099962][ T6697] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 100.108224][ T6697] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.115131][ T6697] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 100.125727][ T6697] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.144230][ T6697] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 100.151214][ T6697] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 100.165649][ T6697] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 100.179038][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.199190][ T29] audit: type=1400 audit(1717889983.005:3306): avc: denied { module_request } for pid=6698 comm="syz-executor.1" kmod="net-pf-2-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.706026][ T5745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.766993][ T29] audit: type=1326 audit(1717889983.575:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe56dff69 code=0x0 [ 100.869054][ T6707] loop3: detected capacity change from 0 to 256 [ 101.609527][ T6714] loop3: detected capacity change from 0 to 512 [ 101.617176][ T6714] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.625259][ T6714] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 101.639123][ T6714] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 101.652245][ T6714] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.002378][ T6724] loop1: detected capacity change from 0 to 1024 [ 102.016059][ T6724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.191096][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.486061][ T6737] loop1: detected capacity change from 0 to 512 [ 102.497847][ T6737] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 102.505966][ T6737] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.512814][ T6737] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 102.523118][ T6737] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.538473][ T6737] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 102.546294][ T6737] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 102.560000][ T6737] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 102.574138][ T6737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.720957][ T5745] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 102.863604][ T6740] loop3: detected capacity change from 0 to 512 [ 102.872749][ T6740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 35: padding at end of block bitmap is not set [ 102.887449][ T6740] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 102.896343][ T6740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 102.910838][ T6740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 2) [ 102.925546][ T6740] EXT4-fs (loop3): 1 truncate cleaned up [ 102.931510][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.978977][ T5745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.190926][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.987278][ T29] audit: type=1400 audit(1717889986.795:3308): avc: denied { ioctl } for pid=6757 comm="syz-executor.3" path="socket:[18500]" dev="sockfs" ino=18500 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.042459][ T29] audit: type=1400 audit(1717889986.845:3309): avc: denied { create } for pid=6757 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 104.074677][ T28] bridge_slave_1: left allmulticast mode [ 104.080393][ T28] bridge_slave_1: left promiscuous mode [ 104.086099][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.093591][ T28] bridge_slave_0: left allmulticast mode [ 104.099243][ T28] bridge_slave_0: left promiscuous mode [ 104.105084][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.178976][ T6770] loop1: detected capacity change from 0 to 512 [ 104.186281][ T6770] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.194791][ T6770] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 104.208808][ T6770] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 104.209984][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.222027][ T6770] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.243987][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.254440][ T28] bond0 (unregistering): Released all slaves [ 104.386908][ T28] hsr_slave_0: left promiscuous mode [ 104.392968][ T28] hsr_slave_1: left promiscuous mode [ 104.398657][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.406072][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.414200][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.421579][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.432387][ T28] veth1_macvtap: left promiscuous mode [ 104.437871][ T28] veth0_macvtap: left promiscuous mode [ 104.443355][ T28] veth1_vlan: left promiscuous mode [ 104.448833][ T28] veth0_vlan: left promiscuous mode [ 104.515516][ T28] pimreg (unregistering): left allmulticast mode [ 104.577976][ T28] team0 (unregistering): Port device team_slave_1 removed [ 104.591300][ T28] team0 (unregistering): Port device team_slave_0 removed [ 104.769390][ T6653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.780186][ T6629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.788757][ T6629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.797113][ T6629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.805635][ T6629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.836452][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.848278][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.858534][ T6653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.872241][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.879362][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.890387][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.897502][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.929746][ T29] audit: type=1400 audit(1717889987.735:3310): avc: denied { getopt } for pid=6775 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.969252][ T6653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.010088][ T6653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.026170][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.069494][ T28] bridge_slave_1: left allmulticast mode [ 105.075241][ T28] bridge_slave_1: left promiscuous mode [ 105.080924][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.091303][ T28] bridge_slave_0: left allmulticast mode [ 105.097382][ T28] bridge_slave_0: left promiscuous mode [ 105.103067][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.112634][ T6592] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 105.252501][ T6793] loop3: detected capacity change from 0 to 512 [ 105.269158][ T6793] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.277571][ T6793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.284147][ T6793] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 105.294584][ T6793] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.311085][ T6793] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 105.318125][ T6793] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 105.333020][ T6793] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 105.346780][ T6793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.427470][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.439583][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.450497][ T28] bond0 (unregistering): Released all slaves [ 105.537802][ T6653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.547366][ T6653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.557800][ T6653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.574775][ T6653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.620194][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.640041][ T28] hsr_slave_0: left promiscuous mode [ 105.646309][ T28] hsr_slave_1: left promiscuous mode [ 105.652154][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.659759][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.667250][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.674729][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.683629][ T28] veth1_macvtap: left promiscuous mode [ 105.689135][ T28] veth0_macvtap: left promiscuous mode [ 105.694708][ T28] veth1_vlan: left promiscuous mode [ 105.699897][ T28] veth0_vlan: left promiscuous mode [ 105.801148][ T28] team0 (unregistering): Port device team_slave_1 removed [ 105.814815][ T28] team0 (unregistering): Port device team_slave_0 removed [ 105.864033][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.889217][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.896288][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.932137][ T6653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.942516][ T6653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.966710][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.973843][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.984388][ T5745] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.004083][ T6629] veth0_vlan: entered promiscuous mode [ 106.012808][ T6629] veth1_vlan: entered promiscuous mode [ 106.033649][ T6629] veth0_macvtap: entered promiscuous mode [ 106.044008][ T6629] veth1_macvtap: entered promiscuous mode [ 106.057884][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.067149][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.077676][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.087507][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.098023][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.107835][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.118235][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.128892][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.138630][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.149146][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.159055][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.169473][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.179281][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.189729][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.200331][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.211306][ T6629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.220019][ T6629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.228714][ T6629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.237472][ T6629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.297540][ T29] audit: type=1400 audit(1717889989.105:3311): avc: denied { read } for pid=6819 comm="syz-executor.4" name="mISDNtimer" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.316537][ T6653] veth0_vlan: entered promiscuous mode [ 106.320991][ T29] audit: type=1400 audit(1717889989.105:3312): avc: denied { open } for pid=6819 comm="syz-executor.4" path="/dev/mISDNtimer" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.330258][ T6653] veth1_vlan: entered promiscuous mode [ 106.350020][ T29] audit: type=1400 audit(1717889989.105:3313): avc: denied { ioctl } for pid=6819 comm="syz-executor.4" path="/dev/mISDNtimer" dev="devtmpfs" ino=223 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.368132][ T6653] veth0_macvtap: entered promiscuous mode [ 106.391198][ T6653] veth1_macvtap: entered promiscuous mode [ 106.402419][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.412998][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.422872][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.433304][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.443125][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.453536][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.463393][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.473793][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.484473][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.495014][ T6826] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 106.498389][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.516186][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.526143][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.529093][ T29] audit: type=1400 audit(1717889989.335:3314): avc: denied { listen } for pid=6824 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.536553][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.536613][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.536625][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.536635][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.536646][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.537963][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.561274][ T6825] 9pnet_fd: Insufficient options for proto=fd [ 106.567710][ T6653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.612590][ T29] audit: type=1400 audit(1717889989.365:3315): avc: denied { shutdown } for pid=6824 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.614423][ T6653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.658052][ T6653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.658105][ T6653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.782679][ T6841] loop4: detected capacity change from 0 to 512 [ 106.790068][ T6841] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.797894][ T6841] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 106.812579][ T6841] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 106.827227][ T6841] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.935786][ T6851] loop1: detected capacity change from 0 to 512 [ 106.943077][ T6851] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 107.069615][ T6861] loop0: detected capacity change from 0 to 512 [ 107.078091][ T6861] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.086182][ T6861] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.099519][ T6861] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.114807][ T6861] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 107.121639][ T6861] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 107.134958][ T6861] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 107.147939][ T6861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.957002][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.973291][ T6629] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 108.045347][ T6895] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.054719][ T6895] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.064559][ T6895] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.074594][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.085714][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.271530][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 108.271542][ T29] audit: type=1326 audit(1717889991.075:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x7ffc0000 [ 108.301591][ T29] audit: type=1326 audit(1717889991.075:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x7ffc0000 [ 108.318783][ T6916] loop4: detected capacity change from 0 to 512 [ 108.329085][ T29] audit: type=1326 audit(1717889991.075:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d3c520f69 code=0x7ffc0000 [ 108.355579][ T29] audit: type=1326 audit(1717889991.075:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x7ffc0000 [ 108.379515][ T29] audit: type=1326 audit(1717889991.075:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x7ffc0000 [ 108.410892][ T6916] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.417903][ T6910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6910 comm=syz-executor.3 [ 108.437393][ T6916] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 108.461083][ T6919] loop1: detected capacity change from 0 to 512 [ 108.494515][ T6919] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 108.502660][ T6919] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.509640][ T6919] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 108.520000][ T6919] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.536506][ T6919] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 108.543483][ T6919] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 108.558332][ T6919] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 108.571694][ T6919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.622096][ T6916] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 108.664250][ T6916] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.048532][ T6944] loop3: detected capacity change from 0 to 164 [ 109.119304][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.132524][ T6951] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.147532][ T29] audit: type=1326 audit(1717889991.955:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd56c0af69 code=0x0 [ 109.251041][ T29] audit: type=1400 audit(1717889992.055:3322): avc: denied { ioctl } for pid=6950 comm="syz-executor.0" path="socket:[20537]" dev="sockfs" ino=20537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.302631][ T29] audit: type=1400 audit(1717889992.105:3323): avc: denied { write } for pid=6956 comm="syz-executor.3" path="socket:[19848]" dev="sockfs" ino=19848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 109.329579][ T6964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6964 comm=syz-executor.1 [ 109.342505][ T6964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6964 comm=syz-executor.1 [ 109.355400][ T6964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6964 comm=syz-executor.1 [ 109.415929][ T6629] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 109.495198][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.596880][ T6978] loop1: detected capacity change from 0 to 512 [ 109.606582][ T6978] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 109.621327][ T6978] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 109.636213][ T6978] EXT4-fs (loop1): 1 truncate cleaned up [ 109.642422][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.665682][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.723485][ T29] audit: type=1400 audit(1717889992.525:3324): avc: denied { watch } for pid=6985 comm="syz-executor.1" path="/root/syzkaller-testdir2127772321/syzkaller.XPTkfL/33/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 109.845721][ T6990] loop4: detected capacity change from 0 to 512 [ 109.855913][ T6990] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.864104][ T6990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.871529][ T6990] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.886854][ T6990] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 109.894260][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 109.907848][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 109.921495][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.096386][ T6996] loop0: detected capacity change from 0 to 256 [ 110.205574][ T6998] loop1: detected capacity change from 0 to 512 [ 110.212860][ T6998] EXT4-fs: Ignoring removed orlov option [ 110.220436][ T6998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.227653][ T6998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.245082][ T6998] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.253017][ T6998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 110.261091][ T6998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.267529][ T6998] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.282058][ T6998] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 110.289205][ T6998] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 40: padding at end of block bitmap is not set [ 110.303959][ T6998] EXT4-fs (loop1): Remounting filesystem read-only [ 110.310777][ T6998] EXT4-fs (loop1): 1 truncate cleaned up [ 110.316817][ T6998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.329352][ T6998] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 110.336192][ T6998] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.399996][ T6998] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.537198][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.701159][ T7011] loop1: detected capacity change from 0 to 512 [ 110.709382][ T7011] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.717524][ T7011] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.724760][ T7011] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.739492][ T7011] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 110.746561][ T7011] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 110.760068][ T7011] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 110.772994][ T7011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.793480][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.941177][ T7031] loop0: detected capacity change from 0 to 512 [ 110.954178][ T7031] EXT4-fs: Ignoring removed orlov option [ 110.959979][ T7031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.967562][ T7031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.995122][ T7031] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 111.003132][ T7031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 111.012425][ T7031] EXT4-fs (loop0): orphan cleanup on readonly fs [ 111.019966][ T7031] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.034642][ T7031] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 