last executing test programs: 1m24.026438234s ago: executing program 1 (id=49): r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x9}, 0x26) shutdown(r2, 0x1) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m23.943294897s ago: executing program 1 (id=51): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file0\x00', 0x2000040, &(0x7f0000000840)={[{@rodir}, {@nonumtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uni_xlate}]}, 0x1, 0x375, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@nogrpid}, {@usrquota}, {@noauto_da_alloc}]}, 0xfd, 0x55a, &(0x7f0000000b80)="$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") pipe2(&(0x7f00000000c0), 0x80000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 1m23.818799961s ago: executing program 1 (id=53): socket(0x10, 0x1, 0xffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m23.738714593s ago: executing program 1 (id=54): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@bh}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m23.547878859s ago: executing program 1 (id=56): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 1m23.247150379s ago: executing program 1 (id=62): sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4081) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@local, 0x0, 0x8, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x400000000001, 0x1, 0x4003, 0x2, 0x200000000000000, 0x40, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 1m23.246993389s ago: executing program 32 (id=62): sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4081) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@local, 0x0, 0x8, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x400000000001, 0x1, 0x4003, 0x2, 0x200000000000000, 0x40, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 1m8.577778633s ago: executing program 0 (id=293): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x3, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000d80)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x47) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r1, 0x40e8662e, &(0x7f0000000080)={0x4f1, 0xd000000, 0xffffffffffff8000}) ioctl$LOOP_CHANGE_FD(r0, 0xc0c0128e, r0) 1m8.278459063s ago: executing program 0 (id=296): ioperm(0xb, 0x6, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m7.387470281s ago: executing program 0 (id=310): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0xa00003, &(0x7f00000000c0)=ANY=[], 0x1, 0x28e, &(0x7f0000000fc0)="$eJzs3c9qE20UBvCnbfp3k8L3rcTFgBtXpe0dBKkgBoRKFnXVYFuQphRSKOjC1pX34uV4GV5BBSHSTLRJDYLaOrH5/SDMITMPnMki7yzOm+zePzrcOz452PnvUxZSpJac53OSzGYupZmh40wWMuw8AMC/Znu73ai6B25Xt9tozydZ/OFM60MlDQEAAAAAAAAAAPDHhuf/l5YG8/8XyeqY+f9Z8/8AcCeY/7/7ut1Ge2Xw/DbK/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnYter977yavq/gCAm2f9B4DpY/0HgOlzMbLWz8T6DwB33/OdF08bzebWdlEsJUfvT1unrfJYnm8c5FU62c966vmSy+eDgbJ+/KS5tV70rWb36GyQPzttzY3mN1LP6vj8RpkvRvPzWRnOb6ae/8fnN8fmF/LwwVB+LfV8fJnjdLKXy+xV/u1GUTx61ryWX+xfBwAAAAAAAAAAAAAAAAAAAH/DWvFdf/9+rf/ut/37y4Orxu3vL8/8wu8DXNtfX8u9WnX3DQAAAAAAAAAAAAAAAAAAAJPk5PWbw3ans99V3ECx/Buf6rskE9H8xBW9TEQbU1pU/MUEAAAAAAAAAAAAAAAAAABT6GrTb9WdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB1rv7///aKqu8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmA5fAwAA//97w+R8") r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002000)=""/4099, 0x1003}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) 1m6.531453668s ago: executing program 0 (id=322): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m6.431808211s ago: executing program 0 (id=324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="020001"], 0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m6.205073098s ago: executing program 0 (id=325): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 1m6.204972108s ago: executing program 33 (id=325): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 1m4.369255486s ago: executing program 3 (id=342): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/144, 0x90}], 0x1}}], 0x1, 0x2102, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) creat(&(0x7f00000000c0)='./file1\x00', 0x1ea) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x60007f9) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m4.351440997s ago: executing program 3 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1m3.904898351s ago: executing program 3 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c0014800800"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 1m3.846188433s ago: executing program 3 (id=346): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m3.655271969s ago: executing program 3 (id=361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4084) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m3.110109196s ago: executing program 3 (id=367): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.105221497s ago: executing program 34 (id=367): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 41.138242372s ago: executing program 4 (id=811): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000038000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 41.051265204s ago: executing program 4 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) 40.794640773s ago: executing program 4 (id=820): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 40.745240854s ago: executing program 4 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x8f881, 0x0) unshare(0x22020600) unshare(0x22020400) 40.633115908s ago: executing program 4 (id=824): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) 40.462560863s ago: executing program 4 (id=825): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1c0002009}) 40.419907714s ago: executing program 35 (id=825): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1c0002009}) 28.309667898s ago: executing program 8 (id=1111): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x16, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 28.268314769s ago: executing program 8 (id=1112): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1be8ff8f3d47f506, 0x12f) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 27.954330369s ago: executing program 8 (id=1118): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x42}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 27.855212822s ago: executing program 8 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 27.804321404s ago: executing program 8 (id=1123): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x80) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x88}, 0x0) close(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 27.58895388s ago: executing program 8 (id=1128): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940)='./file0/../file0\x00', 0x0, 0x201000, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 27.582089001s ago: executing program 36 (id=1128): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940)='./file0/../file0\x00', 0x0, 0x201000, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 1.877233442s ago: executing program 5 (id=1998): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0xffffff00, 'veth0_macvtap\x00', 'geneve0\x00', {0xff}, {}, 0x62, 0x3, 0x15}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0953fe44d3b7cf74cdcbec194929756c03773c4a09ea38c3d7a1baebc26f"}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x81, 0x3, 'syz1\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.848134683s ago: executing program 5 (id=2000): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x0, 0x3, 0x1}]}}]}, 0x93}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) 1.808194374s ago: executing program 5 (id=2005): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.555406632s ago: executing program 6 (id=2014): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000380)="a7", 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}], 0x2, 0x4008440) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, 0x1404, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c895}, 0x0) 1.28092858s ago: executing program 9 (id=2017): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv0}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd37c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.266421261s ago: executing program 9 (id=2018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x1}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "b3ddd9", 0x14, 0x6, 0x0, @local, @private0, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x3}}}}}}}}, 0x4e) 1.153085204s ago: executing program 9 (id=2019): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = eventfd2(0x7, 0x100001) write$eventfd(r0, &(0x7f00000003c0)=0x5, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x9c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x108}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_LABELS={0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x4, 0xb2, 0x7ed93496, 0x100, 0x80000000, 0x5]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) 1.128955555s ago: executing program 9 (id=2020): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x5e}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.065102797s ago: executing program 9 (id=2021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r0) 900.657682ms ago: executing program 2 (id=2022): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r1, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c4, &(0x7f0000000340)="$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") prctl$PR_GET_DUMPABLE(0x3) iopl(0x3) 882.399273ms ago: executing program 2 (id=2023): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 851.561994ms ago: executing program 2 (id=2024): bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0xe, 0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x1000) io_uring_enter(r0, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) mount$9p_unix(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2000000, 