last executing test programs: 7m26.85590015s ago: executing program 32 (id=87): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r0, &(0x7f0000001a80)=""/4043, 0xfcb, 0x22, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) 7m26.585771299s ago: executing program 33 (id=91): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x7f) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) fcntl$getownex(r1, 0x10, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x9, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1}}, 0x40) 7m7.193287838s ago: executing program 34 (id=542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 6m53.183319925s ago: executing program 35 (id=852): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000003c0), 0x0}, 0x20) 6m29.26976595s ago: executing program 36 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 6m23.307853012s ago: executing program 37 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 6m16.937986002s ago: executing program 38 (id=1536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 6m16.874422566s ago: executing program 39 (id=1539): r0 = semget$private(0x0, 0x6, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) 6m2.415047763s ago: executing program 40 (id=1842): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x2, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10000, 0x0) 5m44.215075422s ago: executing program 41 (id=2138): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x2810016, &(0x7f0000000040)=ANY=[], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 5m40.24566634s ago: executing program 42 (id=1969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$binfmt_misc(r1, &(0x7f00000002c0)="0f70cf", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5m37.160051869s ago: executing program 43 (id=2205): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 5m31.342959131s ago: executing program 44 (id=2272): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(r0, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0x7}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) 5m27.999006878s ago: executing program 45 (id=2306): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 5m16.953331293s ago: executing program 46 (id=2497): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000280)="5338a3848b25", 0x6}, {&(0x7f00000002c0)="4668fa2931a41ca7f9ba25b697a21160", 0x10}, {0x0}, {0x0}], 0x4}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) 4m57.188699288s ago: executing program 47 (id=2909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff8, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) shutdown(r0, 0x1) 4m50.851110747s ago: executing program 48 (id=3045): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m40.186301876s ago: executing program 49 (id=3228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r2, 0x0, &(0x7f0000000080)) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x2, 0x0, 0x2f, r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @private=0xa010101}, 0x7ffffffe}}, 0x2e) 4m30.307453794s ago: executing program 50 (id=3406): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 3m49.65461175s ago: executing program 51 (id=4230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {0x0, 0xfff1}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 3m35.320521838s ago: executing program 52 (id=4486): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmmsg$unix(r0, &(0x7f0000003740)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)='S', 0x1}], 0x1, 0x0, 0x0, 0x40408d0}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x4000000) 3m17.224170889s ago: executing program 53 (id=4782): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 2m59.851985413s ago: executing program 54 (id=5052): r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 2m57.856053047s ago: executing program 55 (id=5085): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) fcntl$getflags(r0, 0x401) 2m54.670841483s ago: executing program 56 (id=5141): socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000002ac0)="09adda0000006dce87b100568f51", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m47.917725439s ago: executing program 9 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c000980080001400000008114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x809, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x0, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x4000000020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m47.791340627s ago: executing program 9 (id=5280): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938", 0xc2}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff000001"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 2m47.407245994s ago: executing program 9 (id=5286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x22020600) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x33, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) 2m47.383565085s ago: executing program 9 (id=5287): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) 2m47.192026078s ago: executing program 9 (id=5290): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) 2m46.604195918s ago: executing program 9 (id=5298): socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init() r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.56416282s ago: executing program 57 (id=5298): socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init() r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.844083084s ago: executing program 2 (id=5463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40010, 0x0, 0x0) 2m34.990968412s ago: executing program 2 (id=5480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2m34.041310206s ago: executing program 2 (id=5500): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={&(0x7f0000000280)="2929797e5f60036a9e8de699523a680dfc0400e1e5c588bcc62997877894131d1b1f9e670ff7d44ecdc7d0a7ac55155fa0ca37938e9fce70ff25437a88c5e72c09bd24", 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) 2m34.021969657s ago: executing program 2 (id=5501): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2m33.946913312s ago: executing program 2 (id=5504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x3, r2, 0x1, 0x7f}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2m33.606524235s ago: executing program 2 (id=5506): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xffffffff, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x18, "00000000000700000000fffe00"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x401, 0x8, 0x7fffffff, 0x6, 0x7, "a92d4729f528bc4c22ab5bed9c4edc9d82c12c", 0x9, 0x9}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 2m33.597568576s ago: executing program 58 (id=5506): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xffffffff, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x18, "00000000000700000000fffe00"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x401, 0x8, 0x7fffffff, 0x6, 0x7, "a92d4729f528bc4c22ab5bed9c4edc9d82c12c", 0x9, 0x9}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 2m8.818162739s ago: executing program 6 (id=5894): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m8.790350531s ago: executing program 6 (id=5896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.591659765s ago: executing program 6 (id=5901): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001040)=""/252, 0xfc, 0x10160, 0x0, 0x0) 2m8.492201192s ago: executing program 6 (id=5904): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2m8.129615676s ago: executing program 6 (id=5914): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m7.47922908s ago: executing program 6 (id=5922): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m7.440717133s ago: executing program 59 (id=5922): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m44.577960976s ago: executing program 8 (id=6362): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x14, r2, 0x4196ccce67868bab, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x20040890}, 0x4044) 1m44.394238229s ago: executing program 8 (id=6368): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30) 1m44.288535086s ago: executing program 8 (id=6369): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd13, 0x4, &(0x7f0000000380)) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x20) mount$cgroup2(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10010, &(0x7f0000000100)={[{@favordynmods}, {@memory_hugetlb_accounting}, {@pids_localevents}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)) getgid() 1m44.286055296s ago: executing program 8 (id=6372): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@session={'session', 0x3d, 0x32}}, {@mode}, {@uid}, {@check_strict}, {@cruft}, {@mode={'mode', 0x3d, 0x483}}, {@map_normal}, {@gid}]}, 0x0, 0x567, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 1m44.097196219s ago: executing program 8 (id=6377): unshare(0x600) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 1m43.555814776s ago: executing program 8 (id=6390): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.527445868s ago: executing program 60 (id=6390): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.730197519s ago: executing program 0 (id=7374): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x82c1336) 40.683116342s ago: executing program 0 (id=7375): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 40.469282106s ago: executing program 0 (id=7380): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 40.077722713s ago: executing program 0 (id=7388): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x181000, 0x0) 39.184920413s ago: executing program 0 (id=7399): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 38.663337319s ago: executing program 0 (id=7414): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00o\x00'], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 38.592549913s ago: executing program 61 (id=7414): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00o\x00'], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 2.783615252s ago: executing program 3 (id=8084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x8, 0x4) 2.109849077s ago: executing program 1 (id=8096): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) write$cgroup_pressure(r1, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r4, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.011758174s ago: executing program 7 (id=8098): r0 = socket(0x40000000015, 0x5, 0x0) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0xfffffffe) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) 1.986729905s ago: executing program 7 (id=8099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.914183731s ago: executing program 3 (id=8101): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.912240461s ago: executing program 1 (id=8103): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) ppoll(&(0x7f0000000140)=[{r0, 0x31}], 0x1, 0x0, 0x0, 0x0) 1.875084353s ago: executing program 3 (id=8104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.797424108s ago: executing program 3 (id=8105): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) 1.790702799s ago: executing program 7 (id=8107): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1.686619776s ago: executing program 3 (id=8108): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r0) 1.251638916s ago: executing program 4 (id=8119): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f00000007c0)={[{@errors_continue}, {@sysvgroups}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x542, &(0x7f0000000180)="$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") sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)=ANY=[@ANYBLOB="48000000100039042abd70000300000000000000", @ANYRES32=r2, @ANYBLOB="0118020003910000280012800b00010065727370616e000018000280040012000500130000000000080007007f0000016cc35d673d4de59baab9bb8d88a7b090e00700d5af43d5a28404db69edacd789"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x24) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.092105966s ago: executing program 4 (id=8123): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$bt_hci(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003880), 0x80000, 0x0) 1.042319439s ago: executing program 1 (id=8124): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x1) tee(r1, r3, 0x1fc, 0x0) 795.987286ms ago: executing program 7 (id=8127): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffff30) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 790.200236ms ago: executing program 4 (id=8128): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 789.843156ms ago: executing program 3 (id=8129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_usb_connect(0x3, 0x62, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 705.730782ms ago: executing program 7 (id=8130): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 644.220716ms ago: executing program 7 (id=8131): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) creat(0x0, 0x13) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r3, 0x7437, 0xa526, 0x41, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 447.3959ms ago: executing program 4 (id=8133): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x100000000000000) splice(r1, 0x0, r4, 0x0, 0x100035ab, 0x4) 388.085413ms ago: executing program 5 (id=8134): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 325.526968ms ago: executing program 5 (id=8135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 263.163232ms ago: executing program 5 (id=8136): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r1, 0x5) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r0, 0x5) 250.420133ms ago: executing program 4 (id=8137): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) unlink(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000003c0)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)=@random={'trusted.', '-\x00'}) 198.790106ms ago: executing program 5 (id=8138): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 170.303268ms ago: executing program 1 (id=8139): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}}) 169.878458ms ago: executing program 5 (id=8140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 128.719451ms ago: executing program 4 (id=8141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 128.414521ms ago: executing program 1 (id=8142): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) pselect6(0x40, &(0x7f0000000080)={0xa, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0x9, 0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0) 85.634174ms ago: executing program 1 (id=8143): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x1, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x8, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0xc5c, 0xffffffff]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) socket$caif_stream(0x25, 0x1, 0x1) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 0s ago: executing program 5 (id=8144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): syzkaller0: entered allmulticast mode [ 389.526104][T28487] tipc: Resetting bearer [ 389.574818][T28486] tipc: Resetting bearer [ 389.623134][T28486] tipc: Disabling bearer [ 389.693478][T28511] loop3: detected capacity change from 0 to 1024 [ 389.700589][T28511] EXT4-fs: Ignoring removed