last executing test programs: 7m16.331737065s ago: executing program 32 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'syzkaller0\x00'}) 7m7.788531271s ago: executing program 33 (id=270): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_uring_setup(0xdd4, &(0x7f0000000180)={0x0, 0xeb7f, 0x40, 0x2, 0x26c}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 7m2.593268889s ago: executing program 34 (id=319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b2", 0x1}], 0x1}}], 0x1, 0x4000084) 6m47.379864489s ago: executing program 35 (id=577): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x437, 0xffdffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6m13.859258193s ago: executing program 36 (id=1271): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xfff, 0x5f}, 0x1290, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 6m12.493739999s ago: executing program 37 (id=1301): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)='5', 0x1}], 0x1}}], 0x1, 0x240000c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 6m10.794791988s ago: executing program 38 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 6m10.707162238s ago: executing program 39 (id=1331): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5m54.080784895s ago: executing program 40 (id=1533): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0xfff) write(r1, &(0x7f00000000c0)="bd", 0x1) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 5m46.622105338s ago: executing program 41 (id=1652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 5m46.39635907s ago: executing program 42 (id=1657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="2f74c0cea6170e7e3fc69ba65b799e5ddbacae1fefa39f7b4154dc4eeb1e954a0fa9879e7c2fa02dde9d4bf49d7d061113af957d3b9296c04b52ccbb57b548eeec8af880d57e761a07113bb778590ca6f2cbb097e6aa095d8b0023bbca0f0aa6d5fd26e26bdcab8353a5c5f26546873172c6d4c5ec819e452858ae7a20348dfeef1f20ef7dc9e1a9e70bdcb8846f2c9bff67aa494e66cc261372b4c15d47e5d4e6fc4676085074aa358651e09161ea021aca9c7e056cd79db7d60db74d7f3961513d235815179af2e3d98b712a7c272e489a543590acb90db0521392f662f48c830abb5295061a", 0xe7}, {&(0x7f00000004c0)="657560ebac752d7372098cfb9ddcc30bbc609ee7f6cb56b98bf69802ea44103924cf78d53fe3f18f563503426e9916477e05bb82dc66a192724baf7bcda0ca49e87f7c4ec0a876daaf347e607d9fd2749000d4acb329492b96aed3e3bb4ef7bf391d3b6ca091d9126c687f", 0x6b}, {&(0x7f0000000840)="56222fbc1217e4b0c826753a5a84ddc6ea0923541ba5335200bd3078d8b1a4f2ed827a2312f5ea47663173199a3e70db07318f8df967e28bef8c2a102430ef001e702c26fd4974b6db2ef2086ce752ab784c648a4cd02cec5b7b361dc0b6a1fdcfade30adfcc94472137df7d2a0f30733340aea336c322966341b79bf148d416472f480187ef6b40c95dc47762e275646794f05a4c3151e677d31eb4c13f411407725d12c0d47045c68df2fa43701914e3f90a63a007bc49bb4632a2a68a8abcc0e0c669", 0xc4}], 0x3, &(0x7f0000000a80)=[{0x10, 0x118, 0xbdc}], 0x10}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b00)="f5e0aa", 0x3}], 0x1, &(0x7f0000001000)=[{0x10, 0x29, 0xfff}], 0x10}}], 0x2, 0x4000045) 5m36.942610976s ago: executing program 43 (id=1755): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x12d5c}}, 0x44) 4m58.623069814s ago: executing program 44 (id=2469): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 4m30.566671048s ago: executing program 45 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 4m8.483025604s ago: executing program 46 (id=2910): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x0, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000340)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 4m7.03247695s ago: executing program 47 (id=3084): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x359f, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m35.369858334s ago: executing program 48 (id=3351): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000200)="ac", 0x1, 0x4008005, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 3m26.382570945s ago: executing program 49 (id=3491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m5.602171107s ago: executing program 50 (id=3948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2m17.816368851s ago: executing program 51 (id=4699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) 1m54.60704651s ago: executing program 52 (id=5228): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m47.923063965s ago: executing program 9 (id=5354): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.885575545s ago: executing program 9 (id=5355): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x9}, 0x4, 0x8, 0x11000, 0x1, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) 1m47.699048267s ago: executing program 9 (id=5362): openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m47.257704832s ago: executing program 9 (id=5368): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208201, 0x9a) 1m46.875642966s ago: executing program 9 (id=5373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m46.642761309s ago: executing program 9 (id=5378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)="a697c60a1eef119ed18d8a21", 0xc, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r0, 0x1) 1m46.58133269s ago: executing program 53 (id=5378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)="a697c60a1eef119ed18d8a21", 0xc, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r0, 0x1) 1m42.615932434s ago: executing program 4 (id=5438): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m42.504865226s ago: executing program 4 (id=5440): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x5abe, 0x0) 1m41.864689072s ago: executing program 4 (id=5448): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200), &(0x7f0000000240)={'L+', 0x7}, 0x16, 0x1) 1m41.472824407s ago: executing program 4 (id=5463): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1018c08, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES16, @ANYBLOB="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"], 0x8, 0x2ee, &(0x7f00000007c0)="$eJzs3E9PE08YwPGHtpS2BMrhl5/RxDDRi142UD0rjYHE2ESC1PgnMVlgq03Xluw2mBojevJqfBEeCEduJMobwIM3vXjxxsXEgxyMa7rdpVAW0La0CN9PQvZhZ57ZmbSQZ5rubtx5/biQs7WcXpZQTEmPiMimyJCExNfjHUNuHJXtXsjF/u+fzt66e+9GOpMZn1JqIj19KaWUGhx+9+RZ3Ou22ifrQw82vqW+rv+/fnrj1/SjvK3ytiqWykpXM6UvZX3GNNRc3i5oSk2ahm4bKl+0DavWXqq158zS/HxF6cW5gcS8Zdi20osVVTAqqlxSZauiwg/1fFFpmqYGEoKDZJempvR0k8mzbZ4MDollpfWwiMR3tWSXujIhAADQVY31f0hUO+v/5XNr5f7bK4Ne/b8aDar/L3+ujbWj/o+JSGD9718/sP7X/67+310RnSwt1f84Goaju0711MNqo5XWE97fr+vl/eURN6D+BwAAAAAAAAAAAAAAAAAAAADgX7DpOEnHcZL+0f/pE5GYiPi/B6SGReRqF6aMNmrh9ccxUL9xLzIoYr5ayC5ka0evw5qImGLIiCTlp/t+8FRj/84jVTUk781FL39xIRt2W9I5ybv5o5LslcZ8x5m4nhkfVTU783slsT0/JUn5Lzg/FZgflQvnt+VrkpSPs1ISU+bcedTzn48qde1mpiE/7vYDAAAAAOA40NSWwP27pu3VXsvf2l83fj4Qru+vRwL35xE5E+nu2gEAAAAAOCnsytOCbpqGtU8Ql4P7NB9EDmPkD3bFX+GfZvnfZTi8le4T+Bff0RTzTrb1WuI9HrbFcULSTNZwdTWq1VX4Hxvt1Ucmxzr/CrrBqTdvf7RvwCsrsQNW2nwQ3v8N0Nuxf0AAAAAAOqZe9Ptnxro7IQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATqBOPB2t22sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjorfAQAA//9YXQWp") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 1m40.833085634s ago: executing program 4 (id=5462): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m39.879192545s ago: executing program 4 (id=5481): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000320000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 1m39.807686375s ago: executing program 54 (id=5481): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000320000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 1m25.441569736s ago: executing program 2 (id=5760): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4840) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m25.362467597s ago: executing program 2 (id=5761): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB="0000dc0f60c834d068"], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m25.313313907s ago: executing program 2 (id=5762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 1m25.278987448s ago: executing program 2 (id=5763): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x98d887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m25.222805308s ago: executing program 2 (id=5765): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000400)="2a154009780c4974e54ab7bc21143d0e36da3485eb3ab6db54e3f6f2f22849b0f52ea7aaab363c7807d10e9c5db9fe88f5075e5e38cdf048e332f9d613b64ca7a07cd8a71864c2a1a8aefcadd39cfa7e6916a1430fd824c7c8f9844aad5665dd89cae8625d496f8948019fbce00ada7448d134a447104923ce1aa3ab137cc251b6ad26ed102466e50d5525e195afb3c0780646b291c79f9a2f015dd4e129e06907a2c4d6bc3fb85cf9603663dcb4564a3c7da14ff56dac35539a27908f079431e9d2234af21c6c67c276d26dfbbf1402ebdb52ed60d961da292b8a2a020e0b683cffd1") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000080)=ANY=[], 0x10}, {&(0x7f00000001c0)={0x1cc, 0x10, 0x100, 0x70bd25, 0x25dfdbfd, "", [@nested={0x1b1, 0xb8, 0x0, 0x1, [@generic="027c297b38b56dadffcfe4061d15fc1bb0e8f55729655bc2a141d07240e2660ae13b4140bb2de6b0c92a32c3d479225f726844263fe160d10bea26e2cba3cd2ab56bf506856d9880c43a1b1b28c5f3750278fdcbbc5d7e9255cc085e82dedc5500c9a61e7f16ea49dc3bbc3cf1756b3b5191dc489ac87a", @nested={0x4, 0xa8}, @nested={0x4, 0xa}, @typed={0x4, 0x43}, @generic="e2bfdf7de8c777961f6b62c00b6b390527a5d534328ac8047127bc9c897c6d7914919ae2795b369b66f31b6fb37b1785fad23519bc62d1d4d9fe612fda800dc3a040679febea52dbf4c967591b77742567ed079e402828669ee8bcd6c20e355f3298d82c98a47672bd5903f6b79caaeb267d444d672c6ac847a998cc18f231e70fb2f3f258fa5f495830b098f22533424444f94f1e64d145a90db68aed2b13d9fa5bd05e2d4efe4572653d59d7a812f28ccfb2ade317bfa2df8aa0840f68f0d60072954e1dcbbf42079c080c", @generic="8df85fe7c7252e8c244fb2f1f9603f40192a058f83ab4d85462132004e10e6a62707d66ea9d642a14a054a1fa5e6638ccb8602374204381cd09bb73bd6ff1be1aaa178837c36abb524de134208f72156b107a4ce516de8f87603", @nested={0x4, 0xdd}]}, @typed={0x6, 0xf7, 0x0, 0x0, @str='&\x00'}]}, 0x1cc}, {&(0x7f0000001040)={0x12c4, 0x28, 0x300, 0x70bd29, 0x25dfdbfe, "", [@nested={0x102c, 0x1, 0x0, 0x1, [@nested={0x1009, 0x103, 0x0, 0x1, [@generic="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", @nested={0x8, 0xc1, 0x0, 0x1, [@nested={0x4, 0x67}]}]}, @nested={0x4, 0x105}, @nested={0x4, 0x101}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0xcd, 0xd6, 0x0, 0x0, @binary="a78c94e89fb306dc206fa86eefbf9cc43b2dbd44afdb63fc54d4f872366699940ef5fde3fd3b4a763a2a24f4f8ad4bdeda45ad876bacd35522d9101818ca272d0ac4ba7ef65b1876f8cc87cffc2d9f501b326098453f9f3ee6fc7456117edd60ad805cd60435fb8dfd745e8eaa77b6f86fec9a95f8ff352aff8301e4f8075d85f542b8275517be1fcbe8f903c57c57b0c210ecd6eaa4fa20862b15856d5456626a8f499ffab55ec46c44b1071599ecb232d0e7768d546d01163dfc8d0f001f9189fce4f915dd901c73"}, @typed={0x8, 0xb6, 0x0, 0x0, @uid}, @nested={0xa1, 0xb9, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x9}, @generic="30034685fabe8188981b05b890c1131880414b5c4e8911ec0acb91e0010ed96d3c6fe785e16c9d48afaec14f5eb3cc5228200d4e1b15733c1f8806600f7ba6627d8875fb314393d266e6c8f4f92e3f41f78b21ab2abfd1baa75a43ac419a9bd0d34c92e0286fd381af32392266bb5418cff658fa9bb2fc52227b7ca3", @nested={0x4, 0x115}, @nested={0x4, 0xe0}, @generic="e2f2509a8e2d6a97f6", @nested={0x4, 0x4f}]}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0x5}, @generic="7fde47ca45c44b6499327b7879804adf004ca5408eb3efe4a7983d5192ea4cbd38fc03eee6478f41dd6278c2665110f6047583f2fb2efc723de6d1102ca669db6097396821540d338905fa5afb1a835c12652f63da4b7fdc3ca6e1e1739837312a8eb75f8a4eb3ff69f56b0dafb397b464e16211608603adc417f4e12f5031b41ae03a098b82b1885e4dfcbbcb6e6e9bd36fdc8253b4ab1a14740b7ee77bda0fb1a4735528ba8655c513c36bd84e3e291fb2e0e37a9cf97554105c70061775e3f378340766a08a96fcc41fc3fe40af8a9e30cdf67ae0310775e593764dd35b8bd8fca0281ee41651e7"]}, 0x12c4}, {&(0x7f0000004840)={0xe58, 0x15, 0x2, 0x70bd2d, 0x25dfdbff, "", [@generic="7fee791ee0febe03fbd2277bafeb9b02bda899ffac98f436926db27009416a522ef55549e02eb1305501bf8427bd5b200a777b90df0ec847f7c119d6f25c3b8f478259b53243ab96a18e904c0c532b4379a957c7477257718fc0d43ebab33613f7ab2b9ecdbc06bf092b3ad588d44ec18ff64928faa0d9822b1de18b297d4a0ba03e400a0ae7f16801534acd2a508159adcc8c38afd4986d776f0fb83a7e8f81de20f071368117cbfe67fcf952414c41b794e59d52ab9dfa75f31051162a70247fcc427c37f8bf6d412bce77", @generic="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"]}, 0xe58}], 0x5, 0x0, 0x0, 0x4040814}, 0x0) 1m25.143951969s ago: executing program 2 (id=5767): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00', 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x40000, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) 1m25.11638838s ago: executing program 55 (id=5767): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00', 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x40000, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, 0x0) 1m15.591176866s ago: executing program 5 (id=5916): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 1m15.528853687s ago: executing program 5 (id=5928): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m15.494406777s ago: executing program 5 (id=5920): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x833a1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 1m14.618915266s ago: executing program 5 (id=5952): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 1m14.540728048s ago: executing program 5 (id=5955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m14.223041331s ago: executing program 5 (id=5957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.162577062s ago: executing program 56 (id=5957): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.684582625s ago: executing program 3 (id=6452): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="890000000000000095000000000b00003f17b1beb52a0b451fa0aa9a62743ba31bc47cf8fc685710d9448e501e269a69e04a0ed974df84fc2167f3e7835aaf6e2ba338b9fbdb4888d3e6852def2897e06ea0f8ca475c13b19764"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffd9d, 0x90, 0x0, 0x100000}, 0x80) 41.398382458s ago: executing program 3 (id=6458): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.19748132s ago: executing program 3 (id=6461): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@resuid}]}, 0x1, 0x78c, &(0x7f0000000800)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000004c0)={r0, 0x0, 0x1, 0x100000000, 0x3, 0x4, [0x10, 0x2a, 0x1, 0xffff, 0x81, 0x6]}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x4010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x491, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 40.750837995s ago: executing program 3 (id=6468): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 40.587464207s ago: executing program 3 (id=6471): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301180, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = msgget(0x0, 0x8a) msgctl$IPC_INFO(r0, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4, 0x3, 0xfffffff1}]}}]}, 0x38}}, 0x0) 40.242422191s ago: executing program 3 (id=6476): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 40.213235441s ago: executing program 57 (id=6476): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 2.915049958s ago: executing program 8 (id=7088): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000002680)='ramfs\x00', 0x1000040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000100)) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) 2.315099365s ago: executing program 7 (id=7092): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.119030617s ago: executing program 7 (id=7099): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) socket(0x2, 0x80805, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x0, 0x0, 0x0, 0x2, 0x9b, &(0x7f0000001c40)=""/155, 0x41000, 0x80, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.81722775s ago: executing program 7 (id=7102): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{}, {r1, 0x4}, {r3, 0x1c}], 0x3, 0x0, 0x0, 0x0) 1.147071098s ago: executing program 0 (id=7109): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 1.007088019s ago: executing program 6 (id=7113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) 1.006872679s ago: executing program 6 (id=7114): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 961.67262ms ago: executing program 6 (id=7115): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) 