last executing test programs: 9m3.83241345s ago: executing program 32 (id=1264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0xbc0, &(0x7f0000001480)={0x0, 0xc6b1, 0x80, 0x0, 0x4e}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001500)="5aaa0073fe7710faf973eb45ccddfa1ef8fa0d76262b6be90097a5939155b7ad533f431922908da53f9bbe37d411eacedc5ef99870b469b9b81102d479aad60f5188988847b24d662e7742938f67c74f7ea74e388aba1c87d9a744c5823b509dba2dddc1c9e915d0ead88d16b04b2bc71e14fa07d5bbcc9e8fa8ed297db0338e9c8d7c1b5a89fb7478d503535b257f4648dbe938a8d8a148100000000a5ebfed1bcf596e43b4100f3c1906d61af0f23f749b1350de27089fbd", 0xb9}], 0x1, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 8m25.356555702s ago: executing program 33 (id=1900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) close_range(r0, 0xffffffffffffffff, 0x0) 8m23.98073696s ago: executing program 34 (id=2244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r2, 0x47, "236dc7816a4580792f3eddb85ed6d26f0fc4dbb424748e6bb5ae03a735f747c21e99a329ea1b2d3ab68b57b549ec876f6b9293277868ec7321b7acec7ea617e32d302e06b5fd2f"}, &(0x7f0000000080)=0x4f) 8m9.806302268s ago: executing program 35 (id=2585): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 7m31.223613685s ago: executing program 36 (id=3443): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe80000000"], 0x610) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 7m5.727550938s ago: executing program 37 (id=4060): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39b}) syz_clone(0xc0100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 6m58.58192638s ago: executing program 38 (id=4228): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x4}, 0x8) 6m48.701356206s ago: executing program 39 (id=4538): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0xa00, 0x0, 0x3) 6m48.449544428s ago: executing program 40 (id=4546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 6m41.282488711s ago: executing program 41 (id=4695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x1f}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 6m39.824687333s ago: executing program 42 (id=4725): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m33.539663262s ago: executing program 43 (id=4852): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x31, 0xffffffffffffffff, 0xf5b64000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m22.83535754s ago: executing program 44 (id=5177): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000001) 5m47.256820012s ago: executing program 45 (id=6202): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) 5m40.462799486s ago: executing program 46 (id=6413): perf_event_open(&(0x7f0000000000)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x80000001}, 0x10131a, 0x3, 0x0, 0x6, 0xfff, 0x4, 0xe, 0x0, 0x0, 0x0, 0x100003}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 5m36.604557726s ago: executing program 47 (id=6478): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e22, @rand_addr=0x64010105}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r2, 0x1}, 0x8) 5m21.517252099s ago: executing program 48 (id=6853): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m0.898531014s ago: executing program 49 (id=7454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0xfffffff9, 0x4) 4m30.253345183s ago: executing program 50 (id=8065): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB=':'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4m3.51427728s ago: executing program 51 (id=8358): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x885) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="a5", 0x1}], 0x1}}], 0x1, 0x80) 3m40.286030374s ago: executing program 52 (id=9239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 3m12.434667076s ago: executing program 53 (id=9875): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 3m9.258098072s ago: executing program 54 (id=9624): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 2m52.959195065s ago: executing program 55 (id=10261): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 2m50.40820722s ago: executing program 2 (id=10293): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2m49.421891579s ago: executing program 2 (id=10308): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x7, 0x4, 0x11, "1576b0940700000000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x8000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2000}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2m49.3953293s ago: executing program 2 (id=10309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) io_setup(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000"], 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 2m49.168980731s ago: executing program 2 (id=10313): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 2m48.979663121s ago: executing program 2 (id=10318): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet(0x2, 0x3, 0x6) r3 = dup3(r1, r2, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, 0x0, 0x0) 2m48.884204675s ago: executing program 2 (id=10319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m48.884103975s ago: executing program 56 (id=10319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m36.851123928s ago: executing program 1 (id=10559): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) 2m36.831716449s ago: executing program 1 (id=10560): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002580)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0x0, 'netdevsim0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x6}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x3, 0x7, 0x0, 0x0, "1ef6d9a7fc5a4d9f18284b4e213b1c98e6429a579587f69191291da64e14ec45f69e3f1dbbc1b4210a9709b96afe412fcc93212c57120c3bf1dbcc49d0f6200d"}}}, {{@ip={@empty, @broadcast, 0xff, 0xffffffff, 'ip_vti0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x33, 0x6, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x4, 0x4, 0x2, 0x3], 0x2}, {0xffffffffffffffff, [0x4, 0x6, 0x2, 0x1, 0x1, 0x6], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/68}, {&(0x7f0000000280)=""/177}, {&(0x7f0000000340)=""/54}, {&(0x7f0000000380)=""/22}, {&(0x7f00000003c0)=""/121}, {&(0x7f0000000440)=""/19}, {&(0x7f0000000480)=""/151}], 0x0, &(0x7f00000005c0)=""/101}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/59}, {&(0x7f0000000680)=""/143}, {&(0x7f0000000740)=""/4096}, {&(0x7f0000001740)=""/15}, {&(0x7f0000001780)=""/215}, {&(0x7f0000001880)=""/4}, {&(0x7f00000018c0)=""/237}, {&(0x7f00000019c0)=""/76}, {&(0x7f0000001a40)=""/211}, {&(0x7f0000001e80)=""/16}], 0x0, &(0x7f0000001c40)=""/122}, 0x3ca}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001cc0)=""/212}, {&(0x7f0000001dc0)=""/188}, {&(0x7f0000002500)=""/118}, {&(0x7f0000001f00)=""/234}, {&(0x7f0000002000)=""/94}, {&(0x7f0000002080)=""/132}, {&(0x7f0000002140)=""/185}, {&(0x7f0000002200)=""/223}, {&(0x7f0000002300)=""/119}]}, 0x4}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2m36.831451929s ago: executing program 1 (id=10561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x5, @private0, 0xe01c}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) 2m36.687166746s ago: executing program 1 (id=10564): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 2m36.686844326s ago: executing program 1 (id=10565): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 2m36.520145914s ago: executing program 1 (id=10569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dedbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m36.471841787s ago: executing program 57 (id=10569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dedbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m32.896256462s ago: executing program 6 (id=10638): timer_create(0x0, &(0x7f0000000200)={0x0, 0x31, 0xfffffffffffffffe, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x195) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000002340)=[{0x4, 0xfffe, 0x800}], 0x1) semop(r0, &(0x7f0000000240)=[{0x1, 0xce95}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m32.3280958s ago: executing program 6 (id=10644): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100000000000000000000000000008500000075"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m32.1407034s ago: executing program 6 (id=10651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x9}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2m31.876610122s ago: executing program 6 (id=10659): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2m31.502727311s ago: executing program 6 (id=10665): ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000080)={0x1, 0x6, 0x6, 0xd, 0xd021, 0x3}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a40)={r0, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r1, 0x1}, 0x20) 2m30.816554855s ago: executing program 6 (id=10676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000d06243303e", @ANYRES32=0x0], 0x50) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m30.759675238s ago: executing program 58 (id=10676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000d06243303e", @ANYRES32=0x0], 0x50) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m45.868493048s ago: executing program 8 (id=11526): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1m45.804644022s ago: executing program 8 (id=11529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m45.704440546s ago: executing program 8 (id=11532): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = msgget(0x3, 0x710) msgget(0x2, 0x624) r1 = msgget(0x1, 0x240) msgctl$IPC_RMID(r0, 0x0) msgget(0x3, 0x693) msgctl$IPC_RMID(r1, 0x0) 1m45.704022736s ago: executing program 8 (id=11533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m45.6234948s ago: executing program 8 (id=11535): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) acct(0x0) acct(0x0) 1m45.43212007s ago: executing program 8 (id=11542): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x40000006}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) 1m45.43200719s ago: executing program 59 (id=11542): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x40000006}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) 32.560284748s ago: executing program 7 (id=12841): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 32.445143114s ago: executing program 7 (id=12842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.235930274s ago: executing program 7 (id=12844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x4040000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.183326747s ago: executing program 7 (id=12845): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) 32.147549878s ago: executing program 7 (id=12848): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 31.256960762s ago: executing program 7 (id=12860): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 31.217896614s ago: executing program 60 (id=12860): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) 3.594695815s ago: executing program 0 (id=13300): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 3.510304589s ago: executing program 0 (id=13301): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x4100, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40400d5) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 3.178393705s ago: executing program 9 (id=13304): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x3, 0x46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x8, 0x10006}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x7, 0x10001, 0x4, 0x4001, r1, 0xd0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0xf}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000000)="d521", &(0x7f0000000380)=""/221}, 0x20) 3.095336039s ago: executing program 9 (id=13306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 2.8693731s ago: executing program 9 (id=13307): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3}, 0x8) 2.619106492s ago: executing program 0 (id=13309): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x837, 0x0, 0x0, &(0x7f0000000140)) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 1.687525538s ago: executing program 9 (id=13318): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) r4 = socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$can_bcm(r4, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x1) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 1.411041152s ago: executing program 3 (id=13325): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) 1.351674095s ago: executing program 9 (id=13326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x40804) 1.259523919s ago: executing program 0 (id=13329): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x6a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22a6}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="186b9099560842f7ffffffffffff", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(0x0, 0x0, 0x400010, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.180654914s ago: executing program 0 (id=13331): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000499000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) 1.107834937s ago: executing program 3 (id=13332): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9d", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f21db11c7101278ef4c7", 0xe2}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 994.534303ms ago: executing program 4 (id=13334): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 824.601741ms ago: executing program 4 (id=13337): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r4, 0x1, 0x70bd2c, 0x8, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}]}, 0x48}}, 0x20000084) 818.379521ms ago: executing program 0 (id=13338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c014}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 780.998523ms ago: executing program 4 (id=13339): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 719.591566ms ago: executing program 3 (id=13340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 689.541137ms ago: executing program 3 (id=13342): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 578.766712ms ago: executing program 5 (id=13346): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fbdbdf250300000005797a5f74"], 0x34}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 