orlov option [ 389.716558][T28511] EXT4-fs: Ignoring removed nobh option [ 390.012382][T28511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.469095][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.707067][T28533] loop5: detected capacity change from 0 to 512 [ 390.740815][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6633'. [ 390.744942][T28533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.813511][T28533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.843367][T28533] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.955754][T28544] SELinux: failed to load policy [ 391.032528][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.898425][T28623] loop3: detected capacity change from 0 to 512 [ 391.907169][T28623] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.935940][T28623] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 391.961518][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 391.967985][ C0] EXT4-fs (loop3): initial error at time 2000001046: ext4_mb_generate_buddy:1317 [ 391.977129][ C0] EXT4-fs (loop3): last error at time 2000001046: ext4_mb_generate_buddy:1317 [ 392.019666][T28623] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.6655: Failed to acquire dquot type 1 [ 392.031656][T28623] loop3: lost filesystem error report for type 5 error -28 [ 392.049439][T28623] EXT4-fs (loop3): 1 truncate cleaned up [ 392.063766][T28623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.136564][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.723465][T28643] netlink: 'syz.5.6661': attribute type 1 has an invalid length. [ 392.785067][T28643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.818436][T28643] bond2: (slave veth7): Enslaving as an active interface with a down link [ 392.841369][T28643] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.850867][T28643] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 393.064652][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 393.380281][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 393.380300][ T28] audit: type=1400 audit(2000001047.844:3645): avc: denied { setopt } for pid=28660 comm="syz.0.6666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.719748][ T28] audit: type=1326 audit(2000001048.184:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.7.6676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0d67c819 code=0x0 [ 393.760307][T28683] netlink: 'syz.0.6677': attribute type 1 has an invalid length. [ 393.769710][ T28] audit: type=1400 audit(2000001048.224:3647): avc: denied { mount } for pid=28684 comm="syz.1.6678" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 393.798392][T28683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.994861][T28692] loop5: detected capacity change from 0 to 8192 [ 394.032756][ T5770] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 394.040753][ T5770] loop5: partition table partially beyond EOD, truncated [ 394.067443][ T5770] loop5: p1 start 100663296 is beyond EOD, truncated [ 394.074934][ T5770] loop5: p2 size 134217732 extends beyond EOD, truncated [ 394.098067][ T5770] loop5: p4 size 14876672 extends beyond EOD, truncated [ 394.117223][ T5770] loop5: p5 size 134217732 extends beyond EOD, truncated [ 394.129225][ T5770] loop5: p6 size 14876672 extends beyond EOD, truncated [ 394.140839][T28692] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 394.147052][T28692] loop5: partition table partially beyond EOD, truncated [ 394.155646][T28692] loop5: p1 start 100663296 is beyond EOD, truncated [ 394.163508][T28692] loop5: p2 size 134217732 extends beyond EOD, truncated [ 394.173911][T28692] loop5: p4 size 14876672 extends beyond EOD, truncated [ 394.187508][T28692] loop5: p5 size 134217732 extends beyond EOD, truncated [ 394.197625][T28692] loop5: p6 size 14876672 extends beyond EOD, truncated [ 394.228730][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6690'. [ 394.246935][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6690'. [ 394.329757][ T28] audit: type=1400 audit(2000001048.794:3648): avc: denied { read } for pid=28722 comm="syz.5.6692" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.358970][T28725] netlink: 1472 bytes leftover after parsing attributes in process `syz.5.6693'. [ 394.371226][ T28] audit: type=1400 audit(2000001048.794:3649): avc: denied { open } for pid=28722 comm="syz.5.6692" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.378707][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 394.396537][ T28] audit: type=1400 audit(2000001048.794:3650): avc: denied { ioctl } for pid=28722 comm="syz.5.6692" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.428653][T28725] netlink: 1472 bytes leftover after parsing attributes in process `syz.5.6693'. [ 394.439749][ T23] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 394.441652][ T28] audit: type=1400 audit(2000001048.834:3651): avc: denied { read write } for pid=28720 comm="syz.0.6691" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 394.490070][ T28] audit: type=1400 audit(2000001048.834:3652): avc: denied { open } for pid=28720 comm="syz.0.6691" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 394.491941][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 394.496943][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 394.527607][T14306] udevd[14306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 394.542995][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 394.556542][ T3277] udevd[3277]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 394.632535][T28733] loop5: detected capacity change from 0 to 1024 [ 394.639544][T28733] EXT4-fs: Ignoring removed bh option [ 394.657769][ T28] audit: type=1400 audit(2000001049.064:3653): avc: denied { write } for pid=28729 comm="syz.7.6695" name="rt_cache" dev="proc" ino=4026534459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 394.684212][ T28] audit: type=1400 audit(2000001049.064:3654): avc: denied { accept } for pid=28729 comm="syz.7.6695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 394.706045][T28733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.723960][T28733] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20265 [ 394.736082][T28733] EXT4-fs error (device loop5): ext4_lookup:1777: inode #2: comm syz.5.6696: bad inode number: 12 [ 394.754572][T28733] EXT4-fs (loop5): Remounting filesystem read-only [ 394.802667][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.245190][T28772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6710'. [ 395.298912][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6714'. [ 395.316356][T28782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.336649][T28782] macsec1: entered promiscuous mode [ 395.342129][T28782] bond4: entered promiscuous mode [ 395.348455][T28782] bond4: left promiscuous mode [ 395.559798][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6718'. [ 395.732069][T28804] loop0: detected capacity change from 0 to 4096 [ 395.767245][T28804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.853539][T28804] EXT4-fs (loop0): shut down requested (0) [ 395.921417][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.224212][T28839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.245981][T28839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.303652][T28844] wireguard0: entered promiscuous mode [ 396.309435][T28844] wireguard0: entered allmulticast mode [ 396.321152][T28844] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6737'. [ 396.352907][T28852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6740'. [ 396.366885][T28852] bond5: entered promiscuous mode [ 396.372512][T28852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.385861][T28852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.393151][T28852] bond5: (slave sit4): The slave device specified does not support setting the MAC address [ 396.403963][T28855] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6739'. [ 396.404288][T28852] bond5: (slave sit4): Error -95 calling set_mac_address [ 396.416332][T28855] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6739'. [ 397.113659][T28885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.167630][T28885] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 397.221678][ T71] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.326851][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6757'. [ 397.352220][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6757'. [ 397.354142][T14978] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 397.764249][T28942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 397.776609][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6764'. [ 397.790554][T28942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 397.799852][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6764'. [ 397.842313][T14978] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.861363][T14986] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.874770][T14986] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.061718][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.339692][T28985] netlink: 'syz.7.6772': attribute type 1 has an invalid length. [ 398.403308][T28985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.525473][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 398.525490][ T28] audit: type=1400 audit(2000001052.994:3669): avc: denied { write } for pid=28993 comm="syz.3.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.589028][T28991] bond1: (slave veth3): Enslaving as an active interface with a down link [ 398.667996][T28991] bond1 (unregistering): (slave veth3): Releasing active interface [ 398.700792][T28991] bond1 (unregistering): Released all slaves [ 398.752692][T28985] bond0: (slave dummy0): Releasing backup interface [ 399.245959][T29036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.566115][T29060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.648516][T29060] macvlan2: entered promiscuous mode [ 399.657129][T29060] bond6: entered promiscuous mode [ 399.670131][T29060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.679615][T29060] bond6: left promiscuous mode [ 399.834767][ T3636] kernel write not supported for file bpf-prog (pid: 3636 comm: kworker/0:5) [ 400.002704][ T28] audit: type=1326 audit(2000001054.474:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29083 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d1c4c819 code=0x7ffc0000 [ 400.050568][ T28] audit: type=1326 audit(2000001054.474:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29083 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d1c4c819 code=0x7ffc0000 [ 400.081249][ T28] audit: type=1326 audit(2000001054.494:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29083 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd7d1c4c819 code=0x7ffc0000 [ 400.123395][ T28] audit: type=1326 audit(2000001054.494:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29083 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d1c4c819 code=0x7ffc0000 [ 400.217734][ T28] audit: type=1326 audit(2000001054.494:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29083 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d1c4c819 code=0x7ffc0000 [ 400.348028][ T28] audit: type=1326 audit(2000001054.804:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29077 comm="syz.1.6806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 400.371803][ T28] audit: type=1326 audit(2000001054.804:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29077 comm="syz.1.6806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 400.404966][ T28] audit: type=1326 audit(2000001054.804:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29077 comm="syz.1.6806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 400.430452][ T28] audit: type=1326 audit(2000001054.804:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29077 comm="syz.1.6806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 400.456511][T29097] netlink: 'syz.5.6814': attribute type 4 has an invalid length. [ 400.496793][T29103] loop5: detected capacity change from 0 to 512 [ 400.526796][T29103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.549920][T29103] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.574979][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.720326][T29157] lo: Caught tx_queue_len zero misconfig [ 401.756852][T29158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=29158 comm=syz.7.6836 [ 401.796302][T29160] team0 (unregistering): Port device team_slave_0 removed [ 401.809351][T29160] team0 (unregistering): Port device team_slave_1 removed [ 401.854036][T29170] __nla_validate_parse: 7 callbacks suppressed [ 401.854059][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6844'. [ 401.873933][T29170] ipvlan2: entered promiscuous mode [ 401.891768][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6844'. [ 402.442444][T29203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6858'. [ 402.563060][T29210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6861'. [ 402.607836][T29210] bond6: entered promiscuous mode [ 402.826704][T29222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6866'. [ 402.835727][T29222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6866'. [ 402.847288][T29224] dummy0: entered promiscuous mode [ 402.853925][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6867'. [ 402.984812][T29233] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6870'. [ 403.333800][T29239] netlink: 'syz.3.6874': attribute type 4 has an invalid length. [ 403.343711][T29241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6873'. [ 403.360947][T29239] netlink: 'syz.3.6874': attribute type 4 has an invalid length. [ 403.440793][T29251] netlink: 'syz.1.6879': attribute type 1 has an invalid length. [ 403.456715][T29251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.489602][T29251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.514427][T29251] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.527425][T29251] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 403.642282][T29260] netlink: 'syz.3.6882': attribute type 10 has an invalid length. [ 403.652014][T29262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6884'. [ 403.667618][T29260] netlink: 'syz.3.6882': attribute type 10 has an invalid length. [ 404.343643][T29304] loop5: detected capacity change from 0 to 512 [ 404.366725][T29304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 404.396235][T29304] EXT4-fs (loop5): 1 truncate cleaned up [ 404.425776][T29304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.443366][T29304] netlink: 'syz.5.6899': attribute type 2 has an invalid length. [ 404.982591][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.001036][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 405.001062][ T28] audit: type=1400 audit(2000001059.464:3737): avc: denied { ioctl } for pid=29325 comm="syz.1.6909" path="socket:[86962]" dev="sockfs" ino=86962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.336431][T29345] xt_hashlimit: size too large, truncated to 1048576 [ 405.962455][ T28] audit: type=1400 audit(2000001060.434:3738): avc: denied { watch watch_reads } for pid=29387 comm="syz.3.6932" path="/171/file1" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 406.021791][T29391] loop3: detected capacity change from 0 to 164 [ 406.044802][T29391] iso9660: Unknown parameter ':.:' [ 406.061317][T29399] bond3: entered promiscuous mode [ 406.442314][ T28] audit: type=1326 audit(2000001060.904:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29425 comm="syz.5.6949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x0 [ 406.453808][T29431] tipc: Started in network mode [ 406.470705][T29431] tipc: Node identity 5a7189a4b66e, cluster identity 4711 [ 406.478821][T29431] tipc: Enabled bearer , priority 0 [ 406.617817][T29431] syzkaller0: entered promiscuous mode [ 406.623728][T29431] syzkaller0: entered allmulticast mode [ 406.630937][T29431] tipc: Resetting bearer [ 406.682422][T29430] tipc: Resetting bearer [ 406.722167][T29430] tipc: Disabling bearer [ 406.890854][ T28] audit: type=1400 audit(2000001061.354:3740): avc: denied { relabelfrom } for pid=29453 comm="syz.3.