853.143091ms ago: executing program 0 (id=7116): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 737.692832ms ago: executing program 0 (id=7117): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 651.671523ms ago: executing program 0 (id=7118): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@delalloc}, {@minixdf}]}, 0x1, 0x507, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x107042, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 651.214523ms ago: executing program 7 (id=7119): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 446.788026ms ago: executing program 1 (id=7120): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2c6, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2a442, 0x78) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) socket$inet(0x2, 0x2, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsync(r0) 429.038236ms ago: executing program 0 (id=7121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x183080, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee6886558", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) 367.685127ms ago: executing program 6 (id=7122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 367.482867ms ago: executing program 1 (id=7123): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x800) 344.498627ms ago: executing program 8 (id=7124): syz_open_dev$usbmon(0x0, 0x9, 0x101000) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143142, 0xaf) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 287.331107ms ago: executing program 8 (id=7125): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x18c, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x251d, 0x0, 0xff16}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0xfffa, 0x0, 0x7f}, "20e580a6ee25fca248a9f270f1f3977ec7ef64a8cd1852158509870a5c3d77a95c3ebc9411d73d1991f04648"}}]}]}, @TCA_BASIC_ACT={0x124, 0x3, [@m_connmark={0x88, 0x6, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40a, 0x10001, 0xffffffffffffffff, 0x4000a4, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x7, 0x8, 0x2}, 0x39e0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x200, 0x7, 0x2, 0x9}, 0x41}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x98, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x65, 0x6, "611e7bdfd56e0f175ae89b53fed3aed1a14d637cc286b21d5cf1f7299505a37e511cc8bd1fc0b4f802e826a9daf97879aeb42b1aa71f848832bdecba210211918c546e4a4172d486a8c4607bcb51d3a4b30211b4f30399166ac7eb1b5165adfe7f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003200)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 267.067657ms ago: executing program 1 (id=7126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40040000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 257.736118ms ago: executing program 8 (id=7127): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) 221.166568ms ago: executing program 6 (id=7128): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sync() sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94f08dca903d518d}, 0xc0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 220.818578ms ago: executing program 8 (id=7129): futex(0x0, 0x80000000000b, 0x2, 0x0, 0x0, 0x4020007) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 201.906928ms ago: executing program 0 (id=7130): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff088) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 201.225108ms ago: executing program 1 (id=7131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="2beb2e7ec3e0082e17d6060d9a5e9f943ba08e88af9d1a91054eaf1832f44a5fa58d7546a802e9081fd43637177eda11fe50337aa96acade2c5b0a7d165acb353dc9130e8ed88007fa475d5535e14a248eb60930d9e6e34de764d717019b17fefdba2f"], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 147.357418ms ago: executing program 58 (id=7130): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff088) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 111.842939ms ago: executing program 1 (id=7133): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x2e5ad47954dc0771, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0xe) 111.714639ms ago: executing program 8 (id=7134): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff8d}]}, @TIPC_NLA_BEARER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000811}, 0x4c004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 58.37084ms ago: executing program 1 (id=7135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 50.22256ms ago: executing program 6 (id=7136): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 587.34µs ago: executing program 7 (id=7137): r0 = timerfd_create(0x8, 0x80000) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x2, 0x249, 0x5}) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000840)={{}, {0x77359400}}, 0x0) 0s ago: executing program 7 (id=7138): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x274) kernel console output (not intermixed with test programs): 5] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5924'. [ 401.177123][T23802] netlink: 'syz.6.5933': attribute type 5 has an invalid length. [ 401.185047][T23802] netlink: 45 bytes leftover after parsing attributes in process `syz.6.5933'. [ 401.239320][T23815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5939'. [ 401.471631][T23824] syzkaller0: entered promiscuous mode [ 401.488125][T23824] syzkaller0: entered allmulticast mode [ 401.710959][T23846] loop3: detected capacity change from 0 to 512 [ 401.735397][T23846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 401.761796][T23846] System zones: 1-12 [ 401.782588][T23846] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.5954: corrupted in-inode xattr: e_value size too large [ 401.849451][T23846] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 401.853758][T23846] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5954: couldn't read orphan inode 15 (err -117) [ 401.863047][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 401.863080][ C0] EXT4-fs (loop3): initial error at time 1777832453: ext4_iget_extra_inode:5128: inode 15 [ 401.863119][ C0] EXT4-fs (loop3): last error at time 1777832453: ext4_iget_extra_inode:5128: inode 15 [ 401.911358][T23846] loop3: lost filesystem error report for type 5 error -117 [ 401.912113][T23846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.007301][T23846] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.5954: Unrecognised inode hash code 4 [ 402.024652][T23846] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.5954: Corrupt directory, running e2fsck is recommended [ 402.044746][T21556] bridge_slave_1: left allmulticast mode [ 402.050719][T21556] bridge_slave_1: left promiscuous mode [ 402.061199][T21556] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.080544][T21556] bridge_slave_0: left allmulticast mode [ 402.086390][T21556] bridge_slave_0: left promiscuous mode [ 402.093873][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.103138][T21556] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.208273][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.227338][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.245092][T21556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.273253][T21556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.316599][T21556] bond0 (unregistering): Released all slaves [ 402.341368][T21556] bond1 (unregistering): Released all slaves [ 402.968709][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 402.968725][ T28] audit: type=1400 audit(1777832454.231:4235): avc: denied { read } for pid=23892 comm="syz.1.5966" path="socket:[70753]" dev="sockfs" ino=70753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 403.315186][T21556] hsr_slave_0: left promiscuous mode [ 403.322898][T21556] hsr_slave_1: left promiscuous mode [ 403.339046][ T28] audit: type=1400 audit(1777832454.601:4236): avc: denied { create } for pid=23901 comm="syz.8.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.362225][T21556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.388702][T21556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.408282][ T28] audit: type=1400 audit(1777832454.611:4237): avc: denied { listen } for pid=23901 comm="syz.8.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.468116][ T28] audit: type=1400 audit(1777832454.611:4238): avc: denied { accept } for pid=23901 comm="syz.8.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.516752][T21556] team0 (unregistering): Port device team_slave_1 removed [ 403.537942][T21556] team0 (unregistering): Port device team_slave_0 removed [ 403.641086][T23890] syzkaller1: entered promiscuous mode [ 403.653327][T23890] syzkaller1: entered allmulticast mode [ 403.674307][T23864] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.689535][T23864] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.706974][T23864] bridge_slave_0: entered allmulticast mode [ 403.715632][T23864] bridge_slave_0: entered promiscuous mode [ 403.730580][T23864] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.748116][T23864] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.770207][T23864] bridge_slave_1: entered allmulticast mode [ 403.781942][T23864] bridge_slave_1: entered promiscuous mode [ 403.804730][T23864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.823054][T23864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.870012][T23864] team0: Port device team_slave_0 added [ 403.882832][T23864] team0: Port device team_slave_1 added [ 403.926833][T23864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.944854][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.984696][T23864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.006693][T23864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.019506][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.067205][T23864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.092207][T21556] IPVS: stop unused estimator thread 0... [ 404.126955][T23864] hsr_slave_0: entered promiscuous mode [ 404.139922][T23864] hsr_slave_1: entered promiscuous mode [ 404.181896][ T28] audit: type=1400 audit(1777832455.451:4239): avc: denied { connect } for pid=23911 comm="syz.1.5971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.240853][ T28] audit: type=1400 audit(1777832455.511:4240): avc: denied { kexec_image_load } for pid=23932 comm="syz.8.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 404.398354][T23864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.420509][ T28] audit: type=1400 audit(1777832455.691:4241): avc: denied { write } for pid=23942 comm="syz.3.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 404.449031][T23864] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.513006][T21556] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.520348][T21556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.556635][T21556] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.563967][T21556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.587179][T23864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.776950][T23864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.827327][ T28] audit: type=1400 audit(1777832456.091:4242): avc: denied { setopt } for pid=23968 comm="syz.1.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.899524][ T28] audit: type=1326 audit(1777832456.161:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23972 comm="syz.1.5988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabdf69cdd9 code=0x0 [ 405.082043][T23994] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5993'. [ 405.101957][T23864] veth0_vlan: entered promiscuous mode [ 405.125816][T23864] veth1_vlan: entered promiscuous mode [ 405.143123][ T28] audit: type=1400 audit(1777832456.411:4244): avc: denied { setopt } for pid=23997 comm="syz.6.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.152065][T23998] ip6gre1: entered promiscuous mode [ 405.180264][T23998] ip6gre1: entered allmulticast mode [ 405.210183][T23864] veth0_macvtap: entered promiscuous mode [ 405.225390][T23864] veth1_macvtap: entered promiscuous mode [ 405.250305][T23864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.267513][T23864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.463339][T23933] kexec: Could not allocate control_code_buffer [ 405.926751][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6008'. [ 405.972419][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.995058][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.003861][T20359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.181087][T24045] loop3: detected capacity change from 0 to 256 [ 406.214292][T24045] FAT-fs (loop3): Directory bread(block 64) failed [ 406.229480][T24045] FAT-fs (loop3): Directory bread(block 65) failed [ 406.241045][T24045] FAT-fs (loop3): Directory bread(block 66) failed [ 406.251039][T24045] FAT-fs (loop3): Directory bread(block 67) failed [ 406.269471][T24045] FAT-fs (loop3): Directory bread(block 68) failed [ 406.293553][T24045] FAT-fs (loop3): Directory bread(block 69) failed [ 406.311808][T24045] FAT-fs (loop3): Directory bread(block 70) failed [ 406.322516][T24045] FAT-fs (loop3): Directory bread(block 71) failed [ 406.343697][T24045] FAT-fs (loop3): Directory bread(block 72) failed [ 406.362487][T24045] FAT-fs (loop3): Directory bread(block 73) failed [ 406.381682][T24052] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 406.389659][T20359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.397323][T24054] loop8: detected capacity change from 0 to 512 [ 406.455052][T24054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 406.481311][T24045] syz.3.6015: attempt to access beyond end of device [ 406.481311][T24045] loop3: rw=2049, sector=1224, nr_sectors = 68 limit=256 [ 406.505768][T24054] System zones: 1-12 [ 406.527931][T24054] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.6019: corrupted in-inode xattr: e_value size too large [ 406.564469][T24065] syz.3.6015: attempt to access beyond end of device [ 406.564469][T24065] loop3: rw=34817, sector=1229, nr_sectors = 32 limit=256 [ 406.619617][T24054] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.619857][T24054] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6019: couldn't read orphan inode 15 (err -117) [ 406.640928][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 406.640955][ C0] EXT4-fs (loop8): initial error at time 1777832457: ext4_iget_extra_inode:5128: inode 15 [ 406.641009][ C0] EXT4-fs (loop8): last error at time 1777832457: ext4_iget_extra_inode:5128: inode 15 [ 406.778956][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.788829][T24054] loop8: lost filesystem error report for type 5 error -117 [ 406.790551][T24054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.887103][T24054] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.6019: Unrecognised inode hash code 4 [ 406.928383][T24054] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6019: Corrupt directory, running e2fsck is recommended [ 407.038342][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.100236][T24089] loop8: detected capacity change from 0 to 128 [ 407.124248][T24089] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.182994][T24091] futex_wake_op: syz.3.6031 tries to shift op by 32; fix this program [ 407.211155][T24089] ext4 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 407.357077][T24102] qrtr: Invalid version 0 [ 407.505194][T18248] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.588584][T24118] netlink: 'syz.6.6037': attribute type 2 has an invalid length. [ 407.618479][T24121] loop8: detected capacity change from 0 to 512 [ 407.645857][T24121] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 407.696200][T24121] EXT4-fs (loop8): 1 truncate cleaned up [ 407.729925][T24121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.919173][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.185872][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 408.185887][ T28] audit: type=1400 audit(1777832459.451:4269): avc: denied { bind } for pid=24145 comm="syz.6.