0x0) 851.192684ms ago: executing program 2 (id=2025): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 835.460185ms ago: executing program 2 (id=2026): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x812}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 727.643977ms ago: executing program 5 (id=2027): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xf5cb, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004000000010000b441bf", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 715.618548ms ago: executing program 5 (id=2028): r0 = socket(0x1, 0x5, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 698.974679ms ago: executing program 6 (id=2029): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x7000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1aca, 0x1f480, 0x0, 0x396}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_gfeatures}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@user_xattr}, {@nodioread_nolock}, {@nogrpid}, {@norecovery}, {@errors_remount}, {@nodioread_nolock}, {@nojournal_checksum}]}, 0x1, 0x590, &(0x7f0000000b00)="$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") io_uring_enter(r0, 0x3ab, 0x6933, 0x17, 0x0, 0x0) 698.676279ms ago: executing program 5 (id=2030): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 641.03093ms ago: executing program 6 (id=2032): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 573.024482ms ago: executing program 6 (id=2033): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) 535.657094ms ago: executing program 6 (id=2034): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000000)=0xfffffffd, 0x4) 508.800064ms ago: executing program 6 (id=2035): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) fsopen(0x0, 0x0) 265.049092ms ago: executing program 2 (id=2038): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 264.863822ms ago: executing program 7 (id=2039): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) 253.283592ms ago: executing program 9 (id=2040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 219.006593ms ago: executing program 7 (id=2041): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x3032, 0xffffffffffffffff, 0xd27e4000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x80) getdents64(r3, 0x0, 0x0) 121.071166ms ago: executing program 7 (id=2042): gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==") lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0) 107.830217ms ago: executing program 7 (id=2043): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x1, 0xfffb, 0x0, 0x180, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in=@remote, {0x0, 0x1, 0x2, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x0, 0xff}, {}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x5, 0x5}}, 0xf8}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) syz_io_uring_setup(0x4ce4, &(0x7f00000000c0)={0x0, 0x7c98, 0x40, 0x2, 0x243}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 56.827938ms ago: executing program 7 (id=2044): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x39}, 0x10040, 0x0, 0x0, 0x4, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010101}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000100)='lo\x00', 0x0, 0xa00, 0x1000}) 0s ago: executing program 7 (id=2045): socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f00000000c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x48) r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000f80)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000180)=0xb) kernel console output (not intermixed with test programs): e [ 33.198482][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 33.236460][ T3666] hsr_slave_0: entered promiscuous mode [ 33.242653][ T3666] hsr_slave_1: entered promiscuous mode [ 33.248641][ T3666] debugfs: 'hsr0' already exists in 'hsr' [ 33.254738][ T3666] Cannot create hsr debugfs directory [ 33.424873][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 33.442301][ T3666] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.454614][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.469883][ T3666] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.490553][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.526582][ T3666] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.549082][ T3779] loop4: detected capacity change from 0 to 1024 [ 33.550500][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.563359][ T3779] EXT4-fs: Ignoring removed bh option [ 33.597294][ T3666] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.607483][ T3779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.628398][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.655760][ T3779] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.775953][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.836426][ T3666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.009511][ T3666] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.022699][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 34.043673][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.050800][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.082669][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.089802][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.339919][ T3666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.349895][ T3847] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 34.367986][ T3847] netlink: 'syz.3.101': attribute type 7 has an invalid length. [ 34.381754][ T3847] netlink: 198320 bytes leftover after parsing attributes in process `syz.3.101'. [ 34.462682][ T3864] loop4: detected capacity change from 0 to 128 [ 34.515498][ T3864] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.541810][ T3864] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.794980][ T3666] veth0_vlan: entered promiscuous mode [ 34.813389][ T3666] veth1_vlan: entered promiscuous mode [ 34.837629][ T3666] veth0_macvtap: entered promiscuous mode [ 34.855642][ T3666] veth1_macvtap: entered promiscuous mode [ 34.874770][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.895694][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.907130][ T3440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.921027][ T3440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.946595][ T3440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.961890][ T3440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.112475][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.179472][ T3907] loop5: detected capacity change from 0 to 512 [ 35.190004][ T3383] IPVS: starting estimator thread 0... [ 35.205667][ T3907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.243591][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.257120][ T3907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 35.277815][ T3907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 35.286139][ T3912] IPVS: using max 2352 ests per chain, 117600 per kthread [ 35.298723][ T3907] System zones: 1-12 [ 35.303590][ T3907] EXT4-fs (loop5): 1 truncate cleaned up [ 35.309845][ T3907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.325976][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.397848][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.409222][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 35.409237][ T28] audit: type=1400 audit(1781056123.867:292): avc: denied { connect } for pid=3928 comm="syz.4.125" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.418512][ T3933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'. [ 35.450304][ T28] audit: type=1400 audit(1781056123.897:293): avc: denied { write } for pid=3928 comm="syz.4.125" laddr=::ffff:127.0.0.1 lport=255 faddr=::ffff:127.0.0.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.512828][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.527990][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.582727][ T28] audit: type=1400 audit(1781056124.047:294): avc: denied { remount } for pid=3939 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.605083][ T3945] loop4: detected capacity change from 0 to 1024 [ 35.620663][ T3945] EXT4-fs: Ignoring removed nobh option [ 35.623021][ T28] audit: type=1400 audit(1781056124.077:295): avc: denied { read } for pid=3946 comm="syz.0.131" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.641249][ T3945] EXT4-fs: Ignoring removed i_version option [ 35.687646][ T28] audit: type=1400 audit(1781056124.077:296): avc: denied { open } for pid=3946 comm="syz.0.131" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.719035][ T3945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.725138][ T28] audit: type=1400 audit(1781056124.077:297): avc: denied { ioctl } for pid=3946 comm="syz.0.131" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.771069][ T310] bridge_slave_1: left allmulticast mode [ 35.782713][ T310] bridge_slave_1: left promiscuous mode [ 35.789838][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.805026][ T28] audit: type=1400 audit(1781056124.177:298): avc: denied { mounton } for pid=3948 comm="syz.0.132" path="/proc/97/task" dev="proc" ino=6922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 35.829468][ T310] bridge_slave_0: left allmulticast mode [ 35.837331][ T310] bridge_slave_0: left promiscuous mode [ 35.843415][ T3945] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 35.844773][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.865810][ T3945] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1824 with error 28 [ 35.875640][ T28] audit: type=1400 audit(1781056124.227:299): avc: denied { write } for pid=3944 comm="syz.4.130" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.878671][ T3945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.878671][ T3945] [ 35.909711][ T28] audit: type=1400 audit(1781056124.297:300): avc: denied { map } for pid=3944 comm="syz.4.130" path="/22/file1/cpuacct.usage_percpu_user" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.917302][ T3945] EXT4-fs (loop4): Total free blocks count 0 [ 35.934973][ T28] audit: type=1400 audit(1781056124.297:301): avc: denied { write } for pid=3944 comm="syz.4.130" path="/22/file1/cpuacct.usage_percpu_user" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.940487][ T3945] EXT4-fs (loop4): Free/Dirty block details [ 35.970152][ T3945] EXT4-fs (loop4): free_blocks=20480 [ 35.975495][ T3945] EXT4-fs (loop4): dirty_blocks=1840 [ 35.980795][ T3945] EXT4-fs (loop4): Block reservation details [ 35.987017][ T3945] EXT4-fs (loop4): i_reserved_data_blocks=115 [ 36.093515][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.104007][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.114174][ T310] bond0 (unregistering): Released all slaves [ 36.157463][ T310] hsr_slave_0: left promiscuous mode [ 36.163335][ T310] hsr_slave_1: left promiscuous mode [ 36.173548][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.190673][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.199549][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1824 with error 28 [ 36.199929][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.221087][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 36.225038][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.256234][ T310] veth1_macvtap: left promiscuous mode [ 36.262869][ T310] veth0_macvtap: left promiscuous mode [ 36.274686][ T310] veth1_vlan: left promiscuous mode [ 36.293355][ T310] veth0_vlan: left promiscuous mode [ 36.448423][ T310] team0 (unregistering): Port device team_slave_1 removed [ 36.471165][ T310] team0 (unregistering): Port device team_slave_0 removed [ 36.538230][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 36.589637][ T3988] syzkaller0: entered promiscuous mode [ 36.595467][ T3988] syzkaller0: entered allmulticast mode [ 36.618512][ T3998] loop5: detected capacity change from 0 to 512 [ 36.627506][ T3998] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 36.637008][ T3998] EXT4-fs (loop5): 1 truncate cleaned up [ 36.643363][ T3998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.658359][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.670985][ T3922] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.678891][ T3922] bridge_slave_0: entered allmulticast mode [ 36.685516][ T3922] bridge_slave_0: entered promiscuous mode [ 36.692922][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.693206][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.709312][ T3922] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.716952][ T3922] bridge_slave_1: entered allmulticast mode [ 36.727101][ T3922] bridge_slave_1: entered promiscuous mode [ 36.805086][ T3922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.840693][ T3922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.864560][ T3922] team0: Port device team_slave_0 added [ 36.872177][ T3922] team0: Port device team_slave_1 added [ 36.878028][ T4025] veth1_macvtap: left promiscuous mode [ 36.884048][ T4025] macsec0: entered allmulticast mode [ 36.897669][ T4025] veth1_macvtap: entered promiscuous mode [ 36.905408][ T4025] veth1_macvtap: entered allmulticast mode [ 36.918393][ T4025] macsec0: left allmulticast mode [ 36.924436][ T4025] veth1_macvtap: left allmulticast mode [ 36.947808][ T3922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.961398][ T3922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.990585][ T3922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.009365][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 37.041730][ T3922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.058439][ T3922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.102596][ T3922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.187423][ T3922] hsr_slave_0: entered promiscuous mode [ 37.214329][ T3922] hsr_slave_1: entered promiscuous mode [ 37.222760][ T3922] debugfs: 'hsr0' already exists in 'hsr' [ 37.228512][ T3922] Cannot create hsr debugfs directory [ 37.264512][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 37.291116][ T4058] syzkaller0: entered promiscuous mode [ 37.296913][ T4058] syzkaller0: entered allmulticast mode [ 37.344652][ T4070] syz.4.158 uses obsolete (PF_INET,SOCK_PACKET) [ 37.456873][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 37.653368][ T4109] veth1_macvtap: left promiscuous mode [ 37.678254][ T4109] macsec0: entered allmulticast mode [ 37.864114][ T4123] veth1_macvtap: entered promiscuous mode [ 37.883786][ T4142] process 'syz.3.176' launched './file1' with NULL argv: empty string added [ 37.884786][ T4123] veth1_macvtap: entered allmulticast mode [ 37.942836][ T4123] macsec0: left allmulticast mode [ 37.960879][ T4123] veth1_macvtap: left allmulticast mode [ 39.293167][ T310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.314904][ T3922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.347678][ T3922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.371519][ T3922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.399213][ T3922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.420524][ T3922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.439836][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.198'. [ 39.456737][ T4210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.198'. [ 39.467984][ T3922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.477007][ T3922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.483967][ T4210] netlink: 'syz.5.198': attribute type 1 has an invalid length. [ 39.503244][ T3922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.522789][ T310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.602241][ T310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.649453][ T4231] netlink: 112 bytes leftover after parsing attributes in process `syz.4.192'. [ 39.694271][ T3922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.738066][ T310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.762944][ T3922] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.778409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.785550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.830340][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.837498][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.900078][ T4244] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.197'. [ 40.040095][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.082064][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.108671][ T4193] bridge_slave_0: entered allmulticast mode [ 40.117162][ T4193] bridge_slave_0: entered promiscuous mode [ 40.132556][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.142598][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.152885][ T4193] bridge_slave_1: entered allmulticast mode [ 40.160018][ T4193] bridge_slave_1: entered promiscuous mode [ 40.184169][ T4254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 40.222164][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 40.309537][ T310] bond0: left allmulticast mode [ 40.314719][ T310] bond_slave_0: left allmulticast mode [ 40.320263][ T310] bond_slave_1: left allmulticast mode [ 40.326465][ T310] bridge0: port 3(bond0) entered disabled state [ 40.380879][ T310] bridge_slave_1: left allmulticast mode [ 40.387095][ T310] bridge_slave_1: left promiscuous mode [ 40.396009][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.406869][ T310] bridge_slave_0: left allmulticast mode [ 40.412940][ T310] bridge_slave_0: left promiscuous mode [ 40.418714][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.533916][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.542857][ T310] bond_slave_0: left promiscuous mode [ 40.549598][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.558934][ T310] bond_slave_1: left promiscuous mode [ 40.565310][ T310] bond0 (unregistering): Released all slaves [ 40.694829][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 40.694845][ T28] audit: type=1400 audit(1781056129.157:349): avc: denied { write } for pid=4269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.733420][ T28] audit: type=1400 audit(1781056129.197:350): avc: denied { write } for pid=4280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.941721][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.951611][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 40.971358][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.000987][ T310] hsr_slave_0: left promiscuous mode [ 41.006985][ T310] hsr_slave_1: left promiscuous mode [ 41.012985][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.020416][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.028459][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.035911][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.045603][ T310] veth1_macvtap: left promiscuous mode [ 41.051201][ T310] veth0_macvtap: left promiscuous mode [ 41.056854][ T310] veth1_vlan: left promiscuous mode [ 41.062165][ T310] veth0_vlan: left promiscuous mode [ 41.118911][ T310] team0 (unregistering): Port device team_slave_1 removed [ 41.128201][ T310] team0 (unregistering): Port device team_slave_0 removed [ 41.171900][ T4193] team0: Port device team_slave_0 added [ 41.178525][ T4193] team0: Port device team_slave_1 added [ 41.206676][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.214280][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.240504][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.251991][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.259033][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.285238][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.306664][ T3922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.350833][ T4193] hsr_slave_0: entered promiscuous mode [ 41.367171][ T4193] hsr_slave_1: entered promiscuous mode [ 41.470163][ T28] audit: type=1400 audit(1781056129.927:351): avc: denied { write } for pid=4299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.506066][ T3922] veth0_vlan: entered promiscuous mode [ 41.535159][ T28] audit: type=1400 audit(1781056129.997:352): avc: denied { write } for pid=4321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.577386][ T28] audit: type=1400 audit(1781056130.037:353): avc: denied { block_suspend } for pid=4322 comm="syz.5.209" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.684285][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.714360][ T28] audit: type=1400 audit(1781056130.177:354): avc: denied { connect } for pid=4329 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.758539][ T3922] veth1_vlan: entered promiscuous mode [ 41.781745][ T3922] veth0_macvtap: entered promiscuous mode [ 41.787749][ T28] audit: type=1400 audit(1781056130.247:355): avc: denied { ioctl } for pid=4329 comm="syz.3.211" path="socket:[8139]" dev="sockfs" ino=8139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.815836][ T3922] veth1_macvtap: entered promiscuous mode [ 41.829845][ T4333] tipc: Started in network mode [ 41.835231][ T4333] tipc: Node identity 2007ff, cluster identity 4711 [ 41.851289][ T4333] tipc: Node number set to 2099199 [ 41.872423][ T3922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.886689][ T12] tipc: Subscription rejected, illegal request [ 41.895526][ T28] audit: type=1400 audit(1781056130.357:356): avc: denied { read } for pid=4329 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.914199][ T3922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.927111][ T28] audit: type=1400 audit(1781056130.387:357): avc: denied { write } for pid=4335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.958307][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.967810][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.975403][ T35] IPVS: starting estimator thread 0... [ 42.008125][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.022380][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.036364][ T28] audit: type=1400 audit(1781056130.497:358): avc: denied { write } for pid=4355 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.082519][ T4351] IPVS: using max 2160 ests per chain, 108000 per kthread [ 42.107767][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.120004][ T4193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.155438][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.176419][ T4193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.187345][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.226653][ T4193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.235506][ T4378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 42.250859][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.274931][ T4193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.355750][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.370488][ T4403] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 42.379851][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.413824][ T4403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.426233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.433358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.451783][ T4403] bond1: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 42.475270][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.482453][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.601307][ T4437] loop4: detected capacity change from 0 to 512 [ 42.609277][ T4437] FAT-fs (loop4): bogus logical sector size 1536 [ 42.617255][ T4437] FAT-fs (loop4): Can't find a valid FAT filesystem [ 42.695012][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.770310][ T4193] veth0_vlan: entered promiscuous mode [ 42.778569][ T4193] veth1_vlan: entered promiscuous mode [ 42.793609][ T4193] veth0_macvtap: entered promiscuous mode [ 42.800894][ T4193] veth1_macvtap: entered promiscuous mode [ 42.811169][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.822443][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.834539][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.843703][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.856492][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.866197][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.280241][ T4487] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 43.295781][ T4487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.315571][ T4487] bond1: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 43.380072][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.388904][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.475935][ T4498] netlink: 6 bytes leftover after parsing attributes in process `syz.4.245'. [ 43.488332][ T4498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.988942][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.252'. [ 44.555606][ T4547] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 44.695760][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 45.702561][ T4745] tipc: Started in network mode [ 45.723637][ T4745] tipc: Node identity 2007ff, cluster identity 4711 [ 45.755252][ T4745] tipc: Node number set to 2099199 [ 45.810692][ T1469] tipc: Subscription rejected, illegal request [ 45.886915][ T4754] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 46.006168][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 46.006184][ T28] audit: type=1400 audit(1781056134.467:401): avc: denied { write } for pid=4748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.057800][ T4754] bond2: (slave veth5): Enslaving as an active interface with a down link [ 46.080421][ T28] audit: type=1400 audit(1781056134.537:402): avc: denied { write } for pid=4771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.115368][ T4770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.121725][ T4773] loop2: detected capacity change from 0 to 512 [ 46.128685][ T4773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.165730][ T4773] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.193667][ T4773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 46.214264][ T4773] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 46.239459][ T4773] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 46.260406][ T4773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.299763][ T4773] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.282: dx entry: limit 65535 != root limit 120 [ 46.327557][ T4773] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.282: Corrupt directory, running e2fsck is recommended [ 46.359277][ T4773] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.282: path /15/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 46.445917][ T3922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.457758][ T4785] loop4: detected capacity change from 0 to 1024 [ 46.498556][ T4785] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 46.551871][ T4785] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.288: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.574911][ T4785] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.575782][ T4785] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 46.584902][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.584927][ C1] EXT4-fs (loop4): initial error at time 1781056135: ext4_map_blocks:791: inode 3: block 2 [ 46.584984][ C1] EXT4-fs (loop4): last error at time 1781056135: ext4_map_blocks:791: inode 3: block 2 [ 46.619447][ T28] audit: type=1400 audit(1781056135.047:403): avc: denied { append } for pid=4797 comm="syz.0.293" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.641362][ T4785] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.288: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.659081][ T4785] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.659245][ T4785] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 46.681326][ T4785] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.288: Failed to acquire dquot type 0 [ 46.701328][ T4785] loop4: lost filesystem error report for type 5 error -117 [ 46.701452][ T4785] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 46.721340][ T4785] loop4: lost filesystem error report for type 5 error -117 [ 46.721475][ T4785] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.288: mark_inode_dirty error [ 46.753919][ T28] audit: type=1400 audit(1781056135.217:404): avc: denied { create } for pid=4800 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.760936][ T4785] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.775465][ T28] audit: type=1400 audit(1781056135.237:405): avc: denied { bind } for pid=4800 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.786174][ T4785] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 46.831522][ T4785] EXT4-fs (loop4): 1 orphan inode deleted [ 46.837976][ T4785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.853106][ T4726] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.871464][ T4726] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.872145][ T4726] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 46.892351][ T4726] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 46.904130][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 46.945686][ T4805] loop3: detected capacity change from 0 to 512 [ 46.971379][ T4805] EXT4-fs: Mount option(s) incompatible with ext2 [ 47.028287][ T28] audit: type=1400 audit(1781056135.487:406): avc: denied { write } for pid=4784 comm="syz.4.288" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.052209][ T28] audit: type=1400 audit(1781056135.487:407): avc: denied { create } for pid=4784 comm="syz.4.288" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 47.081584][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.090792][ T30] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.105860][ T30] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.112573][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 47.133877][ T30] loop4: lost filesystem error report for type 5 error -117 [ 47.134385][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.156323][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 47.156611][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 47.174874][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 47.174965][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 47.193767][ T3296] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.464943][ T4830] loop3: detected capacity change from 0 to 512 [ 47.496893][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.512369][ T4830] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.580573][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.287953][ T4872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 49.037143][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 49.062435][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.329362][ T4976] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.336584][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.344074][ T4976] bridge_slave_0: entered allmulticast mode [ 49.350853][ T4976] bridge_slave_0: entered promiscuous mode [ 49.358444][ T4976] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.365723][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.373138][ T4976] bridge_slave_1: entered allmulticast mode [ 49.379751][ T4976] bridge_slave_1: entered promiscuous mode [ 49.398111][ T4976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.408929][ T4976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.431652][ T4976] team0: Port device team_slave_0 added [ 49.438359][ T4976] team0: Port device team_slave_1 added [ 49.454633][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.461775][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.488134][ T4976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.499682][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.506885][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.535323][ T4976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.610881][ T4976] hsr_slave_0: entered promiscuous mode [ 49.619997][ T4976] hsr_slave_1: entered promiscuous mode [ 49.631997][ T4976] debugfs: 'hsr0' already exists in 'hsr' [ 49.638161][ T4976] Cannot create hsr debugfs directory [ 49.788950][ T4976] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.809900][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.834022][ T4976] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.858768][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.870441][ T4976] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.892681][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.903811][ T4976] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.916089][ T4976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.015078][ T4976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.043035][ T4976] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.060397][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.067548][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.086365][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.093491][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.372572][ T4976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.572659][ T4976] veth0_vlan: entered promiscuous mode [ 50.588719][ T4976] veth1_vlan: entered promiscuous mode [ 50.623313][ T4976] veth0_macvtap: entered promiscuous mode [ 50.638657][ T4976] veth1_macvtap: entered promiscuous mode [ 50.660951][ T4976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.681909][ T4976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.704892][ T4728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.714056][ T4728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.730375][ T4728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.740579][ T4728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.804413][ T5066] netlink: 168 bytes leftover after parsing attributes in process `syz.3.343'. [ 51.265640][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 51.265664][ T28] audit: type=1400 audit(1781056139.727:425): avc: denied { append } for pid=5070 comm="syz.3.345" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.378893][ T28] audit: type=1400 audit(1781056139.837:426): avc: denied { create } for pid=5075 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.404143][ T28] audit: type=1400 audit(1781056139.867:427): avc: denied { write } for pid=5075 comm="syz.4.347" path="socket:[12068]" dev="sockfs" ino=12068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.481902][ T28] audit: type=1400 audit(1781056139.937:428): avc: denied { sqpoll } for pid=5083 comm="syz.5.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.588482][ T3440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.740725][ T28] audit: type=1400 audit(1781056140.197:429): avc: denied { read write } for pid=5096 comm="syz.2.355" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.801956][ T3440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.806404][ T28] audit: type=1400 audit(1781056140.197:430): avc: denied { open } for pid=5096 comm="syz.2.355" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.843113][ T28] audit: type=1400 audit(1781056140.277:431): avc: denied { mounton } for pid=5100 comm="syz.2.357" path="/file0" dev="ramfs" ino=12470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 51.932665][ T28] audit: type=1400 audit(1781056140.387:432): avc: denied { write } for pid=5106 comm="syz.6.362" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.959518][ T5109] loop5: detected capacity change from 0 to 1024 [ 51.967811][ T5109] EXT4-fs: Ignoring removed orlov option [ 51.979993][ T3440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.003987][ T5109] EXT4-fs: quotafile must be on filesystem root [ 52.030279][ T5109] netlink: 'syz.5.360': attribute type 10 has an invalid length. [ 52.209116][ T3440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.398639][ T28] audit: type=1400 audit(1781056140.857:433): avc: denied { connect } for pid=5152 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.425532][ T3440] bridge_slave_1: left allmulticast mode [ 52.443683][ T3440] bridge_slave_1: left promiscuous mode [ 52.465828][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.484672][ T3440] bridge_slave_0: left allmulticast mode [ 52.490860][ T3440] bridge_slave_0: left promiscuous mode [ 52.500905][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.587627][ T28] audit: type=1400 audit(1781056141.047:434): avc: denied { write } for pid=5156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.726115][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.742947][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.764920][ T3440] bond0 (unregistering): Released all slaves [ 52.798006][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 52.831713][ T3440] hsr_slave_0: left promiscuous mode [ 52.848397][ T3440] hsr_slave_1: left promiscuous mode [ 52.861427][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.883432][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.900761][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.921146][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.951279][ T3440] veth1_macvtap: left promiscuous mode [ 52.962330][ T5200] loop2: detected capacity change from 0 to 4096 [ 52.971989][ T3440] veth0_macvtap: left promiscuous mode [ 52.979620][ T5200] EXT4-fs: test_dummy_encryption option not supported [ 52.984734][ T3440] veth1_vlan: left promiscuous mode [ 52.993524][ T3440] veth0_vlan: left promiscuous mode [ 53.024074][ T5200] xt_hashlimit: size too large, truncated to 1048576 [ 53.147074][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 53.158962][ T5223] netlink: 264 bytes leftover after parsing attributes in process `syz.6.391'. [ 53.168295][ T5223] netlink: 264 bytes leftover after parsing attributes in process `syz.6.391'. [ 53.177983][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 53.458126][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.481150][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.491533][ T5129] bridge_slave_0: entered allmulticast mode [ 53.498473][ T5129] bridge_slave_0: entered promiscuous mode [ 53.505397][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.512718][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.519903][ T5129] bridge_slave_1: entered allmulticast mode [ 53.539204][ T5266] capability: warning: `syz.2.400' uses 32-bit capabilities (legacy support in use) [ 53.543592][ T5129] bridge_slave_1: entered promiscuous mode [ 53.573007][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 53.608210][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.633945][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.684197][ T5129] team0: Port device team_slave_0 added [ 53.741068][ T5129] team0: Port device team_slave_1 added [ 53.759952][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.768576][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.826373][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.858826][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.866687][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.911255][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.989488][ T5129] hsr_slave_0: entered promiscuous mode [ 54.000565][ T5129] hsr_slave_1: entered promiscuous mode [ 54.104801][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 54.199754][ T5318] loop6: detected capacity change from 0 to 256 [ 54.209100][ T5319] loop2: detected capacity change from 0 to 512 [ 54.224348][ T5129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.255427][ T5129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.267628][ T5129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.277183][ T5129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.289113][ T5319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.301828][ T5129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 54.326351][ T5129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.334218][ T5129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 54.343460][ T5319] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.371897][ T5129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.380418][ T3922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.488694][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 54.513221][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.567888][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.592005][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.599188][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.632184][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.639283][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.660908][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.686839][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.846863][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.896434][ T5398] bridge_slave_0: left allmulticast mode [ 54.904334][ T5398] bridge_slave_0: left promiscuous mode [ 54.912265][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.923232][ T5398] bridge_slave_1: left allmulticast mode [ 54.928950][ T5398] bridge_slave_1: left promiscuous mode [ 54.935384][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.945629][ T5398] bond0: (slave bond_slave_0): Releasing backup interface [ 54.956521][ T5398] bond0: (slave bond_slave_1): Releasing backup interface [ 54.970374][ T5398] team0: Port device team_slave_0 removed [ 54.979576][ T5398] team0: Port device team_slave_1 removed [ 54.986626][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.994350][ T5398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.003149][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.010685][ T5398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.021988][ T5398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.039281][ T5404] team0: Mode changed to "roundrobin" [ 55.178246][ T5129] veth0_vlan: entered promiscuous mode [ 55.187395][ T5129] veth1_vlan: entered promiscuous mode [ 55.204059][ T5129] veth0_macvtap: entered promiscuous mode [ 55.212097][ T5129] veth1_macvtap: entered promiscuous mode [ 55.223478][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.235225][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.257099][ T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.267303][ T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.281399][ T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.290508][ T310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.925111][ T5473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 55.967941][ T5473] batman_adv: batadv0: Adding interface: gretap1 [ 55.976059][ T5473] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.002267][ T5473] batman_adv: batadv0: Interface activated: gretap1 [ 56.660449][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 56.660464][ T28] audit: type=1400 audit(1781056145.117:476): avc: denied { read } for pid=5555 comm="syz.2.496" path="socket:[14630]" dev="sockfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.760023][ T28] audit: type=1326 audit(1781056145.217:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.817796][ T28] audit: type=1326 audit(1781056145.217:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.844097][ T28] audit: type=1326 audit(1781056145.217:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.870217][ T28] audit: type=1326 audit(1781056145.217:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.896353][ T28] audit: type=1326 audit(1781056145.217:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f40da3cbcc7 code=0x7ffc0000 [ 56.922371][ T28] audit: type=1326 audit(1781056145.217:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.950204][ T28] audit: type=1326 audit(1781056145.217:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 56.981838][ T28] audit: type=1326 audit(1781056145.247:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 57.007397][ T28] audit: type=1326 audit(1781056145.247:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.2.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da3cce59 code=0x7ffc0000 [ 57.391984][ T5587] bridge_slave_0: left allmulticast mode [ 57.403979][ T5587] bridge_slave_0: left promiscuous mode [ 57.419885][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.444326][ T5587] bridge_slave_1: left allmulticast mode [ 57.450000][ T5587] bridge_slave_1: left promiscuous mode [ 57.466555][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.482463][ T5587] bond0: (slave bond_slave_0): Releasing backup interface [ 57.493856][ T5587] bond0: (slave bond_slave_1): Releasing backup interface [ 57.506389][ T5587] team0: Port device team_slave_0 removed [ 57.514673][ T5587] team0: Port device team_slave_1 removed [ 57.523532][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.531396][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.533099][ T5606] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.513'. [ 57.547919][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'. [ 57.549931][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.568887][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.578574][ T5587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.599464][ T5593] team0: Mode changed to "roundrobin" [ 57.621743][ T5608] 9pnet: p9_errstr2errno: server reported unknown error 00000000 [ 57.904474][ T5625] netlink: 24 bytes leftover after parsing attributes in process `syz.6.526'. [ 58.935379][ T5653] loop7: detected capacity change from 0 to 128 [ 59.228341][ T5683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 59.378381][ T5695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'. [ 59.596299][ T5705] 9pnet: p9_errstr2errno: server reported unknown error 00000000 [ 59.759074][ T5709] batman_adv: batadv0: Interface deactivated: gretap1 [ 59.775677][ T5132] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.793123][ T5132] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.818016][ T5132] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.854935][ T5132] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.267238][ T5738] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 60.364162][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.376652][ T5749] loop5: detected capacity change from 0 to 1024 [ 60.386783][ T5749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.414907][ T5749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.493746][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.166892][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.599'. [ 61.181422][ T5805] loop7: detected capacity change from 0 to 512 [ 61.188416][ T5805] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 61.201367][ T5805] EXT4-fs (loop7): invalid journal inode [ 61.207441][ T5805] EXT4-fs (loop7): can't get journal size [ 61.216277][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 61.225500][ T5805] System zones: 1-12, 13-13 [ 61.230566][ T5805] EXT4-fs (loop7): 1 truncate cleaned up [ 61.236953][ T5805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.253761][ T5805] netlink: 'syz.7.598': attribute type 1 has an invalid length. [ 61.253775][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 61.270868][ T5805] netlink: 'syz.7.598': attribute type 4 has an invalid length. [ 61.278612][ T5805] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.598'. [ 61.306734][ T5129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.729970][ T5836] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 61.766692][ T5836] netlink: 'syz.2.612': attribute type 4 has an invalid length. [ 61.785243][ T5836] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.612'. [ 62.017753][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 62.017768][ T28] audit: type=1400 audit(1781056150.477:525): avc: denied { map } for pid=5840 comm="syz.2.613" path="socket:[15152]" dev="sockfs" ino=15152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.101592][ T28] audit: type=1400 audit(1781056150.477:526): avc: denied { accept } for pid=5840 comm="syz.2.613" path="socket:[15152]" dev="sockfs" ino=15152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.226965][ T5854] netlink: 'syz.6.616': attribute type 13 has an invalid length. [ 62.609621][ T5863] netlink: 'syz.5.617': attribute type 11 has an invalid length. [ 62.617863][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.5.617'. [ 63.848502][ T28] audit: type=1400 audit(1781056152.307:527): avc: denied { getopt } for pid=5942 comm="syz.6.