556.726543ms ago: executing program 5 (id=13347): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = socket$kcm(0x2, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) dup3(r1, r0, 0x80000) 533.831445ms ago: executing program 5 (id=13348): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) 533.378775ms ago: executing program 4 (id=13349): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r3, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) 430.29355ms ago: executing program 9 (id=13350): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 427.63672ms ago: executing program 3 (id=13351): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x40) socket$inet6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 371.832272ms ago: executing program 5 (id=13352): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)=""/161, 0xa1}], 0x1}, 0x100}], 0x1, 0x400101a2, 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) 305.216446ms ago: executing program 4 (id=13353): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x40000}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) 119.536065ms ago: executing program 4 (id=13354): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r4 = eventfd(0x3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r4, 0x1) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40008020, 0x0) 113.644925ms ago: executing program 5 (id=13355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) close(r2) 83.674577ms ago: executing program 5 (id=13356): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=13357): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) kernel console output (not intermixed with test programs): [ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.839855][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.885966][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.936702][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.987091][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.024509][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 515.137609][ T50] bridge_slave_1: left allmulticast mode [ 515.146787][ T50] bridge_slave_1: left promiscuous mode [ 515.153149][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.161565][ T50] bridge_slave_0: left allmulticast mode [ 515.167286][ T50] bridge_slave_0: left promiscuous mode [ 515.173312][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.283167][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.292433][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.302198][ T50] bond0 (unregistering): Released all slaves [ 515.321514][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.328734][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.336156][ T7407] bridge_slave_0: entered allmulticast mode [ 515.343182][ T7407] bridge_slave_0: entered promiscuous mode [ 515.349987][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.357234][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.364516][ T7407] bridge_slave_1: entered allmulticast mode [ 515.370924][ T7407] bridge_slave_1: entered promiscuous mode [ 515.382019][ T50] hsr_slave_0: left promiscuous mode [ 515.387678][ T50] hsr_slave_1: left promiscuous mode [ 515.393861][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.401457][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.413009][ T50] veth1_macvtap: left promiscuous mode [ 515.418600][ T50] veth0_macvtap: left promiscuous mode [ 515.424203][ T50] veth1_vlan: left promiscuous mode [ 515.429432][ T50] veth0_vlan: left promiscuous mode [ 515.492892][ T50] team0 (unregistering): Port device team_slave_1 removed [ 515.504463][ T50] team0 (unregistering): Port device team_slave_0 removed [ 515.544640][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.556052][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.590701][ T7407] team0: Port device team_slave_0 added [ 515.623438][ T7407] team0: Port device team_slave_1 added [ 515.671134][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.683945][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.715042][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.743403][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.753513][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.783432][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.838508][ T7407] hsr_slave_0: entered promiscuous mode [ 515.855668][ T7407] hsr_slave_1: entered promiscuous mode [ 515.870126][ T7407] debugfs: 'hsr0' already exists in 'hsr' [ 515.877393][ T7407] Cannot create hsr debugfs directory [ 516.341207][ T7537] erspan0: left allmulticast mode [ 516.352901][ T7452] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.371915][ T7452] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.400854][ T7452] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.409403][ T7555] loop7: detected capacity change from 0 to 8192 [ 516.419430][ T7452] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.609448][ T7407] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 516.697056][ T7407] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 516.709446][ T7407] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 516.726653][ T7407] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 516.796595][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.820402][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.839722][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.846922][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.876458][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.883550][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.055394][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.202164][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11585'. [ 517.211655][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11585'. [ 517.230464][ T7407] veth0_vlan: entered promiscuous mode [ 517.239014][ T7407] veth1_vlan: entered promiscuous mode [ 517.264166][ T7407] veth0_macvtap: entered promiscuous mode [ 517.273433][ T7407] veth1_macvtap: entered promiscuous mode [ 517.285235][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.299493][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.312068][ T1988] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.331095][ T1988] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.355438][ T1988] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.379352][ T1988] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.811343][ T7744] tipc: Failed to remove unknown binding: 66,1,1/9611946:4180917132/4180917134 [ 517.820449][ T7744] tipc: Failed to remove unknown binding: 66,1,1/9611946:4180917132/4180917134 [ 517.908795][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 517.908848][ T28] audit: type=1400 audit(2000000375.224:5004): avc: denied { create } for pid=7748 comm="syz.0.11604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 517.940833][ T28] audit: type=1400 audit(2000000375.224:5005): avc: denied { ioctl } for pid=7748 comm="syz.0.11604" path="socket:[131848]" dev="sockfs" ino=131848 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 517.984602][ T7733] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 518.006684][ T7425] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.036103][ T7425] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.036422][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11605'. [ 518.072053][ T7425] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.085478][ T7425] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.098243][ T7425] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.110015][ T7425] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.119752][ T7425] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.143592][ T7425] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.153292][ T7880] xt_hashlimit: size too large, truncated to 1048576 [ 519.280900][ T7898] netlink: 'syz.4.11633': attribute type 1 has an invalid length. [ 519.372455][ T7898] bond8: (slave geneve3): making interface the new active one [ 519.390927][ T7898] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 519.411993][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 519.446067][ T7032] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 519.483881][ T7032] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 519.517339][ T7032] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 521.008833][ T7974] loop7: detected capacity change from 0 to 512 [ 521.025789][ T7974] EXT4-fs: inline encryption not supported [ 521.038513][ T7974] EXT4-fs: Ignoring removed i_version option [ 521.055381][ T7974] EXT4-fs (loop7): 1 orphan inode deleted [ 521.068683][ T7974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.182746][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.948251][ T8015] loop3: detected capacity change from 0 to 128 [ 522.151488][ T28] audit: type=1326 audit(2000000379.474:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.221485][ T28] audit: type=1326 audit(2000000379.474:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.296555][ T28] audit: type=1326 audit(2000000379.474:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.352137][ T28] audit: type=1326 audit(2000000379.474:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.408448][ T28] audit: type=1326 audit(2000000379.474:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.471875][ T28] audit: type=1326 audit(2000000379.474:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.587664][ T28] audit: type=1326 audit(2000000379.474:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 522.658556][ T28] audit: type=1326 audit(2000000379.474:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8022 comm="syz.3.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 523.183433][ T8067] loop3: detected capacity change from 0 to 256 [ 523.224850][ T8067] FAT-fs (loop3): Directory bread(block 64) failed [ 523.241273][ T8067] FAT-fs (loop3): Directory bread(block 65) failed [ 523.248115][ T8067] FAT-fs (loop3): Directory bread(block 66) failed [ 523.261098][ T8067] FAT-fs (loop3): Directory bread(block 67) failed [ 523.274328][ T8067] FAT-fs (loop3): Directory bread(block 68) failed [ 523.287642][ T8067] FAT-fs (loop3): Directory bread(block 69) failed [ 523.302175][ T8067] FAT-fs (loop3): Directory bread(block 70) failed [ 523.315236][ T8067] FAT-fs (loop3): Directory bread(block 71) failed [ 523.331131][ T8067] FAT-fs (loop3): Directory bread(block 72) failed [ 523.342021][ T8067] FAT-fs (loop3): Directory bread(block 73) failed [ 523.412042][ T7425] kworker/u8:23: attempt to access beyond end of device [ 523.412042][ T7425] loop3: rw=1, sector=1224, nr_sectors = 16 limit=256 [ 523.555601][ T8076] loop3: detected capacity change from 0 to 512 [ 523.571495][ T8076] EXT4-fs: test_dummy_encryption option not supported [ 524.107804][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11704'. [ 524.979570][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11722'. [ 525.023696][ T8139] xt_hashlimit: size too large, truncated to 1048576 [ 525.242801][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11728'. [ 525.258318][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 525.258332][ T28] audit: type=1326 audit(2000000382.584:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8140 comm="syz.9.11724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57bc5c799 code=0x0 [ 525.373416][ T28] audit: type=1400 audit(2000000382.694:5018): avc: denied { execmod } for pid=8162 comm="syz.0.11732" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=138214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 525.490960][ T28] audit: type=1326 audit(2000000382.804:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.0.11736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0d01dc799 code=0x0 [ 525.663832][ T8181] loop3: detected capacity change from 0 to 512 [ 525.679977][ T8181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 525.706664][ T8181] EXT4-fs (loop3): 1 truncate cleaned up [ 525.719811][ T8181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.749208][ T28] audit: type=1400 audit(2000000383.064:5020): avc: denied { watch_reads } for pid=8180 comm="syz.3.11740" path="/237/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 525.787818][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.954003][ T8192] ipip0: entered promiscuous mode [ 526.526733][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11751'. [ 526.536121][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11751'. [ 527.839025][ T8255] tipc: Started in network mode [ 527.853477][ T8255] tipc: Node identity ac14140f, cluster identity 4711 [ 527.874769][ T8255] tipc: New replicast peer: 10.1.1.0 [ 527.880102][ T8255] tipc: Enabled bearer , priority 10 [ 527.906761][ T8255] tipc: New replicast peer: 100.1.1.2 [ 528.034775][ T8271] loop7: detected capacity change from 0 to 512 [ 528.098180][ T8271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.164578][ T8271] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 528.271628][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.871756][T31158] tipc: Node number set to 2886997007 [ 529.054072][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11795'. [ 529.154444][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11799'. [ 529.193860][ T8339] netlink: 196 bytes leftover after parsing attributes in process `syz.7.11799'. [ 529.221319][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11799'. [ 529.255023][ T8339] netlink: 196 bytes leftover after parsing attributes in process `syz.7.11799'. [ 530.171698][ T28] audit: type=1326 audit(2000000387.484:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8388 comm="syz.3.11809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x0 [ 530.871255][ T8427] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11817'. [ 530.900702][ T8427] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11817'. [ 531.773080][ T28] audit: type=1400 audit(2000000389.094:5022): avc: denied { connect } for pid=8438 comm="syz.7.11822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 532.049013][ T8441] loop3: detected capacity change from 0 to 512 [ 532.309937][ T8447] loop7: detected capacity change from 0 to 1024 [ 532.332702][ T8447] EXT4-fs: inline