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.212076][T24148] loop8: detected capacity change from 0 to 128 [ 408.219000][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6048'. [ 408.658409][ T28] audit: type=1400 audit(1777832459.921:4270): avc: denied { map } for pid=24170 comm="syz.8.6058" path="socket:[72079]" dev="sockfs" ino=72079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 408.788635][ T28] audit: type=1400 audit(1777832460.051:4271): avc: denied { read write } for pid=24178 comm="syz.0.6072" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 408.844464][ T28] audit: type=1400 audit(1777832460.051:4272): avc: denied { open } for pid=24178 comm="syz.0.6072" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 408.912321][ T28] audit: type=1400 audit(1777832460.091:4273): avc: denied { block_suspend } for pid=24180 comm="syz.8.6063" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 408.969585][ T28] audit: type=1400 audit(1777832460.231:4274): avc: denied { create } for pid=24191 comm="syz.1.6066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.035395][ T28] audit: type=1400 audit(1777832460.241:4275): avc: denied { bind } for pid=24191 comm="syz.1.6066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.102525][ T28] audit: type=1400 audit(1777832460.271:4276): avc: denied { read append } for pid=24196 comm="syz.0.6067" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.191250][ T28] audit: type=1400 audit(1777832460.271:4277): avc: denied { open } for pid=24196 comm="syz.0.6067" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.268893][ T28] audit: type=1400 audit(1777832460.361:4278): avc: denied { connect } for pid=24202 comm="syz.6.6069" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 409.955581][T24266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.980665][T24266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.049574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.228845][T24279] loop8: detected capacity change from 0 to 2048 [ 410.252332][T24279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.280390][T24279] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.338028][T24279] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6081: bg 0: block 345: padding at end of block bitmap is not set [ 410.392150][T24279] EXT4-fs (loop8): Remounting filesystem read-only [ 410.431685][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.730136][T24317] loop3: detected capacity change from 0 to 512 [ 410.770934][T24317] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.6099: missing EA_INODE flag [ 410.772686][T24325] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6100'. [ 410.795733][T24317] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 410.795993][T24317] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6099: error while reading EA inode 12 err=-117 [ 410.805220][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 410.805244][ C0] EXT4-fs (loop3): initial error at time 1777832462: ext4_xattr_inode_iget:441: inode 12 [ 410.805279][ C0] EXT4-fs (loop3): last error at time 1777832462: ext4_xattr_inode_iget:441: inode 12 [ 410.844172][T24317] loop3: lost filesystem error report for type 5 error -117 [ 410.845444][T24317] EXT4-fs (loop3): 1 orphan inode deleted [ 410.884617][T24317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.934903][T24317] EXT4-fs (loop3): shut down requested (0) [ 411.007181][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.563147][T24381] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6122'. [ 411.625806][T24387] loop6: detected capacity change from 0 to 164 [ 411.638110][T24385] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.650867][T24385] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.658570][T24388] netlink: 'syz.0.6123': attribute type 16 has an invalid length. [ 411.676172][T24388] netlink: 'syz.0.6123': attribute type 17 has an invalid length. [ 411.697135][T24387] rock: directory entry would overflow storage [ 411.703749][T24387] rock: sig=0x4f50, size=4, remaining=3 [ 411.709732][T24387] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 411.813261][T24388] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.820457][T24388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.833854][T24388] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.841031][T24388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.008507][T24404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6131'. [ 412.140273][T24410] loop0: detected capacity change from 0 to 1024 [ 412.147101][T24410] EXT4-fs: Ignoring removed orlov option [ 412.187463][T24410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.234469][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.326219][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6137'. [ 412.476539][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6143'. [ 412.498405][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6143'. [ 412.530783][T24443] loop3: detected capacity change from 0 to 8192 [ 412.540784][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6143'. [ 412.555494][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6143'. [ 412.585413][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6143'. [ 412.625483][T24454] netlink: 'syz.6.6145': attribute type 4 has an invalid length. [ 412.637015][T24454] netlink: 'syz.6.6145': attribute type 4 has an invalid length. [ 412.707793][T24462] bridge0: entered allmulticast mode [ 412.726955][T24462] bridge0: entered promiscuous mode [ 413.443320][T24509] __nla_validate_parse: 3 callbacks suppressed [ 413.443341][T24509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6168'. [ 414.306256][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 414.306274][ T28] audit: type=1400 audit(1777832465.571:4349): avc: denied { create } for pid=24524 comm="syz.8.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 414.315259][T24525] netlink: 'syz.8.6175': attribute type 1 has an invalid length. [ 414.363578][ T28] audit: type=1400 audit(1777832465.581:4350): avc: denied { write } for pid=24524 comm="syz.8.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 414.487267][ T28] audit: type=1400 audit(1777832465.751:4351): avc: denied { setopt } for pid=24535 comm="syz.0.6178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 414.666100][T24543] netlink: 'syz.6.6181': attribute type 8 has an invalid length. [ 414.688795][T24543] netlink: 'syz.6.6181': attribute type 7 has an invalid length. [ 414.715206][T24543] netlink: 194488 bytes leftover after parsing attributes in process `syz.6.6181'. [ 414.746371][ T28] audit: type=1400 audit(1777832466.011:4352): avc: denied { create } for pid=24545 comm="syz.8.6182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 414.989907][T24555] loop8: detected capacity change from 0 to 1024 [ 415.055764][T24555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 415.101026][T24555] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.149607][T24559] loop3: detected capacity change from 0 to 512 [ 415.176592][T24559] EXT4-fs: Ignoring removed oldalloc option [ 415.206417][T24561] loop0: detected capacity change from 0 to 2048 [ 415.223817][T24559] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.6186: invalid block [ 415.244311][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 415.267246][T24559] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.267677][T24559] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6186: invalid indirect mapped block 4294967295 (level 1) [ 415.276921][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 415.276940][ C0] EXT4-fs (loop3): initial error at time 1777832466: ext4_get_branch:178: inode 11: block 4294967295 [ 415.276971][ C0] EXT4-fs (loop3): last error at time 1777832466: ext4_get_branch:178: inode 11: block 4294967295 [ 415.345276][T24561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.387973][T24559] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.392987][T24559] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6186: invalid indirect mapped block 4294967295 (level 1) [ 415.414057][ T28] audit: type=1400 audit(1777832466.661:4353): avc: denied { write } for pid=24560 comm="syz.0.6187" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.429545][T24559] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.445182][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6188'. [ 415.466566][T24559] EXT4-fs (loop3): 2 truncates cleaned up [ 415.467572][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6188'. [ 415.488686][T24559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.534550][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.181718][T21568] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 416.218236][T21568] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 514 with error 28 [ 416.251543][T21568] EXT4-fs (loop0): This should not happen!! Data will be lost [ 416.251543][T21568] [ 416.272025][T21568] EXT4-fs (loop0): Total free blocks count 0 [ 416.289613][T21568] EXT4-fs (loop0): Free/Dirty block details [ 416.298880][T21568] EXT4-fs (loop0): free_blocks=4096 [ 416.304634][T21568] EXT4-fs (loop0): dirty_blocks=544 [ 416.310355][T21568] EXT4-fs (loop0): Block reservation details [ 416.317271][T21568] EXT4-fs (loop0): i_reserved_data_blocks=34 [ 416.326457][T21568] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 416.339751][T23864] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 416.435967][T24595] sctp: [Deprecated]: syz.8.6200 (pid 24595) Use of int in max_burst socket option. [ 416.435967][T24595] Use struct sctp_assoc_value instead [ 416.470544][ T28] audit: type=1400 audit(1777832467.731:4354): avc: denied { bind } for pid=24599 comm="syz.6.6202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.522886][ T28] audit: type=1400 audit(1777832467.731:4355): avc: denied { setopt } for pid=24599 comm="syz.6.6202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.571448][T24604] loop3: detected capacity change from 0 to 512 [ 416.583281][T24606] loop8: detected capacity change from 0 to 1024 [ 416.600160][T24606] EXT4-fs: Ignoring removed orlov option [ 416.612575][T24604] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 416.624822][T24604] System zones: 0-2, 18-18, 34-35 [ 416.632688][T24604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.645671][T24604] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.652031][T24606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 416.668332][ T28] audit: type=1400 audit(1777832467.931:4356): avc: denied { write } for pid=24603 comm="syz.3.6204" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.674353][T24606] System zones: [ 416.695490][T24604] EXT4-fs (loop3): shut down requested (0) [ 416.733913][T24606] 0-1, 3-12 [ 416.752527][T24606] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.774254][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.836805][T24615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.848979][T24606] xt_hashlimit: size too large, truncated to 1048576 [ 416.860859][T24615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.187560][ T28] audit: type=1400 audit(1777832468.451:4357): avc: denied { load_policy } for pid=24620 comm="syz.0.6209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 417.187974][T24623] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 417.268053][T24623] SELinux: failed to load policy [ 417.354377][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 417.418890][T24631] netlink: 'syz.8.6213': attribute type 1 has an invalid length. [ 417.465254][T24631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.497312][T24643] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6213'. [ 417.540134][T24643] bond1: entered allmulticast mode [ 417.934955][T24653] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6219'. [ 417.999655][ T28] audit: type=1400 audit(1777832469.271:4358): avc: denied { write } for pid=24657 comm="syz.6.6221" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 418.100322][T24663] loop6: detected capacity change from 0 to 1024 [ 418.143997][T24663] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 418.198741][T24663] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 5: comm syz.6.6224: lblock 5 mapped to illegal pblock 5 (length 1) [ 418.210715][T24668] loop0: detected capacity change from 0 to 256 [ 418.234603][T24663] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.249797][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 418.267119][ C1] EXT4-fs (loop6): initial error at time 1777832469: ext4_map_blocks:833: inode 3: block 5 [ 418.279306][ C1] EXT4-fs (loop6): last error at time 1777832469: ext4_map_blocks:833: inode 3: block 5 [ 418.280610][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.312110][T24663] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.6224: Failed to acquire dquot type 0 [ 418.345337][T24663] loop6: lost filesystem error report for type 5 error -117 [ 418.347011][T24663] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.6224: lblock 5 mapped to illegal pblock 5 (length 1) [ 418.371304][T24663] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.372528][T24663] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.6224: Failed to acquire dquot type 0 [ 418.395266][T24663] loop6: lost filesystem error report for type 5 error -117 [ 418.396851][T24663] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.6224: Freeing blocks not in datazone - block = 0, count = 4096 [ 418.431000][T24663] loop6: lost filesystem error report for type 5 error -117 [ 418.436535][T24663] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.6224: lblock 5 mapped to illegal pblock 5 (length 1) [ 418.503455][T24663] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.506285][T24663] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.6224: Failed to acquire dquot type 0 [ 418.554721][T24663] loop6: lost filesystem error report for type 5 error -117 [ 418.563464][T24663] EXT4-fs (loop6): 1 orphan inode deleted [ 418.607390][T24663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.720701][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.869021][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 418.899339][T24694] loop6: detected capacity change from 0 to 4096 [ 418.929306][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 418.950797][T24694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.966752][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 418.980978][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6237'. [ 418.999279][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6237'. [ 419.027311][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.055544][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 419.095784][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 419.163923][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6236'. [ 419.352607][T24715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6241'. [ 419.372157][T24715] netlink: 'syz.0.6241': attribute type 11 has an invalid length. [ 419.391078][T24715] netlink: 'syz.0.6241': attribute type 12 has an invalid length. [ 419.426708][T24715] vxlan0: entered promiscuous mode [ 419.622089][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 419.622147][ T28] audit: type=1400 audit(1777832470.891:4366): avc: denied { connect } for pid=24721 comm="syz.6.