last executing test programs: 1.957274911s ago: executing program 1 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.479689206s ago: executing program 2 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x6, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) 1.364751099s ago: executing program 2 (id=482): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mq_timedreceive(0xffffffffffffffff, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = mq_open(&(0x7f00000000c0)='$*}*\\\\\x00', 0x40, 0x2, 0x0) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @tid=0xffffffffffffffff}) 1.34655833s ago: executing program 0 (id=483): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) 1.273828452s ago: executing program 2 (id=488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)}, 0x4005) 1.216859754s ago: executing program 3 (id=489): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004084) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2020830, &(0x7f0000000080)={[{@errors_remount}, {@sysvgroups}]}, 0x8, 0x52c, &(0x7f0000001480)="$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") timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f00000000c0)=""/71, &(0x7f0000000400)=0x47) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) setitimer(0x2, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000280)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1.128402966s ago: executing program 2 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0xffffffff, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x6, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x4, 0x7}, {0x0, 0x5}, {0x5, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000004, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x2, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x20, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x40000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x8d36}, {}, {0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, {0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {0x2}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff}, {0x80, 0x0, 0x6056, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0xfffffbff, 0x0, 0x8, 0x800, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0xc4}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffefff}, {}, {0x3, 0xfffffffe, 0x0, 0x0, 0x21777e78}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb, 0x0, 0x0, 0x38}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec31, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x80000000}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x81}, {0x10000001, 0x0, 0x1, 0xf67, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10004}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x7}], [{}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {0x1}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x5}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8448b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000f40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000300)=0x2a0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) sendmmsg$inet(r1, 0x0, 0x0, 0x4040000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) listen(0xffffffffffffffff, 0x100) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) 1.076653427s ago: executing program 1 (id=494): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00'], 0xc) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r3], 0xe) 1.035438839s ago: executing program 2 (id=496): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) setsockopt(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x0) listen(r0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 921.778552ms ago: executing program 4 (id=497): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) 861.116494ms ago: executing program 1 (id=498): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mq_timedreceive(0xffffffffffffffff, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = mq_open(&(0x7f00000000c0)='$*}*\\\\\x00', 0x40, 0x2, 0x0) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @tid=0xffffffffffffffff}) 837.281855ms ago: executing program 4 (id=499): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0xc) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r3], 0xe) 819.758445ms ago: executing program 3 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xffdc, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x2, 0x8, 0xcd, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xb, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0xc, 0x5, 0x6, 0x7, 0xfffffff7, 0x6a, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x68, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0xa, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x5, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0xf, 0x7, 0x9, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x88, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x7e, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x5, 0x1, 0x8, 0x2, 0x8, 0x0, 0xd, 0x40000, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10010006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x20000010) 781.529387ms ago: executing program 3 (id=501): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 752.930577ms ago: executing program 4 (id=502): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, r2}, 0xc) 748.995027ms ago: executing program 1 (id=503): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0a00010000"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 748.470517ms ago: executing program 3 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) 684.855109ms ago: executing program 4 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 680.462059ms ago: executing program 4 (id=506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c0008"], 0x68}}, 0x4004040) 659.96993ms ago: executing program 1 (id=507): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0xc138fd03, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x8518}, 0x8349, 0xe7e, 0x0, 0x6, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x4}, {0x10, 0xa}, {0x2, 0xa}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x5, 0x8, 0x4, 0x0, 0x2, 0x3, 0x8}}, {0x0, 0x2, [0x100, 0x5, 0xf5af]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x10, 0x0, 0x7, 0x9, 0x0, 0x5, 0x7, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x6, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x95c}, 0x0) setuid(r4) 625.432991ms ago: executing program 3 (id=508): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 624.256631ms ago: executing program 4 (id=509): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = semget(0x1, 0x4, 0x39c) semop(r1, 0x0, 0x0) semop(r1, &(0x7f0000000380)=[{0x2, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) preadv2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r2, &(0x7f0000000200)="c7", 0x1) sendfile(r2, r0, 0x0, 0x3ffff) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendfile(r2, r0, 0x0, 0x7ffff000) 547.455933ms ago: executing program 3 (id=510): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a_listen={0x9, 0x3, 0x3, 0x80, 0x6, 0x7, 0x0, "", 0x2, 0x3, 0xfe, 0x7f, 0x7d, "d9543a77bb1a0bf47a070e5b65324e0ca7a43a65b37faecaba5af86ffecebcebac9906cd1661fdd9d063088da94f8b43aa3f2c167616b076d99fb6f8c032217cf42ba11d4b01c039c519bba49f94e4bf0d45fad98f5a0063e7bbcc03241d9c016473a9e5eb89c57ba0a8a945cef11d052d2ede1499540cc5871af63877"}}, 0x8c) 457.845916ms ago: executing program 0 (id=511): add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$kcm(0x29, 0x4, 0x0) socket$inet(0x2, 0x2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000180)}, 0x4000040) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4f42465b9b3d5c8dff57138", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@deltaction={0x9c, 0x31, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x12}, 0x4) ustat(0x801, &(0x7f0000000240)) 456.801146ms ago: executing program 1 (id=512): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 377.150338ms ago: executing program 0 (id=513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x18, 0x14, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x9a}}, 0x18}, 0x1, 0x0, 0x0, 0x400c001}, 0x8004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 173.857924ms ago: executing program 0 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f78790000140002800800034000000014080001400000000009"], 0xf8}}, 0x0) 98.581936ms ago: executing program 0 (id=515): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000940)={0x19c0, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x79a7}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x85b, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x40}, @device_b, @device_b, @broadcast, {0x1, 0x4}, @device_a, @void, @value=@ver_80211n={0x0, 0x8d, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x1128, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @initial, @broadcast, @random="9fb1707a97b9", {0x7, 0xc}}, @a_msdu=[{@device_b, @device_b, 0x1b, "5bdd50ca9d96571a1ac32b5c9a2987fb6657a473ac638b8bd2f5d5"}, {@broadcast, @device_a, 0xef, "f266221f747fa695592517d66f9cc54abb6655814b376138473eede97ed667ba621cd5c66a7b2dd7c569ae4c42460d1ba76576bdc10a958c2a7e9b4334afc4c4b83f70a07031b518054359558759b041c7f2200255559ba0757b711b2c432bf0adaa470d4242961f52c838bbdf5d12c07f58ac5a547e56444627d8ecee3fd5760dca5bff2bd0d2b02c83472088c885cd1ff5a53852662adcf5dd83550a6df0bd8f905306509f94e8bc5fdd2b5cea15b2ffbac97a8e450cbcd6696119ba79abb29c9d8966d9ce86c00e21a6de527a805a145d4606363bd34e6bf64b70132727a5d8013794f2480483edcff8dd54b80c"}, {@device_a, @broadcast, 0xf7, "ebc40d273af98bb171bfdf19f9ecd17deaaadabec8a9a51959b169354a29a75e8e1696b4280196c0f797796afd3e5c644ab83fc8300765f893230508711ca6bcb4bc7d4e1e0689f6a382a681a5ba045c2e5fc6f3988bf5c379bf87d1142dfae89a411e53155899dae8433be81066ca321632be94f4dc4b37f53b8bf037e46914d98b5565535ddeb36799a47de9fc4eab761516d5ebc94e508f866382149ab116d7b8c30ec0c1081711bfe9958d3a975618390a0b5a6887e04691368a3a65c0d9b6cccf954b86e15dfc0d8b1e3b946728f0f4b7363a9aa8c5b8ebccf2f955376a3ca08dce2a40ba4128670100a5a4e4664d62c744f1c917"}, {@device_b, @device_a, 0x6f, "c2637deb3b9ace36b866424627dc28e568f96e73c6dbbe6205c6746c4ab48dfa00cb136c66cb1f4bdc01074c6ff5d3744f50707d1aafa3c32b8f7dc329af64397473ae22227b93b0fa79f994c9c03f61e5c1e644530bd697114a6224202a7d0dd94a2db0bfbaea98e86d50e7aa3aaf"}, {@broadcast, @device_a, 0xbb, "77792c2f0876ad8ef64f66e71569776b06d2e1c6c90d5cf5ee0d0daad38f07621bcf01a921fa75b54be35fba0fb60ca24053870d8300534a1cc2843a21478cd0c9521a169070c200b187ae3cecacb3da8086cb83b3247281e3348172021c4dec215e8441c0bb0fce0b77e8eebba74639fd5e128697058e62dabc5455633a0f51b9517260430aad3420f54bdc37cd773ebd22751e21f7b147d103156ace8bcf838b9595919e313d8e289f3173fcb9d39794cc66df2ee5f5662a9889"}, {@device_b, @device_b, 0xd7e, "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"}]}}]}, 0x19c0}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) 86.278997ms ago: executing program 2 (id=516): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00'], 0xc) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r3], 0xe) 0s ago: executing program 0 (id=517): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[], 0xc) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r3], 0xe) kernel console output (not intermixed with test programs): [ 18.414714][ T29] audit: type=1400 audit(1788291636.706:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.414763][ T29] audit: type=1400 audit(1788291636.706:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.660760][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 19.660796][ T29] audit: type=1400 audit(1788291637.956:120): avc: denied { write } for pid=3236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.681602][ T29] audit: type=1400 audit(1788291637.956:121): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.888999][ T29] audit: type=1400 audit(1788291638.186:122): avc: denied { write } for pid=3250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.912033][ T29] audit: type=1400 audit(1788291638.186:123): avc: denied { write } for pid=3261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.617959][ T29] audit: type=1400 audit(1788291638.906:124): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.640903][ T29] audit: type=1400 audit(1788291638.926:125): avc: denied { write } for pid=3276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 23.735608][ T29] audit: type=1400 audit(1788291642.026:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.758619][ T29] audit: type=1400 audit(1788291642.056:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.759179][ T3285] cgroup: Unknown subsys name 'net' [ 23.759380][ T29] audit: type=1400 audit(1788291642.056:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.919468][ T3285] cgroup: Unknown subsys name 'cpuset' [ 23.925432][ T3285] cgroup: Unknown subsys name 'rlimit' [ 24.045557][ T29] audit: type=1400 audit(1788291642.336:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.100799][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.113452][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.291899][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 25.291949][ T29] audit: type=1400 audit(1788291643.586:138): avc: denied { execmem } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.691081][ T29] audit: type=1400 audit(1788291643.986:139): avc: denied { read } for pid=3295 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.712443][ T29] audit: type=1400 audit(1788291643.986:140): avc: denied { open } for pid=3295 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.735855][ T29] audit: type=1400 audit(1788291644.016:141): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 25.757402][ T29] audit: type=1400 audit(1788291644.036:142): avc: denied { module_request } for pid=3295 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.757431][ T29] audit: type=1400 audit(1788291644.036:143): avc: denied { module_request } for pid=3296 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.757454][ T29] audit: type=1400 audit(1788291644.036:144): avc: denied { module_request } for pid=3297 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.780025][ T29] audit: type=1400 audit(1788291644.056:145): avc: denied { sys_module } for pid=3296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.262777][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.262816][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.262887][ T3296] bridge_slave_0: entered allmulticast mode [ 26.263469][ T3296] bridge_slave_0: entered promiscuous mode [ 26.264696][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.264728][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.264809][ T3296] bridge_slave_1: entered allmulticast mode [ 26.265242][ T3296] bridge_slave_1: entered promiscuous mode [ 26.287289][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.287322][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.287495][ T3295] bridge_slave_0: entered allmulticast mode [ 26.287987][ T3295] bridge_slave_0: entered promiscuous mode [ 26.303356][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.303399][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.303521][ T3298] bridge_slave_0: entered allmulticast mode [ 26.303931][ T3298] bridge_slave_0: entered promiscuous mode [ 26.309762][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.309793][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.309973][ T3295] bridge_slave_1: entered allmulticast mode [ 26.310426][ T3295] bridge_slave_1: entered promiscuous mode [ 26.312036][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.313098][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.313187][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.313216][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.313266][ T3298] bridge_slave_1: entered allmulticast mode [ 26.313738][ T3298] bridge_slave_1: entered promiscuous mode [ 26.328564][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.328594][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.328721][ T3299] bridge_slave_0: entered allmulticast mode [ 26.329283][ T3299] bridge_slave_0: entered promiscuous mode [ 26.336117][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.336297][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.336327][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.336476][ T3297] bridge_slave_0: entered allmulticast mode [ 26.336917][ T3297] bridge_slave_0: entered promiscuous mode [ 26.337663][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.337797][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.337848][ T3297] bridge_slave_1: entered allmulticast mode [ 26.338431][ T3297] bridge_slave_1: entered promiscuous mode [ 26.345144][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.345283][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.345312][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.345372][ T3299] bridge_slave_1: entered allmulticast mode [ 26.345764][ T3299] bridge_slave_1: entered promiscuous mode [ 26.372011][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.377339][ T3296] team0: Port device team_slave_0 added [ 26.378367][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.384783][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.385790][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.391952][ T3296] team0: Port device team_slave_1 added [ 26.393228][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.394126][ T3298] team0: Port device team_slave_0 added [ 26.404839][ T3298] team0: Port device team_slave_1 added [ 26.405781][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.430173][ T3297] team0: Port device team_slave_0 added [ 26.430944][ T3297] team0: Port device team_slave_1 added [ 26.436087][ T3299] team0: Port device team_slave_0 added [ 26.441844][ T3295] team0: Port device team_slave_0 added [ 26.447902][ T3299] team0: Port device team_slave_1 added [ 26.448160][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.448173][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.448200][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.448720][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.448732][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.448762][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.452834][ T3295] team0: Port device team_slave_1 added [ 26.463062][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.463074][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.463116][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.474616][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.474629][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.474735][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.475272][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.475283][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.475326][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.480002][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.480015][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.480045][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.483078][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.483089][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.483134][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.483729][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.483804][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.483834][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.493749][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.493762][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.493791][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.494463][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.494475][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.494615][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.533044][ T3297] hsr_slave_0: entered promiscuous mode [ 26.533372][ T3297] hsr_slave_1: entered promiscuous mode [ 26.549841][ T3295] hsr_slave_0: entered promiscuous mode [ 26.550131][ T3295] hsr_slave_1: entered promiscuous mode [ 26.550337][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 26.550379][ T3295] Cannot create hsr debugfs directory [ 26.558315][ T3298] hsr_slave_0: entered promiscuous mode [ 26.558777][ T3298] hsr_slave_1: entered promiscuous mode [ 26.559545][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 26.559558][ T3298] Cannot create hsr debugfs directory [ 26.567488][ T3296] hsr_slave_0: entered promiscuous mode [ 26.568074][ T3296] hsr_slave_1: entered promiscuous mode [ 26.568324][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 26.568336][ T3296] Cannot create hsr debugfs directory [ 26.577371][ T3299] hsr_slave_0: entered promiscuous mode [ 26.577714][ T3299] hsr_slave_1: entered promiscuous mode [ 26.578027][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 26.578040][ T3299] Cannot create hsr debugfs directory [ 26.823812][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.843308][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.844192][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.853799][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.862588][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.886964][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.901003][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.904186][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.909908][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.929871][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.953319][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.973539][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.982559][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.991197][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.991774][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.016822][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.032304][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.032336][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.032469][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.032501][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.039875][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.060617][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.071349][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.077692][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.084460][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.103812][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.117534][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.119850][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.120938][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.120970][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.121134][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.121236][