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 406.922200][ T28] audit: type=1400 audit(2000001061.354:3741): avc: denied { relabelto } for pid=29453 comm="syz.3.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.228172][ T28] audit: type=1400 audit(2000001061.694:3742): avc: denied { bind } for pid=29464 comm="syz.0.6962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 407.261491][ T28] audit: type=1400 audit(2000001061.714:3743): avc: denied { listen } for pid=29464 comm="syz.0.6962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 407.771427][ T28] audit: type=1400 audit(2000001062.234:3744): avc: denied { getopt } for pid=29471 comm="syz.1.6975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.828142][ T28] audit: type=1400 audit(2000001062.294:3745): avc: denied { write } for pid=29471 comm="syz.1.6975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.922831][ T28] audit: type=1400 audit(2000001062.384:3746): avc: denied { read } for pid=29475 comm="syz.1.6977" path="socket:[88235]" dev="sockfs" ino=88235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.103847][T29487] __nla_validate_parse: 12 callbacks suppressed [ 408.103869][T29487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6969'. [ 408.283963][T29496] loop0: detected capacity change from 0 to 4096 [ 408.307429][T29496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.400967][T29494] loop5: detected capacity change from 0 to 128 [ 408.457891][T29494] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 408.472304][T29494] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 408.513572][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.565449][T29516] tipc: Enabled bearer , priority 0 [ 408.608857][T29516] syzkaller0: entered promiscuous mode [ 408.614420][T29516] syzkaller0: entered allmulticast mode [ 408.620895][T29516] tipc: Resetting bearer [ 408.655672][T29515] tipc: Resetting bearer [ 408.682115][T29515] tipc: Disabling bearer [ 408.704905][T29526] bridge9: entered promiscuous mode [ 408.710141][T29526] bridge9: entered allmulticast mode [ 408.723142][T29526] team0: Port device bridge9 added [ 408.736053][T29526] bridge0: port 1(team0) entered blocking state [ 408.742498][T29526] bridge0: port 1(team0) entered disabled state [ 408.760297][T29526] team0: entered allmulticast mode [ 408.767885][T29526] team0: entered promiscuous mode [ 409.002516][T29548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6994'. [ 409.018729][T29547] IPv6: sit2: Disabled Multicast RS [ 409.948380][T29584] loop0: detected capacity change from 0 to 1024 [ 409.972772][T29584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.595657][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 410.595672][ T28] audit: type=1400 audit(2000001065.064:3773): avc: denied { create } for pid=29602 comm="syz.1.7013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 410.697568][ T28] audit: type=1400 audit(2000001065.064:3774): avc: denied { sys_admin } for pid=29602 comm="syz.1.7013" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 410.789377][ T28] audit: type=1326 audit(2000001065.224:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 410.813410][ T28] audit: type=1326 audit(2000001065.224:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 410.848675][ T28] audit: type=1326 audit(2000001065.224:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 410.943437][ T28] audit: type=1326 audit(2000001065.224:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 410.967510][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.997058][ T28] audit: type=1326 audit(2000001065.224:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 411.040842][ T28] audit: type=1326 audit(2000001065.224:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 411.117593][ T28] audit: type=1326 audit(2000001065.224:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 411.169862][ T28] audit: type=1326 audit(2000001065.224:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29613 comm="syz.5.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 411.497000][T29640] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7026'. [ 412.088253][T29653] netlink: 'syz.1.7032': attribute type 1 has an invalid length. [ 412.116232][T29654] loop5: detected capacity change from 0 to 1024 [ 412.137506][T29653] 8021q: adding VLAN 0 to HW filter on device bond8 [ 412.191027][T29654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.605938][T29670] loop0: detected capacity change from 0 to 2048 [ 412.712209][T29670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.835792][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.853350][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7041'. [ 412.891651][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7041'. [ 412.976336][T29683] bridge3: entered promiscuous mode [ 413.011739][T29683] bridge3: entered allmulticast mode [ 413.018833][T29683] team0: Port device bridge3 added [ 413.032908][T29685] xt_CT: No such helper "snmp_trap" [ 413.068262][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.092614][T29683] bridge0: port 3(team0) entered blocking state [ 413.099904][T29685] xt_time: unknown flags 0xc [ 413.113322][T29683] bridge0: port 3(team0) entered disabled state [ 413.119926][T29685] loop3: detected capacity change from 0 to 512 [ 413.127460][T29683] team0: entered allmulticast mode [ 413.137155][T29685] EXT4-fs: Ignoring removed nobh option [ 413.143598][T29683] team_slave_0: entered allmulticast mode [ 413.150679][T29683] team_slave_1: entered allmulticast mode [ 413.159048][T29685] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.166200][T29685] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.7043: ea_inode file size=4294967295 entry size=6 [ 413.168704][T29683] team0: entered promiscuous mode [ 413.179930][T29685] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 413.197977][T29685] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.7043: corrupted inode contents [ 413.214110][T29685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.221488][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 413.237090][ C0] EXT4-fs (loop3): initial error at time 2000001067: ext4_do_update_inode:5602: inode 15 [ 413.246935][ C0] EXT4-fs (loop3): last error at time 2000001067: ext4_do_update_inode:5602: inode 15 [ 413.257131][T29683] team_slave_0: entered promiscuous mode [ 413.262985][T29683] team_slave_1: entered promiscuous mode [ 413.269145][T29683] bridge0: port 3(team0) entered blocking state [ 413.275544][T29683] bridge0: port 3(team0) entered forwarding state [ 413.285605][T29685] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.7043: mark_inode_dirty error [ 413.299706][T29685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.299965][T29685] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.7043: corrupted inode contents [ 413.322242][T29685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.322461][T29685] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.7043: mark_inode_dirty error [ 413.344066][T29685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.344227][T29685] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.7043: mark inode dirty (error -117) [ 413.367687][T29685] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.367905][T29685] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 413.386693][T29685] EXT4-fs (loop3): 1 orphan inode deleted [ 413.397789][T29685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 413.533683][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.913327][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7052'. [ 413.929676][T29711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.950318][T29711] macsec1: entered promiscuous mode [ 413.956756][T29711] bond4: entered promiscuous mode [ 413.963822][T29711] bond4: left promiscuous mode [ 414.176908][T29725] netlink: 'syz.1.7055': attribute type 1 has an invalid length. [ 414.194750][T29725] 8021q: adding VLAN 0 to HW filter on device bond9 [ 414.298119][T29725] bond9: (slave veth17): Enslaving as an active interface with a down link [ 414.337769][T29728] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 414.391362][T29728] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 414.611948][T29743] tipc: Started in network mode [ 414.617917][T29743] tipc: Node identity ac1414aa, cluster identity 4711 [ 414.636765][T29743] tipc: Enabled bearer , priority 10 [ 414.751824][T29752] geneve2: entered promiscuous mode [ 414.773998][ T6881] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.795179][ T6881] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.810879][ T6881] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.842796][ T6881] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.751503][ T3636] tipc: Node number set to 2886997162 [ 415.777176][T29777] loop0: detected capacity change from 0 to 2048 [ 415.797870][T29777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.826794][T29777] wireguard0: entered promiscuous mode [ 415.832416][T29777] wireguard0: entered allmulticast mode [ 415.897501][T29777] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7077'. [ 415.917656][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.226453][T29791] geneve2: entered promiscuous mode [ 416.239184][T14954] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 416.264489][T14954] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 416.283677][T14954] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 416.292185][T14954] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 416.370765][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 416.370784][ T28] audit: type=1400 audit(2000001070.834:3794): avc: denied { unmount } for pid=29796 comm="syz.1.7082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 416.713727][T29813] wireguard0: entered promiscuous mode [ 416.726445][T29813] wireguard0: entered allmulticast mode [ 416.767480][T29818] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.7090'. [ 416.791131][T29820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7091'. [ 416.853320][T29820] bond5: entered promiscuous mode [ 416.886714][T29820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.967116][T29820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.996884][T29820] bond5: (slave sit3): The slave device specified does not support setting the MAC address [ 417.019212][T29820] bond5: (slave sit3): Error -95 calling set_mac_address [ 417.026513][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7098'. [ 417.035995][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7098'. [ 417.553486][T29863] loop5: detected capacity change from 0 to 2048 [ 417.585058][T29863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.616858][T29863] wireguard0: entered promiscuous mode [ 417.622789][T29863] wireguard0: entered allmulticast mode [ 417.645499][T29863] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7105'. [ 417.696728][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.707243][T29869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7118'. [ 417.818271][T29877] bridge5: entered promiscuous mode [ 417.839483][T29877] bridge5: entered allmulticast mode [ 417.847202][T29877] team0: Port device bridge5 added [ 417.868875][T29877] bridge0: port 1(team0) entered blocking state [ 417.881612][T29877] bridge0: port 1(team0) entered disabled state [ 417.888176][T29877] team0: entered allmulticast mode [ 417.898089][T29877] team_slave_0: entered allmulticast mode [ 417.930683][T29877] team_slave_1: entered allmulticast mode [ 417.944841][T29877] team0: entered promiscuous mode [ 417.960071][T29877] team_slave_0: entered promiscuous mode [ 417.973391][T29877] team_slave_1: entered promiscuous mode [ 417.979958][T29877] bridge0: port 1(team0) entered blocking state [ 417.986272][T29877] bridge0: port 1(team0) entered forwarding state [ 418.021291][T29883] team0: left allmulticast mode [ 418.026545][T29883] team_slave_0: left allmulticast mode [ 418.034446][T29883] team_slave_1: left allmulticast mode [ 418.040000][T29883] team0: left promiscuous mode [ 418.064478][T29883] team_slave_0: left promiscuous mode [ 418.070028][T29883] team_slave_1: left promiscuous mode [ 418.075843][T29883] bridge0: port 3(team0) entered disabled state [ 418.105736][T29883] bridge_slave_0: left allmulticast mode [ 418.111526][T29883] bridge_slave_0: left promiscuous mode [ 418.117218][T29883] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.135496][T29883] bridge_slave_1: left allmulticast mode [ 418.141392][T29883] bridge_slave_1: left promiscuous mode [ 418.157335][T29883] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.167938][T29883] bond0: (slave bond_slave_0): Releasing backup interface [ 418.185897][T29883] bond0: (slave bond_slave_1): Releasing backup interface [ 418.212996][T29883] team0: Port device team_slave_0 removed [ 418.235058][T29883] team0: Port device team_slave_1 removed [ 418.257978][T29888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7112'. [ 418.261041][T29883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.281564][T29883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.290539][T29883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.310633][T29883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.346232][T29883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.402151][T29888] bond7: entered promiscuous mode [ 418.411826][T29888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 418.464221][T29888] 8021q: adding VLAN 0 to HW filter on device bond7 [ 418.479698][T29888] bond7: (slave sit2): The slave device specified does not support setting the MAC address [ 418.524690][T29888] bond7: (slave sit2): Error -95 calling set_mac_address [ 419.189948][T29920] netlink: 'syz.7.7123': attribute type 4 has an invalid length. [ 419.223932][T29920] netlink: 'syz.7.7123': attribute type 4 has an invalid length. [ 419.456627][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7130'. [ 419.467840][ T28] audit: type=1400 audit(2000001073.924:3795): avc: denied { nlmsg_read } for pid=29930 comm="syz.3.7130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.504842][T14954] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.521504][T14954] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.534421][T14954] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.557879][T29937] loop3: detected capacity change from 0 to 512 [ 419.561195][T14954] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.564795][T29937] ext4: Unknown parameter 'noacl' [ 419.586606][T14954] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.600343][T29938] loop0: detected capacity change from 0 to 1024 [ 419.645221][T29938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 419.660521][T14954] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.676822][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7130'. [ 419.686164][T29938] System zones: 0-1, 3-36 [ 419.701607][T14954] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.710596][T29938] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7128: bad orphan inode 134217728 [ 419.721326][T29938] loop0: lost filesystem error report for type 5 error -117 [ 419.721451][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 419.735160][ C0] EXT4-fs (loop0): initial error at time 2000001074: ext4_orphan_get:1423 [ 419.736623][T29892] syz.1.7126 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 419.743677][ C0] EXT4-fs (loop0): last error at time 2000001074: ext4_orphan_get:1423 [ 419.766405][T14954] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 419.766726][T29938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.816262][T29943] ip6gre1: entered promiscuous mode [ 419.826477][T29943] ip6gre1: entered allmulticast mode [ 419.829735][T29892] CPU: 1 UID: 0 PID: 29892 Comm: syz.1.7126 Tainted: G W syzkaller #0 PREEMPT(full) [ 419.829770][T29892] Tainted: [W]=WARN [ 419.829778][T29892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 419.829792][T29892] Call Trace: [ 419.829800][T29892] [ 419.829809][T29892] __dump_stack+0x1d/0x30 [ 419.829842][T29892] dump_stack_lvl+0x95/0xd0 [ 419.829929][T29892] dump_stack+0x15/0x1b [ 419.829959][T29892] dump_header+0x80/0x240 [ 419.829985][T29892] oom_kill_process+0x295/0x350 [ 419.830011][T29892] out_of_memory+0x97d/0xb80 [ 419.830072][T29892] try_charge_memcg+0x62e/0xa10 [ 419.830115][T29892] obj_cgroup_charge_pages+0x23/0xc0 [ 419.830188][T29892] __memcg_kmem_charge_page+0x9e/0x170 [ 419.830220][T29892] __alloc_frozen_pages_noprof+0x18a/0x360 [ 419.830255][T29892] alloc_pages_mpol+0xb3/0x260 [ 419.830302][T29892] alloc_pages_noprof+0x8f/0x140 [ 419.830334][T29892] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 419.830375][T29892] __kvmalloc_node_noprof+0x3d4/0x650 [ 419.830440][T29892] ? futex_hash_allocate+0x190/0x9d0 [ 419.830472][T29892] ? futex_hash_allocate+0x190/0x9d0 [ 419.830531][T29892] futex_hash_allocate+0x190/0x9d0 [ 419.830563][T29892] ? cap_task_prctl+0x13f/0x6e0 [ 419.830591][T29892] futex_hash_prctl+0xd8/0xf0 [ 419.830655][T29892] __se_sys_prctl+0xa3d/0x13f0 [ 419.830686][T29892] __x64_sys_prctl+0x67/0x80 [ 419.830714][T29892] x64_sys_call+0x2533/0x3020 [ 419.830744][T29892] do_syscall_64+0x12c/0x370 [ 419.830814][T29892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.830838][T29892] RIP: 0033:0x7fe6049bc819 [ 419.830934][T29892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.830959][T29892] RSP: 002b:00007fe60340f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 419.830980][T29892] RAX: ffffffffffffffda RBX: 00007fe604c35fa0 RCX: 00007fe6049bc819 [ 419.830996][T29892] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 419.831011][T29892] RBP: 00007fe604a52c91 R08: 0000000000000000 R09: 0000000000000000 [ 419.831045][T29892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.831059][T29892] R13: 00007fe604c36038 R14: 00007fe604c35fa0 R15: 00007fff07a9ce08 [ 419.831080][T29892] [ 419.843699][T29892] memory: usage 282236kB, limit 307200kB, failcnt 619 [ 420.098106][T29892] memory+swap: usage 256340kB, limit 9007199254740988kB, failcnt 0 [ 420.131928][T29892] kmem: usage 225096kB, limit 9007199254740988kB, failcnt 0 [ 420.139230][T29892] Memory cgroup stats for /syz1: [ 420.139457][T29892] cache 0 [ 420.165553][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.171485][T29892] rss 53248 [ 420.178227][T29892] shmem 0 [ 420.185219][T29892] mapped_file 0 [ 420.188688][T29892] dirty 0 [ 420.205058][T29892] writeback 0 [ 420.208356][T29892] workingset_refault_anon 7468 [ 420.220213][T29959] erspan0: left allmulticast mode [ 420.226179][T29959] erspan0: left promiscuous mode [ 420.231260][T29959] bridge0: port 1(erspan0) entered disabled state [ 420.251608][T29892] workingset_refault_file 1919 [ 420.256419][T29892] swap 643072 [ 420.259703][T29892] swapcached 57552896 [ 420.273920][T29892] pgpgin 273263 [ 420.278063][T29959] batman_adv: batadv0: Removing interface: dummy0 [ 420.289672][T29892] pgpgout 273248 [ 420.297841][T29892] pgfault 299554 [ 420.301404][T29892] pgmajfault 1077 [ 420.318622][T29959] bridge_slave_1: left allmulticast mode [ 420.327571][T29962] loop3: detected capacity change from 0 to 2048 [ 420.336583][ T28] audit: type=1400 audit(2000001074.804:3796): avc: denied { connect } for pid=29963 comm="syz.5.7139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.341459][T29892] inactive_anon 0 [ 420.359941][T29959] bridge_slave_1: left promiscuous mode [ 420.381031][T29959] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.388359][T29892] active_anon 53248 [ 420.395507][T29892] inactive_file 0 [ 420.401375][T29892] active_file 8192 [ 420.431506][T29892] unevictable 0 [ 420.434993][T29892] hierarchical_memory_limit 314572800 [ 420.440358][T29892] hierarchical_memsw_limit 9223372036854771712 [ 420.447477][T29959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.466858][T29892] total_cache 0 [ 420.470332][T29892] total_rss 53248 [ 420.475123][T29959] bond1: (slave gretap1): Releasing active interface [ 420.481465][T29892] total_shmem 0 [ 420.485629][T29892] total_mapped_file 0 [ 420.489686][T29892] total_dirty 0 [ 420.490073][T29959] bond0: (slave bridge6): Releasing backup interface [ 420.501801][T29959] bond4: (slave vxcan3): Releasing backup interface [ 420.508439][T29959] bond4: (slave vxcan5): making interface the new active one [ 420.511466][T29892] total_writeback 0 [ 420.521116][T29892] total_workingset_refault_anon 7468 [ 420.531457][T29892] total_workingset_refault_file 1919 [ 420.531837][T29959] bond4: (slave vxcan5): Releasing backup interface [ 420.536825][T29892] total_swap 643072 [ 420.536837][T29892] total_swapcached 57552896 [ 420.591469][T29892] total_pgpgin 273263 [ 420.601660][T29892] total_pgpgout 273248 [ 420.611460][T29892] total_pgfault 299554 [ 420.615544][T29892] total_pgmajfault 1077 [ 420.636602][T29892] total_inactive_anon 0 [ 420.642771][T29892] total_active_anon 53248 [ 420.647172][T29892] total_inactive_file 0 [ 420.659802][T29962] SELinux: failed to load policy [ 420.664892][T29892] total_active_file 8192 [ 420.669123][T29892] total_unevictable 0 [ 420.673199][T29892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7126,pid=29891,uid=0 [ 420.688080][T29892] Memory cgroup out of memory: Killed process 29892 (syz.1.7126) total-vm:96344kB, anon-rss:1272kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 420.716448][T29976] loop0: detected capacity change from 0 to 512 [ 420.724535][T29976] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.730997][T29976] ext3: Unknown parameter 'dont_hash' [ 420.763374][T29978] netlink: 'syz.5.7144': attribute type 4 has an invalid length. [ 420.772199][T29978] netlink: 'syz.5.7144': attribute type 4 has an invalid length. [ 420.841420][T29978] bridge0: port 1(team0) entered disabled state [ 420.901080][T29978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.913088][T29978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.984570][ T30] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.998235][ T30] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.015354][ T30] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 41312 - 0 [ 421.029024][ T30] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.048167][ T30] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.058811][ T30] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 41312 - 0 [ 421.085892][ T30] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.095012][ T30] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.121770][ T30] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 41312 - 0 [ 421.135942][ T30] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.147390][ T30] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.173639][ T30] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 41312 - 0 [ 421.652582][T30015] bridge_slave_0: left allmulticast mode [ 421.658317][T30015] bridge_slave_0: left promiscuous mode [ 421.665014][T30015] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.704802][T30015] bridge_slave_1: left allmulticast mode [ 421.712835][T30015] bridge_slave_1: left promiscuous mode [ 421.718577][T30015] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.730484][T30015] bond0: (slave bond_slave_0): Releasing backup interface [ 421.742326][T30015] bond0: (slave bond_slave_1): Releasing backup interface [ 421.756946][T30015] team0: Port device team_slave_0 removed [ 421.768327][T30015] team0: Port device team_slave_1 removed [ 421.776583][T30015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.784627][T30015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.796357][T30015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.804618][T30015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.819358][T30015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.843863][T30022] bridge0: port 1(team0) entered disabled state [ 421.852485][T30022] team0 (unregistering): left allmulticast mode [ 421.869120][T30022] team0 (unregistering): left promiscuous mode [ 421.885992][T30022] bridge0: port 1(team0) entered disabled state [ 421.902936][T30022] team0 (unregistering): Port device bridge9 removed [ 421.938282][T30026] netlink: 'syz.3.7159': attribute type 4 has an invalid length. [ 421.959850][T30026] netlink: 'syz.3.7159': attribute type 4 has an invalid length. [ 422.141415][ T28] audit: type=1326 audit(2000001076.604:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.165303][ T28] audit: type=1326 audit(2000001076.604:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.189883][ T28] audit: type=1326 audit(2000001076.614:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.217613][ T28] audit: type=1326 audit(2000001076.614:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.253497][T14954] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.262473][ T28] audit: type=1326 audit(2000001076.614:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.286726][T14954] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.295876][T14954] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.304969][ T28] audit: type=1326 audit(2000001076.614:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.332713][T14954] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.341984][T14954] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.375067][T30057] netlink: 'syz.7.7172': attribute type 1 has an invalid length. [ 422.383958][T14954] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.393268][ T28] audit: type=1326 audit(2000001076.614:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.393334][T14954] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.426056][ T28] audit: type=1326 audit(2000001076.614:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.430302][T14954] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.460522][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7172'. [ 422.478149][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7172'. [ 422.486397][T30057] bond1: entered promiscuous mode [ 422.492531][ T28] audit: type=1326 audit(2000001076.614:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.516487][ T28] audit: type=1326 audit(2000001076.614:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30047 comm="syz.1.7177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe6049bc819 code=0x7ffc0000 [ 422.541974][T30057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.555513][T30059] team0: left allmulticast mode [ 422.560492][T30059] team_slave_0: left allmulticast mode [ 422.566293][T30059] team_slave_1: left allmulticast mode [ 422.574643][T30059] team0: left promiscuous mode [ 422.579456][T30059] team_slave_0: left promiscuous mode [ 422.585630][T30059] team_slave_1: left promiscuous mode [ 422.591338][T30059] bridge0: port 1(team0) entered disabled state [ 422.599624][T30059] bond0: (slave bond_slave_0): Releasing backup interface [ 422.609349][T30059] bond0: (slave bond_slave_1): Releasing backup interface [ 422.619732][T30059] team0: Port device team_slave_0 removed [ 422.631276][T30059] team0: Port device team_slave_1 removed [ 422.637394][T30059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.645589][T30059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.654762][T30059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.678026][T30063] bond1: (slave bridge4): making interface the new active one [ 422.685783][T30063] bridge4: entered promiscuous mode [ 422.692827][T30063] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 422.738511][T30075] loop5: detected capacity change from 0 to 512 [ 423.436077][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7188'. [ 423.449061][T30100] ipvlan2: entered promiscuous mode [ 423.458073][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7188'. [ 423.673824][T30106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7192'. [ 423.686670][T30110] netlink: 'syz.1.7190': attribute type 10 has an invalid length. [ 423.719823][T30110] netlink: 'syz.1.7190': attribute type 10 has an invalid length. [ 425.235749][T30156] netlink: 'syz.0.7205': attribute type 10 has an invalid length. [ 425.250024][T30156] netlink: 'syz.0.7205': attribute type 10 has an invalid length. [ 425.298044][T30161] loop0: detected capacity change from 0 to 2048 [ 425.361721][T30161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.455079][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.665010][T30175] loop3: detected capacity change from 0 to 512 [ 425.673367][T30175] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.679885][T30175] ext3: Unknown parameter 'dont_hash' [ 426.328153][T30200] serio: Serial port ttyS3 [ 426.873034][T30233] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.886218][T30233] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 426.908818][T30233] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 426.948869][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7239'. [ 427.159522][T30246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7244'. [ 427.168916][T30246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7244'. [ 427.310481][T30252] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 427.331217][T30252] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 427.341542][T30252] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 427.352566][T30252] bond2: (slave vxcan3): making interface the new active one [ 427.360325][T30252] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 427.377767][T30252] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 427.389260][T30252] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 427.448603][T30257] loop5: detected capacity change from 0 to 164 [ 427.457298][T30257] iso9660: Unknown parameter ':.:' [ 427.544837][T30265] bond3: entered promiscuous mode [ 427.836746][T30282] hub 9-0:1.0: USB hub found [ 427.863139][T30282] hub 9-0:1.0: 