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 419.736633][ T28] audit: type=1400 audit(1777832471.001:4367): avc: denied { getopt } for pid=24726 comm="syz.8.6247" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.783181][ T28] audit: type=1400 audit(1777832471.041:4368): avc: denied { relabelfrom } for pid=24725 comm="syz.3.6248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 419.806682][ T28] audit: type=1400 audit(1777832471.041:4369): avc: denied { relabelto } for pid=24725 comm="syz.3.6248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 419.924330][T24738] loop3: detected capacity change from 0 to 164 [ 419.967869][T24738] isofs: isofs_export_get_parent(): child directory not normalized! [ 420.050499][T24742] loop3: detected capacity change from 0 to 1024 [ 420.087401][T24742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 420.117373][T24742] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.164298][ T28] audit: type=1400 audit(1777832471.431:4370): avc: denied { write } for pid=24741 comm="syz.3.6252" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.170486][T24742] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.6252: lblock 0 mapped to illegal pblock 0 (length 1) [ 420.204891][T24742] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 420.226180][T24747] loop0: detected capacity change from 0 to 2048 [ 420.235380][T24742] EXT4-fs (loop3): This should not happen!! Data will be lost [ 420.235380][T24742] [ 420.257636][T24747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.305947][ T28] audit: type=1400 audit(1777832471.571:4371): avc: denied { write } for pid=24746 comm="syz.0.6253" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.352846][ T28] audit: type=1400 audit(1777832471.601:4372): avc: denied { ioctl } for pid=24746 comm="syz.0.6253" path="/56/file0/file1" dev="loop0" ino=15 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.355014][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 420.396980][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.461584][T24754] netlink: 'syz.8.6256': attribute type 4 has an invalid length. [ 420.469641][T24755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6255'. [ 420.479283][T24754] netlink: 'syz.8.6256': attribute type 4 has an invalid length. [ 420.562043][T24759] netlink: 'syz.0.6258': attribute type 4 has an invalid length. [ 421.281942][ T28] audit: type=1400 audit(1777832472.551:4373): avc: denied { create } for pid=24789 comm="syz.1.6272" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.315261][ T28] audit: type=1400 audit(1777832472.571:4374): avc: denied { read write } for pid=24789 comm="syz.1.6272" name="file0" dev="tmpfs" ino=5005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.347700][ T28] audit: type=1400 audit(1777832472.571:4375): avc: denied { open } for pid=24789 comm="syz.1.6272" path="/965/file0" dev="tmpfs" ino=5005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.376965][T24792] loop3: detected capacity change from 0 to 1024 [ 421.396884][T24792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 421.411041][T24792] System zones: 0-1, 3-36 [ 421.423369][T24792] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6271: bad orphan inode 134217728 [ 421.440888][T24792] loop3: lost filesystem error report for type 5 error -117 [ 421.447702][T24792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.505132][T24800] loop6: detected capacity change from 0 to 256 [ 421.575378][T24805] netlink: 'syz.8.6278': attribute type 13 has an invalid length. [ 421.593137][T24805] netlink: 'syz.8.6278': attribute type 13 has an invalid length. [ 421.615231][T24807] loop0: detected capacity change from 0 to 128 [ 421.645599][T24807] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.658679][T24807] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 421.748392][T23864] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.809576][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.872874][T24815] loop0: detected capacity change from 0 to 512 [ 422.113177][T24815] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.6281: corrupted inode contents [ 422.146631][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.149387][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 422.165036][ C1] EXT4-fs (loop0): initial error at time 1777832473: ext4_do_update_inode:5690: inode 16 [ 422.174935][ C1] EXT4-fs (loop0): last error at time 1777832473: ext4_do_update_inode:5690: inode 16 [ 422.179646][T24815] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.6281: mark_inode_dirty error [ 422.205307][T24844] netlink: 'syz.8.6294': attribute type 16 has an invalid length. [ 422.213292][T24844] netlink: 'syz.8.6294': attribute type 17 has an invalid length. [ 422.226119][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.229941][T24815] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.6281: corrupted inode contents [ 422.255059][T24844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.265362][T24844] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.272621][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.274211][T24815] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.6281: mark_inode_dirty error [ 422.319792][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.325519][T24815] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.6281: corrupted inode contents [ 422.349202][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.355559][T24815] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 422.378397][T24815] loop0: lost filesystem error report for type 5 error -117 [ 422.381847][T24815] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.6281: corrupted inode contents [ 422.402962][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.404778][T24815] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.6281: mark_inode_dirty error [ 422.421642][T24844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.428707][T24815] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 422.439738][T24815] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 422.459825][T24815] loop0: lost filesystem error report for type 5 error -117 [ 422.463554][T24815] EXT4-fs (loop0): 1 truncate cleaned up [ 422.468249][T24844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.473748][T24815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.499173][T24844] veth1_macvtap: left promiscuous mode [ 422.507896][T21579] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:62: Failed to release dquot type 1 [ 422.522319][T24815] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.533900][T24844] veth0_macvtap: left promiscuous mode [ 422.538651][T24844] veth0_macvtap: entered promiscuous mode [ 422.556634][T24844] veth1_macvtap: entered promiscuous mode [ 422.574918][T24844] wireguard0: left promiscuous mode [ 422.584731][T24844] wireguard0: left allmulticast mode [ 422.604044][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.617476][T24844] bond1: left allmulticast mode [ 422.631755][T24844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.660003][T21555] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.667212][T21555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.691216][T21555] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.698372][T21555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.028949][T24867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.140201][T24868] rock: directory entry would overflow storage [ 423.167086][T24868] rock: sig=0x4f50, size=4, remaining=3 [ 423.181158][T24867] EXT4-fs (loop6): shut down requested (1) [ 423.201663][T24868] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 423.221655][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.462120][T24892] netlink: 'syz.6.6311': attribute type 16 has an invalid length. [ 423.540575][T24892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.568648][T24892] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.592442][T24892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.676631][T24892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.697092][T24892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.725705][T24892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.752961][T24892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.785382][T24892] veth1_vlan: left promiscuous mode [ 423.798961][T24892] veth0_vlan: left promiscuous mode [ 423.812745][T24892] veth0_vlan: entered promiscuous mode [ 423.842655][T24892] veth1_vlan: entered promiscuous mode [ 423.871395][T24892] veth1_macvtap: left promiscuous mode [ 423.890530][T24892] veth0_macvtap: left promiscuous mode [ 423.909847][T24892] veth0_macvtap: entered promiscuous mode [ 423.926627][T24892] veth1_macvtap: entered promiscuous mode [ 423.950006][T24892] ip6gre1: left promiscuous mode [ 423.962704][T24892] ip6gre1: left allmulticast mode [ 424.012948][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.039753][T24896] set_capacity_and_notify: 2 callbacks suppressed [ 424.039770][T24896] loop0: detected capacity change from 0 to 1024 [ 424.062938][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.066544][T24896] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.070100][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.109258][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.116474][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.124350][T24896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.197246][T24904] __nla_validate_parse: 10 callbacks suppressed [ 424.197263][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6318'. [ 424.204769][T24896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.309794][T24896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6315'. [ 424.326591][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6320'. [ 424.364829][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.442264][T24919] syzkaller1: entered promiscuous mode [ 424.448002][T24919] syzkaller1: entered allmulticast mode [ 424.458617][T24917] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6321'. [ 424.491811][T24917] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6321'. [ 424.590831][T24928] loop0: detected capacity change from 0 to 1024 [ 424.598888][T24930] validate_nla: 1 callbacks suppressed [ 424.598905][T24930] netlink: 'syz.8.6329': attribute type 4 has an invalid length. [ 424.629163][T24928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 424.644824][T24928] System zones: 0-1, 3-36 [ 424.666821][T24928] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.6328: bad orphan inode 134217728 [ 424.717215][T24928] loop0: lost filesystem error report for type 5 error -117 [ 424.726196][T24928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.953651][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.000656][T20359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.058549][T24953] loop0: detected capacity change from 0 to 164 [ 425.207179][T24953] rock: directory entry would overflow storage [ 425.219501][T24953] rock: sig=0x4f50, size=4, remaining=3 [ 425.239869][T24953] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 425.386042][T24962] loop0: detected capacity change from 0 to 164 [ 425.442064][T24962] isofs: isofs_export_get_parent(): child directory not normalized! [ 425.648864][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 425.648889][ T28] audit: type=1400 audit(1777832476.911:4383): avc: denied { read write } for pid=24970 comm="syz.0.6344" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 425.684365][ T3391] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 425.724113][ T3391] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.746118][ T28] audit: type=1400 audit(1777832476.951:4384): avc: denied { open } for pid=24970 comm="syz.0.6344" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 425.872421][T24984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.896519][T24984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.188965][T24996] xt_hashlimit: max too large, truncated to 1048576 [ 426.713128][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6362'. [ 426.733008][T25017] openvswitch: netlink: Flow key attr not present in new flow. [ 427.122807][T25026] loop3: detected capacity change from 0 to 2048 [ 427.143784][T25026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.170811][ T28] audit: type=1400 audit(1777832478.431:4385): avc: denied { write } for pid=25025 comm="syz.3.6364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.445720][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6373'. [ 428.603555][T21563] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 428.645371][T21563] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 754 with error 28 [ 428.660879][ T28] audit: type=1400 audit(1777832479.931:4386): avc: denied { create } for pid=25051 comm="syz.8.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.683500][T21563] EXT4-fs (loop3): This should not happen!! Data will be lost [ 428.683500][T21563] [ 428.694569][T21563] EXT4-fs (loop3): Total free blocks count 0 [ 428.701972][T21563] EXT4-fs (loop3): Free/Dirty block details [ 428.708097][T21563] EXT4-fs (loop3): free_blocks=4096 [ 428.723654][T21563] EXT4-fs (loop3): dirty_blocks=784 [ 428.734247][T21563] EXT4-fs (loop3): Block reservation details [ 428.745572][T21563] EXT4-fs (loop3): i_reserved_data_blocks=49 [ 428.774928][T21568] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 428.801388][T25062] loop8: detected capacity change from 0 to 512 [ 428.810967][T22122] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 428.823860][T25062] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 428.869116][T25062] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.6379: corrupted xattr entries [ 428.907982][T25062] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 428.908369][T25062] EXT4-fs (loop8): 1 truncate cleaned up [ 428.917679][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 428.917699][ C1] EXT4-fs (loop8): initial error at time 1777832480: xattr_find_entry:337: inode 15 [ 428.917736][ C1] EXT4-fs (loop8): last error at time 1777832480: xattr_find_entry:337: inode 15 [ 428.998031][T25062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.054276][ T28] audit: type=1400 audit(1777832480.321:4387): avc: denied { write } for pid=25061 comm="syz.8.6379" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.110721][ T28] audit: type=1400 audit(1777832480.351:4388): avc: denied { write } for pid=25061 comm="syz.8.6379" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.135723][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.148130][ T28] audit: type=1400 audit(1777832480.351:4389): avc: denied { remove_name } for pid=25061 comm="syz.8.6379" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.172084][ T28] audit: type=1400 audit(1777832480.351:4390): avc: denied { rename } for pid=25061 comm="syz.8.6379" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.773966][T25098] loop0: detected capacity change from 0 to 4096 [ 429.774779][T25096] netlink: 'syz.8.6392': attribute type 3 has an invalid length. [ 429.804350][T25098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.851810][ T28] audit: type=1400 audit(1777832481.121:4391): avc: denied { write } for pid=25097 comm="syz.0.6390" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 429.929148][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.957411][ T28] audit: type=1400 audit(1777832481.121:4392): avc: denied { write } for pid=25097 comm="syz.0.6390" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.148473][T25120] loop6: detected capacity change from 0 to 128 [ 430.189707][T25120] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 430.212483][T25120] FAT-fs (loop6): Filesystem has been set read-only [ 430.275445][T25124] loop3: detected capacity change from 0 to 1024 [ 430.323567][T25124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.401211][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.706710][T25147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6412'. [ 430.908632][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 430.908649][ T28] audit: type=1400 audit(1777832482.181:4399): avc: denied { write } for pid=25149 comm="syz.0.6413" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 430.941611][T25159] random: crng reseeded on system resumption [ 430.947898][T25154] loop8: detected capacity change from 0 to 1024 [ 431.000893][ T28] audit: type=1400 audit(1777832482.221:4400): avc: denied { open } for pid=25149 comm="syz.0.6413" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 431.005432][T25154] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.124186][T25154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 431.231469][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6419'. [ 431.295115][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6419'. [ 