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.134818][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.142019][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.144491][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.147046][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.162507][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.168023][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.173558][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.190140][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.346306][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.352895][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.362634][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.366512][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.374998][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.380257][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.382613][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.386782][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.393737][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.401292][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.407595][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.410727][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.483691][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.491812][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.501575][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.501608][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.509260][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.509335][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.521306][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.548737][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.567097][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.567130][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.578043][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.578125][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.624317][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.633246][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.640421][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.646009][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.646040][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.655292][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.655323][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.659129][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.674138][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.674170][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.692866][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.692898][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.727434][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.759357][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.767971][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.768013][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.776307][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.776339][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.966291][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.968221][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.990591][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.009311][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.084973][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.164406][ T3297] veth0_vlan: entered promiscuous mode [ 28.174059][ T3297] veth1_vlan: entered promiscuous mode [ 28.182778][ T3298] veth0_vlan: entered promiscuous mode [ 28.198240][ T3298] veth1_vlan: entered promiscuous mode [ 28.200849][ T3296] veth0_vlan: entered promiscuous mode [ 28.207339][ T3296] veth1_vlan: entered promiscuous mode [ 28.215395][ T3297] veth0_macvtap: entered promiscuous mode [ 28.222911][ T3297] veth1_macvtap: entered promiscuous mode [ 28.225738][ T3298] veth0_macvtap: entered promiscuous mode [ 28.232605][ T3298] veth1_macvtap: entered promiscuous mode [ 28.243114][ T3296] veth0_macvtap: entered promiscuous mode [ 28.244525][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.251579][ T3296] veth1_macvtap: entered promiscuous mode [ 28.253355][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.277001][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.289261][ T98] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.290636][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.314690][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.317506][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.341370][ T29] audit: type=1400 audit(1788291646.636:146): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.Nh5jpM/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.341445][ T29] audit: type=1400 audit(1788291646.636:147): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.375804][ T3295] veth0_vlan: entered promiscuous mode [ 28.378020][ T3295] veth1_vlan: entered promiscuous mode [ 28.378953][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.379289][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.379328][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.379385][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.387789][ T3295] veth0_macvtap: entered promiscuous mode [ 28.389321][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389360][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389458][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389523][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389568][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389604][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.389733][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.390366][ T3299] veth0_vlan: entered promiscuous mode [ 28.402222][ T3299] veth1_vlan: entered promiscuous mode [ 28.406398][ T3295] veth1_macvtap: entered promiscuous mode [ 28.450104][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.467424][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.485974][ T3299] veth0_macvtap: entered promiscuous mode [ 28.491676][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.502715][ T3299] veth1_macvtap: entered promiscuous mode [ 28.571605][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.598038][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.600188][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600580][ T98] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600698][ T98] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600734][ T98] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629039][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629323][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629389][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629425][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.719421][ T3506] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4'. [ 28.745532][ T3511] loop4: detected capacity change from 0 to 512 [ 28.752147][ T3511] ======================================================= [ 28.752147][ T3511] WARNING: The mand mount option has been deprecated and [ 28.752147][ T3511] and is ignored by this kernel. Remove the mand [ 28.752147][ T3511] option from the mount to silence this warning. [ 28.752147][ T3511] ======================================================= [ 28.816099][ T3515] loop3: detected capacity change from 0 to 512 [ 28.834996][ T3515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.835150][ T3515] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.011621][ T3523] IPVS: persistence engine module ip_vs_pe_À not found [ 29.131704][ T3523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'. [ 29.145627][ T3520] loop1: detected capacity change from 0 to 512 [ 29.214455][ T3520] Zero length message leads to an empty skb [ 29.224659][ T3515] syz.3.6 (3515) used greatest stack depth: 10304 bytes left [ 29.233346][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.295971][ T3540] syzkaller0: entered promiscuous mode [ 29.295995][ T3540] syzkaller0: entered allmulticast mode [ 29.371679][ T3544] loop3: detected capacity change from 0 to 2048 [ 29.400516][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.731934][ T3560] loop4: detected capacity change from 0 to 512 [ 29.771639][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.771854][ T3560] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.981474][ T3565] IPVS: persistence engine module ip_vs_pe_À not found [ 30.055624][ T3560] syz.4.20 (3560) used greatest stack depth: 10112 bytes left [ 30.087113][ T3565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 30.117604][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.144455][ T3568] loop0: detected capacity change from 0 to 512 [ 30.216279][ T3581] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 30.351708][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 30.351734][ T29] audit: type=1400 audit(1788291648.646:226): avc: denied { create } for pid=3582 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 30.425667][ T29] audit: type=1400 audit(1788291648.716:227): avc: denied { create } for pid=3582 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.429015][ T29] audit: type=1400 audit(1788291648.716:228): avc: denied { write } for pid=3582 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.430513][ T29] audit: type=1400 audit(1788291648.726:229): avc: denied { create } for pid=3582 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 30.434127][ T29] audit: type=1400 audit(1788291648.726:230): avc: denied { ioctl } for pid=3582 comm="syz.0.27" path="socket:[5137]" dev="sockfs" ino=5137 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 30.603873][ T3581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 30.667256][ T29] audit: type=1400 audit(1788291648.956:231): avc: denied { ioctl } for pid=3595 comm="syz.1.31" path="socket:[2935]" dev="sockfs" ino=2935 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.718561][ T3598] loop0: detected capacity change from 0 to 4096 [ 30.735143][ T3598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.757957][ T29] audit: type=1400 audit(1788291649.046:232): avc: denied { write } for pid=3597 comm="syz.0.32" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.781928][ T29] audit: type=1400 audit(1788291649.076:233): avc: denied { read open } for pid=3597 comm="syz.0.32" path=2F352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.825970][ T3608] batman_adv: batadv0: Adding interface: veth0 [ 30.825994][ T3608] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.826033][ T3608] batman_adv: batadv0: Interface activated: veth0 [ 30.872782][ T29] audit: type=1400 audit(1788291649.166:234): avc: denied { create } for pid=3609 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 30.892126][ T29] audit: type=1400 audit(1788291649.166:235): avc: denied { write } for pid=3597 comm="syz.0.32" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.224952][ T3628] netlink: 'syz.4.38': attribute type 3 has an invalid length. [ 31.224973][ T3628] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.38'. [ 31.657937][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.746547][ T3642] IPVS: persistence engine module ip_vs_pe_À not found [ 31.805300][ T3642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.817296][ T3642] netlink: 84 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.158958][ T3646] syzkaller0: entered promiscuous