encryption not supported [ 532.391698][ T8447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.490193][ T8447] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 532.548012][ T8447] EXT4-fs (loop7): Remounting filesystem read-only [ 532.605019][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.841580][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11833'. [ 532.866778][ T8466] ip6gre1: entered promiscuous mode [ 532.888757][ T8466] ip6gre1: entered allmulticast mode [ 533.152617][ T8487] loop9: detected capacity change from 0 to 512 [ 533.169854][ T8487] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.215364][ T8487] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 533.259354][ T8487] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11843: bg 0: block 248: padding at end of block bitmap is not set [ 533.303111][ T8487] loop9: lost filesystem error report for type 5 error -117 [ 533.304935][ T8487] Quota error (device loop9): write_blk: dquota write failed [ 533.312314][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 533.312336][ C0] EXT4-fs (loop9): last error at time 2000000390: ext4_validate_block_bitmap:441 [ 533.335992][ T8487] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 533.347334][ T8487] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.11843: Failed to acquire dquot type 1 [ 533.359692][ T8487] loop9: lost filesystem error report for type 5 error -117 [ 533.362489][ T8487] EXT4-fs (loop9): 1 truncate cleaned up [ 533.384070][ T8487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 533.421518][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 533.460180][ T8506] loop3: detected capacity change from 0 to 512 [ 533.476291][ T8506] EXT4-fs: Ignoring removed bh option [ 533.494353][ T8506] EXT4-fs: inline encryption not supported [ 533.515260][ T8506] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.565616][ T8506] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 533.634897][ T8506] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11848: bg 0: block 248: padding at end of block bitmap is not set [ 533.654504][ T8519] siw: device registration error -23 [ 533.671232][ T8506] loop3: lost filesystem error report for type 5 error -117 [ 533.671468][ T8519] netlink: 14 bytes leftover after parsing attributes in process `syz.9.11855'. [ 533.687802][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 533.687821][ C0] EXT4-fs (loop3): last error at time 2000000390: ext4_validate_block_bitmap:441 [ 533.703602][ T8506] Quota error (device loop3): write_blk: dquota write failed [ 533.715746][ T8506] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 533.725757][ T8506] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.11848: Failed to acquire dquot type 1 [ 533.737225][ T8506] loop3: lost filesystem error report for type 5 error -117 [ 533.741487][ T8506] EXT4-fs (loop3): 1 truncate cleaned up [ 533.762262][ T8519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.783301][ T8506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 533.796255][ T8519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.808334][ T8525] loop9: detected capacity change from 0 to 8192 [ 533.816550][ T8519] bond0 (unregistering): Released all slaves [ 533.874589][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 534.388989][ T28] audit: type=1400 audit(2000000391.704:5023): avc: denied { setopt } for pid=8569 comm="syz.3.11876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 534.709506][ T8593] loop7: detected capacity change from 0 to 512 [ 535.199060][ T8602] loop7: detected capacity change from 0 to 32768 [ 535.261487][ T8602] loop7: p1 p3 < > [ 535.396242][ T28] audit: type=1326 audit(2000000392.714:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.9.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57bc5c799 code=0x7ffc0000 [ 535.466847][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11897'. [ 535.482939][ T28] audit: type=1326 audit(2000000392.714:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.9.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57bc5c799 code=0x7ffc0000 [ 535.517395][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11897'. [ 535.528169][ T9034] udevd[9034]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 535.529845][ T28] audit: type=1326 audit(2000000392.744:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.9.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe57bc5c799 code=0x7ffc0000 [ 535.552535][ T9036] udevd[9036]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 535.589793][ T8631] loop7: detected capacity change from 0 to 512 [ 535.629024][ T8631] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 535.680692][ T8631] EXT4-fs (loop7): 1 truncate cleaned up [ 535.686470][ T28] audit: type=1326 audit(2000000392.744:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.9.11895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57bc5c799 code=0x7ffc0000 [ 535.696082][ T8631] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.039373][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.373521][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11923'. [ 536.761208][ T8718] netlink: 'syz.3.11938': attribute type 27 has an invalid length. [ 536.775902][ T8718] geneve2: left promiscuous mode [ 536.786242][ T8718] ipip0: left promiscuous mode [ 536.797357][T21390] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.834792][ T8718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.845424][ T8718] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.856526][ T8718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.872805][T21390] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.887773][T21390] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.908049][T21390] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.947432][ T8727] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11940'. [ 537.120755][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 537.120828][ T28] audit: type=1400 audit(2000000394.434:5033): avc: denied { setopt } for pid=8735 comm="syz.7.11944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 537.217365][ T28] audit: type=1400 audit(2000000394.534:5034): avc: denied { read } for pid=8743 comm="syz.7.11948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 537.518546][ T8752] netlink: 'syz.9.11950': attribute type 4 has an invalid length. [ 537.532407][ T8752] netlink: 'syz.9.11950': attribute type 4 has an invalid length. [ 537.570005][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.577179][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.613990][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.624571][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.659192][ T8752] ip6gre1: left promiscuous mode [ 537.664218][ T8752] ip6gre1: left allmulticast mode [ 537.670404][ T1988] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.679839][ T1988] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.689546][ T1988] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.701490][ T1988] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.725447][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11951'. [ 537.757723][ T28] audit: type=1400 audit(2000000395.074:5035): avc: denied { mounton } for pid=8757 comm="syz.9.11952" path="/61/file0" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 537.946810][ T28] audit: type=1326 audit(2000000395.264:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.0.11945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d01dc799 code=0x7fc00000 [ 538.002577][ T28] audit: type=1400 audit(2000000395.324:5037): avc: denied { bind } for pid=8766 comm="syz.3.11957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 538.018743][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11955'. [ 538.089151][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11960'. [ 538.105129][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11962'. [ 539.224311][ T8826] xt_hashlimit: size too large, truncated to 1048576 [ 539.425168][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11983'. [ 539.435332][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11983'. [ 539.464967][ T8834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8834 comm=syz.4.11984 [ 539.486356][ T8840] netlink: 'syz.0.11986': attribute type 4 has an invalid length. [ 539.497091][ T8840] netlink: 'syz.0.11986': attribute type 4 has an invalid length. [ 539.526287][ T8840] erspan0: left promiscuous mode [ 539.543670][ T8840] syz_tun: left promiscuous mode [ 539.553303][ T8840] macvlan2: left promiscuous mode [ 539.558662][ T8840] bond1: left promiscuous mode [ 539.564160][ T8840] ip6erspan0: left allmulticast mode [ 539.569515][ T8840] gtp1: left promiscuous mode [ 539.574375][ T8840] gtp1: left allmulticast mode [ 539.581327][ T8840] gretap1: left promiscuous mode [ 539.586962][ T8840] macvtap1: left promiscuous mode [ 539.592200][ T8840] macvtap1: left allmulticast mode [ 539.664905][ T28] audit: type=1400 audit(2000000396.984:5038): avc: denied { watch } for pid=8847 comm="syz.0.11989" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 539.715909][ T28] audit: type=1400 audit(2000000397.034:5039): avc: denied { ioctl } for pid=8849 comm="syz.0.11990" path="socket:[139664]" dev="sockfs" ino=139664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 539.941203][ T28] audit: type=1400 audit(2000000397.264:5040): avc: denied { ioctl } for pid=8862 comm="syz.4.11996" path="socket:[140388]" dev="sockfs" ino=140388 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.274895][ T28] audit: type=1326 audit(2000000397.584:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.4.11997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7fc00000 [ 540.894479][ T28] audit: type=1326 audit(2000000398.214:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8864 comm="syz.4.11997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ac39a6517 code=0x7fc00000 [ 541.078188][ T8885] loop3: detected capacity change from 0 to 256 [ 541.795118][ T8921] loop7: detected capacity change from 0 to 256 [ 541.932882][ T8928] loop9: detected capacity change from 0 to 128 [ 541.966149][ T8928] syz.9.12021: attempt to access beyond end of device [ 541.966149][ T8928] loop9: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 541.982687][ T8928] Buffer I/O error on dev loop9, logical block 129, lost async page write [ 541.993988][ T8928] syz.9.12021: attempt to access beyond end of device [ 541.993988][ T8928] loop9: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 542.008053][ T8928] Buffer I/O error on dev loop9, logical block 130, lost async page write [ 542.017222][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.017222][ T8928] loop9: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 542.032031][ T8928] Buffer I/O error on dev loop9, logical block 131, lost async page write [ 542.040642][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.040642][ T8928] loop9: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 542.055856][ T8928] Buffer I/O error on dev loop9, logical block 132, lost async page write [ 542.065453][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.065453][ T8928] loop9: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 542.079536][ T8928] Buffer I/O error on dev loop9, logical block 133, lost async page write [ 542.088608][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.088608][ T8928] loop9: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 542.102825][ T8928] Buffer I/O error on dev loop9, logical block 129, lost async page write [ 542.111617][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.111617][ T8928] loop9: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 542.125857][ T8928] Buffer I/O error on dev loop9, logical block 130, lost async page write [ 542.134674][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.134674][ T8928] loop9: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 542.169187][ T8928] Buffer I/O error on dev loop9, logical block 131, lost async page write [ 542.189565][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.189565][ T8928] loop9: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 542.203756][ T8928] Buffer I/O error on dev loop9, logical block 132, lost async page write [ 542.212826][ T8928] syz.9.12021: attempt to access beyond end of device [ 542.212826][ T8928] loop9: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 542.248361][ T8928] Buffer I/O error on dev loop9, logical block 133, lost async page write [ 542.767400][ T8963] __nla_validate_parse: 6 callbacks suppressed [ 542.767417][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12036'. [ 542.972105][ T8975] netlink: 52 bytes leftover after parsing attributes in process `syz.7.12043'. [ 543.318137][ T8985] loop9: detected capacity change from 0 to 512 [ 543.460057][ T8985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.516306][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.662280][ T8997] loop9: detected capacity change from 0 to 256 [ 544.550525][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12065'. [ 544.565293][ T9095] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12065'. [ 544.817289][ T9132] loop3: detected capacity change from 0 to 512 [ 544.851508][ T9132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 544.884134][ T9132] EXT4-fs (loop3): 1 truncate cleaned up [ 544.890166][ T9132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.595847][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.667243][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 545.667258][ T28] audit: type=1326 audit(2000000402.984:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 545.761062][ T28] audit: type=1326 audit(2000000402.984:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 545.801510][ T28] audit: type=1326 audit(2000000403.004:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 545.852221][ T28] audit: type=1326 audit(2000000403.004:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 545.906168][ T28] audit: type=1326 audit(2000000403.024:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 545.982474][ T28] audit: type=1326 audit(2000000403.024:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 546.094823][ T28] audit: type=1326 