431.338441][T25171] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 431.430974][T25154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.489605][T20803] kernel write not supported for file bpf-prog (pid: 20803 comm: kworker/1:12) [ 431.492491][T25154] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6414'. [ 431.550562][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.794282][T25200] loop6: detected capacity change from 0 to 1024 [ 431.819869][T25205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6433'. [ 431.839654][T25200] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 431.860948][T25200] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 431.876691][T25200] EXT4-fs (loop6): mount failed [ 431.898744][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6442'. [ 431.913744][T25205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6433'. [ 431.923620][T25205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6433'. [ 432.458405][T25214] netlink: 'syz.0.6436': attribute type 1 has an invalid length. [ 432.606702][ T28] audit: type=1400 audit(1777832483.871:4401): avc: denied { mounton } for pid=25220 comm="syz.8.6438" path="/472/file0" dev="tmpfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 433.891558][T25214] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 434.279914][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.469516][T25252] loop8: detected capacity change from 0 to 128 [ 434.507275][T25252] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 434.516866][T25252] FAT-fs (loop8): Filesystem has been set read-only [ 434.622013][T25256] loop3: detected capacity change from 0 to 512 [ 434.651477][T25256] EXT4-fs (loop3): 1 truncate cleaned up [ 434.662727][T25256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.893867][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.069442][T25275] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6459'. [ 435.129729][T25275] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.140539][T25275] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.184913][T25280] loop3: detected capacity change from 0 to 2048 [ 435.226103][T25280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.269041][T25280] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.295907][T25280] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6461: bg 0: block 345: padding at end of block bitmap is not set [ 435.310508][ T28] audit: type=1400 audit(1777832486.561:4402): avc: denied { write } for pid=25279 comm="syz.3.6461" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.357538][T25280] EXT4-fs (loop3): Remounting filesystem read-only [ 435.369019][ T28] audit: type=1400 audit(1777832486.561:4403): avc: denied { create } for pid=25279 comm="syz.3.6461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 435.423689][T25289] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 435.436095][T25289] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 435.447250][T25289] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 435.468507][T25280] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 435.477695][ T28] audit: type=1400 audit(1777832486.621:4404): avc: denied { ioctl } for pid=25279 comm="syz.3.6461" path="socket:[74989]" dev="sockfs" ino=74989 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.504044][T25280] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 435.541132][ T28] audit: type=1400 audit(1777832486.691:4405): avc: denied { write } for pid=25279 comm="syz.3.6461" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.568955][T22122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.605428][ T28] audit: type=1400 audit(1777832486.711:4406): avc: denied { write } for pid=25279 comm="syz.3.6461" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.664079][T25305] tipc: Failed to remove unknown binding: 66,1,1/0:1945183838/1945183840 [ 435.669636][ T28] audit: type=1400 audit(1777832486.721:4407): avc: denied { open } for pid=25279 comm="syz.3.6461" path="/213/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.689723][T25305] tipc: Failed to remove unknown binding: 66,1,1/0:1945183838/1945183840 [ 436.230688][ T4797] bridge_slave_1: left allmulticast mode [ 436.238087][ T4797] bridge_slave_1: left promiscuous mode [ 436.247019][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.271385][ T4797] bridge_slave_0: left allmulticast mode [ 436.278338][ T4797] bridge_slave_0: left promiscuous mode [ 436.284397][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.411752][T25345] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 436.421381][T25346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6484'. [ 436.491484][ T4797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.501109][ T4797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.510305][ T4797] bond0 (unregistering): Released all slaves [ 436.524228][T25345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.542768][T25347] bond4: (slave veth7): Enslaving as an active interface with a down link [ 436.576085][T25352] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 436.606477][T25352] bond4: (slave batadv1): making interface the new active one [ 436.616306][T25352] batadv1: entered promiscuous mode [ 436.622281][T25352] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 436.637744][ T4797] hsr_slave_0: left promiscuous mode [ 436.645314][ T4797] hsr_slave_1: left promiscuous mode [ 436.658049][ T4797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.674053][ T4797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.734066][ T4797] team0 (unregistering): Port device team_slave_1 removed [ 436.745207][ T4797] team0 (unregistering): Port device team_slave_0 removed [ 436.857976][T25377] loop8: detected capacity change from 0 to 1024 [ 436.892137][T25377] EXT4-fs: Ignoring removed bh option [ 436.915960][T25380] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 436.941591][T25377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.962663][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 436.962680][ T28] audit: type=1400 audit(1777832488.231:4412): avc: denied { write } for pid=25376 comm="syz.8.6494" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.011763][ T28] audit: type=1400 audit(1777832488.281:4413): avc: denied { setattr } for pid=25376 comm="syz.8.6494" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 437.108045][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.120152][T25391] dvmrp1: entered allmulticast mode [ 437.196174][T25323] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.213636][T25323] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.224408][T25323] bridge_slave_0: entered allmulticast mode [ 437.242957][T25323] bridge_slave_0: entered promiscuous mode [ 437.280341][T25399] loop8: detected capacity change from 0 to 128 [ 437.280364][T25394] dvmrp1: left allmulticast mode [ 437.338926][T25399] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.376691][T25323] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.388181][T25399] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.412247][T25323] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.441981][T25323] bridge_slave_1: entered allmulticast mode [ 437.451532][T18248] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.473433][T25323] bridge_slave_1: entered promiscuous mode [ 437.548988][T25323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.586583][T25323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.628632][T25323] team0: Port device team_slave_0 added [ 437.637888][T25406] xt_hashlimit: size too large, truncated to 1048576 [ 437.646702][T25323] team0: Port device team_slave_1 added [ 437.679763][T25323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.688146][T25323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.720962][T25323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.742513][T25323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.759468][T25323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.814345][T25323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.884947][T25323] hsr_slave_0: entered promiscuous mode [ 437.903234][T25323] hsr_slave_1: entered promiscuous mode [ 437.911945][T25323] debugfs: 'hsr0' already exists in 'hsr' [ 437.922240][T25323] Cannot create hsr debugfs directory [ 438.152197][T25433] all: renamed from bridge_slave_1 (while UP) [ 438.278222][T25323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.312774][T25323] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.332223][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.339360][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.355256][T25445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6515'. [ 438.377530][T21574] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.384650][T21574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.423579][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.434189][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.726051][T25472] syz.6.6524: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 438.759997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 438.777941][T25479] loop8: detected capacity change from 0 to 256 [ 438.786148][T25472] CPU: 1 UID: 0 PID: 25472 Comm: syz.6.6524 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.786254][T25472] Tainted: [W]=WARN [ 438.786266][T25472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.786284][T25472] Call Trace: [ 438.786293][T25472] [ 438.786305][T25472] __dump_stack+0x1d/0x30 [ 438.786348][T25472] dump_stack_lvl+0x95/0xd0 [ 438.786429][T25472] dump_stack+0x15/0x1b [ 438.786450][T25472] warn_alloc+0x145/0x1c0 [ 438.786539][T25472] ? futex_unqueue+0xc5/0xf0 [ 438.786595][T25472] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 438.786627][T25472] ? __pfx_futex_wake_mark+0x10/0x10 [ 438.786658][T25472] ? __rcu_read_unlock+0x4e/0x70 [ 438.786684][T25472] ? avc_has_perm_noaudit+0xab/0x130 [ 438.786723][T25472] ? should_fail_ex+0x30/0x280 [ 438.786764][T25472] vmalloc_user_noprof+0x7d/0xb0 [ 438.786825][T25472] ? xskq_create+0x80/0xe0 [ 438.786860][T25472] xskq_create+0x80/0xe0 [ 438.786894][T25472] xsk_init_queue+0x70/0xb0 [ 438.786929][T25472] xsk_setsockopt+0x477/0x640 [ 438.786990][T25472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 438.787025][T25472] __sys_setsockopt+0x184/0x200 [ 438.787056][T25472] __x64_sys_setsockopt+0x64/0x80 [ 438.787114][T25472] x64_sys_call+0x2327/0x3020 [ 438.787209][T25472] do_syscall_64+0x12c/0x3b0 [ 438.787246][T25472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.787275][T25472] RIP: 0033:0x7fc261b5cdd9 [ 438.787296][T25472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.787320][T25472] RSP: 002b:00007fc2605b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.787386][T25472] RAX: ffffffffffffffda RBX: 00007fc261dd5fa0 RCX: 00007fc261b5cdd9 [ 438.787405][T25472] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 438.787423][T25472] RBP: 00007fc261bf2d69 R08: 0000000000000004 R09: 0000000000000000 [ 438.787453][T25472] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 438.787471][T25472] R13: 00007fc261dd6038 R14: 00007fc261dd5fa0 R15: 00007ffe35c7d578 [ 438.787505][T25472] [ 438.789042][T25472] Mem-Info: [ 438.910578][T25479] FAT-fs (loop8): codepage cp852 not found [ 438.937301][T25472] active_anon:50429 inactive_anon:51 isolated_anon:0 [ 438.937301][T25472] active_file:26584 inactive_file:3725 isolated_file:0 [ 438.937301][T25472] unevictable:0 dirty:286 writeback:0 [ 438.937301][T25472] slab_reclaimable:6162 slab_unreclaimable:78005 [ 438.937301][T25472] mapped:29305 shmem:34184 pagetables:6094 [ 438.937301][T25472] sec_pagetables:0 bounce:0 [ 438.937301][T25472] kernel_misc_reclaimable:0 [ 438.937301][T25472] free:1749649 free_pcp:10259 free_cma:0 [ 439.035137][ T28] audit: type=1400 audit(1777832490.291:4414): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 439.059850][T25472] Node 0 active_anon:201716kB inactive_anon:204kB active_file:106336kB inactive_file:14900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117220kB dirty:1144kB writeback:0kB shmem:136736kB kernel_stack:6400kB pagetables:24376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.088346][T25474] can0: slcan on ttyS3. [ 439.167211][T25472] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.189626][ T28] audit: type=1400 audit(1777832490.411:4415): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.223864][ T28] audit: type=1400 audit(1777832490.411:4416): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.244733][T25472] lowmem_reserve[]: 0 2878 7857 7857 [ 439.254613][ T28] audit: type=1400 audit(1777832490.411:4417): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.285791][T25472] Node 0 DMA32 free:2944548kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948072kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 439.322192][T25323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.349457][T25473] can0 (unregistered): slcan off ttyS3. [ 439.357343][T25472] lowmem_reserve[]: 0 0 4978 4978 [ 439.364633][ T28] audit: type=1400 audit(1777832490.411:4418): avc: denied { read } for pid=3020 comm="dhcpcd" name="n99" dev="tmpfs" ino=18885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.375544][T25472] Node 0 Normal free:4036948kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:205776kB inactive_anon:204kB active_file:106336kB inactive_file:14900kB unevictable:0kB writepending:1144kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:35476kB local_pcp:33520kB free_cma:0kB [ 439.435246][ T28] audit: type=1400 audit(1777832490.411:4419): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n99" dev="tmpfs" ino=18885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.493569][T25472] lowmem_reserve[]: 0 0 0 0 [ 439.508022][T25472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.595981][ T28] audit: type=1400 audit(1777832490.411:4420): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n99" dev="tmpfs" ino=18885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 439.639590][T25472] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944548kB [ 439.669541][ T28] audit: type=1400 audit(1777832490.601:4421): avc: denied { read } for pid=25489 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.726111][T25472] Node 0 Normal: 2847*4kB (UME) 2575*8kB (UME) 1678*16kB (UME) 1227*32kB (UME) 929*64kB (UME) 470*128kB (UME) 421*256kB (UME) 340*512kB (UME) 275*1024kB (UME) 172*2048kB (UM) 708*4096kB (UM) = 4033396kB [ 439.768369][T25519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6530'. [ 439.779491][T25472] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 439.810009][T25472] 66509 total pagecache pages [ 439.838257][T25472] 12 pages in swap cache [ 439.845620][T25323] veth0_vlan: entered promiscuous mode [ 439.852533][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6530'. [ 439.863273][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6530'. [ 439.877647][T25472] Free swap = 124788kB [ 439.895833][T25323] veth1_vlan: entered promiscuous mode [ 439.901495][T25472] Total swap = 124996kB [ 439.917299][T25472] 2097051 pages RAM [ 439.931401][T25472] 0 pages HighMem/MovableOnly [ 439.947148][T25472] 81634 pages reserved [ 439.954916][T25323] veth0_macvtap: entered promiscuous mode [ 439.975010][T25323] veth1_macvtap: entered promiscuous mode [ 440.012192][T25323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.041023][T25323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.140006][T25541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6535'. [ 440.184691][T25546] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6536'. [ 440.207209][T25541] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.218380][T25541] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.489193][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6540'. [ 440.520513][T25561] syzkaller1: entered promiscuous mode [ 440.534749][T25561] syzkaller1: entered allmulticast mode [ 440.602537][T25569] team0: Port device team_slave_0 removed [ 440.758457][T25584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6548'. [ 