8 ports detected [ 428.154138][T30294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=30294 comm=syz.0.7261 [ 428.429395][T30297] macsec2: entered promiscuous mode [ 428.435371][T30297] syz_tun: entered promiscuous mode [ 428.522766][T30301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7265'. [ 428.541215][T30301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7265'. [ 428.710561][T30306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'. [ 429.646155][T30340] macsec1: entered promiscuous mode [ 429.660961][T30340] syz_tun: entered promiscuous mode [ 429.803425][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7277'. [ 429.845595][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7277'. [ 430.128674][T30363] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7284'. [ 430.850093][T30379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7292'. [ 431.328221][T30388] loop5: detected capacity change from 0 to 2048 [ 431.359095][T30388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.440525][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.514332][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 431.514360][ T28] audit: type=1400 audit(2000001085.984:3892): avc: denied { map } for pid=30406 comm="syz.1.7304" path="socket:[90633]" dev="sockfs" ino=90633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 431.545602][ T28] audit: type=1400 audit(2000001085.984:3893): avc: denied { wake_alarm } for pid=30408 comm="syz.5.7305" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 432.296435][T30424] netlink: 'syz.0.7309': attribute type 4 has an invalid length. [ 432.313260][T30424] netlink: 'syz.0.7309': attribute type 4 has an invalid length. [ 432.349358][T30424] bond6: left promiscuous mode [ 432.377130][T30424] wireguard0: left promiscuous mode [ 432.382629][T30424] wireguard0: left allmulticast mode [ 432.389057][T30424] ipvlan2: left promiscuous mode [ 432.394977][T30424] syz_tun: left promiscuous mode [ 432.400057][T30424] macsec2: left promiscuous mode [ 432.980304][T30441] loop3: detected capacity change from 0 to 2048 [ 432.993900][T30443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7326'. [ 433.022892][T30443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7326'. [ 433.061932][T30441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.154289][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.196118][T30456] loop3: detected capacity change from 0 to 1024 [ 433.250696][T30456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 433.268131][T30456] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.333207][T30456] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7319: bg 0: block 112: padding at end of block bitmap is not set [ 433.349310][T30456] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 433.361762][T30456] EXT4-fs (loop3): This should not happen!! Data will be lost [ 433.361762][T30456] [ 433.371532][T30456] EXT4-fs (loop3): Total free blocks count 0 [ 433.377632][T30456] EXT4-fs (loop3): Free/Dirty block details [ 433.383570][T30456] EXT4-fs (loop3): free_blocks=0 [ 433.388992][T30456] EXT4-fs (loop3): dirty_blocks=80 [ 433.394230][T30456] EXT4-fs (loop3): Block reservation details [ 433.400277][T30456] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 433.410930][T30456] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 433.440329][T26802] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 433.679574][T30478] loop0: detected capacity change from 0 to 1024 [ 433.746204][T30480] loop5: detected capacity change from 0 to 128 [ 433.774056][T30478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.791593][T30478] ext4 filesystem being mounted at /896/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.808064][T30478] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm syz.0.7330: lblock 0 mapped to illegal pblock 0 (length 5) [ 433.891744][T30478] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 433.923214][T30478] EXT4-fs (loop0): This should not happen!! Data will be lost [ 433.923214][T30478] [ 433.934370][T30483] syz.5.7331: attempt to access beyond end of device [ 433.934370][T30483] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 433.948320][T30483] syz.5.7331: attempt to access beyond end of device [ 433.948320][T30483] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 433.963318][ T28] audit: type=1400 audit(2000001088.434:3894): avc: denied { map } for pid=30477 comm="syz.0.7330" path="/896/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 433.987182][T30483] syz.5.7331: attempt to access beyond end of device [ 433.987182][T30483] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 434.012833][T14684] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 434.025601][T30483] syz.5.7331: attempt to access beyond end of device [ 434.025601][T30483] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 434.040312][T14684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.073190][T30483] syz.5.7331: attempt to access beyond end of device [ 434.073190][T30483] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 434.088636][T30483] syz.5.7331: attempt to access beyond end of device [ 434.088636][T30483] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 434.103748][T30483] syz.5.7331: attempt to access beyond end of device [ 434.103748][T30483] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 434.103880][ T28] audit: type=1400 audit(2000001088.574:3895): avc: denied { setopt } for pid=30484 comm="syz.0.7332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.139785][T30483] syz.5.7331: attempt to access beyond end of device [ 434.139785][T30483] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 434.154697][T30483] syz.5.7331: attempt to access beyond end of device [ 434.154697][T30483] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 434.169673][T30483] syz.5.7331: attempt to access beyond end of device [ 434.169673][T30483] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 434.284784][T30487] loop5: detected capacity change from 0 to 2048 [ 434.314056][T30487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.326889][ T28] audit: type=1400 audit(2000001088.804:3896): avc: denied { read } for pid=30488 comm="syz.0.7335" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.410493][ T28] audit: type=1400 audit(2000001088.804:3897): avc: denied { open } for pid=30488 comm="syz.0.7335" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 434.616043][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.756364][ T28] audit: type=1400 audit(2000001089.224:3898): avc: denied { ioctl } for pid=30505 comm="syz.1.7341" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91405 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 434.855844][ T28] audit: type=1400 audit(2000001089.324:3899): avc: denied { setopt } for pid=30508 comm="syz.1.7342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 435.024730][T30512] netlink: 'syz.1.7343': attribute type 27 has an invalid length. [ 435.048710][T30512] bond3: left promiscuous mode [ 435.053823][T30512] bridge4: left promiscuous mode [ 435.061002][T30512] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 435.073654][T30512] macsec0: left promiscuous mode [ 435.080284][T30512] wireguard0: left promiscuous mode [ 435.085817][T30512] wireguard0: left allmulticast mode [ 435.092476][T30512] ipvlan2: left promiscuous mode [ 435.110331][T30512] bridge9: left promiscuous mode [ 435.117059][T30512] bridge9: left allmulticast mode [ 435.124421][T30512] geneve2: left promiscuous mode [ 435.142986][T30513] syz_tun: left promiscuous mode [ 435.150713][T30513] 8021q: adding VLAN 0 to HW filter on device .` [ 435.159427][T30513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.175488][T14954] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.184332][T14954] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.194052][T14954] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.202693][T14954] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.254294][T30519] loop0: detected capacity change from 0 to 128 [ 435.724230][T30539] netlink: 'syz.7.7352': attribute type 22 has an invalid length. [ 435.781713][T30539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7352'. [ 435.835661][T14977] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.844720][T30539] netlink: 'syz.7.7352': attribute type 22 has an invalid length. [ 435.862754][T14977] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.879164][T14977] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.889156][T30539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7352'. [ 435.899372][T14977] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.886639][T30559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7362'. [ 436.888639][T30561] netlink: 'syz.3.7372': attribute type 27 has an invalid length. [ 436.909448][T30561] ip6gre1: left promiscuous mode [ 436.914703][T30561] ip6gre1: left allmulticast mode [ 436.926921][T30561] bond3: left promiscuous mode [ 436.970648][T30561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.979074][T30561] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.989270][T30561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.020850][T30569] loop5: detected capacity change from 0 to 1024 [ 437.057690][T30569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.085112][T30569] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.168274][T30569] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.7377: lblock 0 mapped to illegal pblock 0 (length 5) [ 437.240972][T30569] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 437.291381][T30569] EXT4-fs (loop5): This should not happen!! Data will be lost [ 437.291381][T30569] [ 437.335286][T24405] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 437.340263][ T28] audit: type=1400 audit(2000001091.804:3900): avc: denied { listen } for pid=30585 comm="syz.3.7371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.387589][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.435866][T30595] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7376'. [ 437.459454][T30598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7375'. [ 437.553185][T30603] ipvlan2: left promiscuous mode [ 437.558815][T30603] bridge3: left promiscuous mode [ 437.561865][T30597] loop5: detected capacity change from 0 to 8192 [ 437.563930][T30603] bridge3: left allmulticast mode [ 437.575293][T30603] geneve2: left promiscuous mode [ 437.580304][T30603] wireguard0: left promiscuous mode [ 437.586250][T30603] wireguard0: left allmulticast mode [ 437.593356][T30603] bond1: left promiscuous mode [ 437.598250][T30603] bridge4: left promiscuous mode [ 437.603418][ T5770] loop5: p1 < > p2 < > p3 p4 < > [ 437.608532][ T5770] loop5: partition table partially beyond EOD, truncated [ 437.630822][T30603] syz_tun: left promiscuous mode [ 437.636194][T30603] macsec1: left promiscuous mode [ 437.651387][ T5770] loop5: p1 start 67108864 is beyond EOD, truncated [ 437.670530][ T5770] loop5: p3 start 100859904 is beyond EOD, truncated [ 437.696051][T30611] xt_hashlimit: size too large, truncated to 1048576 [ 437.705661][T30613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7383'. [ 437.706553][ T28] audit: type=1400 audit(2000001092.154:3901): avc: denied { name_bind } for pid=30593 comm="syz.5.7373" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 437.766330][T30606] netlink: 'syz.0.7380': attribute type 27 has an invalid length. [ 437.774333][T30597] loop5: p1 < > p2 < > p3 p4 < > [ 437.785022][T30597] loop5: partition table partially beyond EOD, truncated [ 437.785776][ T30] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.800155][T30597] loop5: p1 start 67108864 is beyond EOD, truncated [ 437.831998][T30597] loop5: p3 start 100859904 is beyond EOD, truncated [ 437.842517][T30606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.902939][ T30] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.941135][ T30] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.981681][T14977] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.006350][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 438.013001][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 438.058618][T30628] loop0: detected capacity change from 0 to 512 [ 438.073245][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7389'. [ 438.090465][T30628] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.7388: inode has both inline data and extents flags [ 438.096201][T30630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7389'. [ 438.104496][T30628] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 438.113095][T30628] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7388: couldn't read orphan inode 15 (err -117) [ 438.122408][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 438.122428][ C0] EXT4-fs (loop0): initial error at time 2000001092: ext4_orphan_get:1397: inode 15 [ 438.122453][ C0] EXT4-fs (loop0): last error at time 2000001092: ext4_orphan_get:1397: inode 15 [ 438.160123][T30628] loop0: lost filesystem error report for type 5 error -117 [ 438.171627][T30628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.279796][ T28] audit: type=1400 audit(2000001092.744:3902): avc: denied { mounton } for pid=30627 comm="syz.0.7388" path="/906/bus/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 438.322218][T30642] loop0: detected capacity change from 512 to 64 [ 438.329032][T30628] Buffer I/O error on dev loop0, logical block 37, lost sync page write [ 438.341223][T30628] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 37: comm syz.0.7388: IO error syncing itable block [ 438.342841][T30642] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.7388: Error while async write back metadata [ 438.371963][T30628] EXT4-fs (loop0): discard request in group:0 block:152 count:1 failed with -5 [ 438.381064][T30628] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: IO failure [ 438.389662][T30628] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 18: block 153:freeing already freed block (bit 152); block bitmap corrupt. [ 438.404312][T30628] EXT4-fs (loop0): pa ffff888107e26b60: logic 32, phys. 129, len 32 [ 438.412397][T30628] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 32, pa_free 31 [ 438.424695][T30642] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 438.456138][T30628] Buffer I/O error on dev loop0, logical block 37, lost sync page write [ 438.458497][T30653] netlink: 'syz.5.7394': attribute type 22 has an invalid length. [ 438.472681][T30642] EXT4-fs error (device loop0): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.0.7388: IO error syncing itable block [ 438.482395][T30628] EXT4-fs error (device loop0): ext4_free_data:978: inode #18: block 37: comm syz.0.7388: IO error syncing itable block [ 438.486963][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7394'. [ 438.508944][T30628] EXT4-fs error (device loop0): ext4_check_bdev_write_error:227: comm syz.0.7388: Error while async write back metadata [ 438.513111][T14963] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.529747][T14963] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.539500][T30653] netlink: 'syz.5.7394': attribute type 22 has an invalid length. [ 438.541326][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 41) [ 