mode [ 32.158986][ T3646] syzkaller0: entered allmulticast mode [ 32.161957][ T3650] batman_adv: batadv0: Adding interface: veth0 [ 32.161973][ T3650] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.162004][ T3650] batman_adv: batadv0: Interface activated: veth0 [ 32.268709][ T3654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.48'. [ 32.316821][ T3662] loop2: detected capacity change from 0 to 128 [ 32.400602][ T3662] syz.2.51: attempt to access beyond end of device [ 32.400602][ T3662] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 32.417605][ T3662] syz.2.51: attempt to access beyond end of device [ 32.417605][ T3662] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 32.441201][ T3662] syz.2.51: attempt to access beyond end of device [ 32.441201][ T3662] loop2: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 32.441339][ T3662] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 32.441549][ T3662] syz.2.51: attempt to access beyond end of device [ 32.441549][ T3662] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 32.441648][ T3662] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 32.447139][ T3674] loop0: detected capacity change from 0 to 512 [ 32.461345][ T3674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.461403][ T3674] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.482857][ T3662] syz.2.51: attempt to access beyond end of device [ 32.482857][ T3662] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 32.533062][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.560096][ T3662] syz.2.51: attempt to access beyond end of device [ 32.560096][ T3662] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 32.560206][ T3662] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 32.560326][ T3662] syz.2.51: attempt to access beyond end of device [ 32.560326][ T3662] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 32.560366][ T3662] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 32.606117][ T3662] syz.2.51: attempt to access beyond end of device [ 32.606117][ T3662] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 32.624114][ T3662] syz.2.51: attempt to access beyond end of device [ 32.624114][ T3662] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 32.624185][ T3662] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 32.624403][ T3662] syz.2.51: attempt to access beyond end of device [ 32.624403][ T3662] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 32.624533][ T3662] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 32.674326][ T3662] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 32.674426][ T3662] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 32.697161][ T3662] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 32.705864][ T3662] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 32.825187][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.955065][ T3699] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 33.073127][ T3711] syzkaller0: entered promiscuous mode [ 33.073152][ T3711] syzkaller0: entered allmulticast mode [ 33.091285][ T3713] netlink: 'syz.0.60': attribute type 3 has an invalid length. [ 33.091301][ T3713] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.60'. [ 33.530172][ T3732] loop1: detected capacity change from 0 to 512 [ 33.552832][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.552945][ T3732] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.601145][ T3735] IPVS: persistence engine module ip_vs_pe_À not found [ 33.667686][ T3739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 34.053763][ T3732] syz.1.70 (3732) used greatest stack depth: 9984 bytes left [ 34.055199][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.123824][ T3754] loop3: detected capacity change from 0 to 4096 [ 34.153972][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.169101][ T3759] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 34.207552][ T3748] loop0: detected capacity change from 0 to 512 [ 34.307133][ T3771] IPVS: persistence engine module ip_vs_pe_À not found [ 34.441597][ T3777] __nla_validate_parse: 1 callbacks suppressed [ 34.441619][ T3777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 34.451051][ T3777] netlink: 84 bytes leftover after parsing attributes in process `syz.1.83'. [ 34.677946][ T3786] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 34.678007][ T3786] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.86'. [ 35.105096][ T3769] syz.3.78 (3769) used greatest stack depth: 9920 bytes left [ 35.119165][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.173420][ T3796] loop4: detected capacity change from 0 to 512 [ 35.203160][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.203298][ T3796] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.515322][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 35.525968][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 35.525991][ T29] audit: type=1400 audit(1788291653.806:264): avc: denied { write } for pid=3812 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.526020][ T29] audit: type=1400 audit(1788291653.806:265): avc: denied { nlmsg_write } for pid=3812 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.592318][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.738704][ T3823] IPVS: persistence engine module ip_vs_pe_À not found [ 35.745645][ T3821] IPVS: persistence engine module ip_vs_pe_À not found [ 35.870018][ T3830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'. [ 35.874184][ T3821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'. [ 35.877714][ T3823] netlink: 84 bytes leftover after parsing attributes in process `syz.4.97'. [ 35.985922][ T3836] loop1: detected capacity change from 0 to 4096 [ 36.002880][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.017148][ T29] audit: type=1400 audit(1788291654.306:266): avc: denied { write } for pid=3833 comm="syz.1.102" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.088003][ T3849] loop0: detected capacity change from 0 to 512 [ 36.139737][ T29] audit: type=1400 audit(1788291654.416:267): avc: denied { read } for pid=3848 comm="syz.0.109" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.327337][ T3862] netlink: 'syz.3.110': attribute type 3 has an invalid length. [ 36.327441][ T3862] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.110'. [ 36.880979][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.186134][ T3887] loop2: detected capacity change from 0 to 512 [ 37.187683][ T3887] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.187699][ T3887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.189436][ T3887] EXT4-fs (loop2): 1 truncate cleaned up [ 37.189745][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.254179][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 37.296481][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.338093][ T29] audit: type=1400 audit(1788291655.626:268): avc: denied { create } for pid=3905 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 37.338782][ T3904] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 37.349832][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 37.355728][ T3890] IPVS: persistence engine module ip_vs_pe_À not found [ 37.516599][ T29] audit: type=1400 audit(1788291655.806:269): avc: denied { connect } for pid=3919 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.575846][ T3929] loop0: detected capacity change from 0 to 512 [ 37.616733][ T3934] loop1: detected capacity change from 0 to 512 [ 37.627043][ T3934] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.632259][ T3934] EXT4-fs (loop1): 1 truncate cleaned up [ 37.632651][ T3934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.677164][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.677192][ T3941] syzkaller0: entered promiscuous mode [ 37.677210][ T3941] syzkaller0: entered allmulticast mode [ 37.943439][ T3967] netlink: 'syz.3.139': attribute type 3 has an invalid length. [ 38.911959][ T3987] syzkaller0: entered promiscuous mode [ 38.911979][ T3987] syzkaller0: entered allmulticast mode [ 39.003030][ T3989] syzkaller0: entered promiscuous mode [ 39.003052][ T3989] syzkaller0: entered allmulticast mode [ 39.257224][ T4011] syzkaller0: entered promiscuous mode [ 39.257244][ T4011] syzkaller0: entered allmulticast mode [ 39.353684][ T4013] syzkaller0: entered promiscuous mode [ 39.353714][ T4013] syzkaller0: entered allmulticast mode [ 39.462822][ T29] audit: type=1400 audit(1788291657.756:270): avc: denied { create } for pid=4020 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.462860][ T29] audit: type=1400 audit(1788291657.756:271): avc: denied { write } for pid=4020 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.197616][ T4147] loop3: detected capacity change from 0 to 512 [ 40.513557][ T3923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.566582][ T4153] syzkaller0: entered promiscuous mode [ 40.566610][ T4153] syzkaller0: entered allmulticast mode [ 40.603233][ T4158] __nla_validate_parse: 11 callbacks suppressed [ 40.603259][ T4158] netlink: 140 bytes leftover after parsing attributes in process `syz.3.177'. [ 40.806365][ T4190] 8021q: VLANs not supported on wg0 [ 40.815583][ T29] audit: type=1326 audit(1788291659.106:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.0.185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32f05e159 code=0x0 [ 40.846920][ T4200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'. [ 40.856664][ T4200] netlink: 84 bytes leftover after parsing attributes in process `syz.4.186'. [ 40.891920][ T29] audit: type=1400 audit(1788291659.186:273): avc: denied { create } for pid=4207 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.892019][ T29] audit: type=1400 audit(1788291659.186:274): avc: denied { setopt } for pid=4207 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.892045][ T29] audit: type=1400 audit(1788291659.186:275): avc: denied { read } for pid=4207 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.953990][ T29] audit: type=1400 audit(1788291659.246:276): avc: denied { write } for pid=4207 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.357620][ T4297] syzkaller0: entered promiscuous mode [ 41.357641][ T4297] syzkaller0: entered allmulticast mode [ 41.503865][ T4303] batman_adv: batadv0: Adding interface: veth0 [ 41.503887][ T4303] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.503918][ T4303] batman_adv: batadv0: Interface activated: veth0 [ 41.886038][ T4322] syzkaller0: entered promiscuous mode [ 41.886095][ T4322] syzkaller0: entered allmulticast mode [ 42.026702][ T4327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 43.747980][ T4184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.818999][ T4333] batman_adv: batadv0: Adding interface: veth0 [ 43.819019][ T4333] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.819055][ T4333] batman_adv: batadv0: Interface activated: veth0 [ 43.933778][ T4348] syzkaller0: entered promiscuous mode [ 43.933804][ T4348] syzkaller0: entered allmulticast mode [ 44.075184][ T4356] syzkaller0: entered promiscuous mode [ 44.075218][ T4356] syzkaller0: entered allmulticast mode [ 44.170990][ T4368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'. [ 44.180651][ T4368] netlink: 84 bytes leftover after parsing attributes in process `syz.1.219'. [ 44.689712][ T29] audit: type=1400 audit(1788291662.986:277): avc: denied { ioctl } for pid=4377 comm="syz.4.225" path="socket:[6080]" dev="sockfs" ino=6080 