440.816499][T25590] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6550'. [ 440.832307][T25590] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.846276][T25590] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.990743][T25610] netlink: 'syz.0.6557': attribute type 1 has an invalid length. [ 441.018469][T25610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.050452][T25610] bond1: (slave veth7): Enslaving as an active interface with a down link [ 441.083903][T25610] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 441.098897][T25610] bond1: (slave batadv1): making interface the new active one [ 441.117943][T25610] batadv1: entered promiscuous mode [ 441.126976][T25610] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 442.063739][T25645] netlink: 'syz.8.6580': attribute type 1 has an invalid length. [ 442.108497][T25645] macvlan0: entered promiscuous mode [ 442.116478][T25645] macvlan0: entered allmulticast mode [ 442.122875][T25645] bond2: entered promiscuous mode [ 442.128398][T25645] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 442.137830][T25645] bond2: left promiscuous mode [ 442.196390][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 442.196410][ T28] audit: type=1400 audit(1777832493.461:4459): avc: denied { mount } for pid=25653 comm="syz.1.6573" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 442.269095][ T28] audit: type=1400 audit(1777832493.501:4460): avc: denied { watch watch_reads } for pid=25653 comm="syz.1.6573" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 442.331106][T25661] tipc: Failed to remove unknown binding: 66,1,1/0:809758940/809758942 [ 442.352374][T25661] tipc: Failed to remove unknown binding: 66,1,1/0:809758940/809758942 [ 442.498112][T25674] loop7: detected capacity change from 0 to 512 [ 442.512450][T25674] EXT4-fs: Ignoring removed nobh option [ 442.554426][T25674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.577377][T25674] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.609836][ T28] audit: type=1400 audit(1777832493.881:4461): avc: denied { getopt } for pid=25672 comm="syz.7.6583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 442.656562][T25683] netlink: 'syz.1.6586': attribute type 4 has an invalid length. [ 442.674997][ T28] audit: type=1400 audit(1777832493.941:4462): avc: denied { read } for pid=25672 comm="syz.7.6583" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 442.698215][T25683] netlink: 'syz.1.6586': attribute type 4 has an invalid length. [ 442.709858][ T28] audit: type=1400 audit(1777832493.971:4463): avc: denied { open } for pid=25672 comm="syz.7.6583" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 442.749480][ T28] audit: type=1400 audit(1777832493.981:4464): avc: denied { ioctl } for pid=25672 comm="syz.7.6583" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 442.846412][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.870860][T25683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.878364][ T28] audit: type=1400 audit(1777832494.141:4465): avc: denied { create } for pid=25688 comm="syz.0.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 442.901515][T25683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.919111][ T28] audit: type=1400 audit(1777832494.141:4466): avc: denied { listen } for pid=25688 comm="syz.0.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 442.990088][ T28] audit: type=1400 audit(1777832494.141:4467): avc: denied { accept } for pid=25688 comm="syz.0.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.070444][ T28] audit: type=1400 audit(1777832494.221:4468): avc: denied { map } for pid=25690 comm="syz.8.6590" path="socket:[75636]" dev="sockfs" ino=75636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 443.112743][T25700] tipc: Failed to remove unknown binding: 66,1,1/0:4221597274/4221597276 [ 443.126488][T25700] tipc: Failed to remove unknown binding: 66,1,1/0:4221597274/4221597276 [ 443.167582][ T4797] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.187938][ T4797] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.216116][ T4797] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 443.233422][T25703] netlink: 'syz.7.6593': attribute type 1 has an invalid length. [ 443.237700][ T4797] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 443.517676][ T4797] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.534612][ T4797] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.555557][ T4797] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 443.566860][ T4797] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 443.577410][ T4797] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.591101][ T4797] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.601822][ T4797] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 443.611515][ T4797] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 443.646517][ T4797] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.662926][ T4797] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.680412][ T4797] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 443.699265][ T4797] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 444.031252][T25730] loop8: detected capacity change from 0 to 512 [ 444.049376][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6603'. [ 444.050443][T25730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.155373][T25730] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 444.167873][T25728] team0: Port device team_slave_0 removed [ 444.176759][T25730] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 444.192776][T25730] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 444.205787][T25730] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 444.215394][T25730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 444.243359][T25730] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.6604: dx entry: limit 65535 != root limit 120 [ 444.260413][T25730] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6604: Corrupt directory, running e2fsck is recommended [ 444.310691][T25730] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.6604: path /516/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 444.383254][T25743] lo speed is unknown, defaulting to 1000 [ 444.402667][T25743] lo speed is unknown, defaulting to 1000 [ 444.410852][T25743] lo speed is unknown, defaulting to 1000 [ 444.453292][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.513742][T25743] infiniband lyz2: set active [ 444.518639][T20802] lo speed is unknown, defaulting to 1000 [ 444.532396][T25743] infiniband lyz2: added lo [ 444.562171][T25743] RDS/IB: lyz2: added [ 444.579625][T25743] smc: adding ib device lyz2 with port count 1 [ 444.596906][T25743] smc: ib device lyz2 port 1 has no pnetid [ 444.623162][T13420] lo speed is unknown, defaulting to 1000 [ 444.629196][T25743] lo speed is unknown, defaulting to 1000 [ 444.684417][T25743] lo speed is unknown, defaulting to 1000 [ 444.755846][T25743] lo speed is unknown, defaulting to 1000 [ 444.880897][T25743] lo speed is unknown, defaulting to 1000 [ 444.993051][T25743] lo speed is unknown, defaulting to 1000 [ 445.083826][T25743] lo speed is unknown, defaulting to 1000 [ 445.163460][T25743] lo speed is unknown, defaulting to 1000 [ 445.286032][T25743] lo speed is unknown, defaulting to 1000 [ 445.538214][T25776] loop6: detected capacity change from 0 to 512 [ 445.552092][T25779] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6618'. [ 445.559493][T25778] loop8: detected capacity change from 0 to 128 [ 445.568572][T25776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 445.582618][T25778] vfat: Unknown parameter '' [ 445.594880][T25776] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6621: corrupted in-inode xattr: bad e_name length [ 445.603795][T25779] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.615694][T25779] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.631569][T25776] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.634413][T25776] EXT4-fs (loop6): get orphan inode failed [ 445.643616][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 445.643638][ C0] EXT4-fs (loop6): initial error at time 1777832496: ext4_iget_extra_inode:5128: inode 15 [ 445.643673][ C0] EXT4-fs (loop6): last error at time 1777832496: ext4_iget_extra_inode:5128: inode 15 [ 445.676075][T25776] EXT4-fs (loop6): mount failed [ 446.460260][T25817] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6637'. [ 446.802317][T25829] syz_tun: entered allmulticast mode [ 446.812246][T25828] syz_tun: left allmulticast mode [ 447.451579][T25853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.467295][T25853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.568540][T25863] netlink: 'syz.6.6656': attribute type 1 has an invalid length. [ 447.590574][T25863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.655343][T25863] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 447.716802][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 447.716818][ T28] audit: type=1400 audit(1777832498.981:4538): avc: denied { bind } for pid=25878 comm="syz.8.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.751754][ T28] audit: type=1400 audit(1777832499.021:4539): avc: denied { setopt } for pid=25878 comm="syz.8.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.772188][ T28] audit: type=1400 audit(1777832499.021:4540): avc: denied { read } for pid=25878 comm="syz.8.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.797716][T25881] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6664'. [ 447.801007][T25883] netlink: 'syz.6.6665': attribute type 1 has an invalid length. [ 447.823402][T21542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.832482][T21542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.866826][T25883] bond2: (slave macvlan1): making interface the new active one [ 447.879978][T25883] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 447.889007][T21542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.898285][T21542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.909582][T25887] bond2 (unregistering): (slave macvlan1): Releasing active interface [ 447.927882][T25887] bond2 (unregistering): Released all slaves [ 447.962602][T25894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6669'. [ 448.167466][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6675'. [ 448.184700][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6675'. [ 448.260360][ T28] audit: type=1326 audit(1777832499.531:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.310838][ T28] audit: type=1326 audit(1777832499.531:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.391976][ T28] audit: type=1326 audit(1777832499.561:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.418663][ T28] audit: type=1326 audit(1777832499.561:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.445609][ T28] audit: type=1326 audit(1777832499.561:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.471924][ T28] audit: type=1326 audit(1777832499.611:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.498104][ T28] audit: type=1326 audit(1777832499.611:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25917 comm="syz.1.6679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabdf69cdd9 code=0x7ffc0000 [ 448.983847][T25943] netlink: 'syz.6.6685': attribute type 1 has an invalid length. [ 448.984075][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6697'. [ 449.092629][T25949] netlink: 'syz.7.6688': attribute type 1 has an invalid length. [ 449.117562][T25949] netlink: 'syz.7.6688': attribute type 2 has an invalid length. [ 449.121026][T25943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.166157][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6688'. [ 449.185916][T25944] bond2: (slave veth3): Enslaving as an active interface with a down link [ 449.209618][T25950] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 449.234430][T25950] bond2: (slave batadv1): making interface the new active one [ 449.246275][T25950] batadv1: entered promiscuous mode [ 449.253827][T25953] loop7: detected capacity change from 0 to 128 [ 449.260427][T25950] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 449.325229][T25955] loop6: detected capacity change from 0 to 512 [ 449.355973][T25955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 449.374522][T25955] System zones: 1-12 [ 449.382546][T25955] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6690: invalid indirect mapped block 8 (level 2) [ 449.403682][T25959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6692'. [ 449.417377][T25955] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 449.419387][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 449.435091][ C0] EXT4-fs (loop6): initial error at time 1777832500: ext4_free_branches:1023: inode 11 [ 449.444792][ C0] EXT4-fs (loop6): last error at time 1777832500: ext4_free_branches:1023: inode 11 [ 449.457010][T25955] EXT4-fs (loop6): 1 truncate cleaned up [ 449.464536][T25955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.488194][T25955] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 5: comm syz.6.6690: lblock 0 mapped to illegal pblock 5 (length 1) [ 449.544614][T25955] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.6690: error -117 reading directory block [ 449.564108][T25955] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 5: comm syz.6.6690: lblock 0 mapped to illegal pblock 5 (length 1) [ 449.584236][T25955] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.6690: error -117 reading directory block [ 449.633844][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.799505][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 449.799615][T23633] Bluetooth: hci0: command 0x1003 tx timeout [ 450.736185][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6727'. [ 451.911627][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6740'. [ 452.400091][T21568] batadv1: left promiscuous mode [ 452.737177][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 452.737203][ T28] audit: type=1400 audit(1777832504.001:4599): avc: denied { lock } for pid=26093 comm="syz.7.6749" path="socket:[78685]" dev="sockfs" ino=78685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 452.773067][T26099] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6750'. [ 452.808174][T26097] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 452.854803][T26099] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6750'. [ 452.959181][T26106] loop6: detected capacity change from 0 to 1024 [ 452.989743][T26106] EXT4-fs: Ignoring removed orlov option [ 453.021701][T26106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.050954][ T28] audit: type=1400 audit(1777832504.321:4600): avc: denied { write } for pid=26105 comm="syz.6.6751" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.110927][ T28] audit: type=1400 audit(1777832504.351:4601): avc: denied { map } for pid=26105 comm="syz.6.6751" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.135268][ T28] audit: type=1400 audit(1777832504.351:4602): avc: denied { execute } for pid=26105 comm="syz.6.6751" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.207880][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.591828][ T28] audit: type=1400 audit(1777832504.861:4603): avc: denied { execmod } for pid=26116 comm="syz.6.6756" path="/190/blkio.bfq.io_merged" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 453.631394][T26123] loop0: detected capacity change from 0 to 1024 [ 453.641369][T26124] tipc: Failed to remove unknown binding: 66,1,1/0:1013810468/1013810470 [ 453.650478][T26123] EXT4-fs: Ignoring removed bh option [ 453.658546][T26124] tipc: Failed to remove unknown binding: 66,1,1/0:1013810468/1013810470 [ 453.682718][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6759'. [ 453.698052][T26123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.725840][T26127] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6759'. [ 453.849160][T26138] syz_tun: entered allmulticast mode [ 453.871915][T26140] tmpfs: Unknown parameter 'mpo#' [ 453.872505][ T28] audit: type=1400 audit(1777832505.141:4604): avc: denied { mounton } for pid=26139 comm="syz.8.6763" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 453.908772][T26137] syz_tun: left allmulticast mode [ 454.002449][T26143] loop8: detected capacity change from 0 to 4096 [ 454.028102][T26143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.049215][T26143] EXT4-fs (loop8): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 454.080026][T26143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.111105][ T28] audit: type=1400 audit(1777832505.381:4605): avc: denied { write } for pid=26142 comm="syz.8.6764" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.215672][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.315297][T26158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6770'. [ 454.389092][T26160] loop6: detected capacity change from 0 to 2048 [ 454.423976][T26160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.443056][T26160] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.489531][ T28] audit: type=1400 audit(1777832505.751:4606): avc: denied { write } for pid=26159 comm="syz.6.6772" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.564574][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.582603][T26165] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6772: bg 0: block 345: padding at end of block bitmap is not set [ 454.642981][T26165] EXT4-fs (loop6): Remounting filesystem read-only [ 454.669390][T21574] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 454.675511][T26170] loop0: detected capacity change from 0 to 128 [ 454.776587][T26174] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6778'. [ 454.808134][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.879098][T26170] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.957640][T26170] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.051736][T26184] loop7: detected capacity change from 0 to 512 [ 455.087235][T26184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.101146][T26184] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.114923][ T28] audit: type=1400 audit(1777832506.391:4607): avc: denied { write } for pid=26183 comm="syz.7.6782" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.137066][ T28] audit: type=1400 audit(1777832506.391:4608): avc: denied { append } for pid=26183 comm="syz.7.6782" path="/45/file1/memory.events.local" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 455.228278][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.421012][T23864] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.978404][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6801'. [ 455.998462][T26229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6801'. [ 456.427745][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'. [ 456.457436][ T4797] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.457448][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'. [ 456.507745][ T4797] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.536013][ T4797] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.564441][ T4797] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.058305][T26262] sit2: entered promiscuous mode [ 457.221380][T26273] loop6: detected capacity change from 0 to 256 [ 458.629008][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 458.629071][ T28] audit: type=1400 audit(1777832509.891:4613): avc: denied { read } for pid=26309 comm="syz.8.6832" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.848359][T26313] loop6: detected capacity change from 0 to 164 [ 459.322136][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6838'. [ 459.394264][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6840'. [ 459.737515][T26345] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6847'. [ 459.795507][T26346] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6847'. [ 459.984693][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6851'. [ 459.998937][T26358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6851'. [ 460.038404][T26362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6852'. [ 460.069195][T26364] bridge0: port 3(batadv1) entered blocking state [ 460.075841][T26364] bridge0: port 3(batadv1) entered disabled state [ 460.082978][T26364] batadv1: entered allmulticast mode [ 460.089225][T26364] batadv1: entered promiscuous mode [ 460.356914][T26388] netlink: 'syz.0.6865': attribute type 4 has an invalid length. [ 460.387937][T26388] netlink: 'syz.0.6865': attribute type 4 has an invalid length. [ 460.476700][T26401] tipc: Failed to remove unknown binding: 66,1,1/0:4292795611/4292795613 [ 460.520856][T26388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.532431][T26388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.569563][T21542] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 460.579054][T21542] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 460.694016][ T3398] IPVS: starting estimator thread 0... [ 460.700390][ T28] audit: type=1400 audit(1777832511.981:4614): avc: denied { setopt } for pid=26415 comm="syz.0.6875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 460.770067][T21563] batadv1: left promiscuous mode [ 460.789421][T26417] IPVS: using max 2256 ests per chain, 112800 per kthread [ 460.819494][ T28] audit: type=1400 audit(1777832512.081:4615): avc: denied { connect } for pid=26427 comm="syz.7.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 461.614299][T26445] netlink: 'syz.6.6886': attribute type 4 has an invalid length. [ 461.650749][T26445] netlink: 'syz.6.6886': attribute type 4 has an invalid length. [ 461.653676][T26452] ref_ctr_offset mismatch. inode: 0x1693 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 461.669726][ T3398] lo speed is unknown, defaulting to 1000 [ 461.679905][ T3377] lo speed is unknown, defaulting to 1000 [ 461.712157][ T28] audit: type=1400 audit(1777832512.981:4616): avc: denied { bind } for pid=26453 comm="syz.7.6892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 461.848207][T26445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.867790][T26461] loop8: detected capacity change from 0 to 2048 [ 461.878194][T26445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.922198][T26461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.002030][T26461] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.065627][ T28] audit: type=1400 audit(1777832513.331:4617): avc: denied { write } for pid=26460 comm="syz.8.6894" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.156970][T26485] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6894: bg 0: block 345: padding at end of block bitmap is not set [ 462.187822][T26485] EXT4-fs (loop8): Remounting filesystem read-only [ 462.198443][T21555] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 462.257529][ T3398] lo speed is unknown, defaulting to 1000 [ 462.288405][ T3377] lo speed is unknown, defaulting to 1000 [ 462.307619][ T3377] lyz2: Port: 1 Link DOWN [ 462.405678][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.463842][T26491] loop8: detected capacity change from 0 to 512 [ 462.491177][T26491] EXT4-fs: inline encryption not supported [ 462.501183][T26491] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.6905: bad orphan inode 15 [ 462.551668][T26491] loop8: lost filesystem error report for type 5 error -117 [ 462.551849][T26491] ext4_test_bit(bit=14, block=5) = 0 [ 462.564570][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 462.564598][ C1] EXT4-fs (loop8): initial error at time 1777832513: ext4_orphan_get:1423 [ 462.564619][ C1] EXT4-fs (loop8): last error at time 1777832513: ext4_orphan_get:1423 [ 462.588738][T26491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.612553][ T28] audit: type=1400 audit(1777832513.881:4618): avc: denied { write } for pid=26490 comm="syz.8.6905" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.750989][T18248] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.827871][T26504] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 462.980541][T26519] netlink: 'syz.7.6915': attribute type 4 has an invalid length. [ 463.034994][T26519] netlink: 'syz.7.6915': attribute type 4 has an invalid length. [ 463.713397][T26519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.754268][T26519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.758000][ T28] audit: type=1400 audit(1777832515.021:4619): avc: denied { ioctl } for pid=26529 comm="syz.8.6920" path="socket:[81326]" dev="sockfs" ino=81326 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 463.819481][ T28] audit: type=1400 audit(1777832515.021:4620): avc: denied { write } for pid=26529 comm="syz.8.6920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 464.138346][T26543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6926'. [ 464.592192][T26559] loop6: detected capacity change from 0 to 512 [ 464.616822][T26559] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 464.626873][ T28] audit: type=1326 audit(1777832515.891:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2860c3cdd9 code=0x7ffc0000 [ 464.674225][T26559] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.6932: bad orphan inode 131083 [ 464.692214][T26559] loop6: lost filesystem error report for type 5 error -117 [ 464.692807][T26559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.729966][ T28] audit: type=1326 audit(1777832515.891:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2860c3cdd9 code=0x7ffc0000 [ 464.779682][ T28] audit: type=1326 audit(1777832515.891:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2860c3cdd9 code=0x7ffc0000 [ 464.805343][ T28] audit: type=1326 audit(1777832515.891:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2860c3cdd9 code=0x7ffc0000 [ 464.831086][ T28] audit: type=1400 audit(1777832515.921:4625): avc: denied { append } for pid=26548 comm="syz.0.6929" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 464.855649][ T28] audit: type=1326 audit(1777832515.951:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2860bfd60e code=0x7ffc0000 [ 464.887379][ T28] audit: type=1326 audit(1777832515.951:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2860bfd60e code=0x7ffc0000 [ 464.916243][ T28] audit: type=1326 audit(1777832515.951:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26556 comm="syz.8.6931" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2860bfd60e code=0x7ffc0000 [ 464.958362][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.006035][ T1038] IPVS: starting estimator thread 0... [ 465.016954][T26572] netlink: 'syz.8.6935': attribute type 4 has an invalid length. [ 465.031042][T26572] netlink: 'syz.8.6935': attribute type 4 has an invalid length. [ 465.119494][T26575] IPVS: using max 2016 ests per chain, 100800 per kthread [ 465.552258][T26595] lo speed is unknown, defaulting to 1000 [ 466.037671][T26608] loop0: detected capacity change from 0 to 128 [ 466.279091][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6952'. [ 466.515864][T26634] xt_hashlimit: size too large, truncated to 1048576 [ 466.766931][T26644] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6960'. [ 466.906233][T21574] Bluetooth: hci0: Frame reassembly failed (-84) [ 467.575491][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6980'. [ 467.649429][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6981'. [ 467.660815][T26693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6981'. [ 467.791109][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6985'. [ 467.801215][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6985'. [ 468.226463][T26716] loop7: detected capacity change from 0 to 1024 [ 468.233790][T26716] EXT4-fs: inline encryption not supported [ 468.252050][T26716] EXT4-fs: Ignoring removed bh option [ 468.258630][T26716] EXT4-fs: Ignoring removed nobh option [ 468.274820][T26716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.333068][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.462997][T26723] loop7: detected capacity change from 0 to 1024 [ 468.470445][T26723] EXT4-fs: Ignoring removed nobh option [ 468.476391][T26723] EXT4-fs: Ignoring removed bh option [ 468.483003][T26723] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 468.507264][T26723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.616460][T26731] loop0: detected capacity change from 0 to 1024 [ 468.648216][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.674432][T26731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.886902][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6998'. [ 468.919405][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 468.919508][T23633] Bluetooth: hci0: command 0x1003 tx timeout [ 468.982016][T26747] loop7: detected capacity change from 0 to 512 [ 468.990130][T26747] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 469.022354][T26747] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.7003: bad orphan inode 131083 [ 469.035094][T26747] loop7: lost filesystem error report for type 5 error -117 [ 469.036217][T26747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.064166][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 469.064184][ T28] audit: type=1400 audit(1777832520.331:4660): avc: denied { write } for pid=26746 comm="syz.7.7003" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.099444][ T28] audit: type=1400 audit(1777832520.361:4661): avc: denied { lock } for pid=26754 comm="syz.1.7005" path="socket:[82052]" dev="sockfs" ino=82052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 469.157241][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.256110][T26774] loop6: detected capacity change from 0 to 1024 [ 469.263119][T26772] netlink: 'syz.7.7010': attribute type 4 has an invalid length. [ 469.272275][T26774] EXT4-fs: Ignoring removed nobh option [ 469.280633][T26772] netlink: 'syz.7.7010': attribute type 4 has an invalid length. [ 469.289499][T26774] EXT4-fs: Ignoring removed bh option [ 469.314146][T26774] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 469.341568][T26774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.414239][ T28] audit: type=1400 audit(1777832520.681:4662): avc: denied { write } for pid=26773 comm="syz.6.7012" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.467048][T26780] loop7: detected capacity change from 0 to 512 [ 469.519946][T26780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.580735][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.583067][T26780] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.655958][T23303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.706506][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.003615][T26801] loop7: detected capacity change from 0 to 512 [ 470.039074][T26803] sctp: [Deprecated]: syz.6.7023 (pid 26803) Use of int in max_burst socket option. [ 470.039074][T26803] Use struct sctp_assoc_value instead [ 470.065098][T26801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.101704][T26801] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.207717][T25323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.237903][T26811] loop8: detected capacity change from 0 to 1024 [ 470.244273][T26813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7028'. [ 470.255743][T26811] EXT4-fs: Ignoring removed orlov option [ 470.266356][ T28] audit: type=1400 audit(1777832521.541:4663): avc: denied { connect } for pid=26814 comm="syz.7.7026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 470.315528][T26811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.333194][T26813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7028'. [ 470.354355][ T28] audit: type=1400 audit(1777832521.621:4664): avc: denied { mounton } for pid=26810 comm="syz.8.7027" path="/597/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.394262][T26811] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.556506][T26838] netlink: 'syz.6.7035': attribute type 4 has an invalid length. [ 470.578128][T26838] netlink: 'syz.6.7035': attribute type 4 has an invalid length. [ 470.599734][ T5601] lo speed is unknown, defaulting to 1000 [ 470.605704][ T5601] lyz2: Port: 1 Link ACTIVE [ 470.620452][ T5601] lo speed is unknown, defaulting to 1000 [ 