audit(2000000403.024:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 546.142362][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12086'. [ 546.151678][ T28] audit: type=1326 audit(2000000403.024:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 546.212466][ T28] audit: type=1326 audit(2000000403.024:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 546.252261][ T28] audit: type=1326 audit(2000000403.044:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.7.12078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 546.362699][ T9198] netlink: 'syz.3.12091': attribute type 4 has an invalid length. [ 546.415141][ T9204] netlink: 'syz.3.12091': attribute type 4 has an invalid length. [ 547.447280][ T9255] loop7: detected capacity change from 0 to 2048 [ 547.491436][ T9255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.514493][ T9255] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 547.564527][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.818022][ T9267] netlink: 'syz.7.12116': attribute type 27 has an invalid length. [ 547.894393][ T50] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.913370][ T50] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.941721][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.950237][ T9271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.966772][ T50] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.980864][ T50] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.009125][ T9275] loop3: detected capacity change from 0 to 512 [ 548.032271][ T9275] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12118: invalid indirect mapped block 256 (level 2) [ 548.048290][ T9275] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 548.048829][ T9275] EXT4-fs (loop3): Remounting filesystem read-only [ 548.058028][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 548.058049][ C0] EXT4-fs (loop3): initial error at time 2000000405: ext4_free_branches:1023: inode 11 [ 548.058086][ C0] EXT4-fs (loop3): last error at time 2000000405: ext4_free_branches:1023: inode 11 [ 548.075187][ T9278] loop7: detected capacity change from 0 to 256 [ 548.081613][ T9275] EXT4-fs (loop3): 2 truncates cleaned up [ 548.105773][ T9275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.161851][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.346324][ T9301] netlink: 'syz.9.12131': attribute type 27 has an invalid length. [ 548.376114][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.391690][ T9301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.445179][ T9309] loop9: detected capacity change from 0 to 512 [ 548.465695][ T9309] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 548.482047][ T9309] EXT4-fs (loop9): 1 truncate cleaned up [ 548.492418][ T9309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.773689][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.843080][ T9332] loop7: detected capacity change from 0 to 256 [ 548.865485][ T9332] FAT-fs (loop7): codepage cp863 not found [ 549.438712][ T9339] netlink: 'syz.4.12146': attribute type 27 has an invalid length. [ 549.465897][ T9339] bridge1: left promiscuous mode [ 549.470872][ T9339] bridge1: left allmulticast mode [ 549.485998][ T9339] ip6gre1: left allmulticast mode [ 549.505858][ T9339] bond4: left promiscuous mode [ 549.521161][ T9339] bond5: left promiscuous mode [ 549.526395][ T9339] ip6gre2: left promiscuous mode [ 549.538045][ T9339] ip6erspan0: left promiscuous mode [ 549.543809][ T9339] ip6gre4: left allmulticast mode [ 549.549512][ T9339] bond6: left promiscuous mode [ 549.554386][ T9339] vcan1: left promiscuous mode [ 549.566019][ T9339] ipip1: left promiscuous mode [ 549.613969][ T9344] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.649739][ T9344] bridge0: port 3(vlan2) entered blocking state [ 549.656055][ T9344] bridge0: port 3(vlan2) entered listening state [ 549.672147][ T9344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.692526][T21390] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 549.701670][T21390] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 549.825190][T21390] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 549.871517][T21390] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 550.423509][ T9383] loop7: detected capacity change from 0 to 512 [ 550.438661][ T9383] EXT4-fs: Ignoring removed mblk_io_submit option [ 550.489951][ T9383] EXT4-fs (loop7): 1 truncate cleaned up [ 550.509631][ T9383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.570665][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.841511][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 550.841526][ T28] audit: type=1400 audit(2000000408.164:5217): avc: denied { setopt } for pid=9391 comm="syz.7.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.931089][ T28] audit: type=1400 audit(2000000408.194:5218): avc: denied { accept } for pid=9391 comm="syz.7.12167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.994207][ T28] audit: type=1400 audit(2000000408.274:5219): avc: denied { read } for pid=9398 comm="syz.7.12170" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.071114][ T28] audit: type=1400 audit(2000000408.274:5220): avc: denied { open } for pid=9398 comm="syz.7.12170" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.100687][ T9404] netlink: 'syz.0.12166': attribute type 27 has an invalid length. [ 551.108900][ T9402] loop7: detected capacity change from 0 to 1024 [ 551.148498][ T28] audit: type=1400 audit(2000000408.284:5221): avc: denied { ioctl } for pid=9398 comm="syz.7.12170" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.201067][ T28] audit: type=1400 audit(2000000408.284:5222): avc: denied { write } for pid=9398 comm="syz.7.12170" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.224524][ T9402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.256168][ T9402] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.12171: inode #779706732: comm syz.7.12171: iget: illegal inode # [ 551.256878][ T28] audit: type=1400 audit(2000000408.564:5223): avc: denied { setattr } for pid=9401 comm="syz.7.12171" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 551.306515][ T9404] bridge0: port 2(vlan3) entered blocking state [ 551.312858][ T9404] bridge0: port 2(vlan3) entered forwarding state [ 551.319837][T21390] bond0: (slave syz_tun): interface is now down [ 551.353615][ T9402] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.12171: error while reading EA inode 779706732 err=-117 [ 551.369057][ T9404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.395217][ T7032] bond0: (slave syz_tun): interface is now down [ 551.405318][ T7032] bond0: now running without any active interface! [ 551.420883][ T28] audit: type=1400 audit(2000000408.734:5224): avc: denied { create } for pid=9411 comm="syz.4.12173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 551.431722][ T9410] EXT4-fs error (device loop7): ext4_xattr_block_find:1879: inode #15: comm syz.7.12171: corrupted xattr block 113: invalid header [ 551.457422][ T9415] loop3: detected capacity change from 0 to 128 [ 551.463858][ T28] audit: type=1400 audit(2000000408.774:5225): avc: denied { setopt } for pid=9411 comm="syz.4.12173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 551.491825][ T9415] FAT-fs (loop3): bogus logical sector size 2134 [ 551.499636][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12174'. [ 551.510853][ T9415] FAT-fs (loop3): Can't find a valid FAT filesystem [ 551.520508][ T28] audit: type=1400 audit(2000000408.774:5226): avc: denied { write } for pid=9411 comm="syz.4.12173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 551.529240][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.413431][ T3393] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 552.429875][ T3393] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.437837][ T9503] netlink: 'syz.7.12210': attribute type 4 has an invalid length. [ 553.463509][ T9503] netlink: 'syz.7.12210': attribute type 4 has an invalid length. [ 554.052075][ T9525] xt_l2tp: unknown flags: 10 [ 554.329470][ T9529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12219'. [ 554.780462][ T9548] loop9: detected capacity change from 0 to 512 [ 554.801643][ T9548] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.822364][ T9548] EXT4-fs (loop9): 1 truncate cleaned up [ 554.841665][ T9548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.964662][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.481939][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12234'. [ 555.504620][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12234'. [ 556.663174][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12249'. [ 556.949939][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 556.949954][ T28] audit: type=1400 audit(2000000414.264:5318): avc: denied { mount } for pid=9614 comm="syz.7.12253" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 557.019494][ T28] audit: type=1400 audit(2000000414.314:5319): avc: denied { watch } for pid=9614 comm="syz.7.12253" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 557.082974][ T28] audit: type=1400 audit(2000000414.314:5320): avc: denied { mounton } for pid=9614 comm="syz.7.12253" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 557.466440][ T28] audit: type=1400 audit(2000000414.784:5321): avc: denied { setopt } for pid=9625 comm="syz.9.12257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 557.493401][ T9626] netlink: 168 bytes leftover after parsing attributes in process `syz.9.12257'. [ 557.513051][ T28] audit: type=1400 audit(2000000414.784:5322): avc: denied { write } for pid=9625 comm="syz.9.12257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 557.609309][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12260'. [ 557.641960][ T28] audit: type=1400 audit(2000000414.964:5323): avc: denied { getopt } for pid=9634 comm="syz.0.12261" lport=37806 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 557.714065][ T9642] netlink: 'syz.0.12264': attribute type 1 has an invalid length. [ 557.743583][ T9642] bond7: entered promiscuous mode [ 557.757410][ T28] audit: type=1400 audit(2000000415.064:5324): avc: denied { bind } for pid=9644 comm="syz.7.12265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 557.758951][ T9642] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.801077][ T28] audit: type=1400 audit(2000000415.064:5325): avc: denied { setopt } for pid=9644 comm="syz.7.12265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 557.847139][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12264'. [ 557.856435][ T28] audit: type=1400 audit(2000000415.174:5326): avc: denied { connect } for pid=9646 comm="syz.3.12266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 557.876304][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12264'. [ 557.909523][ T9642] bond7: (slave bridge4): making interface the new active one [ 557.917218][ T9642] bridge4: entered promiscuous mode [ 557.924497][ T9642] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 557.992246][ T9658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12270'. [ 558.010490][ T9658] bridge0: port 2(vlan3) entered disabled state [ 558.033714][ T9659] netlink: 168 bytes leftover after parsing attributes in process `syz.7.12269'. [ 558.062044][ T9658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12270'. [ 558.189135][ T9663] wireguard0: entered promiscuous mode [ 558.210945][ T9663] wireguard0: entered allmulticast mode [ 558.240012][ T28] audit: type=1400 audit(2000000415.554:5327): avc: denied { connect } for pid=9668 comm="syz.4.12274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 559.053616][ T9715] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=9715 comm=syz.9.12290 [ 559.104626][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12292'. [ 559.125197][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12292'. [ 559.502761][ T9732] loop9: detected capacity change from 0 to 32768 [ 559.572080][ T9732] loop9: p1 p3 < > [ 559.734062][ T9034] udevd[9034]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 560.086020][ T9774] loop7: detected capacity change from 0 to 512 [ 560.114681][ T9774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 560.126290][ T9774] System zones: 0-2, 18-18, 34-34 [ 560.134000][ T9774] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 560.148517][ T9774] EXT4-fs (loop7): Remounting filesystem read-only [ 560.155044][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 560.155068][ C1] EXT4-fs (loop7): initial error at time 2000000417: ext4_mb_generate_buddy:1315 [ 560.155088][ C1] EXT4-fs (loop7): last error at time 2000000417: ext4_mb_generate_buddy:1315 [ 560.180077][ T9774] EXT4-fs (loop7): 1 truncate cleaned up [ 560.186257][ T9774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.198794][ T9774] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.203980][T21390] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 560.213205][ T9774] v: renamed from ip6_vti0 [ 560.226577][T21390] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 560.244259][ T9784] gtp4: entered promiscuous mode [ 560.244316][T21390] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 560.270895][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.336857][ T9790] netlink: 'syz.3.12322': attribute type 1 has an invalid length. [ 560.374353][ T9790] bond1: entered promiscuous mode [ 560.379565][ T9790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.418093][ T9790] bond1: (slave bridge3): making interface the new active one [ 560.434939][ T9790] bridge3: entered promiscuous mode [ 560.448609][ T9790] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 560.750704][ T9809] loop7: detected capacity change from 0 to 4096 [ 560.767492][ T9809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.552099][ T9831] loop9: detected capacity change from 0 to 128 [ 561.567383][ T9824] netlink: 'syz.4.12335': attribute type 12 has an invalid length. [ 561.573279][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.723094][ T9837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.734513][ T9837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.752810][ T9845] __nla_validate_parse: 9 callbacks suppressed [ 561.752827][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12345'. [ 