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.732927][ T4380] syzkaller0: entered promiscuous mode [ 44.732947][ T4380] syzkaller0: entered allmulticast mode [ 44.747137][ T29] audit: type=1400 audit(1788291663.036:278): avc: denied { create } for pid=4377 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 44.780011][ T29] audit: type=1400 audit(1788291663.076:279): avc: denied { execute } for pid=4377 comm="syz.4.225" path="/syzcgroup/net/syz4/cgroup.procs" dev="cgroup" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 47.099248][ T4358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.157652][ T29] audit: type=1400 audit(1788291665.446:280): avc: denied { ioctl } for pid=4397 comm="syz.2.232" path="socket:[6141]" dev="sockfs" ino=6141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.186501][ T29] audit: type=1400 audit(1788291665.486:281): avc: denied { bind } for pid=4397 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.209420][ T29] audit: type=1400 audit(1788291665.506:282): avc: denied { connect } for pid=4397 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.239263][ T29] audit: type=1400 audit(1788291665.526:283): avc: denied { write } for pid=4397 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.258961][ T29] audit: type=1400 audit(1788291665.556:284): avc: denied { read } for pid=4397 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.345101][ T4407] syzkaller0: entered promiscuous mode [ 47.345124][ T4407] syzkaller0: entered allmulticast mode [ 47.391479][ T4414] loop1: detected capacity change from 0 to 512 [ 47.479622][ T4414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.479691][ T4414] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.500149][ T4422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'. [ 47.573806][ T29] audit: type=1400 audit(1788291665.866:285): avc: denied { write } for pid=4413 comm="syz.1.240" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.682884][ T4414] syz.1.240 (4414) used greatest stack depth: 9728 bytes left [ 47.694343][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.964334][ T4435] netlink: 'syz.1.242': attribute type 2 has an invalid length. [ 48.103857][ T4435] loop1: detected capacity change from 0 to 1024 [ 48.143834][ T4435] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 48.401380][ T4435] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.242: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.417435][ T4435] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.418911][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.418945][ C1] EXT4-fs (loop1): initial error at time 1788291666: ext4_map_blocks:790: inode 3: block 2 [ 48.418985][ C1] EXT4-fs (loop1): last error at time 1788291666: ext4_map_blocks:790: inode 3: block 2 [ 48.457711][ T4435] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 48.457821][ T4435] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.242: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.457930][ T4435] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.480682][ T4435] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 48.480812][ T4435] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.242: Failed to acquire dquot type 0 [ 48.480893][ T4435] loop1: lost filesystem error report for type 5 error -117 [ 48.513802][ T4435] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 48.513962][ T4435] loop1: lost filesystem error report for type 5 error -117 [ 48.519642][ T4435] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.242: mark_inode_dirty error [ 48.519818][ T4435] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.520547][ T4435] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 48.520767][ T4435] EXT4-fs (loop1): 1 orphan inode deleted [ 48.547972][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.558779][ T98] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.558862][ T98] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.559179][ T98] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 48.559198][ T98] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 48.559269][ T98] loop1: lost filesystem error report for type 5 error -117 [ 48.776509][ T4458] syzkaller0: entered promiscuous mode [ 48.776610][ T4458] syzkaller0: entered allmulticast mode [ 48.870508][ T29] audit: type=1400 audit(1788291667.156:286): avc: denied { write } for pid=4434 comm="syz.1.242" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.937162][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.937416][ T31] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.937524][ T31] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.937742][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 48.937838][ T31] loop1: lost filesystem error report for type 5 error -117 [ 48.941236][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.941264][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 48.941389][ T3299] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 48.941408][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 48.941462][ T3299] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 48.941486][ T3299] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 48.941615][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.941641][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 48.963506][ T4456] IPVS: persistence engine module ip_vs_pe_À not found [ 49.055113][ T4456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 49.091946][ T4465] netlink: 48 bytes leftover after parsing attributes in process `syz.4.254'. [ 49.143357][ T4462] loop0: detected capacity change from 0 to 512 [ 49.185862][ T4472] 8021q: VLANs not supported on wg0 [ 49.256953][ T4477] syzkaller0: entered promiscuous mode [ 49.256981][ T4477] syzkaller0: entered allmulticast mode [ 49.305707][ T4484] loop3: detected capacity change from 0 to 128 [ 49.386153][ T4493] syzkaller0: entered promiscuous mode [ 49.386179][ T4493] syzkaller0: entered allmulticast mode [ 49.388408][ T4488] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 49.512791][ T4495] IPVS: persistence engine module ip_vs_pe_À not found [ 49.536116][ T4500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.268'. [ 49.595885][ T4488] loop0: detected capacity change from 0 to 1024 [ 49.616687][ T4488] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 49.639437][ T4503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 49.646045][ T4488] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.264: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.646157][ T4488] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.646512][ T4488] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.264: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.646612][ T4488] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.647061][ T4488] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.264: Failed to acquire dquot type 0 [ 49.647191][ T4488] loop0: lost filesystem error report for type 5 error -117 [ 49.648119][ T4488] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 49.648148][ T4488] loop0: lost filesystem error report for type 5 error -117 [ 49.648718][ T4488] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.264: mark_inode_dirty error [ 49.648854][ T4488] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.649313][ C0] EXT4-fs (loop0): error count since last fsck: 4 [ 49.649342][ C0] EXT4-fs (loop0): initial error at time 1788291667: ext4_map_blocks:790: inode 3: block 2 [ 49.649443][ C0] EXT4-fs (loop0): last error at time 1788291667: ext4_reserve_inode_write:6517 [ 49.651405][ T4488] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 49.651714][ T4488] EXT4-fs (loop0): 1 orphan inode deleted [ 49.656720][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.690307][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.690467][ T41] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.690605][ T41] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 49.690688][ T41] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 49.690772][ T41] loop0: lost filesystem error report for type 5 error -117 [ 49.690969][ T3296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.691090][ T3296] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 49.691176][ T3296] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 49.691270][ T3296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.896224][ T4512] 8021q: VLANs not supported on wg0 [ 49.985968][ T4525] syzkaller0: entered promiscuous mode [ 49.986007][ T4525] syzkaller0: entered allmulticast mode [ 50.038572][ T4527] IPVS: persistence engine module ip_vs_pe_À not found [ 50.076355][ T4530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.279'. [ 50.117342][ T4535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'. [ 50.146829][ T4532] netlink: 'syz.2.280': attribute type 2 has an invalid length. [ 50.150001][ T4527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.278'. [ 50.155937][ T4527] netlink: 84 bytes leftover after parsing attributes in process `syz.3.278'. [ 50.193620][ T4537] IPVS: persistence engine module ip_vs_pe_À not found [ 50.279503][ T4545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 50.332725][ T4546] bond0: invalid ARP target specified [ 50.430982][ T4532] loop2: detected capacity change from 0 to 1024 [ 50.471071][ T4532] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 50.523944][ T4532] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.280: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.524441][ T4532] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.280: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.524987][ T4532] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.280: Failed to acquire dquot type 0 [ 50.527279][ T4532] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 50.527865][ T4532] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.280: mark_inode_dirty error [ 50.528252][ T4532] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 50.528576][ T4532] EXT4-fs (loop2): 1 orphan inode deleted [ 50.541098][ T4532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.600346][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.600535][ T31] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.600777][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0 [ 50.601172][ T3298] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.601268][ T3298] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 50.601374][ T3298] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 50.601460][ T3298] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.686108][ T4552] 8021q: VLANs not supported on wg0 [ 50.756102][ T4564] syzkaller0: entered promiscuous mode [ 50.756215][ T4564] syzkaller0: entered allmulticast mode [ 50.925423][ T4578] netlink: 'syz.0.290': attribute type 3 has an invalid length. [ 51.185046][ T4577] syzkaller0: entered promiscuous mode [ 51.191243][ T4577] syzkaller0: entered allmulticast mode [ 51.354179][ T4589] IPVS: persistence engine module ip_vs_pe_À not found [ 51.396573][ T4594] netlink: 'syz.3.299': attribute type 2 has an invalid length. [ 51.458014][ T4601] loop3: detected capacity change from 0 to 1024 [ 51.467637][ T4601] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 51.474603][ T4601] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.299: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.474729][ T4601] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.299: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.474882][ T4601] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.299: Failed to acquire dquot type 0 [ 51.475076][ T4601] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 51.475176][ T4601] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.299: mark_inode_dirty error [ 51.475240][ T4601] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 51.475283][ T4601] EXT4-fs (loop3): 1 orphan inode deleted [ 51.475589][ T4601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.746947][ T4605] loop2: detected capacity change from 0 to 512 [ 51.770112][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.779857][ T400] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.794310][ T400] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 51.806269][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.810402][ T3297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 51.810486][ T3297] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 51.811036][ T4605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.811099][ T4605] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.811295][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.932645][ T4609] loop0: detected capacity change from 0 to 512 [ 52.018846][ T4616] syzkaller0: entered promiscuous mode [ 52.018873][ T4616] syzkaller0: entered allmulticast mode [ 52.040940][ T4611] IPVS: persistence engine module ip_vs_pe_À not found [ 52.066158][ T4613] 8021q: VLANs not supported on wg0 [ 52.119933][ T4619] vlan2: entered promiscuous mode [ 52.119957][ T4619] batadv0: entered promiscuous mode [ 52.131298][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.205021][ T4626] IPVS: persistence engine module ip_vs_pe_À not found [ 52.352550][ T4640] netlink: 'syz.0.313': attribute type 2 has an invalid length. [ 52.387087][ T4642] IPVS: persistence engine module ip_vs_pe_À not found [ 52.491501][ T4645] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 52.595174][ T4640] loop0: detected capacity change from 0 to 1024 [ 52.624111][ T4640] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 52.844636][ T4654] batman_adv: batadv0: Adding interface: veth0 [ 52.851382][ T4654] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.878680][ T4654] batman_adv: batadv0: Interface activated: veth0 [ 52.887196][ T4654] __nla_validate_parse: 13 callbacks suppressed [ 52.887219][ T4654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.317'. [ 52.922828][ T4640] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 2: comm syz.0.313: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.937370][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 52.937390][ C1] EXT4-fs (loop0): initial error at time 1788291671: ext4_map_blocks:790: inode 3: block 2 [ 52.937444][ C1] EXT4-fs (loop0): last error at time 1788291671: ext4_map_blocks:790: inode 3: block 2 [ 52.965513][ T4640] __quota_error: 147 callbacks suppressed [ 52.965561][ T4640] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 52.965958][ T4640] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 48: comm syz.0.313: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.998626][ T4640] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 52.998756][ T4640] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.313: Failed to acquire dquot type 0 [ 53.032404][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 53.043962][ T4640] EXT4-fs error (device loop0): ext4_evict_inode:269: inode #11: comm syz.0.313: mark_inode_dirty error [ 53.046631][ T4640] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 53.046940][ T4640] EXT4-fs (loop0): 1 orphan inode deleted [ 53.057896][ T358] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.058141][ T358] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 53.058160][ T358] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 53.063713][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.099583][ T29] audit: type=1400 audit(1788291671.376:424): avc: denied { write } for pid=4638 comm="syz.0.313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.103608][ T4651] loop1: detected capacity change from 0 to 512 [ 53.400358][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.412180][ T98] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.412283][ T98] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 53.412303][ T98] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 53.412814][ T3296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.412897][ T3296] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 53.413000][ T3296] EXT4-fs error (device loop0): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 53.413107][ T3296] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.479789][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 53.511566][ T4667] vlan2: entered promiscuous mode [ 53.511592][ T4667] batadv0: entered promiscuous mode [ 53.543494][ T4670] 8021q: VLANs not supported on wg0 [ 53.549699][ T29] audit: type=1326 audit(1788291671.846:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.0.323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32f05e159 code=0x0 [ 53.576755][ T4668] IPVS: persistence engine module ip_vs_pe_À not found [ 53.667420][ T29] audit: type=1326 audit(1788291671.956:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d2e9e159 code=0x7ffc0000 [ 53.667702][ T29] audit: type=1326 audit(1788291671.956:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d2e9e159 code=0x7ffc0000 [ 53.667735][ T29] audit: type=1326 audit(1788291671.956:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d2e9e159 code=0x7ffc0000 [ 53.668082][ T29] audit: type=1326 audit(1788291671.956:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.4.326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa7d2e9e159 code=0x7ffc0000 [ 53.695771][ T4683] loop3: detected capacity change from 0 to 512 [ 53.716839][ T4684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 53.781490][ T4683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.781549][ T4683] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.783533][ T4677] bond0: invalid ARP target specified [ 53.823283][ T4680] netlink: 84 bytes leftover after parsing attributes in process `syz.1.322'. [ 53.869163][ T4691] loop2: detected capacity change from 0 to 128 [ 53.953613][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.985661][ T4697] netlink: 'syz.4.333': attribute type 2 has an invalid length. [ 54.066482][ T4702] loop3: detected capacity change from 0 to 512 [ 54.130207][ T4705] netlink: 'syz.2.331': attribute type 3 has an invalid length. [ 54.130224][ T4705] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.331'. [ 54.193467][ T4702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.193628][ T4702] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.423644][ T4697] loop4: detected capacity change from 0 to 1024 [ 54.486139][ T4697] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 54.542487][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 54.546607][ T4697] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.333: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.546673][ T4697] fserror_report: 17 callbacks suppressed [ 54.546719][ T4697] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.548486][ T4697] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.333: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.548554][ T4697] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.548758][ T4697] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.333: Failed to acquire dquot type 0 [ 54.548998][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 54.549026][ C1] EXT4-fs (loop4): initial error at time 1788291672: ext4_map_blocks:790: inode 3: block 2 [ 54.549218][ C1] EXT4-fs (loop4): last error at time 1788291672: ext4_map_blocks:790: inode 3: block 48 [ 54.550598][ T4713] vlan2: entered promiscuous mode [ 54.551157][ T4697] fserror_report: 22 callbacks suppressed [ 54.551346][ T4697] loop4: lost filesystem error report for type 5 error -117 [ 54.553425][ T4697] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 54.553455][ T4697] loop4: lost filesystem error report for type 5 error -117 [ 54.555311][ T4697] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.333: mark_inode_dirty error [ 54.555362][ T4697] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.556204][ T4697] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 54.556685][ T4697] EXT4-fs (loop4): 1 orphan inode deleted [ 54.572745][ T4697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.577996][ T12] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.578144][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 54.616733][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.682003][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.686816][ T12] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.686916][ T12] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.686995][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 0 [ 54.687019][ T12] loop4: lost filesystem error report for type 5 error -117 [ 54.687471][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 54.687498][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 54.687578][ T3295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 54.687596][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 54.687697][ T3295] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 54.687790][ T3295] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.687907][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 54.687933][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 54.695306][ T4717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.339'. [ 55.175772][ T4699] loop1: detected capacity change from 0 to 512 [ 55.252031][ T4729] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 55.294560][ T4729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.571452][ T4737] loop0: detected capacity change from 0 to 512 [ 55.596016][ T4732] netlink: 84 bytes leftover after parsing attributes in process `syz.1.343'. [ 55.612257][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.612366][ T4737] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.734164][ T4729] bond1: (slave dummy0): making interface the new active one [ 55.742692][ T4729] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 55.862788][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.888145][ T4747] loop2: detected capacity change from 0 to 512 [ 55.913199][ T4747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.913270][ T4747] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.982784][ T4755] netlink: 'syz.4.350': attribute type 2 has an invalid length. [ 56.015120][ T4743] loop1: detected capacity change from 0 to 128 [ 56.314441][ T4743] bio_check_eod: 28 callbacks suppressed [ 56.314565][ T4743] syz.1.346: attempt to access beyond end of device [ 56.314565][ T4743] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 56.316527][ T4743] syz.1.346: attempt to access beyond end of device [ 56.316527][ T4743] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 56.342151][ T4743] syz.1.346: attempt to access beyond end of device [ 56.342151][ T4743] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 56.342321][ T4743] buffer_io_error: 14 callbacks suppressed [ 56.342340][ T4743] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 