470.666406][T26847] tipc: Failed to remove unknown binding: 66,1,1/0:43120986/43120988 [ 470.680331][T26845] loop0: detected capacity change from 0 to 512 [ 470.692540][T26845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 470.711989][T26845] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 470.722681][T26845] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 470.733538][T26845] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7039: Failed to acquire dquot type 1 [ 470.739050][ T28] audit: type=1400 audit(1777832522.001:4665): avc: denied { mount } for pid=26852 comm="syz.1.7042" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 470.745368][T26845] loop0: lost filesystem error report for type 5 error -117 [ 470.767371][T26845] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 470.774828][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 470.774846][ C0] EXT4-fs (loop0): last error at time 1777832522: ext4_acquire_dquot:7034 [ 470.800671][T26845] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 470.810669][T26845] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7039: Failed to acquire dquot type 1 [ 470.821943][T26845] loop0: lost filesystem error report for type 5 error -117 [ 470.822640][T26845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7039: bg 0: block 248: padding at end of block bitmap is not set [ 470.844505][T26845] loop0: lost filesystem error report for type 5 error -117 [ 470.845891][T26845] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 470.862890][T26845] loop0: lost filesystem error report for type 5 error -117 [ 470.864362][T26845] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7039: Failed to acquire dquot type 1 [ 470.884158][T26845] loop0: lost filesystem error report for type 5 error -117 [ 470.885625][T26845] EXT4-fs (loop0): 1 orphan inode deleted [ 470.899916][T26845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.975502][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.025220][T26863] netlink: 'syz.1.7047': attribute type 4 has an invalid length. [ 471.038911][T26863] netlink: 'syz.1.7047': attribute type 4 has an invalid length. [ 471.081908][T21563] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.092424][T21563] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.103954][T21563] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.114251][T21563] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.151627][T21563] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.168324][T21563] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.197026][T21563] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.213521][T21563] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.322140][T26871] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7049'. [ 471.353163][T26871] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7049'. [ 471.364994][T26873] loop7: detected capacity change from 0 to 512 [ 471.375230][T26873] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 471.387805][T26873] EXT4-fs warning (device loop7): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 471.480871][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7053'. [ 471.489895][T26846] tipc: Failed to remove unknown binding: 66,1,1/0:43120986/43120988 [ 471.505599][T26846] tipc: Failed to remove unknown binding: 66,1,1/0:43120986/43120988 [ 471.540776][T26879] ip6erspan0: entered promiscuous mode [ 471.746383][T26891] netlink: 'syz.0.7059': attribute type 4 has an invalid length. [ 471.779013][T26891] netlink: 'syz.0.7059': attribute type 4 has an invalid length. [ 471.996317][T26899] sit0: entered allmulticast mode [ 472.007273][T26900] sit0: entered promiscuous mode [ 472.064917][T26902] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.104551][T26902] ext4 filesystem being mounted at /603/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.128028][T26910] tipc: Failed to remove unknown binding: 66,1,1/0:3911030015/3911030017 [ 472.205433][T26915] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7068: iget: bad extra_isize 50264 (inode size 256) [ 472.233806][T26915] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 472.234093][T26915] EXT4-fs (loop0): Remounting filesystem read-only [ 472.243282][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 472.243302][ C0] EXT4-fs (loop0): initial error at time 1777832523: ext4_orphan_get:1397: inode 15 [ 472.243340][ C0] EXT4-fs (loop0): last error at time 1777832523: ext4_orphan_get:1397: inode 15 [ 472.280162][T26915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.307840][T26915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7068'. [ 472.429956][T18248] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.442930][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.832823][T26944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7080'. [ 472.888094][T26946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7082'. [ 472.960906][T26909] tipc: Failed to remove unknown binding: 66,1,1/0:3911030015/3911030017 [ 472.971035][T26909] tipc: Failed to remove unknown binding: 66,1,1/0:3911030015/3911030017 [ 473.011226][T26952] netlink: 'syz.6.7093': attribute type 1 has an invalid length. [ 473.039884][T26952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.058985][T26952] bond3: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 473.144628][T21574] Bluetooth: hci0: Frame reassembly failed (-84) [ 473.345411][T21555] Bluetooth: hci1: Frame reassembly failed (-84) [ 473.738008][T26972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7089'. [ 474.484636][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7112'. [ 474.497562][T27006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7112'. [ 474.546963][T27010] lo speed is unknown, defaulting to 1000 [ 475.127039][T27028] lo speed is unknown, defaulting to 1000 [ 475.159449][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 475.352142][ T6549] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 475.369245][ T6549] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.399433][T26970] Bluetooth: hci1: command 0x1003 tx timeout [ 475.399472][T23633] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 475.461143][T27043] sit0: entered allmulticast mode [ 475.492298][T27043] sit0: entered promiscuous mode [ 475.644886][T27048] set_capacity_and_notify: 3 callbacks suppressed [ 475.644958][T27048] loop0: detected capacity change from 0 to 512 [ 475.663066][T27051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.672582][T27051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.681432][T27048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.696186][T27051] bond1: entered promiscuous mode [ 475.705453][T27048] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.718747][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 475.718764][ T28] audit: type=1400 audit(1777832526.981:4678): avc: denied { write } for pid=27047 comm="syz.0.7118" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.746836][ T28] audit: type=1400 audit(1777832526.981:4679): avc: denied { write } for pid=27047 comm="syz.0.7118" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.768828][ T28] audit: type=1400 audit(1777832526.981:4680): avc: denied { write } for pid=27047 comm="syz.0.7118" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.791062][ T28] audit: type=1400 audit(1777832527.001:4681): avc: denied { mounton } for pid=27047 comm="syz.0.7118" path="/230/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 475.814173][T27048] loop0: detected capacity change from 512 to 0 [ 475.875892][T21563] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:5008: inode #18: block 35: comm kworker/u8:46: unable to read itable block [ 475.893843][T21563] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 475.902415][T21563] EXT4-fs (loop0): I/O error while writing superblock [ 475.911476][T23864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.932476][T23864] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 475.950883][T23864] EXT4-fs (loop0): I/O error while writing superblock [ 475.960273][T27052] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 475.976456][T23864] bond0: (slave syz_tun): Releasing backup interface [ 476.070941][T21563] bridge_slave_1: left allmulticast mode [ 476.088657][T21563] bridge_slave_1: left promiscuous mode [ 476.103359][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.116150][T21563] bridge_slave_0: left allmulticast mode [ 476.130385][T21563] bridge_slave_0: left promiscuous mode [ 476.142428][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.268734][T21555] ================================================================== [ 476.276975][T21555] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 476.285263][T21555] [ 476.287621][T21555] write to 0xffff88810d27bce0 of 44 bytes by task 27091 on cpu 1: [ 476.295745][T21555] tty_set_termios+0xc0/0x910 [ 476.300474][T21555] set_termios+0x373/0x4f0 [ 476.304940][T21555] tty_mode_ioctl+0x37f/0x5b0 [ 476.309684][T21555] n_tty_ioctl_helper+0x87/0x370 [ 476.314752][T21555] n_tty_ioctl+0x101/0x220 [ 476.319254][T21555] tty_ioctl+0x83e/0xb80 [ 476.323573][T21555] __se_sys_ioctl+0xce/0x140 [ 476.328316][T21555] __x64_sys_ioctl+0x43/0x50 [ 476.332949][T21555] x64_sys_call+0x1563/0x3020 [ 476.337659][T21555] do_syscall_64+0x12c/0x3b0 [ 476.342281][T21555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.348201][T21555] [ 476.350550][T21555] read to 0xffff88810d27bcf9 of 1 bytes by task 21555 on cpu 0: [ 476.358388][T21555] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 476.364220][T21555] tty_port_default_lookahead_buf+0x91/0xc0 [ 476.370150][T21555] flush_to_ldisc+0x288/0x340 [ 476.374862][T21555] process_scheduled_works+0x4f0/0x9c0 [ 476.380359][T21555] worker_thread+0x58a/0x780 [ 476.384989][T21555] kthread+0x22a/0x280 [ 476.389161][T21555] ret_from_fork+0x146/0x330 [ 476.393782][T21555] ret_from_fork_asm+0x1a/0x30 [ 476.398664][T21555] [ 476.401086][T21555] value changed: 0x11 -> 0xcd [ 476.405774][T21555] [ 476.408109][T21555] Reported by Kernel Concurrency Sanitizer on: [ 476.414292][T21555] CPU: 0 UID: 0 PID: 21555 Comm: kworker/u8:38 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.425514][T21555] Tainted: [W]=WARN [ 476.429331][T21555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.439425][T21555] Workqueue: events_unbound flush_to_ldisc [ 476.445344][T21555] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.453682][ T28] audit: type=1400 audit(1777832527.591:4682): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[478]" dev="pipefs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 476.592298][T21563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.615932][T21563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.656375][T21563] bond0 (unregistering): Released all slaves [ 476.691600][T21563] bond1 (unregistering): (slave veth7): Releasing active interface [ 476.709523][T21563] batadv1: entered promiscuous mode [ 476.743763][T21563] bond1 (unregistering): (slave batadv1): Releasing active interface [ 476.753279][T21563] bond1 (unregistering): Released all slaves [ 476.764074][T21563] bond2 (unregistering): Released all slaves [ 476.887419][T21563] hsr_slave_0: left promiscuous mode [ 476.896703][T21563] hsr_slave_1: left promiscuous mode [ 476.911739][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.930594][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.051380][T21563] team0 (unregistering): Port device team_slave_1 removed [ 477.072531][T21563] team0 (unregistering): Port device team_slave_0 removed [ 477.391203][T27101] bond1: (slave syz_tun): Removing an active aggregator [ 477.398521][T27101] bond1: (slave syz_tun): Releasing backup interface [ 477.462683][T21563] IPVS: stop unused estimator thread 0... [ 477.923651][T21563] bridge_slave_1: left allmulticast mode [ 477.929492][T21563] bridge_slave_1: left promiscuous mode [ 477.935265][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.943261][T21563] bridge_slave_0: left allmulticast mode [ 477.948958][T21563] bridge_slave_0: left promiscuous mode [ 477.954738][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.965450][T21563] bridge_slave_1: left allmulticast mode [ 477.971292][T21563] bridge_slave_1: left promiscuous mode [ 477.977559][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.985270][T21563] bridge_slave_0: left allmulticast mode [ 477.990993][T21563] bridge_slave_0: left promiscuous mode [ 477.996662][T21563] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.201525][T21563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.211318][T21563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.220525][T21563] bond0 (unregistering): Released all slaves [ 478.228220][T21563] bond1 (unregistering): Released all slaves [ 478.237775][T21563] bond2 (unregistering): (slave veth3): Releasing active interface [ 478.245810][T21563] batadv1: entered promiscuous mode [ 478.252132][T21563] bond2 (unregistering): (slave batadv1): Releasing active interface [ 478.261108][T21563] bond2 (unregistering): Released all slaves [ 478.270656][T21563] bond3 (unregistering): (slave veth1_to_team): Releasing backup interface [ 478.280455][T21563] bond3 (unregistering): Released all slaves [ 478.291655][T21563] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 478.328189][T21563] bond1 (unregistering): (slave geneve2): Releasing active interface [ 478.632621][T21563]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.641482][T21563]  (unregistering): Released all slaves [ 478.649017][T21563] bond1 (unregistering): Released all slaves [ 478.658161][T21563] bond2 (unregistering): Released all slaves [ 478.666993][T21563] bond3 (unregistering): Released all slaves [ 478.676468][T21563] bond0 (unregistering): Released all slaves [ 478.686324][T21563] bond4 (unregistering): (slave veth7): Releasing active interface [ 478.695598][T21563] bond4 (unregistering): (slave batadv1): Releasing active interface [ 478.704683][T21563] bond4 (unregistering): Released all slaves [ 478.713502][T21563] bond5 (unregistering): Released all slaves [ 478.808941][ T28] audit: type=1400 audit(1777832530.071:4683): avc: denied { write } for pid=27106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.844367][T21563] hsr_slave_0: left promiscuous mode [ 478.850261][T21563] hsr_slave_1: left promiscuous mode [ 478.856127][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.863958][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.868509][ T28] audit: type=1400 audit(1777832530.141:4684): avc: denied { write } for pid=27117 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.894297][T21563] hsr_slave_0: left promiscuous mode [ 478.900554][T21563] hsr_slave_1: left promiscuous mode [ 478.906276][T21563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.914734][T21563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.955226][T21563] team0 (unregistering): Port device team_slave_1 removed [ 478.988596][T21568] smc: removing ib device lyz2 [ 479.014968][T21563] pim6reg (unregistering): left allmulticast mode [ 479.060272][T21563] team0 (unregistering): Port device team_slave_1 removed [ 479.116401][ T3398] lo speed is unknown, defaulting to 1000 [ 479.117832][ T3020] 8021q: adding VLAN 0 to HW filter on device eth29 [ 479.122231][ T3398] lyz2: Port: 1 Link DOWN [ 479.231297][ T28] audit: type=1400 audit(1777832530.501:4685): avc: denied { write } for pid=27120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.272981][ T28] audit: type=1400 audit(1777832530.541:4686): avc: denied { write } for pid=27131 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.306802][ T3020] 8021q: adding VLAN 0 to HW filter on device eth30 [ 479.391619][ T28] audit: type=1400 audit(1777832530.661:4687): avc: denied { write } for pid=27134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.445428][ T3020] 8021q: adding VLAN 0 to HW filter on device eth31 [ 479.561332][ T3020] 8021q: adding VLAN 0 to HW filter on device eth32 [ 479.655766][T21563] IPVS: stop unused estimator thread 0... [ 479.661913][T21563] IPVS: stop unused estimator thread 0...