561.762671][ T9847] loop7: detected capacity change from 0 to 256 [ 562.735470][ T9862] netlink: 'syz.0.12353': attribute type 12 has an invalid length. [ 562.821503][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 562.821518][ T28] audit: type=1326 audit(2000000420.144:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 562.854205][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12356'. [ 562.874384][ T9869] loop9: detected capacity change from 0 to 512 [ 562.875294][ T9872] loop7: detected capacity change from 0 to 512 [ 562.895937][ T9869] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 562.905042][ T9872] EXT4-fs: Ignoring removed mblk_io_submit option [ 562.916524][ T9872] EXT4-fs (loop7): 1 truncate cleaned up [ 562.921341][ T28] audit: type=1326 audit(2000000420.174:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 562.938035][ T9872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.976316][ T28] audit: type=1326 audit(2000000420.174:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.016678][ T9869] EXT4-fs (loop9): 1 truncate cleaned up [ 563.070375][ T9869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.091176][ T28] audit: type=1326 audit(2000000420.174:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.122964][ T28] audit: type=1326 audit(2000000420.174:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.176040][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.191733][ T28] audit: type=1326 audit(2000000420.174:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.252125][ T28] audit: type=1326 audit(2000000420.174:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.284260][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.301796][ T9889] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.12363'. [ 563.338473][ T28] audit: type=1326 audit(2000000420.174:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.355550][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12363'. [ 563.445921][ T28] audit: type=1326 audit(2000000420.174:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.469553][ T28] audit: type=1326 audit(2000000420.194:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9870 comm="syz.7.12358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7097c2c799 code=0x7ffc0000 [ 563.862873][ T9923] netlink: 'syz.3.12378': attribute type 1 has an invalid length. [ 563.870712][ T9923] netlink: 'syz.3.12378': attribute type 4 has an invalid length. [ 563.878643][ T9923] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12378'. [ 563.888254][ T9923] netlink: 'syz.3.12378': attribute type 1 has an invalid length. [ 563.896529][ T9923] netlink: 'syz.3.12378': attribute type 4 has an invalid length. [ 563.904422][ T9923] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12378'. [ 564.365326][ T9941] v: renamed from ip6_vti0 [ 564.811606][ C1] bridge0: port 3(vlan2) entered learning state [ 568.192564][T10049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.214237][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 568.214251][ T28] audit: type=1400 audit(2000000425.534:5392): avc: denied { setopt } for pid=10050 comm="syz.3.12431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 568.214369][T23617] IPVS: starting estimator thread 0... [ 568.276668][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12433'. [ 568.302944][ T28] audit: type=1400 audit(2000000425.624:5393): avc: denied { write } for pid=10056 comm="syz.0.12434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 568.361104][T10053] IPVS: using max 2544 ests per chain, 127200 per kthread [ 568.361353][ T28] audit: type=1400 audit(2000000425.654:5394): avc: denied { setopt } for pid=10058 comm="syz.4.12435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.435481][ T28] audit: type=1400 audit(2000000425.654:5395): avc: denied { bind } for pid=10058 comm="syz.4.12435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.484395][T10064] loop3: detected capacity change from 0 to 4096 [ 568.498785][ T28] audit: type=1400 audit(2000000425.654:5396): avc: denied { name_bind } for pid=10058 comm="syz.4.12435" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 568.539543][T10064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.575291][ T28] audit: type=1400 audit(2000000425.654:5397): avc: denied { node_bind } for pid=10058 comm="syz.4.12435" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 568.779330][T10075] netlink: 'syz.9.12441': attribute type 2 has an invalid length. [ 569.000097][T10079] loop7: detected capacity change from 0 to 512 [ 569.029168][T10079] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 569.087035][T10079] EXT4-fs (loop7): 1 truncate cleaned up [ 569.090519][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.102241][T10079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.131480][T10088] netlink: 'syz.9.12446': attribute type 1 has an invalid length. [ 569.178953][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.224481][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.230148][T10093] bond0: (slave dummy0): making interface the new active one [ 569.304899][T10093] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 569.814509][ T28] audit: type=1400 audit(2000000427.134:5398): avc: denied { getopt } for pid=10114 comm="syz.7.12457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 570.071435][ T28] audit: type=1400 audit(2000000427.134:5399): avc: denied { connect } for pid=10114 comm="syz.7.12457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 570.128482][T10125] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12461'. [ 570.129770][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12462'. [ 570.167185][ T28] audit: type=1400 audit(2000000427.484:5400): avc: denied { setopt } for pid=10128 comm="syz.4.12463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 570.181569][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12462'. [ 570.282284][ T28] audit: type=1400 audit(2000000427.604:5401): avc: denied { read } for pid=10133 comm="syz.0.12465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 571.144757][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.168929][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.197981][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12469'. [ 571.925991][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12484'. [ 571.944122][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12484'. [ 572.427286][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.460620][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.499920][T10201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.643376][T10211] loop3: detected capacity change from 0 to 256 [ 572.671470][T10211] FAT-fs (loop3): bogus number of FAT sectors [ 572.677560][T10211] FAT-fs (loop3): Can't find a valid FAT filesystem [ 572.762795][T10217] loop3: detected capacity change from 0 to 512 [ 572.784800][T10217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 572.823215][T10217] EXT4-fs (loop3): 1 truncate cleaned up [ 572.843998][T10217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.009463][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.525571][T10242] bridge0: port 2(vlan3) entered blocking state [ 573.531900][T10242] bridge0: port 2(vlan3) entered forwarding state [ 573.597060][T10242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.729123][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 573.729140][ T28] audit: type=1400 audit(2000000431.044:5406): avc: denied { create } for pid=10254 comm="syz.4.12510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 573.762916][ T28] audit: type=1400 audit(2000000431.084:5407): avc: denied { read } for pid=10254 comm="syz.4.12510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 573.815424][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12510'. [ 573.817849][ T28] audit: type=1400 audit(2000000431.134:5408): avc: denied { write } for pid=10254 comm="syz.4.12510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 573.929879][T10269] loop3: detected capacity change from 0 to 1024 [ 573.952802][T10269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 573.983935][T10269] System zones: 0-1, 3-36 [ 573.996958][T10269] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.12516: bad orphan inode 134217728 [ 574.014496][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12520'. [ 574.019214][T10269] loop3: lost filesystem error report for type 5 error -117 [ 574.024270][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12520'. [ 574.024488][T10269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.072522][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12521'. [ 574.135873][T10283] loop9: detected capacity change from 0 to 4096 [ 574.157542][T10283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.223940][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.362546][ T28] audit: type=1400 audit(2000000431.684:5409): avc: denied { mount } for pid=10300 comm="syz.7.12528" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 574.498484][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.488098][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12543'. [ 575.501326][ T28] audit: type=1400 audit(2000000432.804:5410): avc: denied { write } for pid=10332 comm="syz.0.12543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 575.560976][T10325] netlink: 'syz.7.12539': attribute type 4 has an invalid length. [ 575.572538][T10325] netlink: 'syz.7.12539': attribute type 4 has an invalid length. [ 575.939422][ T28] audit: type=1400 audit(2000000433.254:5411): avc: denied { getopt } for pid=10353 comm="syz.4.12552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 576.072267][T10358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=10358 comm=syz.9.12553 [ 576.123912][T10358] netlink: 7 bytes leftover after parsing attributes in process `syz.9.12553'. [ 576.311886][ T28] audit: type=1400 audit(2000000433.624:5412): avc: denied { accept } for pid=10379 comm="syz.7.12561" lport=40653 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.407790][T10389] loop9: detected capacity change from 0 to 764 [ 576.433894][ T28] audit: type=1400 audit(2000000433.754:5413): avc: denied { mount } for pid=10388 comm="syz.9.12566" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 576.509253][ T28] audit: type=1400 audit(2000000433.824:5414): avc: denied { unmount } for pid=7407 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 576.679484][ T28] audit: type=1400 audit(2000000433.994:5415): avc: denied { mounton } for pid=10398 comm="syz.7.12569" path="/proc/1064/task" dev="proc" ino=151770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 577.530185][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12591'. [ 577.553129][T10455] ref_ctr increment failed for inode: 0x1e84 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881056ff2c0 [ 577.573704][T10454] uprobe: syz.4.12593:10454 failed to unregister, leaking uprobe [ 577.937133][T10475] loop9: detected capacity change from 0 to 256 [ 578.341912][T10506] netlink: 400 bytes leftover after parsing attributes in process `syz.0.12615'. [ 578.424302][T10510] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12617'. [ 578.542406][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12619'. [ 579.122568][T10524] loop9: detected capacity change from 0 to 2048 [ 579.220887][T10524] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.234032][T10524] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.275312][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12627'. [ 579.337819][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 579.337834][ T28] audit: type=1326 audit(2000000436.654:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.379398][T10549] loop3: detected capacity change from 0 to 128 [ 579.413272][ T28] audit: type=1326 audit(2000000436.654:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.465456][ T28] audit: type=1326 audit(2000000436.694:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.515771][ T28] audit: type=1326 audit(2000000436.694:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.579700][ T28] audit: type=1326 audit(2000000436.694:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.589431][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12634'. [ 579.661319][ T28] audit: type=1326 audit(2000000436.694:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fddc0d0c799 code=0x7ffc0000 [ 579.695884][T10566] loop3: detected capacity change from 0 to 1024 [ 579.705066][ T28] audit: type=1326 audit(2000000436.694:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fddc0d0c502 code=0x7ffc0000 [ 579.729336][ T7424] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 345: padding at end of block bitmap is not set [ 579.751316][ T7424] EXT4-fs (loop9): Remounting filesystem read-only [ 579.759483][ T28] audit: type=1326 audit(2000000436.694:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddc0cccfce code=0x7ffc0000 [ 579.759662][T10566] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 579.783057][ T28] audit: type=1326 audit(2000000436.694:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10547 comm="syz.3.12629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fddc0d0c5c7 code=0x7ffc0000 [ 579.798376][ T7407] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.838159][T10566] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 579.897961][T10566] EXT4-fs (loop3): mount failed [ 579.930938][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12635'. [ 580.171055][ C1] bridge0: port 3(vlan2) entered forwarding state [ 580.177533][ C1] bridge0: topology change detected, propagating [ 580.311991][T10597] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2151810404/2151810406 [ 580.564915][T10620] loop3: detected capacity change from 0 to 512 [ 580.600703][T10620] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 580.632154][T10620] EXT4-fs (loop3): mount failed [ 580.666878][T10626] loop7: detected capacity change from 0 to 128 [ 580.683075][T10626] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 580.751508][T10634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 580.758745][T10634] IPv6: NLM_F_CREATE should be set when creating new route [ 580.769075][ T7452] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 580.815925][T10643] geneve2: entered promiscuous mode [ 580.824407][ T7425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.844601][ T7425] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.861922][ T7425] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.873741][ T7425] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.887080][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12669'. [ 581.286131][T10686] loop7: detected capacity change from 0 to 2048 [ 581.337199][T10696] ref_ctr increment failed for inode: 0x3ad6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881056b86c0 [ 581.352220][T10695] uprobe: syz.0.12689:10695 failed to unregister, leaking uprobe [ 581.365631][T10686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.379000][T10686] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.436213][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12694'. [ 582.155375][ T7452] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:48: bg 0: block 345: padding at end of block bitmap is not set [ 582.171418][ T7452] EXT4-fs (loop7): Remounting filesystem read-only [ 582.211577][ T2743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.240590][T10740] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.12706'. [ 582.262530][T10739] SELinux: failed to load policy [ 582.269497][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12706'. [ 582.321891][T10746] sctp: [Deprecated]: syz.7.12709 (pid 10746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.321891][T10746] Use struct sctp_sack_info instead [ 582.381321][T10748] netlink: 'syz.9.12712': attribute type 4 has an invalid length. [ 582.406905][T10748] netlink: 'syz.9.12712': attribute type 4 has an invalid length. [ 582.530438][T10762] netlink: 'syz.4.12717': attribute type 1 has an invalid length. [ 582.548107][T10762] netlink: 'syz.4.12717': attribute type 4 has an invalid length. [ 582.565161][T10762] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12717'. [ 582.920612][T10783] netlink: 'syz.9.12725': attribute type 11 has an invalid length. [ 583.040091][T10791] loop7: detected capacity change from 0 to 128 [ 583.171988][T10804] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=10804 comm=syz.3.12734 [ 583.541733][T10828] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12743'. [ 583.878430][T10850] ªªªªª6: renamed from wg2 [ 583.909671][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12754'. [ 584.003840][T16109] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 584.014269][T16109] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 584.101493][T10876] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 584.193224][T10888] geneve4: entered promiscuous mode [ 584.199752][ T7452] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 584.212406][ T7452] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 584.226078][ T7452] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 584.235329][ T7452] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 584.312575][T10898] __nla_validate_parse: 1 callbacks suppressed [ 584.312590][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12771'. [ 584.362253][T10902] netlink: 'syz.4.12773': attribute type 13 has an invalid length. [ 584.532046][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 584.532063][ T28] audit: type=1400 audit(2000000441.844:5461): avc: denied { read } for pid=10916 comm="syz.7.12777" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 584.548599][T10919] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12778'. [ 584.575113][ T28] audit: type=1400 audit(2000000441.844:5462): avc: denied { open } for pid=10916 comm="syz.7.12777" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 584.747605][ T28] audit: type=1326 audit(2000000442.064:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 584.806722][ T28] audit: type=1326 audit(2000000442.064:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 585.500328][ T28] audit: type=1326 audit(2000000442.064:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 585.616927][ T28] audit: type=1326 audit(2000000442.064:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 585.711048][ T28] audit: type=1326 audit(2000000442.094:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 585.787013][ T28] audit: type=1326 audit(2000000442.094:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 585.888161][ T28] audit: type=1400 audit(2000000442.094:5470): avc: denied { relabelfrom } for pid=10933 comm="syz.3.12784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 585.933364][ T28] audit: type=1326 audit(2000000442.094:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.4.12785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 586.501472][T10980] netlink: 'syz.3.12801': attribute type 13 has an invalid length. [ 586.663530][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12808'. [ 586.716730][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12811'. [ 586.849877][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12813'. [ 586.997665][T11017] netlink: 'syz.3.12818': attribute type 13 has an invalid length. [ 587.025498][T11017] gretap0: refused to change device tx_queue_len [ 587.042647][T11017] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 587.095899][T11024] netlink: 'syz.0.12821': attribute type 13 has an invalid length. [ 587.159861][T11035] lo: Caught tx_queue_len zero misconfig [ 587.329063][T21390] bridge_slave_1: left allmulticast mode [ 587.339036][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12829'. [ 587.341098][T21390] bridge_slave_1: left promiscuous mode [ 587.365619][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.388269][T21390] bridge_slave_0: left allmulticast mode [ 587.402948][T21390] bridge_slave_0: left promiscuous mode [ 587.408721][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.453291][T11061] tipc: Failed to remove unknown binding: 66,1,1/2886997039:883948042/883948044 [ 587.563080][T21390] bond0 (unregistering): (slave dummy0): Releasing active interface [ 587.579287][T21390] bond0 (unregistering): Released all slaves [ 587.652901][T21390] tipc: Disabling bearer [ 587.658510][T21390] tipc: Left network mode [ 587.696203][T21390] hsr_slave_0: left promiscuous mode [ 587.709365][T21390] hsr_slave_1: left promiscuous mode [ 587.731615][T21390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.749239][T21390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.832345][T21390] team0 (unregistering): Port device team_slave_1 removed [ 587.855514][T21390] team0 (unregistering): Port device team_slave_0 removed [ 587.930142][T11022] chnl_net:caif_netlink_parms(): no params data found [ 587.953301][T11083] loop3: detected capacity change from 0 to 2048 [ 588.028376][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.046658][T11083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.052227][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.061530][T11083] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.105340][T11022] bridge_slave_0: entered allmulticast mode [ 588.122161][T11022] bridge_slave_0: entered promiscuous mode [ 588.132748][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.141623][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.148768][T11022] bridge_slave_1: entered allmulticast mode [ 588.168425][T11022] bridge_slave_1: entered promiscuous mode [ 588.226091][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.248256][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.333312][T11022] team0: Port device team_slave_0 added [ 588.354527][T11022] team0: Port device team_slave_1 added [ 588.395662][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.427920][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.493423][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.536522][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.568888][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.633541][ T7032] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set [ 588.661044][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.672097][ T7032] EXT4-fs (loop3): Remounting filesystem read-only [ 588.694480][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.730161][T11022] hsr_slave_0: entered promiscuous mode [ 588.771636][T11022] hsr_slave_1: entered promiscuous mode [ 588.791619][T11022] debugfs: 'hsr0' already exists in 'hsr' [ 588.797349][T11022] Cannot create hsr debugfs directory [ 589.139283][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12862'. [ 589.154753][T21390] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.244925][T21390] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.322552][T21390] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.458603][T21390] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.487704][T11022] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 589.558506][T11022] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 589.630663][T11022] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 589.649555][T11022] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 589.812077][T11194] chnl_net:caif_netlink_parms(): no params data found [ 589.848039][T21390] bridge_slave_1: left allmulticast mode [ 589.868478][T21390] bridge_slave_1: left promiscuous mode [ 589.887916][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.469984][T21390] bridge_slave_0: left allmulticast mode [ 590.543911][T21390] bridge_slave_0: left promiscuous mode [ 590.549700][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.705190][T11309] sctp: [Deprecated]: syz.3.12877 (pid 11309) Use of int in max_burst socket option deprecated. [ 590.705190][T11309] Use struct sctp_assoc_value instead [ 590.955938][T11329] loop3: detected capacity change from 0 to 512 [ 591.005653][T11329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.061734][T11329] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.081067][T21390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.091824][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 591.091837][ T28] audit: type=1400 audit(2000000448.414:5577): avc: denied { create } for pid=11327 comm="syz.3.12883" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 591.141504][T21390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.143643][T11329] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.12883: corrupted inode contents [ 591.162560][T21390] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 591.171439][T21390] bond0 (unregistering): Released all slaves [ 591.172294][T11329] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.12883: mark_inode_dirty error [ 591.179128][T21390] bond1 (unregistering): Released all slaves [ 591.197292][T11329] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.12883: corrupted inode contents [ 591.211668][T11329] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.12883: mark_inode_dirty error [ 591.240448][T11329] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.12883: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 591.240448][T11329] [ 591.262295][ T28] audit: type=1400 audit(2000000448.584:5578): avc: denied { read } for pid=11339 comm="syz.0.12887" path="socket:[158852]" dev="sockfs" ino=158852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 591.314052][T21390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.323013][T21390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.427673][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.442933][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.450334][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.459242][T11194] bridge_slave_0: entered allmulticast mode [ 591.465990][T11194] bridge_slave_0: entered promiscuous mode [ 591.478959][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.501259][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.508398][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.518805][T11194] bridge_slave_1: entered allmulticast mode [ 591.525933][T11194] bridge_slave_1: entered promiscuous mode [ 591.557128][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.574002][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.581205][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.591618][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.660418][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.667563][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.713227][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.754818][T11194] team0: Port device team_slave_0 added [ 591.767010][T11194] team0: Port device team_slave_1 added [ 591.812493][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.822503][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.852043][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.880273][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.891883][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.909676][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.971036][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.019210][T21390] IPVS: stop unused estimator thread 0... [ 592.029463][T11194] hsr_slave_0: entered promiscuous mode [ 592.050494][T11194] hsr_slave_1: entered promiscuous mode [ 592.064640][T11194] debugfs: 'hsr0' already exists in 'hsr' [ 592.070376][T11194] Cannot create hsr debugfs directory [ 592.504377][T11398] bridge0: port 2(vlan3) entered disabled state [ 592.796066][T11422] netlink: 'syz.4.12897': attribute type 4 has an invalid length. [ 592.829412][T11422] netlink: 'syz.4.12897': attribute type 4 has an invalid length. [ 593.001646][T11022] veth0_vlan: entered promiscuous mode [ 593.031976][T11022] veth1_vlan: entered promiscuous mode [ 593.062353][T11022] veth0_macvtap: entered promiscuous mode [ 593.077405][T11022] veth1_macvtap: entered promiscuous mode [ 593.090814][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.103358][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.122808][T21390] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.131876][T21390] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.145716][T21390] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.178022][ T28] audit: type=1400 audit(2000000450.494:5579): avc: denied { mounton } for pid=11022 