111.050048][ T7041] loop4: detected capacity change from 0 to 512 [ 111.061030][ T7031] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 111.087218][ T7042] loop1: detected capacity change from 0 to 512 [ 111.099928][ T7041] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 111.108258][ T7041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.115897][ T7041] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.130861][ T7031] EXT4-fs (loop0): Remounting filesystem read-only [ 111.137489][ T7031] EXT4-fs (loop0): 1 truncate cleaned up [ 111.144497][ T7031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.156978][ T7031] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 111.164958][ T7031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.174563][ T7041] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 111.182000][ T7042] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.190157][ T7042] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.197316][ T7042] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.213553][ T7041] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 111.227652][ T7042] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 111.234741][ T7041] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 111.247853][ T7042] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 111.263689][ T7042] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 111.277011][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.295915][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.339711][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.519740][ T7031] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.647171][ T7049] loop4: detected capacity change from 0 to 256 [ 111.725893][ T7050] loop0: detected capacity change from 0 to 256 [ 111.808634][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.856900][ T7052] block device autoloading is deprecated and will be removed. [ 111.865025][ T7052] syz-executor.1: attempt to access beyond end of device [ 111.865025][ T7052] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.448000][ T7079] loop1: detected capacity change from 0 to 512 [ 112.456431][ T7079] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.464498][ T7079] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.471110][ T7079] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.485975][ T7079] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 112.492877][ T7079] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 112.506490][ T7079] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 112.519756][ T7079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.546624][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.615720][ T7084] loop4: detected capacity change from 0 to 512 [ 112.656561][ T7084] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 112.664686][ T7084] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.681578][ T7084] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.696709][ T7084] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 112.704095][ T7084] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 112.717853][ T7084] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 112.731976][ T7084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.226374][ T7114] loop0: detected capacity change from 0 to 256 [ 113.435380][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.491961][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 113.491975][ T29] audit: type=1400 audit(1717889996.295:3331): avc: denied { getopt } for pid=7116 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.520989][ T909] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.529773][ T909] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.589139][ T29] audit: type=1326 audit(1717889996.395:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x0 [ 113.691079][ T7122] loop4: detected capacity change from 0 to 256 [ 114.064563][ T7130] loop1: detected capacity change from 0 to 8192 [ 114.072608][ T29] audit: type=1400 audit(1717889996.875:3333): avc: denied { mount } for pid=7129 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 114.097525][ T29] audit: type=1400 audit(1717889996.905:3334): avc: denied { unmount } for pid=6592 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 114.315001][ T7144] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.331149][ T7145] loop1: detected capacity change from 0 to 512 [ 114.351192][ T7145] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.359383][ T7145] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.366109][ T7145] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 114.376435][ T7145] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.391242][ T7145] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 114.398294][ T7145] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 114.411469][ T7145] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 114.424784][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.798520][ T29] audit: type=1326 audit(1717889997.605:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x0 [ 114.851610][ T7157] loop4: detected capacity change from 0 to 256 [ 115.025214][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.119941][ T29] audit: type=1326 audit(1717889997.925:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x0 [ 115.613566][ T7178] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.640905][ T29] audit: type=1400 audit(1717889998.445:3337): avc: denied { write } for pid=7180 comm="syz-executor.4" name="rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.664181][ T7182] loop0: detected capacity change from 0 to 512 [ 115.671764][ T7182] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 115.992854][ T7210] team_slave_0: Caught tx_queue_len zero misconfig [ 116.006673][ T7210] loop1: detected capacity change from 0 to 1024 [ 116.026283][ T7210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.041185][ T29] audit: type=1400 audit(1717889998.845:3338): avc: denied { setattr } for pid=7209 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.142536][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.361503][ T7221] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.390375][ T29] audit: type=1326 audit(1717889999.195:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x0 [ 116.493312][ T7224] loop1: detected capacity change from 0 to 256 [ 116.638136][ T7232] loop4: detected capacity change from 0 to 256 [ 116.645787][ T7232] FAT-fs (loop4): Unrecognized mount option "ocharset=macc" or missing value [ 116.687943][ T7232] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 116.830165][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.845563][ T7242] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 116.892543][ T7243] loop0: detected capacity change from 0 to 256 [ 117.258043][ T7246] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.271457][ T7246] tmpfs: Bad value for 'huge' [ 118.281532][ T7275] loop0: detected capacity change from 0 to 512 [ 118.291703][ T7275] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.299818][ T7275] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.306423][ T7275] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.321416][ T7275] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 118.328881][ T7275] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 118.342295][ T7275] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 118.355895][ T7275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.451308][ T7286] loop1: detected capacity change from 0 to 256 [ 118.646553][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.683385][ T7295] loop0: detected capacity change from 0 to 512 [ 118.693283][ T7295] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.705392][ T7295] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 118.716022][ T7295] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 118.730030][ T7295] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 118.738727][ T7295] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 118.753537][ T7295] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 118.766371][ T7295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.780760][ T7295] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.792469][ T7295] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 118.802562][ T7295] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 118.817876][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 118.817888][ T29] audit: type=1400 audit(1717890001.625:3344): avc: denied { bind } for pid=7294 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.843879][ T29] audit: type=1400 audit(1717890001.625:3345): avc: denied { mounton } for pid=7294 comm="syz-executor.0" path="/root/syzkaller-testdir3569258861/syzkaller.C4xzPk/42/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.877522][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.942598][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.472895][ T7324] loop1: detected capacity change from 0 to 512 [ 119.482702][ T7324] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 119.490882][ T7324] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.499072][ T7324] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 119.509420][ T7324] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.524753][ T7324] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 119.584303][ T7324] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 119.598144][ T7324] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 119.611900][ T7324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.814144][ T7327] loop4: detected capacity change from 0 to 512 [ 119.822362][ T7327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 119.837320][ T7327] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 119.846177][ T7327] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 119.860710][ T7327] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 2) [ 119.875365][ T7327] EXT4-fs (loop4): 1 truncate cleaned up [ 119.881822][ T7327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.930214][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.043547][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.202704][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.236007][ T29] audit: type=1326 audit(1717890003.026:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x0 [ 120.347343][ T7345] loop1: detected capacity change from 0 to 256 [ 120.461699][ T29] audit: type=1400 audit(1717890003.229:3347): avc: denied { getopt } for pid=7350 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.906257][ T29] audit: type=1326 audit(1717890003.644:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7353 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x0 [ 121.016656][ T7355] loop4: detected capacity change from 0 to 256 [ 121.185129][ T29] audit: type=1400 audit(1717890003.894:3349): avc: denied { ioctl } for pid=7356 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21732 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.820572][ T7370] loop4: detected capacity change from 0 to 512 [ 121.830247][ T7370] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 121.845197][ T7370] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 121.854124][ T7370] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 121.868694][ T7370] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 2) [ 121.883736][ T7370] EXT4-fs (loop4): 1 truncate cleaned up [ 121.890165][ T7370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.956659][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.197066][ T7391] loop4: detected capacity change from 0 to 512 [ 122.210151][ T7391] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 122.218340][ T7391] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.225214][ T7391] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 122.235522][ T7391] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.250565][ T7391] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 122.257643][ T7391] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 122.271292][ T7391] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 122.285879][ T7391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.304419][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 122.413438][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.420510][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.466198][ T7376] bridge_slave_0: entered allmulticast mode [ 122.482047][ T7376] bridge_slave_0: entered promiscuous mode [ 122.490447][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.497591][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.508950][ T29] audit: type=1326 audit(1717890005.047:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 122.510851][ T7376] bridge_slave_1: entered allmulticast mode [ 122.532986][ T29] audit: type=1326 audit(1717890005.047:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 122.563358][ T7376] bridge_slave_1: entered promiscuous mode [ 122.583751][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.600318][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.634150][ T7376] team0: Port device team_slave_0 added [ 122.643351][ T7376] team0: Port device team_slave_1 added [ 122.658256][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.665330][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.691221][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.702658][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.709662][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.735633][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.771372][ T7376] hsr_slave_0: entered promiscuous mode [ 122.777488][ T7376] hsr_slave_1: entered promiscuous mode [ 122.783489][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.791207][ T7376] Cannot create hsr debugfs directory [ 122.846197][ T7376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.891971][ T7412] loop1: detected capacity change from 0 to 512 [ 122.900424][ T7412] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 393: padding at end of block bitmap is not set [ 122.912608][ T7415] loop0: detected capacity change from 0 to 256 [ 122.915325][ T7412] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 122.931203][ T7412] EXT4-fs (loop1): 2 truncates cleaned up [ 122.937515][ T7412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.951644][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.951871][ T7376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.986308][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.986879][ T6592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.022251][ T7376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.078777][ T7376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.094306][ T7421] loop4: detected capacity change from 0 to 512 [ 123.101467][ T7421] ext4: Unknown parameter 'fsname' [ 123.138874][ T7376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.147459][ T7376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.156214][ T7376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.165052][ T7376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.174177][ T7422] loop1: detected capacity change from 0 to 256 [ 123.174242][ T7421] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.191607][ T7421] gretap0: entered promiscuous mode [ 123.198895][ T7421] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.220050][ T7421] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.229463][ T7421] 0XD: renamed from gretap0 [ 123.236224][ T7421] 0XD: left promiscuous mode [ 123.241097][ T7421] 0XD: entered allmulticast mode [ 123.248892][ T7421] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 123.293224][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.308665][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.320367][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.327437][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.339287][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.346440][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.368365][ T7376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.378893][ T7376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.453568][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.512730][ T7436] loop4: detected capacity change from 0 to 1764 [ 123.520989][ T7436] iso9660: Bad value for 'sbsector' [ 123.536121][ T7376] veth0_vlan: entered promiscuous mode [ 123.547489][ T7376] veth1_vlan: entered promiscuous mode [ 123.563835][ T7376] veth0_macvtap: entered promiscuous mode [ 123.571926][ T7376] veth1_macvtap: entered promiscuous mode [ 123.586719][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.597226][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.607282][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.617699][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.627600][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.638030][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.647894][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.657872][ T7441] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 123.658306][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.676324][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.686899][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.698916][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.710763][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.721253][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.731161][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.741701][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.751571][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.762126][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.771993][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.782460][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.792332][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.802779][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.814293][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.823231][ T7376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.831989][ T7376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.840733][ T7376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.849505][ T7376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.322242][ T7466] loop0: detected capacity change from 0 to 512 [ 124.334500][ T7466] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 124.342663][ T7466] EXT4-fs (loop0): orphan cleanup on readonly fs [ 124.349715][ T7466] __quota_error: 34 callbacks suppressed [ 124.349726][ T7466] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 124.365760][ T7466] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.382579][ T7466] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 124.390620][ T7466] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 124.404031][ T7466] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 124.417612][ T7466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.482465][ T7459] loop2: detected capacity change from 0 to 8192 [ 124.502362][ T7468] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 124.545493][ T7459] loop2: p1 < > p3 < p5 > p4 [ 124.573867][ T7459] tmpfs: Bad value for 'mpol' [ 124.608906][ T7458] loop1: detected capacity change from 0 to 8192 [ 124.714386][ T7459] loop2: detected capacity change from 0 to 512 [ 124.873885][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.909974][ T29] audit: type=1326 audit(1717890007.327:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7489 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3c520f69 code=0x0 [ 124.954100][ T7498] loop0: detected capacity change from 0 to 512 [ 124.961167][ T7498] ext4: Unknown parameter 'dont_measure' [ 124.970305][ T7499] loop4: detected capacity change from 0 to 256 [ 125.002421][ T29] audit: type=1326 audit(1717890007.420:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7494 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc6aaf69 code=0x0 [ 125.029069][ T7498] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.038452][ T7498] 0XD: renamed from gretap0 (while UP) [ 125.045547][ T7498] 0XD: entered allmulticast mode [ 125.051187][ T7498] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 125.072577][ T7502] loop2: detected capacity change from 0 to 256 [ 125.138156][ T7508] loop1: detected capacity change from 0 to 128 [ 125.460699][ T7516] tipc: Started in network mode [ 125.465637][ T7516] tipc: Node identity , cluster identity 4711 [ 125.471724][ T7516] tipc: Failed to set node id, please configure manually [ 125.478737][ T7516] tipc: Enabling of bearer rejected, failed to enable media [ 125.487508][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.682333][ T7520] loop1: detected capacity change from 0 to 512 [ 125.692575][ T7520] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 125.700677][ T7520] EXT4-fs (loop1): orphan cleanup on readonly fs [ 125.708326][ T7520] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 125.718651][ T7520] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 125.734533][ T7520] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 125.741934][ T7520] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 125.755713][ T7520] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 126.037488][ T7524] loop4: detected capacity change from 0 to 8192 [ 126.117623][ T7524] loop4: p1 < > p3 < p5 > p4 [ 126.168342][ T7535] bond1 (unregistering): Released all slaves [ 126.238598][ T7541] mmap: syz-executor.0 (7541): VmData 167407616 exceed data ulimit 1024. Update limits or use boot option ignore_rlimit_data. [ 126.294132][ T7547] tmpfs: Bad value for 'mpol' [ 126.311487][ T7551] loop0: detected capacity change from 0 to 256 [ 126.327893][ T7551] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.352799][ T29] audit: type=1400 audit(1717890008.666:3388): avc: denied { write } for pid=7545 comm="syz-executor.2" laddr=172.20.20.44 lport=42344 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.407477][ T7547] loop4: detected capacity change from 0 to 512 [ 126.471116][ T3179] hid-generic C175:0008:0003.0004: unknown main item tag 0x0 [ 126.478605][ T3179] hid-generic C175:0008:0003.0004: unknown main item tag 0x2 [ 126.486000][ T3179] hid-generic C175:0008:0003.0004: unknown main item tag 0x7 [ 126.493663][ T3179] hid-generic C175:0008:0003.