438.547493][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7394'. [ 438.559361][T30628] Buffer I/O error on device loop0, logical block 41 [ 438.568030][T30642] EXT4-fs error (device loop0) in add_dirent_to_buf:2155: IO failure [ 438.574091][T30628] Buffer I/O error on device loop0, logical block 42 [ 438.574107][T30628] Buffer I/O error on device loop0, logical block 43 [ 438.574172][T30628] Buffer I/O error on device loop0, logical block 44 [ 438.574834][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 49) [ 438.582755][T14963] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.623389][ T30] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.632620][ T28] audit: type=1400 audit(2000001093.084:3903): avc: denied { watch_reads } for pid=30657 comm="syz.7.7395" path="/163" dev="tmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 438.663276][T30628] Buffer I/O error on device loop0, logical block 49 [ 438.669992][T30628] Buffer I/O error on device loop0, logical block 50 [ 438.676743][T30628] Buffer I/O error on device loop0, logical block 51 [ 438.683423][T30628] Buffer I/O error on device loop0, logical block 52 [ 438.698142][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 57) [ 438.709440][T30628] Buffer I/O error on device loop0, logical block 57 [ 438.716114][T30628] Buffer I/O error on device loop0, logical block 58 [ 438.733407][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 65) [ 438.745026][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 45) [ 438.746992][ T28] audit: type=1400 audit(2000001093.214:3904): avc: denied { unlink } for pid=27710 comm="syz-executor" name="file0" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 438.756277][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 53) [ 438.798387][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 61) [ 438.852323][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 125) [ 438.863857][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 161) [ 438.876046][T30628] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 201) [ 439.071667][ T28] audit: type=1400 audit(2000001093.534:3905): avc: denied { watch watch_reads } for pid=30682 comm="syz.7.7405" path="/file0" dev="ramfs" ino=91603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 439.338212][T28775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.468502][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7415'. [ 439.528198][T30707] macvlan2: entered promiscuous mode [ 439.542942][T30707] macvlan2: entered allmulticast mode [ 439.581659][T30707] bond4: (slave macvlan2): Opening slave failed [ 439.958964][T30710] chnl_net:caif_netlink_parms(): no params data found [ 440.038959][T30710] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.051545][T30710] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.058814][T30710] bridge_slave_0: entered allmulticast mode [ 440.065478][T30710] bridge_slave_0: entered promiscuous mode [ 440.072543][T30710] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.079781][T30710] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.087291][T30710] bridge_slave_1: entered allmulticast mode [ 440.094179][T30710] bridge_slave_1: entered promiscuous mode [ 440.113058][T30710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.123875][T30710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.145500][T30710] team0: Port device team_slave_0 added [ 440.152310][T30710] team0: Port device team_slave_1 added [ 440.168265][T30710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.175275][T30710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.201338][T30710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.222651][T30710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.229565][T30739] loop5: detected capacity change from 0 to 512 [ 440.229738][T30710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.230238][T30740] uprobe: syz.7.7426:30740 failed to unregister, leaking uprobe [ 440.236058][T30710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.263163][T30710] hsr_slave_0: entered promiscuous mode [ 440.340140][T30739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.353044][T30739] ext4 filesystem being mounted at /395/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.353152][T30710] hsr_slave_1: entered promiscuous mode [ 440.379206][T30710] debugfs: 'hsr0' already exists in 'hsr' [ 440.413286][T30710] Cannot create hsr debugfs directory [ 440.442045][T30748] netlink: 'syz.7.7427': attribute type 4 has an invalid length. [ 440.456017][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.456339][T30748] netlink: 'syz.7.7427': attribute type 4 has an invalid length. [ 440.625263][T30758] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7431'. [ 440.639091][T30710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.666875][ T28] audit: type=1400 audit(2000001095.134:3906): avc: denied { mac_admin } for pid=30760 comm="syz.3.7432" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.667496][T30761] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 440.695593][T30710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.836142][ T28] audit: type=1400 audit(2000001095.304:3907): avc: denied { unlink } for pid=26802 comm="syz-executor" name="file0" dev="tmpfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 440.843448][T30765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7434'. [ 440.938305][T30765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7434'. [ 440.955558][T30710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.026858][T30710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.085692][T30710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.102601][T30710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.119604][T30710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.131334][T30710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.201317][T30710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.277262][T30710] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.290149][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.297236][T14977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.308752][T14963] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.315908][T14963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.385376][T30710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.640087][T30710] veth0_vlan: entered promiscuous mode [ 441.654943][T30710] veth1_vlan: entered promiscuous mode [ 441.691520][T30710] veth0_macvtap: entered promiscuous mode [ 441.704206][T30710] veth1_macvtap: entered promiscuous mode [ 441.728603][T30710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.748555][T30710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.774256][T14977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.848257][T14977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.880824][ T6879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.009870][ T6879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.190253][T30827] syzkaller0: entered promiscuous mode [ 442.196483][T30827] syzkaller0: entered allmulticast mode [ 442.229113][ T28] audit: type=1400 audit(2000001096.694:3908): avc: denied { create } for pid=30833 comm="syz.1.7450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 443.065670][T30868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7465'. [ 443.149306][T30874] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7467'. [ 444.438729][ T28] audit: type=1400 audit(2000001098.904:3909): avc: denied { associate } for pid=30926 comm="syz.3.7489" name="cgroup.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 444.514850][T30930] uprobe: syz.1.7491:30930 failed to unregister, leaking uprobe [ 444.781882][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7504'. [ 444.803623][T30964] macvlan2: entered promiscuous mode [ 444.808977][T30964] macvlan2: entered allmulticast mode [ 444.815981][T30964] bond10: (slave macvlan2): Opening slave failed [ 444.852982][ T28] audit: type=1400 audit(2000001099.324:3910): avc: denied { read } for pid=30967 comm="syz.5.7515" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.921518][ T28] audit: type=1400 audit(2000001099.324:3911): avc: denied { open } for pid=30967 comm="syz.5.7515" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 444.975837][ T28] audit: type=1400 audit(2000001099.344:3912): avc: denied { ioctl } for pid=30967 comm="syz.5.7515" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 445.328810][T30995] veth1_to_bond: entered allmulticast mode [ 445.415510][T30993] veth1_to_bond: left allmulticast mode [ 446.354701][T31022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7529'. [ 446.616875][ T28] audit: type=1400 audit(2000001101.084:3913): avc: denied { read } for pid=31041 comm="syz.4.7539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.507798][T31077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7553'. [ 447.628263][T30947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.683671][T31089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7558'. [ 447.710869][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7559'. [ 447.726167][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7559'. [ 447.732403][T31094] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.7557'. [ 447.744832][T31094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7557'. [ 447.808356][T31100] dvmrp1: entered allmulticast mode [ 447.857666][T31104] bridge11: entered promiscuous mode [ 447.863589][T31104] bridge11: entered allmulticast mode [ 447.876203][T31108] syz_tun: entered allmulticast mode [ 447.879847][ T28] audit: type=1326 audit(2000001102.344:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31101 comm="syz.3.7564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7d1c4c819 code=0x0 [ 447.882601][T31107] syz_tun: left allmulticast mode [ 448.526613][T31148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7580'. [ 448.539753][T31148] ip6gre2: entered promiscuous mode [ 448.545323][T31148] ip6gre2: entered allmulticast mode [ 448.553912][T31148] netlink: 'syz.5.7580': attribute type 6 has an invalid length. [ 448.561827][T31148] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7580'. [ 448.646550][ T28] audit: type=1400 audit(2000001103.114:3915): avc: denied { accept } for pid=31155 comm="syz.4.7584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 448.799252][T31161] loop4: detected capacity change from 0 to 512 [ 448.807801][T31161] EXT4-fs: Ignoring removed bh option [ 448.814302][T31161] EXT4-fs: inline encryption not supported [ 448.820956][T31161] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 448.852341][T31161] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 448.868408][T31161] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7587: bg 0: block 248: padding at end of block bitmap is not set [ 448.882952][T31161] loop4: lost filesystem error report for type 5 error -117 [ 448.883390][T31161] Quota error (device loop4): write_blk: dquota write failed [ 448.898106][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 448.898123][ C1] EXT4-fs (loop4): last error at time 2000001103: ext4_validate_block_bitmap:441 [ 448.914110][T31161] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 448.924101][T31161] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.7587: Failed to acquire dquot type 1 [ 448.935563][T31161] loop4: lost filesystem error report for type 5 error -28 [ 448.936203][T31161] EXT4-fs (loop4): 1 truncate cleaned up [ 448.949910][T31161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 448.985503][ T28] audit: type=1400 audit(2000001103.454:3916): avc: denied { listen } for pid=31175 comm="syz.1.7593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.662272][T30710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 449.983078][T31231] netlink: 'syz.7.7613': attribute type 1 has an invalid length. [ 449.995781][T31233] tipc: Started in network mode [ 450.009543][T31233] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 450.018735][T31233] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 450.026980][T31233] tipc: Enabled bearer , priority 10 [ 450.048225][T31231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.065247][T31237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.122060][T31237] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 450.161493][ T6881] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.215067][T14954] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.223895][T14954] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.248134][T14954] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.257172][T14954] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.291932][T14954] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.342900][T31250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7621'. [ 450.387853][T31250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7621'. [ 451.141548][T10465] tipc: Node number set to 1 [ 451.249045][T31323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7635'. [ 451.469250][ T28] audit: type=1400 audit(2000001105.934:3917): avc: denied { write } for pid=31340 comm="syz.5.7637" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 452.149275][T31395] tipc: Enabling of bearer rejected, failed to enable media [ 452.267381][ T28] audit: type=1400 audit(2000001362.741:3918): avc: denied { lock } for pid=31406 comm="syz.5.7648" path="socket:[94959]" dev="sockfs" ino=94959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.309690][T31413] netlink: 'syz.7.7649': attribute type 1 has an invalid length. [ 452.342099][T31413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.353874][T31413] bond3: entered promiscuous mode [ 452.363756][T31413] bond3: (slave dummy0): making interface the new active one [ 452.371349][T31413] dummy0: entered promiscuous mode [ 452.378866][T31413] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 452.402335][T31413] bond3 (unregistering): left promiscuous mode [ 452.419692][T31413] dummy0: left promiscuous mode [ 452.432020][T31413] bond3 (unregistering): (slave dummy0): Releasing active interface [ 452.449589][T31413] bond3 (unregistering): Released all slaves [ 452.594397][ T28] audit: type=1400 audit(2000001363.051:3919): avc: denied { read } for pid=31438 comm="syz.5.7653" path="socket:[94978]" dev="sockfs" ino=94978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 452.636250][ T28] audit: type=1400 audit(2000001363.111:3920): avc: denied { setopt } for pid=31444 comm="syz.7.7654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 452.759661][T31460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7657'. [ 453.494695][ T28] audit: type=1400 audit(2000001363.971:3921): avc: denied { write } for pid=31495 comm="syz.4.