comm="syz-executor" path="/root/syzkaller.LOSj7c/syz-tmp" dev="sda1" ino=2106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 593.203170][ T7032] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.234203][ T28] audit: type=1400 audit(2000000450.494:5580): avc: denied { mounton } for pid=11022 comm="syz-executor" path="/root/syzkaller.LOSj7c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=161558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 593.265871][ T28] audit: type=1400 audit(2000000450.534:5581): avc: denied { mounton } for pid=11022 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 593.281770][T11194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 593.338195][T11194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.361354][T11194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.390514][T11194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 593.513356][T11194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.552009][T11194] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.575806][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.583078][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.612961][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.620120][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.660984][T11194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.700703][T11194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.845097][T11194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.992783][T11551] loop9: detected capacity change from 0 to 128 [ 594.041618][ T28] audit: type=1400 audit(2000000451.354:5582): avc: denied { remount } for pid=11549 comm="syz.9.12915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 594.161132][T11194] veth0_vlan: entered promiscuous mode [ 594.184013][ T28] audit: type=1326 audit(2000000451.504:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 594.192715][T11194] veth1_vlan: entered promiscuous mode [ 594.233970][ T28] audit: type=1326 audit(2000000451.504:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 594.291609][ T28] audit: type=1326 audit(2000000451.534:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 594.312181][T11194] veth0_macvtap: entered promiscuous mode [ 594.331140][ T28] audit: type=1326 audit(2000000451.534:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11571 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 594.357784][T11194] veth1_macvtap: entered promiscuous mode [ 594.380625][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12922'. [ 594.401843][T11194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.410045][T11595] netlink: 'syz.4.12922': attribute type 18 has an invalid length. [ 594.418455][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12922'. [ 594.450110][T11194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.483900][ T7452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.503298][ T7452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.542353][ T7452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.577264][ T7452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.725371][ T7032] Bluetooth: hci0: Frame reassembly failed (-84) [ 596.275796][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 596.275813][ T28] audit: type=1400 audit(2000000453.594:5621): avc: denied { relabelfrom } for pid=11736 comm="syz.9.12942" name="NETLINK" dev="sockfs" ino=159299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 596.312172][ T28] audit: type=1400 audit(2000000453.624:5622): avc: denied { relabelto } for pid=11736 comm="syz.9.12942" name="NETLINK" dev="sockfs" ino=159299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 596.454236][T11753] netlink: 'syz.9.12944': attribute type 4 has an invalid length. [ 596.958107][ T28] audit: type=1400 audit(2000000454.274:5623): avc: denied { connect } for pid=11799 comm="syz.0.12956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 597.062069][T11806] netlink: 'syz.0.12959': attribute type 4 has an invalid length. [ 597.071595][T11806] netlink: 'syz.0.12959': attribute type 4 has an invalid length. [ 597.771724][ T1648] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 597.774032][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 597.777966][ T1648] Bluetooth: hci1: command 0x1003 tx timeout [ 597.967729][T11872] loop5: detected capacity change from 0 to 512 [ 598.000124][T11872] EXT4-fs: Ignoring removed bh option [ 598.051774][T11872] EXT4-fs: inline encryption not supported [ 598.070884][T11872] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.126185][T11872] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 598.151144][T11872] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12971: bg 0: block 248: padding at end of block bitmap is not set [ 598.181035][T11872] loop5: lost filesystem error report for type 5 error -117 [ 598.181325][T11872] Quota error (device loop5): write_blk: dquota write failed [ 598.196034][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 598.196059][ C1] EXT4-fs (loop5): last error at time 2000000455: ext4_validate_block_bitmap:441 [ 598.265913][T11872] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 598.306512][T11872] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.12971: Failed to acquire dquot type 1 [ 598.344768][T11872] loop5: lost filesystem error report for type 5 error -117 [ 598.345228][T11872] EXT4-fs (loop5): 1 truncate cleaned up [ 598.381798][T11872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 598.535810][T11194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 598.895110][T11839] loop3: detected capacity change from 0 to 1024 [ 598.930417][T11839] EXT4-fs: Ignoring removed bh option [ 598.937672][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12980'. [ 599.002527][ T28] audit: type=1400 audit(2000000456.324:5624): avc: denied { watch watch_reads } for pid=11944 comm="syz.5.12982" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 599.029274][T11839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.072907][ T28] audit: type=1400 audit(2000000456.394:5625): avc: denied { map } for pid=11838 comm="syz.3.12969" path="/471/file1/blkio.bfq.group_wait_time" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.117245][ T28] audit: type=1400 audit(2000000456.424:5626): avc: denied { remove_name } for pid=11838 comm="syz.3.12969" name=DC dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.141711][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.141745][ T28] audit: type=1400 audit(2000000456.424:5627): avc: denied { unlink } for pid=11838 comm="syz.3.12969" name=DC dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.174898][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12986'. [ 599.213854][T11955] netlink: 'syz.3.12984': attribute type 4 has an invalid length. [ 599.321197][T11962] netlink: 'syz.3.12984': attribute type 4 has an invalid length. [ 599.530880][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12990'. [ 601.287539][T11999] netlink: 'syz.0.13002': attribute type 1 has an invalid length. [ 601.410615][T11999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 601.480745][T12000] bond8: (slave veth17): Enslaving as an active interface with a down link [ 601.556173][T12002] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 601.617948][T12002] bond8: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 602.359989][ T28] audit: type=1400 audit(2000000459.674:5628): avc: denied { connect } for pid=12024 comm="syz.3.13011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.390590][ T28] audit: type=1400 audit(2000000459.704:5629): avc: denied { read } for pid=12024 comm="syz.3.13011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.497750][T12041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13017'. [ 602.540201][T12038] SELinux: failed to load policy [ 602.605595][ T28] audit: type=1400 audit(2000000459.924:5630): avc: denied { mount } for pid=12052 comm="syz.5.13024" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 602.637553][ T28] audit: type=1400 audit(2000000459.954:5631): avc: denied { ioctl } for pid=12055 comm="syz.0.13025" path="socket:[159525]" dev="sockfs" ino=159525 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 602.762123][T12070] uprobe: syz.0.13032:12070 failed to unregister, leaking uprobe [ 602.824530][T12072] SELinux: failed to load policy [ 603.273177][T12091] bridge0: port 3(vlan2) entered disabled state [ 603.328765][T12097] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13042'. [ 603.338190][T12097] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 603.354862][T12099] netlink: 'syz.0.13043': attribute type 3 has an invalid length. [ 603.362920][T12099] netlink: 'syz.0.13043': attribute type 3 has an invalid length. [ 603.375725][T12106] netlink: 'syz.4.13044': attribute type 10 has an invalid length. [ 603.387794][ T7427] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.399939][ T7427] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.409426][T12106] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.419800][ T7427] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.420308][ T28] audit: type=1326 audit(2000000460.734:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.3.13045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc0d0c799 code=0x0 [ 603.438324][ T7427] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.482731][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13047'. [ 603.483302][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13046'. [ 603.491880][T12110] netlink: 196 bytes leftover after parsing attributes in process `syz.9.13047'. [ 603.501267][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13046'. [ 603.513629][T12110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13047'. [ 603.530722][T12110] netlink: 196 bytes leftover after parsing attributes in process `syz.9.13047'. [ 603.710548][T12123] xt_hashlimit: size too large, truncated to 1048576 [ 604.198449][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13056'. [ 604.268108][ T28] audit: type=1400 audit(2000000461.584:5633): avc: denied { create } for pid=12144 comm="syz.5.13057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 604.270010][T12145] netlink: 'syz.5.13057': attribute type 1 has an invalid length. [ 604.312043][ T28] audit: type=1400 audit(2000000461.584:5634): avc: denied { write } for pid=12144 comm="syz.5.13057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 604.529864][ T28] audit: type=1400 audit(2000000461.844:5635): avc: denied { mount } for pid=12150 comm="syz.3.13059" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 604.584656][T12157] loop3: detected capacity change from 0 to 128 [ 604.735568][T12157] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.758768][T12157] ext4 filesystem being mounted at /483/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 604.891155][T12165] netlink: 'syz.9.13062': attribute type 5 has an invalid length. [ 604.909159][T12165] __nla_validate_parse: 1 callbacks suppressed [ 604.909177][T12165] netlink: 1132 bytes leftover after parsing attributes in process `syz.9.13062'. [ 604.936752][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13062'. [ 604.975653][ T4135] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.145871][T12179] loop3: detected capacity change from 0 to 2048 [ 605.183225][T12179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.200036][T12179] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 605.215661][T12179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 605.227959][T12179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 605.227959][T12179] [ 605.237643][T12179] EXT4-fs (loop3): Total free blocks count 0 [ 605.244575][T12179] EXT4-fs (loop3): Free/Dirty block details [ 605.248898][ T28] audit: type=1400 audit(2000000462.574:5636): avc: denied { create } for pid=12185 comm="syz.0.13068" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.250585][T12179] EXT4-fs (loop3): free_blocks=66060288 [ 605.250625][T12179] EXT4-fs (loop3): dirty_blocks=48 [ 605.282901][T12179] EXT4-fs (loop3): Block reservation details [ 605.288886][T12179] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 605.300006][ T28] audit: type=1400 audit(2000000462.624:5637): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=15587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 605.698048][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13087'. [ 605.727739][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13087'. [ 605.971879][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 606.097284][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13092'. [ 606.116899][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13092'. [ 606.200907][T12235] loop3: detected capacity change from 0 to 1024 [ 606.295715][T12235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.321691][T12235] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.454461][T12235] EXT4-fs (loop3): shut down requested (0) [ 606.524849][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 606.712330][T12261] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 606.761833][T12261] batman_adv: batadv0: Adding interface: ip6gretap0 [ 606.780412][T12261] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.811236][T12261] batman_adv: batadv0: Interface activated: ip6gretap0 [ 607.334972][T12301] tipc: Failed to obtain node identity [ 607.351486][T12301] tipc: Enabling of bearer rejected, failed to enable media [ 607.470176][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13113'. [ 607.502976][T12308] netlink: 'syz.0.13113': attribute type 7 has an invalid length. [ 607.522779][T12308] netlink: 'syz.0.13113': attribute type 8 has an invalid length. [ 607.530737][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13113'. [ 607.716539][T12326] loop5: detected capacity change from 0 to 128 [ 607.729740][T12326] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.753527][T12326] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 607.799705][T11194] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.864742][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13126'. [ 607.874457][T12340] bond0: (slave syz_tun): Releasing backup interface [ 607.933426][T12345] loop9: detected capacity change from 0 to 512 [ 607.940408][T12345] EXT4-fs: Ignoring removed