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 126.518140][ T29] audit: type=1326 audit(1717890008.822:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x0 [ 126.628807][ T7568] loop1: detected capacity change from 0 to 256 [ 127.039463][ T7584] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.396496][ T7599] loop4: detected capacity change from 0 to 512 [ 127.742831][ T7601] loop2: detected capacity change from 0 to 164 [ 128.379807][ T7593] sched: RT throttling activated [ 128.978822][ T7599] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 128.987100][ T7599] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.995324][ T7599] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 129.005740][ T7599] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.020730][ T7599] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 129.028994][ T7599] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 129.042306][ T7599] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 129.055141][ T7599] EXT4-fs mount: 2 callbacks suppressed [ 129.055154][ T7599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.097904][ T7608] loop0: detected capacity change from 0 to 8192 [ 129.139329][ T7608] loop0: p1 < > p3 < p5 > p4 [ 129.183141][ T7614] loop1: detected capacity change from 0 to 128 [ 129.213359][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.256550][ T7621] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.322106][ T7629] tmpfs: Bad value for 'mpol' [ 129.412710][ T7629] loop0: detected capacity change from 0 to 512 [ 129.426511][ T29] audit: type=1326 audit(1717890011.499:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x0 [ 129.467481][ T7626] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 129.539304][ T7639] loop1: detected capacity change from 0 to 256 [ 129.953778][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7646 comm=syz-executor.0 [ 130.324000][ T7657] loop2: detected capacity change from 0 to 2048 [ 130.331451][ T7660] loop0: detected capacity change from 0 to 512 [ 130.339007][ T7661] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.340425][ T7660] EXT4-fs (loop0): 1 truncate cleaned up [ 130.348979][ T7657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.352365][ T7660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.383733][ T29] audit: type=1400 audit(1717890012.385:3391): avc: denied { create } for pid=7659 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 130.405693][ T29] audit: type=1400 audit(1717890012.385:3392): avc: denied { remove_name } for pid=7659 comm="syz-executor.0" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.407674][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.428662][ T29] audit: type=1400 audit(1717890012.385:3393): avc: denied { rename } for pid=7659 comm="syz-executor.0" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.459621][ T29] audit: type=1400 audit(1717890012.385:3394): avc: denied { unlink } for pid=7659 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 130.482254][ T29] audit: type=1400 audit(1717890012.385:3395): avc: denied { rename } for pid=7659 comm="syz-executor.0" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 130.504984][ T29] audit: type=1400 audit(1717890012.385:3396): avc: denied { unlink } for pid=7659 comm="syz-executor.0" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.527136][ T29] audit: type=1326 audit(1717890012.505:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 130.527708][ T7376] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.551078][ T29] audit: type=1326 audit(1717890012.505:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 130.551104][ T29] audit: type=1326 audit(1717890012.505:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 130.607828][ T29] audit: type=1326 audit(1717890012.505:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50a0f6f69 code=0x7ffc0000 [ 130.608930][ T7668] loop1: detected capacity change from 0 to 1764 [ 130.641469][ T7668] iso9660: Unknown parameter ':0177777777777777777777718446744073709551615' [ 130.798852][ T7680] loop4: detected capacity change from 0 to 8192 [ 130.822484][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.831857][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.851010][ T7680] loop4: p1 < > p3 < p5 > p4 [ 130.880939][ T7688] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.040434][ T7701] loop2: detected capacity change from 0 to 256 [ 131.052948][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.066913][ T7702] loop0: detected capacity change from 0 to 256 [ 131.136435][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.150397][ T7705] tmpfs: Bad value for 'mpol' [ 131.222833][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.231055][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.261713][ T7705] loop4: detected capacity change from 0 to 512 [ 131.745553][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.910639][ T7729] netlink: zone id is out of range [ 131.915904][ T7729] netlink: set zone limit has 8 unknown bytes [ 132.036997][ T3135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.534774][ T3135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.588239][ T3135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.635016][ T7753] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.655085][ T3135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.732243][ T3135] bridge_slave_1: left allmulticast mode [ 132.737957][ T3135] bridge_slave_1: left promiscuous mode [ 132.743562][ T3135] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.757453][ T3135] bridge_slave_0: left allmulticast mode [ 132.762881][ T7765] loop0: detected capacity change from 0 to 256 [ 132.763221][ T3135] bridge_slave_0: left promiscuous mode [ 132.775153][ T3135] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.858668][ T7773] netlink: zone id is out of range [ 132.863854][ T7773] netlink: set zone limit has 8 unknown bytes [ 132.884317][ T7775] loop4: detected capacity change from 0 to 164 [ 132.892268][ T7775] Unable to read rock-ridge attributes [ 132.901007][ T3135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.913283][ T3135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.923270][ T3135] bond0 (unregistering): Released all slaves [ 132.931639][ T3135] bond1 (unregistering): Released all slaves [ 132.969939][ T7780] loop4: detected capacity change from 0 to 512 [ 132.978846][ T7780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 35: padding at end of block bitmap is not set [ 132.993655][ T7780] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 133.009182][ T7780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 133.030009][ T7780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 2) [ 133.044861][ T7780] EXT4-fs (loop4): 1 truncate cleaned up [ 133.052271][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.065864][ T3135] hsr_slave_0: left promiscuous mode [ 133.071505][ T3135] hsr_slave_1: left promiscuous mode [ 133.077455][ T3135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.084920][ T3135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.092533][ T3135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.099933][ T3135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.108851][ T3135] veth1_macvtap: left promiscuous mode [ 133.114376][ T3135] veth0_macvtap: left promiscuous mode [ 133.120074][ T3135] veth1_vlan: left promiscuous mode [ 133.125577][ T3135] veth0_vlan: left promiscuous mode [ 133.202151][ T3135] team0 (unregistering): Port device team_slave_1 removed [ 133.212178][ T3135] team0 (unregistering): Port device team_slave_0 removed [ 133.251396][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 133.284292][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.291624][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.300458][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.301500][ T7760] bridge_slave_0: entered allmulticast mode [ 133.316201][ T7760] bridge_slave_0: entered promiscuous mode [ 133.323061][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.330093][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.337267][ T7760] bridge_slave_1: entered allmulticast mode [ 133.345221][ T7760] bridge_slave_1: entered promiscuous mode [ 133.363254][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.373861][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.394978][ T7760] team0: Port device team_slave_0 added [ 133.401700][ T7760] team0: Port device team_slave_1 added [ 133.419522][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.426697][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.452646][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.464591][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.471538][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.498047][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.522900][ T7760] hsr_slave_0: entered promiscuous mode [ 133.528915][ T7760] hsr_slave_1: entered promiscuous mode [ 133.534771][ T7760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.542492][ T7760] Cannot create hsr debugfs directory [ 133.833718][ T7760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.843329][ T7760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.852916][ T7760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.861630][ T7760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.899214][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.911093][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.920292][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.927327][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.938940][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.945994][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.972022][ T7760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.982439][ T7760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.061827][ T7817] loop0: detected capacity change from 0 to 512 [ 134.085540][ T7817] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 134.093716][ T7817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.100918][ T7817] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.116160][ T7817] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 134.124233][ T7817] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 134.138454][ T7817] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 134.152899][ T7817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.289474][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.417263][ T7831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7831 comm=syz-executor.4 [ 134.431046][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.474636][ T7760] veth0_vlan: entered promiscuous mode [ 134.484374][ T7760] veth1_vlan: entered promiscuous mode [ 134.500514][ T7760] veth0_macvtap: entered promiscuous mode [ 134.510979][ T7760] veth1_macvtap: entered promiscuous mode [ 134.523370][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.534198][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.544225][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.554701][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.564606][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.575047][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.584874][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.595387][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.605184][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.615603][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.627430][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.636586][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.647280][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.657197][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.660623][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.667668][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.686712][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.697396][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.707244][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.717721][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.727530][ T7760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.737980][ T7760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.749491][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.760807][ T7760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.769699][ T7760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.778477][ T7760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.787219][ T7760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.834501][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.185788][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.556752][ T7894] loop0: detected capacity change from 0 to 512 [ 135.630403][ T7894] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 135.638553][ T7894] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.645537][ T7894] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.660940][ T7894] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 135.669783][ T7894] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 135.683286][ T7894] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 135.698138][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.958987][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 135.958999][ T29] audit: type=1400 audit(1717890017.536:3919): avc: denied { create } for pid=7904 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 136.003364][ T7889] loop1: detected capacity change from 0 to 65536 [ 136.011340][ T7889] FAT-fs (loop1): Unrecognized mount option "H(?" or missing value [ 136.060284][ T7917] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.063104][ T7918] loop4: detected capacity change from 0 to 512 [ 136.078567][ T7918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.095770][ T7918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 136.103691][ T7918] System zones: 1-12 [ 136.117622][ T7918] EXT4-fs (loop4): 1 truncate cleaned up [ 136.123539][ T7918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.161072][ T6629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.208456][ T29] audit: type=1400 audit(1717890017.766:3920): avc: denied { sys_module } for pid=7888 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 136.312453][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.326783][ T6653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.423718][ T7937] xt_limit: Overflow, try lower: 16384/524288 [ 136.446138][ T7940] loop1: detected capacity change from 0 to 128 [ 136.463394][ T29] audit: type=1400 audit(1717890017.988:3921): avc: denied { remount } for pid=7939 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 136.483552][ T29] audit: type=1400 audit(1717890018.006:3922): avc: denied { mounton } for pid=7939 comm="syz-executor.1" path="/root/syzkaller-testdir1227950019/syzkaller.PAuoAa/13/file1/bus" dev="loop1" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 136.538749][ T7940] loop1: detected capacity change from 128 to 127 [ 136.555075][ T7946] loop0: detected capacity change from 0 to 1024 [ 136.563299][ T7946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.581221][ T7946] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.594212][ T7946] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 136.602525][ T7946] EXT4-fs (loop0): orphan cleanup on readonly fs [ 136.618625][ T7946] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.647807][ T7946] EXT4-fs (loop0): Remounting filesystem read-only [ 136.654423][ T7946] EXT4-fs (loop0): 1 orphan inode deleted [ 136.660618][ T7946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.673203][ T7946] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 136.691937][ T7946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.111780][ T7961] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.179505][ T7962] loop4: detected capacity change from 0 to 512 [ 137.185950][ T7962] /dev/loop4: Can't open blockdev [ 137.191887][ C1] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 0 [ 137.204577][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.216149][ T7962] xfrm1: entered promiscuous mode [ 137.221246][ T7962] xfrm1: entered allmulticast mode [ 137.233562][ T29] audit: type=1326 audit(1717890018.708:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 137.257720][ T29] audit: type=1326 audit(1717890018.708:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 137.281814][ T29] audit: type=1326 audit(1717890018.708:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 137.306828][ T29] audit: type=1326 audit(1717890018.708:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 137.331086][ T29] audit: type=1326 audit(1717890018.708:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 137.354985][ T29] audit: type=1326 audit(1717890018.736:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7963 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc6aaf69 code=0x7ffc0000 [ 138.764347][ T7976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.816953][ T7976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.872411][ T7976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.942323][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 138.966338][ T7976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.018332][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.025515][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.033239][ T8030] bridge_slave_0: entered allmulticast mode [ 139.048400][ T8030] bridge_slave_0: entered promiscuous mode [ 139.055376][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.062459][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.069734][ T8030] bridge_slave_1: entered allmulticast mode [ 139.077550][ T8030] bridge_slave_1: entered promiscuous mode [ 139.094857][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.114999][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.129735][ T7976] bridge_slave_1: left allmulticast mode [ 139.135374][ T7976] bridge_slave_1: left promiscuous mode [ 139.141085][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.150325][ T7976] bridge_slave_0: left allmulticast mode [ 139.155966][ T7976] bridge_slave_0: left promiscuous mode [ 139.161862][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.181238][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.293445][ T7976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.303877][ T7976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.314279][ T7976] bond0 (unregistering): Released all slaves [ 139.334378][ T8030] team0: Port device team_slave_0 added [ 139.340991][ T8030] team0: Port device team_slave_1 added [ 139.363230][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.370244][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.397130][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.411961][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.418925][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.444880][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.476681][ T8030] hsr_slave_0: entered promiscuous mode [ 139.482746][ T8030] hsr_slave_1: entered promiscuous mode [ 139.488899][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.498040][ T8030] Cannot create hsr debugfs directory [ 139.557876][ T7976] hsr_slave_0: left promiscuous mode [ 139.563880][ T7976] hsr_slave_1: left promiscuous mode [ 139.569583][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.576971][ T7976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.584655][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.592043][ T7976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.600880][ T7976] veth1_macvtap: left promiscuous mode [ 139.606453][ T7976] veth0_macvtap: left promiscuous mode [ 139.612052][ T7976] veth1_vlan: left promiscuous mode [ 139.617358][ T7976] veth0_vlan: left promiscuous mode [ 139.693689][ T7976] team0 (unregistering): Port device team_slave_1 removed [ 139.704816][ T7976] team0 (unregistering): Port device team_slave_0 removed [ 139.813845][ T8095] loop0: detected capacity change from 0 to 512 [ 140.039544][ T8030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.048288][ T8030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.056995][ T8030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.068023][ T8030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.112796][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.126430][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.135585][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.142666][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.162026][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.169126][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.197708][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8107 comm=syz-executor.0 [ 140.237865][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.267494][ T8117] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.277207][ T8117] unsupported nlmsg_type 40 [ 140.324812][ T8030] veth0_vlan: entered promiscuous mode [ 140.341430][ T8030] veth1_vlan: entered promiscuous mode [ 140.369812][ T8030] veth0_macvtap: entered promiscuous mode [ 140.379917][ T8030] veth1_macvtap: entered promiscuous mode [ 140.391998][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.402482][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.412396][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.423256][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.433105][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.443631][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.453497][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.463918][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.473797][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.484205][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.495234][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.502576][ T8135] team0: Caught tx_queue_len zero misconfig [ 140.509410][ T8137] tipc: Started in network mode [ 140.514268][ T8137] tipc: Node identity , cluster identity 4711 [ 140.520415][ T8137] tipc: Failed to set node id, please configure manually [ 140.527467][ T8137] tipc: Enabling of bearer rejected, failed to enable media [ 140.539697][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.550173][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.560001][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.570550][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.580368][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.591000][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.600902][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.611402][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.621237][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.631722][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.643953][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.652755][ T8030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.661493][ T8030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.670307][ T8030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.679378][ T8030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.730943][ T8148] loop4: detected capacity change from 0 to 512 [ 140.738704][ T8148] EXT4-fs: Ignoring removed oldalloc option [ 140.744847][ T8148] ext4: Unknown parameter 'noacl' [ 140.793788][ T8148] usb usb5: usbfs: process 8148 (syz-executor.4) did not claim interface 0 before use [ 140.806312][ T8148] loop4: detected capacity change from 0 to 256 [ 141.085754][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 141.127705][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.134808][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.143553][ T8153] bridge_slave_0: entered allmulticast mode [ 141.151874][ T8153] bridge_slave_0: entered promiscuous mode [ 141.158841][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.166127][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.176041][ T8153] bridge_slave_1: entered allmulticast mode [ 141.182553][ T8153] bridge_slave_1: entered promiscuous mode [ 141.200421][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.211998][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.221021][ T8168] loop4: detected capacity change from 0 to 512 [ 141.221194][ T8168] ext2: Unknown parameter '' [ 141.239576][ T8153] team0: Port device team_slave_0 added [ 141.246197][ T8153] team0: Port device team_slave_1 added [ 141.261648][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.268698][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.294679][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.306733][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.313685][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.339598][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.358244][ T8172] loop4: detected capacity change from 0 to 512 [ 141.367735][ T8172] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.377486][ T8172] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 141.387706][ T8172] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz-executor.4: inode #15: comm syz-executor.4: iget: illegal inode # [ 141.389631][ T8153] hsr_slave_0: entered promiscuous mode [ 141.401217][ T8172] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 141.419289][ T8153] hsr_slave_1: entered promiscuous mode [ 141.419739][ T8172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.436943][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.444639][ T8153] Cannot create hsr debugfs directory [ 141.457814][ T8172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 19: invalid block bitmap [ 141.471820][ T8172] 9pnet_fd: Insufficient options for proto=fd [ 141.491572][ T8030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.516601][ T8153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.601704][ T29] kauditd_printk_skb: 2979 callbacks suppressed [ 141.601717][ T29] audit: type=1326 audit(1717890022.741:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8182 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd56c0af69 code=0x0 [ 141.635142][ T8153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.698567][ T8153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.712024][ T8188] loop0: detected capacity change from 0 to 256 [ 141.764555][ T8153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.870267][ T8153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.878231][ T8153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.887111][ T8153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.897051][ T8153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.912384][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.919481][ T8153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.926813][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.933889][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.967082][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.979090][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.986831][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.001356][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.011241][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.018332][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.029792][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.036910][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.104098][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.170391][ T8153] veth0_vlan: entered promiscuous mode [ 142.181881][ T8153] veth1_vlan: entered promiscuous mode [ 142.199498][ T8153] veth0_macvtap: entered promiscuous mode [ 142.207561][ T8153] veth1_macvtap: entered promiscuous mode [ 142.218598][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.229063][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.238959][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.249386][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.259275][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.269672][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.279520][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.290022][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.299828][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.310291][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.320101][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.330558][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.341851][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.355616][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.366202][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.376108][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.386711][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.396613][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.407083][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.416935][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.427400][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.437202][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.447604][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.457396][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.467810][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.478903][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.490201][ T8153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.499051][ T8153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.507891][ T8153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.516589][ T8153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.756232][ T8228] loop3: detected capacity change from 0 to 512 [ 142.780409][ T8228] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 142.788496][ T8228] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.795771][ T8228] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 142.806227][ T8228] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.821180][ T8228] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 142.877935][ T8228] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 142.894720][ T8228] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 142.908186][ T8228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.928706][ T7995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.117218][ T7995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.176468][ T7995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.233999][ T29] audit: type=1400 audit(1717890024.246:6909): avc: denied { create } for pid=8238 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.257342][ T29] audit: type=1400 audit(1717890024.274:6910): avc: denied { ioctl } for pid=8238 comm="syz-executor.0" path="socket:[25471]" dev="sockfs" ino=25471 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.285256][ T7995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.348308][ T29] audit: type=1326 audit(1717890024.347:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8249 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd56c0af69 code=0x0 [ 143.367926][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 143.411266][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.418465][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.425605][ T8233] bridge_slave_0: entered allmulticast mode [ 143.432121][ T8233] bridge_slave_0: entered promiscuous mode [ 143.443641][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.450701][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.458418][ T8233] bridge_slave_1: entered allmulticast mode [ 143.458679][ T8256] loop0: detected capacity change from 0 to 256 [ 143.466519][ T8233] bridge_slave_1: entered promiscuous mode [ 143.477442][ T7995] bridge_slave_1: left allmulticast mode [ 143.483085][ T7995] bridge_slave_1: left promiscuous mode [ 143.488759][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.496503][ T7995] bridge_slave_0: left allmulticast mode [ 143.502131][ T7995] bridge_slave_0: left promiscuous mode [ 143.507841][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.533465][ T8153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.595283][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.606596][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.617470][ T7995] bond0 (unregistering): Released all slaves [ 143.632793][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.642182][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.657744][ T8260] loop3: detected capacity change from 0 to 512 [ 143.667109][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.669321][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.678671][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.699846][ T8260] ext4 filesystem being mounted at /root/syzkaller-testdir1963655060/syzkaller.UVVXLK/3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.723286][ T8233] team0: Port device team_slave_0 added [ 143.729918][ T8233] team0: Port device team_slave_1 added [ 143.737013][ T8153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.752391][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.759418][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.785439][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.797755][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.804710][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.830712][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.845152][ T7995] hsr_slave_0: left promiscuous mode [ 143.850971][ T7995] hsr_slave_1: left promiscuous mode [ 143.856883][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.864396][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.872066][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.879542][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.889358][ T7995] veth1_macvtap: left promiscuous mode [ 143.894866][ T7995] veth0_macvtap: left promiscuous mode [ 143.894920][ T7995] veth1_vlan: left promiscuous mode [ 143.905613][ T7995] veth0_vlan: left promiscuous mode [ 144.005505][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 144.016550][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 144.072284][ T8233] hsr_slave_0: entered promiscuous mode [ 144.078298][ T8233] hsr_slave_1: entered promiscuous mode [ 144.084439][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.092509][ T8233] Cannot create hsr debugfs directory [ 144.220356][ T8279] loop3: detected capacity change from 0 to 512 [ 144.230408][ T8279] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.238859][ T8279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.248815][ T8279] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 144.259155][ T8279] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.278234][ T8279] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 144.285152][ T8279] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 144.300641][ T8279] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 144.314038][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.643743][ T8233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.652055][ T8233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.661409][ T8233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.669944][ T8233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.705190][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.718391][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.731112][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.738322][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.747750][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.754878][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.836174][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.955879][ T8233] veth0_vlan: entered promiscuous mode [ 144.979586][ T8233] veth1_vlan: entered promiscuous mode [ 144.990212][ T8153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.996562][ T8233] veth0_macvtap: entered promiscuous mode [ 145.007299][ T8233] veth1_macvtap: entered promiscuous mode [ 145.019011][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.029621][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.039471][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.049928][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.059786][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.070216][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.080072][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.090547][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.100563][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.111091][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.120878][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.131286][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.143785][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.152130][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.162542][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.172360][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.182775][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.192669][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.203324][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.213311][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.223764][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.233619][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.244116][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.254014][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.264533][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.278723][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.290471][ T8233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.299232][ T8233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.307982][ T8233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.316653][ T8233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.775453][ T8311] loop3: detected capacity change from 0 to 512 [ 145.794132][ T8311] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.802148][ T8311] EXT4-fs (loop3): orphan cleanup on readonly fs [ 145.808722][ T8311] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 145.818997][ T8311] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.834440][ T8311] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 145.841357][ T8311] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #16: comm syz-executor.3: casefold flag without casefold feature [ 145.854742][ T8311] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 145.867705][ T8311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.989917][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.040448][ T8327] ================================================================== [ 146.048928][ T8327] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 146.056194][ T8327] [ 146.058494][ T8327] read-write to 0xffff888237d204b8 of 8 bytes by task 0 on cpu 1: [ 146.066272][ T8327] tick_nohz_idle_enter+0x59/0xe0 [ 146.071277][ T8327] do_idle+0x3d/0x230 [ 146.075248][ T8327] cpu_startup_entry+0x25/0x30 [ 146.080011][ T8327] start_secondary+0x94/0xa0 [ 146.084584][ T8327] common_startup_64+0x12c/0x137 [ 146.089502][ T8327] [ 146.091804][ T8327] read to 0xffff888237d204b8 of 8 bytes by task 8327 on cpu 0: [ 146.095952][ T29] audit: type=1400 audit(1717890026.895:6912): avc: denied { read } for pid=8326 comm="syz-executor.1" path="socket:[26438]" dev="sockfs" ino=26438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.099315][ T8327] print_cpu+0x3dd/0x670 [ 146.099338][ T8327] timer_list_show+0x115/0x180 [ 146.099356][ T8327] seq_read_iter+0x2d7/0x940 [ 146.099379][ T8327] proc_reg_read_iter+0x11e/0x190 [ 146.141629][ T8327] copy_splice_read+0x3a4/0x5d0 [ 146.146462][ T8327] splice_direct_to_actor+0x26c/0x670 [ 146.151818][ T8327] do_splice_direct+0xd7/0x150 [ 146.156565][ T8327] do_sendfile+0x3ab/0x960 [ 146.160957][ T8327] __x64_sys_sendfile64+0x110/0x150 [ 146.166144][ T8327] x64_sys_call+0x2c9f/0x2d70 [ 146.170805][ T8327] do_syscall_64+0xc9/0x1c0 [ 146.175291][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.181180][ T8327] [ 146.183490][ T8327] value changed: 0x0000000000000038 -> 0x000000000000003d [ 146.190576][ T8327] [ 146.192873][ T8327] Reported by Kernel Concurrency Sanitizer on: [ 146.199001][ T8327] CPU: 0 PID: 8327 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 146.209396][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 146.219434][ T8327] ================================================================== 2024/06/08 23:40:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 146.237574][ T29] audit: type=1400 audit(1717890027.015:6913): avc: denied { write } for pid=3073 comm="syz-fuzzer" path="pipe:[572]" dev="pipefs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 146.275379][ T8153] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.