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 453.530846][T26623] IPVS: starting estimator thread 0... [ 453.573182][T31507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7673'. [ 453.621509][T14954] bond2: (slave batadv0): link status up again after 0 ms [ 453.621485][T31500] IPVS: using max 2304 ests per chain, 115200 per kthread [ 453.641643][ T6879] bond2: (slave batadv0): link status up again after 0 ms [ 453.651477][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 453.701405][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7678'. [ 453.715043][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7678'. [ 453.745005][ T28] audit: type=1400 audit(2000001364.211:3922): avc: denied { bind } for pid=31525 comm="syz.1.7680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 453.771493][T14954] bond2: (slave batadv0): failed to get link speed/duplex [ 453.891482][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 453.897223][T31551] loop4: detected capacity change from 0 to 1024 [ 453.921998][T31551] EXT4-fs: Ignoring removed orlov option [ 453.935466][T31551] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 453.956113][ T28] audit: type=1326 audit(2000001364.431:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.5.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 453.996209][T31551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.011522][ T28] audit: type=1326 audit(2000001364.431:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.5.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 454.041615][ T28] audit: type=1326 audit(2000001364.431:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.5.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 454.065800][ T28] audit: type=1326 audit(2000001364.431:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.5.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 454.071511][T14954] bond2: (slave batadv0): failed to get link speed/duplex [ 454.119835][T30710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.242323][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 454.357796][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 454.750162][T31612] netlink: 'syz.7.7711': attribute type 1 has an invalid length. [ 454.789653][T31612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.855241][T31612] bond3: (slave bridge7): making interface the new active one [ 454.902766][T31612] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 455.000617][T31629] loop5: detected capacity change from 0 to 512 [ 455.039284][T31629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 455.063593][T31629] System zones: 0-2, 18-18, 34-34 [ 455.104484][T31629] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7718: bg 0: block 248: padding at end of block bitmap is not set [ 455.181633][T31629] loop5: lost filesystem error report for type 5 error -117 [ 455.187026][T31629] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.7718: Failed to acquire dquot type 1 [ 455.194432][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 455.194462][ C0] EXT4-fs (loop5): last error at time 2000001365: ext4_validate_block_bitmap:441 [ 455.224463][T31629] loop5: lost filesystem error report for type 5 error -117 [ 455.243185][T31629] EXT4-fs (loop5): 1 truncate cleaned up [ 455.249387][T31629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.262422][T31629] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.365276][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.481492][ T71] net_ratelimit: 6 callbacks suppressed [ 455.481511][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 455.611587][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 455.672696][T31675] loop4: detected capacity change from 0 to 2048 [ 455.721775][T14954] bond2: (slave batadv0): failed to get link speed/duplex [ 455.738220][T31675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.751111][T31675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.832108][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 455.951482][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 456.072963][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 456.212318][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 456.323279][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 456.516572][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 456.631522][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 456.663103][ T28] kauditd_printk_skb: 621 callbacks suppressed [ 456.663127][ T28] audit: type=1400 audit(2000001367.141:4546): avc: denied { write } for pid=31710 comm="syz.7.7746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 456.709835][ T28] audit: type=1400 audit(2000001367.181:4547): avc: denied { setopt } for pid=31715 comm="syz.1.7748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.784153][T31726] loop3: detected capacity change from 0 to 512 [ 456.815071][T31726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.835325][T31726] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.865761][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.182873][T31826] loop3: detected capacity change from 0 to 512 [ 458.260407][T31826] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 458.421372][T31879] uprobe: syz.3.7774:31879 failed to unregister, leaking uprobe [ 459.712665][T31924] netlink: 'syz.1.7783': attribute type 13 has an invalid length. [ 459.753687][ T28] audit: type=1400 audit(2000001370.231:4548): avc: denied { create } for pid=31926 comm="syz.3.7786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 459.809105][ T28] audit: type=1400 audit(2000001370.281:4549): avc: denied { setopt } for pid=31926 comm="syz.3.7786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 460.172357][T31977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7803'. [ 460.227275][T31970] SELinux: failed to load policy [ 460.375747][T31989] netlink: 'syz.1.7808': attribute type 1 has an invalid length. [ 460.415793][T31989] 8021q: adding VLAN 0 to HW filter on device bond11 [ 460.491557][T14977] net_ratelimit: 26 callbacks suppressed [ 460.491577][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 460.494156][T32006] netlink: 'syz.1.7814': attribute type 1 has an invalid length. [ 460.518667][T32006] bond12: entered promiscuous mode [ 460.524632][T32006] 8021q: adding VLAN 0 to HW filter on device bond12 [ 460.550585][T32006] bond12: (slave bridge12): making interface the new active one [ 460.559569][T32006] bridge12: entered promiscuous mode [ 460.566704][T32006] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 460.621702][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 460.728520][T32022] -1: renamed from syzkaller0 [ 460.801574][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 460.811178][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 460.854303][ T28] audit: type=1400 audit(2000001371.331:4550): avc: denied { connect } for pid=32046 comm="syz.5.7830" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.911949][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 461.022202][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 461.131724][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 461.167972][ T28] audit: type=1326 audit(2000001371.641:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.7.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0d67c819 code=0x7ffc0000 [ 461.222524][ T28] audit: type=1326 audit(2000001371.641:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.7.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0d67c819 code=0x7ffc0000 [ 461.261606][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 461.279021][ T28] audit: type=1326 audit(2000001371.641:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.7.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d0d67c819 code=0x7ffc0000 [ 461.320282][ T28] audit: type=1326 audit(2000001371.641:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.7.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d0d67c582 code=0x7ffc0000 [ 461.369164][ T28] audit: type=1326 audit(2000001371.641:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.7.7840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d0d63d04e code=0x7ffc0000 [ 461.392719][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 461.511673][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 461.594999][T32088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7844'. [ 461.608461][ T71] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.620969][T14977] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.629799][T14977] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.639525][T14977] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.651598][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 461.715964][T32091] loop5: detected capacity change from 0 to 512 [ 461.746605][T32091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.774824][T32091] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.585624][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.677264][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7862'. [ 462.686849][T32139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7862'. [ 462.793569][T32145] loop5: detected capacity change from 0 to 8192 [ 462.811608][ T3631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 462.856139][ T5770] loop5: p1 < > p2 p4 < p5 > [ 462.864155][T32147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7866'. [ 462.873196][ T5770] loop5: partition table partially beyond EOD, truncated [ 462.882353][ T5770] loop5: p1 start 134217728 is beyond EOD, truncated [ 462.889251][ T5770] loop5: p2 size 591360 extends beyond EOD, truncated [ 462.897537][ T5770] loop5: p5 size 591360 extends beyond EOD, truncated [ 462.909947][T32145] loop5: p1 < > p2 p4 < p5 > [ 462.919308][T32145] loop5: partition table partially beyond EOD, truncated [ 462.926732][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 462.926781][ T28] audit: type=1326 audit(2000001373.401:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 462.957613][T32145] loop5: p1 start 134217728 is beyond EOD, truncated [ 462.964360][T32145] loop5: p2 size 591360 extends beyond EOD, truncated [ 462.971983][ T28] audit: type=1326 audit(2000001373.401:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 462.996464][ T28] audit: type=1326 audit(2000001373.401:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.026145][T32145] loop5: p5 size 591360 extends beyond EOD, truncated [ 463.071535][ T28] audit: type=1326 audit(2000001373.401:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.289573][ T28] audit: type=1326 audit(2000001373.401:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.296089][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 463.313407][ T28] audit: type=1326 audit(2000001373.401:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.324720][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 463.347472][ T28] audit: type=1326 audit(2000001373.401:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.357886][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 463.381308][ T28] audit: type=1326 audit(2000001373.401:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.415022][ T28] audit: type=1326 audit(2000001373.401:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.438568][ T28] audit: type=1326 audit(2000001373.401:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32152 comm="syz.4.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 463.470522][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 463.472600][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 463.481787][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 463.873188][T32203] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 464.645615][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7904'. [ 465.173005][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.183151][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.192599][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.201917][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.211207][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.235583][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.245041][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.264516][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.275739][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.285144][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.304762][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 465.521499][ T30] net_ratelimit: 32 callbacks suppressed [ 465.521518][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 465.768336][T32304] loop3: detected capacity change from 0 to 512 [ 465.781592][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 465.917837][T32304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.031469][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 466.090951][T32304] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.7922: bg 0: bad block bitmap checksum [ 466.194176][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 466.203114][T32304] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 466.313827][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.351655][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 466.481630][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 466.601501][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 466.711559][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 466.728144][T32327] loop4: detected capacity change from 0 to 512 [ 466.737705][T32327] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.755346][T32327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.774750][T32327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.787469][T32327] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.821492][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 466.947935][T30710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.088043][T14977] bond2: (slave batadv0): failed to get link speed/duplex [ 467.358727][T32352] loop5: detected capacity change from 0 to 1024 [ 467.368014][T32352] EXT4-fs: Ignoring removed mblk_io_submit option [ 467.512119][T32352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.595493][T24405] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 467.639895][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.752901][T32369] loop3: detected capacity change from 0 to 4096 [ 467.785777][T32369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.850117][T26802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.018712][T32390] netlink: 'syz.3.7954': attribute type 2 has an invalid length. [ 468.036579][T32390] netlink: 'syz.3.7954': attribute type 2 has an invalid length. [ 468.307041][T32407] netlink: 'syz.7.7959': attribute type 18 has an invalid length. [ 468.733670][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 468.733684][ T28] audit: type=1400 audit(2000001379.211:4619): avc: denied { accept } for pid=32425 comm="syz.5.7967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 468.829189][ T28] audit: type=1326 audit(2000001379.301:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 468.870754][ T28] audit: type=1326 audit(2000001379.301:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 468.898262][ T28] audit: type=1326 audit(2000001379.331:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 468.922774][ T28] audit: type=1326 audit(2000001379.331:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 468.947017][ T28] audit: type=1326 audit(2000001379.361:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 469.000182][ T28] audit: type=1326 audit(2000001379.361:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 469.029828][ T28] audit: type=1326 audit(2000001379.361:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 469.080861][T32447] loop4: detected capacity change from 0 to 512 [ 469.088955][ T28] audit: type=1326 audit(2000001379.361:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 469.113591][T32447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.131990][ T28] audit: type=1326 audit(2000001379.361:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.5.7971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5938e7c819 code=0x7ffc0000 [ 469.163921][T32452] netlink: 'syz.5.7979': attribute type 1 has an invalid length. [ 469.171780][T32452] netlink: 'syz.5.7979': attribute type 4 has an invalid length. [ 469.471658][T30710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.358561][T32523] __nla_validate_parse: 64 callbacks suppressed [ 470.358581][T32523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8005'. [ 470.370582][T32524] ªªªªªª: renamed from vlan0 (while UP) [ 470.572180][ T6879] net_ratelimit: 28 callbacks suppressed [ 470.572198][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 470.711901][T14954] bond2: (slave batadv0): failed to get link speed/duplex [ 470.806270][T32546] IPv4: Oversized IP packet from 127.202.26.0 [ 470.828290][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 470.895493][T32550] netlink: 'syz.1.8017': attribute type 1 has an invalid length. [ 470.961946][T32550] 8021q: adding VLAN 0 to HW filter on device bond13 [ 471.001676][T32550] bond13: entered promiscuous mode [ 471.012759][T32550] bond13 (unregistering): left promiscuous mode [ 471.019381][T32550] bond13 (unregistering): Released all slaves [ 471.071485][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 471.201517][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 471.311592][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 471.402516][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8027'. [ 471.422256][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 471.535851][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 471.612449][T26623] IPVS: starting estimator thread 0... [ 471.651461][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 471.701648][T32621] IPVS: using max 2448 ests per chain, 122400 per kthread [ 471.772626][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8033'. [ 471.804130][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8033'. [ 471.832080][T32651] bond6: entered allmulticast mode [ 471.849419][T32651] bridge7: entered promiscuous mode [ 471.863230][T32651] bridge7: entered allmulticast mode [ 471.870725][T32651] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 473.382181][T32767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8052'. [ 473.852374][ T302] netlink: 'syz.5.8053': attribute type 1 has an invalid length. [ 473.882802][ T302] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.890745][ T304] batadv_slave_1: entered promiscuous mode [ 473.902560][ T304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 473.912412][ T302] bond7: (slave bridge8): making interface the new active one [ 473.920628][ T302] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 473.985542][ T304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.034523][ T304] batadv_slave_1 (unregistering): left promiscuous mode [ 474.078493][ T304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.189304][ T321] ip6gre3: entered promiscuous mode [ 474.242530][ T321] ip6gre3: entered allmulticast mode [ 474.526838][ T337] 9p: Bad value for 'rfdno' [ 474.767762][ T345] bond0: option arp_validate: invalid value (55553) [ 474.825638][ T345] IPv6: sit3: Disabled Multicast RS [ 475.262548][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 475.262566][ T28] audit: type=1400 audit(2000001641.734:4757): avc: denied { execute_no_trans } for pid=367 comm="syz.4.8080" path="/133/file1" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 475.442725][ T391] netlink: 'syz.4.8087': attribute type 4 has an invalid length. [ 475.457059][ T391] netlink: 'syz.4.8087': attribute type 4 has an invalid length. [ 475.651517][ T6881] net_ratelimit: 26 callbacks suppressed [ 475.651536][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 475.771909][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 475.881659][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 476.052537][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 476.131773][ T429] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8099'. [ 476.213254][ T429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8099'. [ 476.264913][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 476.342157][ T28] audit: type=1400 audit(2000001642.814:4758): avc: denied { create } for pid=442 comm="syz.3.8105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 476.382079][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 476.405423][ T431] loop5: detected capacity change from 0 to 512 [ 476.441235][ T431] ext4: Unknown parameter 'obj_role' [ 476.493193][ T23] kernel read not supported for file [fscontext] (pid: 23 comm: kworker/1:0) [ 476.502175][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 476.632700][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 476.741697][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 476.808304][ T467] team0: Caught tx_queue_len zero misconfig [ 476.852542][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 476.889437][ T473] loop4: detected capacity change from 0 to 2048 [ 476.935069][ T473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.959656][ T28] audit: type=1400 audit(2000001643.424:4759): avc: denied { name_connect } for pid=478 comm="syz.5.8122" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 476.986420][ T473] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.019854][T30710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.089206][ T487] netlink: 'syz.5.8125': attribute type 1 has an invalid length. [ 477.128496][ T487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.141471][ T28] audit: type=1400 audit(2000001643.614:4760): avc: denied { create } for pid=486 comm="syz.5.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 477.163896][ T28] audit: type=1400 audit(2000001643.624:4761): avc: denied { read } for pid=484 comm="syz.4.8123" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 477.190793][ T28] audit: type=1400 audit(2000001643.624:4762): avc: denied { open } for pid=484 comm="syz.4.8123" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 477.214382][ T28] audit: type=1400 audit(2000001643.634:4763): avc: denied { write } for pid=486 comm="syz.5.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 477.215727][ T487] bond8: (slave gretap1): making interface the new active one [ 477.245877][ T487] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 477.347562][T14954] Bluetooth: hci0: Frame reassembly failed (-84) [ 477.357679][ T28] audit: type=1400 audit(2000001643.824:4764): avc: denied { bind } for pid=501 comm="syz.3.8129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.710677][ T519] vlan0: entered promiscuous mode [ 477.717063][ T519] syz_tun: entered promiscuous mode [ 477.885074][ T28] audit: type=1326 audit(2000001644.354:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 477.938092][ T28] audit: type=1326 audit(2000001644.354:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=525 comm="syz.4.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262d87c819 code=0x7ffc0000 [ 477.975800][ T532] loop5: detected capacity change from 0 to 1024 [ 478.004957][ T532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.071352][T24405] ================================================================== [ 478.079440][T24405] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 478.086800][T24405] [ 478.089105][T24405] read-write to 0xffff88811b05d900 of 8 bytes by interrupt on cpu 0: [ 478.097142][T24405] __xa_clear_mark+0xf5/0x1e0 [ 478.101810][T24405] __folio_end_writeback+0xf4/0x360 [ 478.106998][T24405] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 478.113221][T24405] folio_end_writeback+0x1c/0x70 [ 478.118139][T24405] end_buffer_async_write+0x156/0x1f0 [ 478.123496][T24405] end_bio_bh_io_sync+0x79/0xa0 [ 478.128331][T24405] bio_endio+0x38a/0x420 [ 478.132568][T24405] blk_update_request+0x338/0x740 [ 478.137582][T24405] blk_mq_end_request+0x26/0x50 [ 478.142413][T24405] lo_complete_rq+0x98/0x140 [ 478.146990][T24405] blk_done_softirq+0x77/0xb0 [ 478.151652][T24405] handle_softirqs+0xb9/0x2a0 [ 478.156310][T24405] run_ksoftirqd+0x1c/0x30 [ 478.160710][T24405] smpboot_thread_fn+0x32a/0x510 [ 478.165627][T24405] kthread+0x22a/0x280 [ 478.169675][T24405] ret_from_fork+0x150/0x360 [ 478.174250][T24405] ret_from_fork_asm+0x1a/0x30 [ 478.179013][T24405] [ 478.181318][T24405] read to 0xffff88811b05d900 of 8 bytes by task 24405 on cpu 1: [ 478.188939][T24405] xas_find_marked+0x213/0x620 [ 478.193699][T24405] filemap_get_folios_tag+0xfa/0x510 [ 478.198967][T24405] filemap_write_and_wait_range+0x1f5/0x370 [ 478.204848][T24405] sync_blockdev+0x35/0x50 [ 478.209244][T24405] sync_filesystem+0x162/0x190 [ 478.213992][T24405] generic_shutdown_super+0x4c/0x220 [ 478.219273][T24405] kill_block_super+0x2a/0x70 [ 478.223929][T24405] ext4_kill_sb+0x42/0x80 [ 478.228327][T24405] deactivate_locked_super+0x75/0x1c0 [ 478.233682][T24405] deactivate_super+0x97/0xa0 [ 478.238341][T24405] cleanup_mnt+0x2bb/0x330 [ 478.242742][T24405] __cleanup_mnt+0x19/0x20 [ 478.247139][T24405] task_work_run+0x130/0x1a0 [ 478.251708][T24405] exit_to_user_mode_loop+0x1f4/0x6f0 [ 478.257061][T24405] do_syscall_64+0x249/0x370 [ 478.261648][T24405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.267621][T24405] [ 478.269925][T24405] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 478.277027][T24405] [ 478.279342][T24405] Reported by Kernel Concurrency Sanitizer on: [ 478.285471][T24405] CPU: 1 UID: 0 PID: 24405 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 478.296558][T24405] Tainted: [W]=WARN [ 478.300358][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.310394][T24405] ================================================================== [ 478.320601][T24405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.371555][ T3631] Bluetooth: hci0: command 0x1003 tx timeout [ 479.371554][T28061] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 479.776380][T14974] vlan2: left allmulticast mode [ 479.781260][T14974] geneve0: left allmulticast mode [ 479.786467][T14974] vlan2: left promiscuous mode [ 479.791247][T14974] geneve0: left promiscuous mode [ 479.797434][T14974] bridge0: port 1(vlan2) entered disabled state [ 479.804405][T14974] bridge_slave_1: left allmulticast mode [ 479.810026][T14974] bridge_slave_1: left promiscuous mode [ 479.815810][T14974] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.824413][T14974] batadv1: left allmulticast mode [ 479.829695][T14974] batadv1: left promiscuous mode [ 479.834918][T14974] bridge0: port 3(batadv1) entered disabled state [ 479.841961][T14974] bridge_slave_1: left allmulticast mode [ 479.847604][T14974] bridge_slave_1: left promiscuous mode [ 479.853573][T14974] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.861221][T14974] bridge_slave_0: left allmulticast mode [ 479.867115][T14974] bridge_slave_0: left promiscuous mode [ 479.872796][T14974] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.936589][T14974] bond1 (unregistering): (slave gretap1): Releasing active interface [ 480.013647][T14974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.023850][T14974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.033646][T14974] bond0 (unregistering): Released all slaves [ 480.041198][T14974] bond1 (unregistering): Released all slaves [ 480.049590][T14974] bond2 (unregistering): Released all slaves [ 480.103431][T14974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.112690][T14974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.121926][T14974] bond0 (unregistering): Released all slaves [ 480.169143][T14974] hsr_slave_0: left promiscuous mode [ 480.174868][T14974] hsr_slave_1: left promiscuous mode [ 480.180487][T14974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.187904][T14974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.197337][T14974] hsr_slave_0: left promiscuous mode [ 480.203093][T14974] hsr_slave_1: left promiscuous mode [ 480.208752][T14974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.216421][T14974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.226769][T14974] veth1_macvtap: left promiscuous mode [ 480.232315][T14974] veth0_macvtap: left promiscuous mode [ 480.237935][T14974] veth1_vlan: left promiscuous mode [ 480.243409][T14974] veth0_vlan: left promiscuous mode [ 480.293501][T14974] team0 (unregistering): Port device team_slave_1 removed [ 480.302846][T14974] team0 (unregistering): Port device team_slave_0 removed [ 480.359271][T14974] team0 (unregistering): Port device team_slave_1 removed [ 480.369328][T14974] team0 (unregistering): Port device team_slave_0 removed [ 480.736491][T14974] IPVS: stop unused estimator thread 0... [ 480.751606][ T6879] net_ratelimit: 26 callbacks suppressed [ 480.751621][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 480.871521][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 480.991508][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 481.101517][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 481.221617][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 481.331501][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 481.441520][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 481.561477][ T6881] bond2: (slave batadv0): failed to get link speed/duplex [ 481.681517][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 481.791517][T14974] bond2: (slave batadv0): failed to get link speed/duplex [ 485.059113][ T6879] bridge_slave_1: left allmulticast mode [ 485.065730][ T6879] bridge_slave_1: left promiscuous mode [ 485.071370][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.079433][ T6879] bridge_slave_0: left allmulticast mode [ 485.085205][ T6879] bridge_slave_0: left promiscuous mode [ 485.090839][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.151152][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.160661][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.169927][ T6879] bond0 (unregistering): Released all slaves [ 485.196073][ T6879] hsr_slave_0: left promiscuous mode [ 485.202737][ T6879] hsr_slave_1: left promiscuous mode [ 485.208627][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.217262][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.260601][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 485.271845][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 485.771587][ T6879] net_ratelimit: 34 callbacks suppressed [ 485.771688][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 485.901943][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 486.021520][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 486.131984][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 486.241531][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 486.351550][ T30] bond2: (slave batadv0): failed to get link speed/duplex [ 486.462006][ T71] bond2: (slave batadv0): failed to get link speed/duplex [ 486.571995][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 486.681987][ T6879] bond2: (slave batadv0): failed to get link speed/duplex [ 486.791505][ T6879] bond2: (slave batadv0): failed to get link speed/duplex