nobh option [ 607.950538][T12345] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 607.965619][T12345] EXT4-fs (loop9): 1 truncate cleaned up [ 607.973943][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13129'. [ 607.980777][T12345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.207526][T11022] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.222145][T12370] ref_ctr_offset mismatch. inode: 0xa08 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 608.315133][T12381] xt_hashlimit: max too large, truncated to 1048576 [ 608.630327][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 608.630342][ T28] audit: type=1400 audit(2000000721.943:5683): avc: denied { create } for pid=12419 comm="syz.5.13155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 608.703256][ T28] audit: type=1400 audit(2000000721.953:5684): avc: denied { getopt } for pid=12419 comm="syz.5.13155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 608.769494][ T28] audit: type=1400 audit(2000000721.953:5685): avc: denied { write } for pid=12419 comm="syz.5.13155" path="socket:[167951]" dev="sockfs" ino=167951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 609.081310][T12442] netlink: 'syz.3.13158': attribute type 10 has an invalid length. [ 609.108537][T12442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.142182][T12442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.175325][T12442] hsr0: entered promiscuous mode [ 609.201999][T12442] bridge0: port 3(hsr0) entered blocking state [ 609.203351][ T28] audit: type=1326 audit(2000000722.523:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.230293][T12442] bridge0: port 3(hsr0) entered disabled state [ 609.242176][T12442] hsr0: entered allmulticast mode [ 609.279223][T12442] hsr_slave_0: entered allmulticast mode [ 609.300654][T12434] loop9: detected capacity change from 0 to 1024 [ 609.331112][ T28] audit: type=1326 audit(2000000722.523:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.331320][T12442] hsr_slave_1: entered allmulticast mode [ 609.418303][ T28] audit: type=1326 audit(2000000722.523:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.520444][ T28] audit: type=1326 audit(2000000722.523:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.551420][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.558712][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.574097][T12434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.581027][ T28] audit: type=1326 audit(2000000722.523:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.655268][T12454] loop3: detected capacity change from 0 to 256 [ 609.661099][ T28] audit: type=1326 audit(2000000722.523:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.666103][T12454] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 609.707375][ T28] audit: type=1326 audit(2000000722.533:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.13156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1032e8c799 code=0x7ffc0000 [ 609.731329][T12434] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.771697][T12434] EXT4-fs (loop9): shut down requested (0) [ 609.793259][T12454] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.831549][T11022] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 609.917833][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.966597][T12449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.081301][T21390] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.096775][T21390] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.150065][T21390] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.188456][T21390] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.235380][T12482] sctp: [Deprecated]: syz.0.13167 (pid 12482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.235380][T12482] Use struct sctp_sack_info instead [ 610.504409][T12503] syzkaller0: entered promiscuous mode [ 610.519337][T12503] syzkaller0: entered allmulticast mode [ 610.756494][T12517] netlink: 'syz.0.13178': attribute type 2 has an invalid length. [ 611.025640][T12533] loop5: detected capacity change from 0 to 1024 [ 611.037162][T12533] EXT4-fs: inline encryption not supported [ 611.056958][T12533] EXT4-fs: Ignoring removed nobh option [ 611.064342][T12533] EXT4-fs: Ignoring removed bh option [ 611.081463][T12533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.113377][T11194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.037667][T12573] __nla_validate_parse: 7 callbacks suppressed [ 612.037708][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13199'. [ 612.417743][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13206'. [ 612.461208][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13209'. [ 612.582654][T12602] loop3: detected capacity change from 0 to 512 [ 612.598322][T12602] EXT4-fs: Ignoring removed bh option [ 612.612707][T12602] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 612.631926][T12602] EXT4-fs (loop3): 1 truncate cleaned up [ 612.637980][T12602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.749025][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.988042][T12627] netlink: 'syz.0.13222': attribute type 1 has an invalid length. [ 613.002848][T12627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 613.093451][T12627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 613.144196][T12627] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 613.196788][T12627] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 613.307113][T12651] bridge_slave_0: left allmulticast mode [ 613.323727][T12651] bridge_slave_0: left promiscuous mode [ 613.333996][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.344208][T12651] bridge_slave_1: left allmulticast mode [ 613.360143][T12651] bridge_slave_1: left promiscuous mode [ 613.366098][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.383545][T12651] bond0: (slave bond_slave_0): Releasing backup interface [ 613.410179][T12651] bond0: (slave bond_slave_1): Releasing backup interface [ 613.429700][T12651] team0: Port device team_slave_0 removed [ 613.454754][T12651] team0: Port device team_slave_1 removed [ 613.466417][T12651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.528161][T12672] netlink: 'syz.5.13240': attribute type 4 has an invalid length. [ 613.549768][T12672] netlink: 'syz.5.13240': attribute type 4 has an invalid length. [ 613.569529][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13241'. [ 613.677966][ T28] kauditd_printk_skb: 604 callbacks suppressed [ 613.677981][ T28] audit: type=1326 audit(2000000726.993:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12661 comm="syz.0.13237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0d01dc799 code=0x0 [ 613.788691][ T28] audit: type=1400 audit(2000000727.073:6298): avc: denied { name_bind } for pid=12692 comm="syz.3.13248" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 613.884966][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13250'. [ 614.293159][T12711] loop9: detected capacity change from 0 to 1764 [ 614.311886][T12711] iso9660: Bad value for 'check' [ 614.490705][ T28] audit: type=1400 audit(2000000727.803:6299): avc: denied { name_bind } for pid=12717 comm="syz.9.13256" src=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 614.566090][T12720] netlink: 896 bytes leftover after parsing attributes in process `syz.9.13257'. [ 614.590552][T12720] netlink: 896 bytes leftover after parsing attributes in process `syz.9.13257'. [ 614.684133][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13260'. [ 614.798689][T12734] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.13264'. [ 614.916729][T12744] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 614.934936][T12744] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 615.088037][T12752] netlink: 'syz.5.13272': attribute type 3 has an invalid length. [ 615.534591][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13273'. [ 616.007906][T12785] loop3: detected capacity change from 0 to 164 [ 616.054888][T12785] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 616.149167][T12793] ref_ctr_offset mismatch. inode: 0x16a offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 617.235334][T12835] tipc: Started in network mode [ 617.240235][T12835] tipc: Node identity 3a1581236639, cluster identity 4711 [ 617.251095][T12835] tipc: Enabled bearer , priority 0 [ 617.308245][T12835] syzkaller0: MTU too low for tipc bearer [ 617.315048][T12835] tipc: Disabling bearer [ 617.728598][T12849] __nla_validate_parse: 4 callbacks suppressed [ 617.728616][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13310'. [ 617.783311][ T28] audit: type=1326 audit(2000000731.103:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 617.833300][ T28] audit: type=1326 audit(2000000731.133:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 617.874247][ T28] audit: type=1326 audit(2000000731.133:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 617.905925][ T28] audit: type=1326 audit(2000000731.133:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 617.956684][T12840] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.957044][ T28] audit: type=1326 audit(2000000731.133:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 617.963957][T12840] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.997934][ T28] audit: type=1326 audit(2000000731.133:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 618.024031][ T28] audit: type=1326 audit(2000000731.133:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12851 comm="syz.4.13311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac39ac799 code=0x7ffc0000 [ 618.151706][T12861] netlink: 'syz.4.13313': attribute type 3 has an invalid length. [ 618.219933][T12840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.232678][T12840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.355132][T12869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13315'. [ 618.599453][ T7439] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.641491][ T7439] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.694438][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 618.694458][ T28] audit: type=1400 audit(2000000732.013:6351): avc: denied { read } for pid=12881 comm="syz.5.13319" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 618.832206][ T7439] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.853946][ T7439] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.945719][ T28] audit: type=1400 audit(2000000732.263:6352): avc: denied { name_connect } for pid=12895 comm="syz.4.13327" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 619.044966][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13330'. [ 619.267706][T12918] IPv6: sit2: Disabled Multicast RS [ 619.449299][T12928] netlink: 'syz.0.13338': attribute type 3 has an invalid length. [ 619.580712][T12938] loop3: detected capacity change from 0 to 512 [ 619.611517][T12938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.730052][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13348'. [ 619.760809][T12956] 8021q: adding VLAN 0 to HW filter on device team1 [ 619.834372][ T4135] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.859176][ T28] audit: type=1400 audit(2000000733.173:6353): avc: denied { connect } for pid=12963 comm="syz.5.13352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 619.970641][T12962] loop9: detected capacity change from 0 to 1024 [ 620.042657][T12962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 620.069860][T12962] System zones: 0-1, 3-36 [ 620.123078][T12962] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.13350: bad orphan inode 134217728 [ 620.177273][T12962] loop9: lost filesystem error report for type 5 error -117 [ 620.181077][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 620.194829][ C1] EXT4-fs (loop9): initial error at time 2000000733: ext4_orphan_get:1417 [ 620.203386][ C1] EXT4-fs (loop9): last error at time 2000000733: ext4_orphan_get:1417 [ 620.217124][T12962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.325544][T12983] ================================================================== [ 620.333652][T12983] BUG: KCSAN: data-race in filemap_read / filemap_read [ 620.340510][T12983] [ 620.342834][T12983] write to 0xffff888106036be8 of 8 bytes by task 12962 on cpu 1: [ 620.350555][T12983] filemap_read+0x98d/0xa10 [ 620.355065][T12983] generic_file_read_iter+0x79/0x330 [ 620.360358][T12983] ext4_file_read_iter+0x1cc/0x290 [ 620.365463][T12983] copy_splice_read+0x471/0x6c0 [ 620.370325][T12983] splice_direct_to_actor+0x28f/0x670 [ 620.375703][T12983] do_splice_direct+0x119/0x1a0 [ 620.380561][T12983] do_sendfile+0x382/0x650 [ 620.384978][T12983] __x64_sys_sendfile64+0x105/0x150 [ 620.390187][T12983] x64_sys_call+0x2dc4/0x3020 [ 620.394872][T12983] do_syscall_64+0x12c/0x370 [ 620.399463][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.405366][T12983] [ 620.407699][T12983] read to 0xffff888106036be8 of 8 bytes by task 12983 on cpu 0: [ 620.415335][T12983] filemap_read+0x6f/0xa10 [ 620.419768][T12983] generic_file_read_iter+0x79/0x330 [ 620.425059][T12983] ext4_file_read_iter+0x1cc/0x290 [ 620.430181][T12983] copy_splice_read+0x471/0x6c0 [ 620.435047][T12983] splice_direct_to_actor+0x28f/0x670 [ 620.440418][T12983] do_splice_direct+0x119/0x1a0 [ 620.445267][T12983] do_sendfile+0x382/0x650 [ 620.449693][T12983] __x64_sys_sendfile64+0x105/0x150 [ 620.454898][T12983] x64_sys_call+0x2dc4/0x3020 [ 620.459586][T12983] do_syscall_64+0x12c/0x370 [ 620.464175][T12983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.470071][T12983] [ 620.472390][T12983] value changed: 0x000000000000004d -> 0x000000000000004e [ 620.479490][T12983] [ 620.481803][T12983] Reported by Kernel Concurrency Sanitizer on: [ 620.487953][T12983] CPU: 0 UID: 0 PID: 12983 Comm: syz.9.13350 Tainted: G W syzkaller #0 PREEMPT(full) [ 620.498989][T12983] Tainted: [W]=WARN [ 620.502783][T12983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.512848][T12983] ================================================================== [ 620.691935][T11022] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.162004][ T28] audit: type=1400 audit(2000000738.483:6354): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=42430 daddr=10.128.0.64 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1