56.342527][ T4743] syz.1.346: attempt to access beyond end of device [ 56.342527][ T4743] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 56.342715][ T4743] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 56.345680][ T4743] syz.1.346: attempt to access beyond end of device [ 56.345680][ T4743] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 56.350022][ T4743] syz.1.346: attempt to access beyond end of device [ 56.350022][ T4743] loop1: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 56.350165][ T4743] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 56.350236][ T4743] syz.1.346: attempt to access beyond end of device [ 56.350236][ T4743] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 56.350306][ T4743] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 56.354053][ T4743] syz.1.346: attempt to access beyond end of device [ 56.354053][ T4743] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 56.357636][ T4743] syz.1.346: attempt to access beyond end of device [ 56.357636][ T4743] loop1: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 56.357778][ T4743] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 56.358188][ T4743] syz.1.346: attempt to access beyond end of device [ 56.358188][ T4743] loop1: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 56.358390][ T4743] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 56.364695][ T4743] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 56.364845][ T4743] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 56.376607][ T4762] netlink: 'syz.0.352': attribute type 3 has an invalid length. [ 56.376621][ T4762] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.352'. [ 56.392534][ T4743] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 56.392744][ T4743] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 56.584806][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.588343][ T4747] syz.2.348 (4747) used greatest stack depth: 9536 bytes left [ 56.885408][ T4773] netlink: 140 bytes leftover after parsing attributes in process `syz.1.354'. [ 57.267567][ T4775] IPVS: persistence engine module ip_vs_pe_À not found [ 57.297110][ T4755] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 57.358738][ T4755] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.350: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.358866][ T4755] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.376057][ T4755] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.350: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.376186][ T4755] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.385811][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 57.385850][ C0] EXT4-fs (loop4): initial error at time 1788291675: ext4_map_blocks:790: inode 3: block 2 [ 57.385883][ C0] EXT4-fs (loop4): last error at time 1788291675: ext4_map_blocks:790: inode 3: block 48 [ 57.399560][ T4755] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.350: Failed to acquire dquot type 0 [ 57.399630][ T4755] loop4: lost filesystem error report for type 5 error -117 [ 57.400892][ T4755] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 57.400944][ T4755] loop4: lost filesystem error report for type 5 error -117 [ 57.401329][ T4755] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.350: mark_inode_dirty error [ 57.401459][ T4755] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 57.402064][ T4755] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 57.402286][ T4755] EXT4-fs (loop4): 1 orphan inode deleted [ 57.407705][ T4755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.526337][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.527868][ T98] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.527964][ T98] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.528040][ T98] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 57.528063][ T98] loop4: lost filesystem error report for type 5 error -117 [ 57.528427][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.528453][ T3295] loop4: lost filesystem error report for type 5 error -117 [ 57.528579][ T3295] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 57.528688][ T3295] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 57.528792][ T3295] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.529053][ T3295] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.561528][ T4782] bond0: invalid ARP target specified [ 57.768624][ T4797] vlan2: entered promiscuous mode [ 57.768650][ T4797] batadv0: entered promiscuous mode [ 57.784446][ T4802] set_capacity_and_notify: 1 callbacks suppressed [ 57.784481][ T4802] loop4: detected capacity change from 0 to 128 [ 57.923791][ T4810] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 58.031525][ T4814] netlink: 'syz.0.366': attribute type 3 has an invalid length. [ 58.031549][ T4814] __nla_validate_parse: 1 callbacks suppressed [ 58.031563][ T4814] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.366'. [ 58.118455][ T4810] loop3: detected capacity change from 0 to 1024 [ 58.418218][ T4810] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 58.473636][ T4829] IPVS: persistence engine module ip_vs_pe_À not found [ 58.482768][ T4810] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.368: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.488919][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.488936][ C1] EXT4-fs (loop3): initial error at time 1788291676: ext4_map_blocks:790: inode 3: block 2 [ 58.488971][ C1] EXT4-fs (loop3): last error at time 1788291676: ext4_map_blocks:790: inode 3: block 2 [ 58.489425][ T4810] __quota_error: 645 callbacks suppressed [ 58.489522][ T4810] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 58.489672][ T4810] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.368: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.490052][ T4810] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 58.490303][ T4810] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.368: Failed to acquire dquot type 0 [ 58.491043][ T4810] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 58.491591][ T4810] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.368: mark_inode_dirty error [ 58.492147][ T4810] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 58.492431][ T4810] EXT4-fs (loop3): 1 orphan inode deleted [ 58.497256][ T4810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.510469][ T29] audit: type=1400 audit(1788291676.796:1068): avc: denied { write } for pid=4808 comm="syz.3.368" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.550596][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.553072][ T98] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.553160][ T98] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 58.553178][ T98] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 58.553629][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.553758][ T3297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 58.553820][ T3297] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 58.554145][ T3297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.637575][ T4833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 59.043011][ T4847] netlink: 140 bytes leftover after parsing attributes in process `syz.3.377'. [ 59.108106][ T4853] loop0: detected capacity change from 0 to 128 [ 59.246560][ T4862] netlink: 'syz.4.374': attribute type 3 has an invalid length. [ 59.246609][ T4862] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.374'. [ 59.437534][ T4867] netlink: 'syz.1.383': attribute type 2 has an invalid length. [ 59.533273][ T4869] loop1: detected capacity change from 0 to 1024 [ 59.550777][ T4869] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 59.570714][ T4869] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.383: lblock 2 mapped to illegal pblock 2 (length 1) [ 59.591305][ T4869] fserror_report: 5 callbacks suppressed [ 59.591322][ T4869] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.599138][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 59.599161][ C1] EXT4-fs (loop1): initial error at time 1788291677: ext4_map_blocks:790: inode 3: block 2 [ 59.599194][ C1] EXT4-fs (loop1): last error at time 1788291677: ext4_map_blocks:790: inode 3: block 2 [ 59.608268][ T4869] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 59.608292][ T4869] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.383: lblock 0 mapped to illegal pblock 48 (length 1) [ 59.608420][ T4869] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.608506][ T4869] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 59.608523][ T4869] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.383: Failed to acquire dquot type 0 [ 59.608582][ T4869] fserror_report: 8 callbacks suppressed [ 59.608592][ T4869] loop1: lost filesystem error report for type 5 error -117 [ 59.608732][ T4869] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 59.608751][ T4869] loop1: lost filesystem error report for type 5 error -117 [ 59.608823][ T4869] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.383: mark_inode_dirty error [ 59.608847][ T4869] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.609485][ T4869] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 59.609656][ T4869] EXT4-fs (loop1): 1 orphan inode deleted [ 59.610129][ T4869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.614908][ T29] audit: type=1400 audit(1788291677.896:1069): avc: denied { write } for pid=4865 comm="syz.1.383" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.744502][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.744839][ T4841] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.744874][ T4841] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.745144][ T4841] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 59.745163][ T4841] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 0 [ 59.745186][ T4841] loop1: lost filesystem error report for type 5 error -117 [ 59.745416][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.745494][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 59.745554][ T3299] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 59.745572][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 59.745678][ T3299] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 59.745767][ T3299] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.745834][ T3299] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 59.745893][ T3299] loop1: lost filesystem error report for type 5 error -117 [ 60.114918][ T4883] loop1: detected capacity change from 0 to 512 [ 60.149683][ T4883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.149751][ T4883] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.154351][ T4886] netlink: 140 bytes leftover after parsing attributes in process `syz.0.388'. [ 60.314929][ T4900] IPVS: persistence engine module ip_vs_pe_À not found [ 60.376150][ T4900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'. [ 60.489811][ T29] audit: type=1400 audit(1788291678.756:1070): avc: denied { write } for pid=4880 comm="syz.1.386" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.506620][ T4914] vlan2: entered promiscuous mode [ 60.515242][ T29] audit: type=1400 audit(1788291678.806:1071): avc: denied { mount } for pid=4888 comm="syz.2.390" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.527650][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.791659][ T4924] bond0: invalid ARP target specified [ 60.851408][ T4928] netlink: 'syz.4.400': attribute type 3 has an invalid length. [ 60.851487][ T4928] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.400'. [ 60.969308][ T4932] netlink: 140 bytes leftover after parsing attributes in process `syz.3.403'. [ 61.409305][ T31] IPVS: starting estimator thread 0... [ 61.580715][ T4942] IPVS: using max 2304 ests per chain, 115200 per kthread [ 61.602614][ T4945] IPVS: persistence engine module ip_vs_pe_À not found [ 61.703316][ T4953] loop4: detected capacity change from 0 to 512 [ 61.712970][ T4953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.713037][ T4953] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.742635][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.783616][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'. [ 61.861458][ T4970] bond0: invalid ARP target specified [ 62.429625][ T4995] netlink: 'syz.4.421': attribute type 3 has an invalid length. [ 62.429661][ T4995] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.421'. [ 62.549511][ T4999] loop0: detected capacity change from 0 to 512 [ 62.568042][ T4999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.568214][ T4999] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.675853][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.929639][ T5008] IPVS: persistence engine module ip_vs_pe_À not found [ 63.020729][ T5020] bond0: invalid ARP target specified [ 63.354750][ T5031] syzkaller0: entered promiscuous mode [ 63.354777][ T5031] syzkaller0: entered allmulticast mode [ 63.364354][ T5031] __nla_validate_parse: 1 callbacks suppressed [ 63.364370][ T5031] netlink: 2724 bytes leftover after parsing attributes in process `syz.4.433'. [ 63.364409][ T5031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 63.364489][ T5031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 63.449777][ T5037] syzkaller0: entered promiscuous mode [ 63.449835][ T5037] syzkaller0: entered allmulticast mode [ 63.523648][ T5041] loop3: detected capacity change from 0 to 512 [ 63.534436][ T5041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.534564][ T5041] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.559021][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.666598][ T5052] loop1: detected capacity change from 0 to 512 [ 63.775744][ T5062] loop4: detected capacity change from 0 to 512 [ 63.817710][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 63.817783][ T29] audit: type=1326 audit(1788291682.106:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.838162][ T5056] IPVS: persistence engine module ip_vs_pe_À not found [ 63.845523][ T5070] bond0: invalid ARP target specified [ 63.849921][ T29] audit: type=1326 audit(1788291682.136:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.849969][ T29] audit: type=1326 audit(1788291682.136:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.849995][ T29] audit: type=1326 audit(1788291682.136:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.850023][ T29] audit: type=1326 audit(1788291682.136:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.850081][ T29] audit: type=1326 audit(1788291682.136:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.850114][ T29] audit: type=1326 audit(1788291682.136:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.850139][ T29] audit: type=1326 audit(1788291682.136:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.850181][ T29] audit: type=1326 audit(1788291682.136:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.856609][ T29] audit: type=1326 audit(1788291682.136:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb3f56ae159 code=0x7ffc0000 [ 63.916324][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'. [ 63.978733][ T5077] netlink: 'syz.3.443': attribute type 3 has an invalid length. [ 63.978831][ T5077] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.443'. [ 64.187474][ T5083] syzkaller0: entered promiscuous mode [ 64.187492][ T5083] syzkaller0: entered allmulticast mode [ 64.198425][ T5083] netlink: 2724 bytes leftover after parsing attributes in process `syz.0.448'. [ 64.198469][ T5083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 64.198710][ T5083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 64.466014][ T5092] loop0: detected capacity change from 0 to 128 [ 64.508663][ T5092] bio_check_eod: 70 callbacks suppressed [ 64.508693][ T5092] syz.0.450: attempt to access beyond end of device [ 64.508693][ T5092] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 64.513233][ T5092] syz.0.450: attempt to access beyond end of device [ 64.513233][ T5092] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 64.516938][ T5092] syz.0.450: attempt to access beyond end of device [ 64.516938][ T5092] loop0: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 64.517041][ T5092] buffer_io_error: 42 callbacks suppressed [ 64.517120][ T5092] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 64.517199][ T5092] syz.0.450: attempt to access beyond end of device [ 64.517199][ T5092] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 64.517270][ T5092] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 64.521126][ T5092] syz.0.450: attempt to access beyond end of device [ 64.521126][ T5092] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 64.524655][ T5092] syz.0.450: attempt to access beyond end of device [ 64.524655][ T5092] loop0: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 64.524810][ T5092] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 64.524938][ T5092] syz.0.450: attempt to access beyond end of device [ 64.524938][ T5092] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 64.525008][ T5092] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 64.527334][ T5092] syz.0.450: attempt to access beyond end of device [ 64.527334][ T5092] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 64.535165][ T5092] syz.0.450: attempt to access beyond end of device [ 64.535165][ T5092] loop0: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 64.535325][ T5092] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 64.535433][ T5092] syz.0.450: attempt to access beyond end of device [ 64.535433][ T5092] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 64.535697][ T5092] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 64.550007][ T5092] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 64.550188][ T5092] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 64.557763][ T5094] loop2: detected capacity change from 0 to 512 [ 64.867195][ T5092] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 64.867484][ T5092] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 64.879959][ T5094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.880168][ T5094] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.969688][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.187725][ T5120] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 65.213910][ T5116] loop2: detected capacity change from 0 to 512 [ 65.330816][ T5128] syzkaller0: entered promiscuous mode [ 65.330844][ T5128] syzkaller0: entered allmulticast mode [ 65.346615][ T5128] netlink: 2724 bytes leftover after parsing attributes in process `syz.4.460'. [ 65.346658][ T5128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 65.373733][ T5131] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.511020][ T5150] bond0: invalid ARP target specified [ 65.709899][ T5169] syzkaller0: entered promiscuous mode [ 65.709990][ T5169] syzkaller0: entered allmulticast mode [ 65.732747][ T5164] loop4: detected capacity change from 0 to 512 [ 65.863051][ T5187] bond0: invalid ARP target specified [ 65.961084][ T5201] syzkaller0: entered promiscuous mode [ 65.961111][ T5201] syzkaller0: entered allmulticast mode [ 66.201355][ T5206] loop3: detected capacity change from 0 to 512 [ 66.390998][ T5227] bond0: invalid ARP target specified [ 66.505328][ T5241] syzkaller0: entered promiscuous mode [ 66.505350][ T5241] syzkaller0: entered allmulticast mode [ 66.528139][ T5243] vlan2: entered promiscuous mode [ 66.528163][ T5243] batadv0: entered promiscuous mode [ 66.652681][ T5253] loop4: detected capacity change from 0 to 4096 [ 66.679967][ T5253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.813045][ T5275] netlink: 'syz.0.513': attribute type 1 has an invalid length. [ 66.827259][ T5275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.013643][ T5275] bond1: (slave dummy0): making interface the new active one [ 67.022616][ T5275] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 67.144532][ T5282] syzkaller0: entered promiscuous mode [ 67.144556][ T5282] syzkaller0: entered allmulticast mode [ 67.251536][ T5264] ================================================================== [ 67.251561][ T5264] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 67.251587][ T5264] [ 67.251592][ T5264] write to 0xffff8881004bd29c of 4 bytes by task 5278 on cpu 0: [ 67.251602][ T5264] xas_set_mark+0x12b/0x140 [ 67.251617][ T5264] __folio_start_writeback+0x16b/0x370 [ 67.251635][ T5264] ext4_bio_write_folio+0x5a2/0xa10 [ 67.251646][ T5264] mpage_process_page_bufs+0x484/0x5e0 [ 67.251662][ T5264] mpage_prepare_extent_to_map+0x83e/0xca0 [ 67.251678][ T5264] ext4_do_writepages+0x70f/0x2870 [ 67.251690][ T5264] ext4_writepages+0x191/0x300 [ 67.251705][ T5264] do_writepages+0x1b9/0x300 [ 67.251724][ T5264] file_write_and_wait_range+0x178/0x2f0 [ 67.251758][ T5264] ext4_sync_file+0x114/0x5c0 [ 67.251783][ T5264] vfs_fsync_range+0xc5/0xe0 [ 67.251806][ T5264] ext4_buffered_write_iter+0x427/0x480 [ 67.251824][ T5264] ext4_file_write_iter+0x36e/0x1020 [ 67.251836][ T5264] iter_file_splice_write+0x6a0/0xa60 [ 67.251855][ T5264] direct_splice_actor+0x158/0x280 [ 67.251874][ T5264] splice_direct_to_actor+0x2f9/0x680 [ 67.251892][ T5264] do_splice_direct+0x119/0x1a0 [ 67.251911][ T5264] do_sendfile+0x37d/0x640 [ 67.251921][ T5264] __x64_sys_sendfile64+0x105/0x150 [ 67.251940][ T5264] x64_sys_call+0x1015/0x2550 [ 67.251956][ T5264] do_syscall_64+0x112/0x360 [ 67.251973][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.251986][ T5264] [ 67.251990][ T5264] read to 0xffff8881004bd29c of 4 bytes by task 5264 on cpu 1: [ 67.252000][ T5264] file_write_and_wait_range+0x130/0x2f0 [ 67.252019][ T5264] ext4_sync_file+0x114/0x5c0 [ 67.252032][ T5264] vfs_fsync_range+0xc5/0xe0 [ 67.252044][ T5264] ext4_buffered_write_iter+0x427/0x480 [ 67.252057][ T5264] ext4_file_write_iter+0x36e/0x1020 [ 67.252070][ T5264] iter_file_splice_write+0x6a0/0xa60 [ 67.252088][ T5264] direct_splice_actor+0x158/0x280 [ 67.252107][ T5264] splice_direct_to_actor+0x2f9/0x680 [ 67.252126][ T5264] do_splice_direct+0x119/0x1a0 [ 67.252144][ T5264] do_sendfile+0x37d/0x640 [ 67.252153][ T5264] __x64_sys_sendfile64+0x105/0x150 [ 67.252176][ T5264] x64_sys_call+0x1015/0x2550 [ 67.252204][ T5264] do_syscall_64+0x112/0x360 [ 67.252232][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.252257][ T5264] [ 67.252261][ T5264] value changed: 0x05000021 -> 0x02000021 [ 67.252275][ T5264] [ 67.252280][ T5264] Reported by Kernel Concurrency Sanitizer on: [ 67.252312][ T5264] CPU: 1 UID: 0 PID: 5264 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.252342][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.252356][ T5264] ================================================================== [ 69.686118][ T5257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.714096][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.