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.513411][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.637'. [ 64.809834][ T6033] loop7: detected capacity change from 0 to 256 [ 64.898808][ T28] audit: type=1326 audit(1781056153.357:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 64.965505][ T28] audit: type=1326 audit(1781056153.357:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.002789][ T28] audit: type=1326 audit(1781056153.357:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.037475][ T28] audit: type=1326 audit(1781056153.357:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.089477][ T28] audit: type=1326 audit(1781056153.357:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.118922][ T6045] veth0_to_team: entered promiscuous mode [ 65.154283][ T28] audit: type=1326 audit(1781056153.357:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.235829][ T28] audit: type=1326 audit(1781056153.357:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6039 comm="syz.7.645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 65.285985][ T6067] unsupported nlmsg_type 40 [ 65.640293][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.661'. [ 65.756795][ T6121] sctp: [Deprecated]: syz.5.664 (pid 6121) Use of int in maxseg socket option. [ 65.756795][ T6121] Use struct sctp_assoc_value instead [ 65.803838][ T6121] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 65.823169][ T6121] bond1 (unregistering): Released all slaves [ 66.008533][ T6150] loop4: detected capacity change from 0 to 512 [ 66.037156][ T6150] EXT4-fs: Mount option(s) incompatible with ext3 [ 66.227388][ T6156] -1: renamed from syzkaller0 [ 66.397672][ T6170] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 66.406508][ T6170] netlink: 'syz.5.685': attribute type 4 has an invalid length. [ 66.415486][ T6170] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.685'. [ 66.482967][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'. [ 66.493151][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'. [ 66.539378][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.5.689'. [ 66.550385][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.5.689'. [ 66.676694][ T6207] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 66.790197][ T6215] loop4: detected capacity change from 0 to 2048 [ 66.933719][ T6215] loop4: p1 p2 p3 [ 66.937621][ T6215] loop4: p1 size 16777216 extends beyond EOD, truncated [ 66.951157][ T6215] loop4: p2 size 458752 extends beyond EOD, truncated [ 66.972287][ T6215] loop4: p3 start 3036741376 is beyond EOD, truncated [ 67.003669][ T2980] loop4: p1 p2 p3 [ 67.007670][ T2980] loop4: p1 size 16777216 extends beyond EOD, truncated [ 67.021431][ T2980] loop4: p2 size 458752 extends beyond EOD, truncated [ 67.034478][ T2980] loop4: p3 start 3036741376 is beyond EOD, truncated [ 67.036310][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 67.050868][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 67.705651][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 67.705697][ T28] audit: type=1400 audit(1781056156.167:573): avc: denied { mount } for pid=6263 comm="syz.6.715" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.741392][ T28] audit: type=1400 audit(1781056156.197:574): avc: denied { watch } for pid=6263 comm="syz.6.715" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 67.815338][ T6273] loop4: detected capacity change from 0 to 128 [ 67.838690][ T6273] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 67.933432][ T6273] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 67.943686][ T6273] FAT-fs (loop4): Filesystem has been set read-only [ 67.971513][ T3296] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 68.445475][ T6306] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 68.455300][ T6306] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 68.469912][ T6306] __nla_validate_parse: 3 callbacks suppressed [ 68.469929][ T6306] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.733'. [ 68.545312][ T6314] -1: renamed from syzkaller0 [ 68.758856][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.722'. [ 68.907605][ T28] audit: type=1400 audit(1781056157.357:575): avc: denied { bind } for pid=6344 comm="syz.6.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.956523][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.749'. [ 68.995101][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 69.019134][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.749'. [ 69.038948][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.749'. [ 70.018246][ T6498] loop7: detected capacity change from 0 to 128 [ 70.033675][ T6498] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 70.086040][ T28] audit: type=1400 audit(1781056158.547:576): avc: denied { read } for pid=6502 comm="syz.5.768" path="socket:[16830]" dev="sockfs" ino=16830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.251635][ T6498] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 70.265489][ T6498] FAT-fs (loop7): Filesystem has been set read-only [ 70.514628][ T5129] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 70.625781][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.775'. [ 70.651672][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.775'. [ 70.690074][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.775'. [ 70.764630][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.779'. [ 73.087709][ T28] audit: type=1400 audit(1781056161.547:577): avc: denied { bind } for pid=6556 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.141545][ T28] audit: type=1400 audit(1781056161.547:578): avc: denied { setopt } for pid=6556 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.207681][ T28] audit: type=1400 audit(1781056161.567:579): avc: denied { name_connect } for pid=6554 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.249212][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.275184][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.298181][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.361615][ T6570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.400629][ T6570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.416964][ T6570] veth1_vlan: left promiscuous mode [ 73.437044][ T6570] veth0_vlan: left promiscuous mode [ 73.444852][ T6570] veth0_vlan: entered promiscuous mode [ 73.453762][ T6570] veth1_vlan: entered promiscuous mode [ 73.463492][ T6570] veth1_macvtap: left promiscuous mode [ 73.469787][ T6570] veth0_macvtap: left promiscuous mode [ 73.476345][ T6570] veth0_macvtap: entered promiscuous mode [ 73.483813][ T6570] veth1_macvtap: entered promiscuous mode [ 73.493791][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.504522][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.519979][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.522330][ T28] audit: type=1400 audit(1781056161.977:580): avc: denied { create } for pid=6584 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.549533][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.569941][ T6570] batman_adv: batadv0: Interface activated: gretap1 [ 73.572136][ T28] audit: type=1400 audit(1781056162.007:581): avc: denied { write } for pid=6584 comm="syz.4.796" path="socket:[16966]" dev="sockfs" ino=16966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.784205][ T5136] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.807502][ T5136] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.834408][ T5136] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.860390][ T5136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097465][ T28] audit: type=1326 audit(1781056162.557:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.7.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 74.141406][ T28] audit: type=1326 audit(1781056162.557:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.7.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 74.167451][ T28] audit: type=1326 audit(1781056162.557:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.7.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 74.193979][ T28] audit: type=1326 audit(1781056162.557:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.7.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 74.220025][ T28] audit: type=1326 audit(1781056162.557:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.7.815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 75.151943][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.169212][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.181959][ T6662] bridge_slave_0: entered allmulticast mode [ 75.195080][ T6662] bridge_slave_0: entered promiscuous mode [ 75.209570][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.217000][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.224793][ T6662] bridge_slave_1: entered allmulticast mode [ 75.231796][ T6662] bridge_slave_1: entered promiscuous mode [ 75.260360][ T6657] __nla_validate_parse: 2 callbacks suppressed [ 75.260376][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 75.261856][ T6662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.286091][ T6662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.317205][ T6662] team0: Port device team_slave_0 added [ 75.334978][ T6662] team0: Port device team_slave_1 added [ 75.364075][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.371509][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.397939][ T6662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.417710][ T6698] ref_ctr increment failed for inode: 0x2d5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881161a1440 [ 75.419567][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.435841][ T6697] uprobe: syz.2.835:6697 failed to unregister, leaking uprobe [ 75.436254][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.480527][ T6662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.512971][ T6662] hsr_slave_0: entered promiscuous mode [ 75.519201][ T6662] hsr_slave_1: entered promiscuous mode [ 75.525458][ T6662] debugfs: 'hsr0' already exists in 'hsr' [ 75.531981][ T6662] Cannot create hsr debugfs directory [ 75.612031][ T6707] loop5: detected capacity change from 0 to 512 [ 75.634331][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'. [ 75.647461][ T6707] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.840: iget: bad i_size value: 38620345925642 [ 75.660589][ T6707] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.661214][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 75.663421][ T6707] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.840: couldn't read orphan inode 15 (err -117) [ 75.670384][ C1] EXT4-fs (loop5): initial error at time 1781056164: ext4_orphan_get:1397 [ 75.681962][ T6707] loop5: lost filesystem error report for type 5 error -117 [ 75.688537][ C1] : inode 15 [ 75.701549][ T6707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.704388][ C1] [ 75.722342][ C1] EXT4-fs (loop5): last error at time 1781056164: ext4_orphan_get:1402 [ 75.735567][ T6706] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.840: bg 0: block 5: invalid block bitmap [ 75.737824][ T6662] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 75.755707][ T6707] EXT4-fs (loop5): shut down requested (0) [ 75.764242][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.772502][ T6662] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 75.783317][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.793061][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.817963][ T6662] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 75.833326][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.842659][ T6662] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 75.853054][ T6662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.928062][ T6662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.945473][ T6662] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.963224][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.970389][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.982233][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.989368][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.218436][ T6662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.229667][ T6757] ref_ctr increment failed for inode: 0x2df offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103515100 [ 76.257310][ T6756] uprobe: syz.5.850:6756 failed to unregister, leaking uprobe [ 76.441553][ T6662] veth0_vlan: entered promiscuous mode [ 76.450248][ T6662] veth1_vlan: entered promiscuous mode [ 76.469497][ T6662] veth0_macvtap: entered promiscuous mode [ 76.478024][ T6662] veth1_macvtap: entered promiscuous mode [ 76.489551][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.499582][ T6662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.514235][ T5136] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.523320][ T5136] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.540535][ T5136] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.550939][ T5136] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.747760][ T6796] Cannot find add_set index 0 as target [ 77.019335][ T6813] netlink: 'syz.7.864': attribute type 1 has an invalid length. [ 77.045759][ T6813] bond1: entered promiscuous mode [ 77.051058][ T6813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.095915][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.864'. [ 77.105116][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.864'. [ 77.125975][ T6813] bond1: (slave bridge2): making interface the new active one [ 77.136332][ T6813] bridge2: entered promiscuous mode [ 77.143628][ T6813] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 77.903645][ T6862] Cannot find add_set index 0 as target [ 78.763421][ T6900] netlink: 'syz.5.895': attribute type 1 has an invalid length. [ 78.946496][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.898'. [ 79.095796][ T6918] netlink: 'syz.5.901': attribute type 1 has an invalid length. [ 79.169732][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.8.906'. [ 79.173698][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 79.225378][ T6926] loop7: detected capacity change from 0 to 128 [ 79.249988][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 79.481749][ T28] kauditd_printk_skb: 411 callbacks suppressed [ 79.481763][ T28] audit: type=1400 audit(1781056167.947:998): avc: denied { read } for pid=6933 comm="syz.7.908" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.497129][ T6918] bond1: entered promiscuous mode [ 79.517501][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.529417][ T28] audit: type=1400 audit(1781056167.947:999): avc: denied { open } for pid=6933 comm="syz.7.908" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.589938][ T6928] bond1: (slave bridge1): making interface the new active one [ 79.619845][ T6937] netlink: 'syz.7.909': attribute type 1 has an invalid length. [ 79.638338][ T6928] bridge1: entered promiscuous mode [ 79.653495][ T6928] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 79.714582][ T28] audit: type=1400 audit(1781056168.177:1000): avc: denied { bind } for pid=6947 comm="syz.8.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.757237][ T28] audit: type=1400 audit(1781056168.197:1001): avc: denied { setopt } for pid=6947 comm="syz.8.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.939172][ T28] audit: type=1400 audit(1781056168.397:1002): avc: denied { shutdown } for pid=6957 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.009292][ T6969] SET target dimension over the limit! [ 80.069624][ T28] audit: type=1400 audit(1781056168.527:1003): avc: denied { setattr } for pid=6976 comm="syz.2.934" name="unix" dev="proc" ino=4026532582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.334410][ T6998] loop8: detected capacity change from 0 to 128 [ 80.346260][ T7000] netlink: 'syz.5.932': attribute type 4 has an invalid length. [ 80.404258][ T7000] netlink: 'syz.5.932': attribute type 4 has an invalid length. [ 80.485045][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.492312][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.651665][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.673552][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.741690][ T28] audit: type=1326 audit(1781056169.207:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.7.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 80.772794][ T7025] loop7: detected capacity change from 0 to 128 [ 80.780649][ T7025] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.797689][ T28] audit: type=1326 audit(1781056169.207:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.7.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 80.823894][ T28] audit: type=1326 audit(1781056169.207:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.7.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 80.850195][ T28] audit: type=1326 audit(1781056169.207:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.7.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a08bce59 code=0x7ffc0000 [ 80.878707][ T7025] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.895556][ T3440] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.904885][ T3440] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.920971][ T3440] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.940071][ T3440] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.995838][ T5136] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.992702][ T7076] loop5: detected capacity change from 0 to 128 [ 82.000863][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.969'. [ 82.083925][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.8.973'. [ 82.356270][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.987'. [ 82.664897][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.6.997'. [ 83.088178][ T7183] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1007'. [ 83.098313][ T7183] netlink: zone id is out of range [ 83.107731][ T7183] netlink: zone id is out of range [ 83.119574][ T7183] netlink: zone id is out of range [ 83.147879][ T7183] netlink: set zone limit has 8 unknown bytes [ 83.156082][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 83.159662][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1014'. [ 83.343981][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1023'. [ 83.477500][ T7223] loop8: detected capacity change from 0 to 128 [ 83.603453][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'. [ 83.632252][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'. [ 83.641223][ T3440] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.650140][ T3440] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.650175][ T3440] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.650244][ T3440] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.800173][ T7250] netlink: 'syz.5.1040': attribute type 3 has an invalid length. [ 83.813180][ T7250] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 83.941889][ T7265] syzkaller1: entered promiscuous mode [ 83.950951][ T7265] syzkaller1: entered allmulticast mode [ 83.964666][ T7267] loop8: detected capacity change from 0 to 512 [ 83.977501][ T7267] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 84.004740][ T7267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 84.036876][ T7267] System zones: 1-12 [ 84.050693][ T7267] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1049: bad orphan inode 131072 [ 84.102280][ T7267] loop8: lost filesystem error report for type 5 error -117 [ 84.102769][ T7267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.246608][ T6662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.280016][ T5137] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.293344][ T7288] Bluetooth: hci0: unexpected event 0x18 length: 0 < 23 [ 84.525107][ T7308] netlink: zone id is out of range [ 84.535660][ T7308] netlink: zone id is out of range [ 84.542951][ T7308] netlink: zone id is out of range [ 84.570253][ T7308] netlink: set zone limit has 8 unknown bytes [ 84.626858][ T7317] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 84.635048][ T7317] syz_tun: entered promiscuous mode [ 84.643647][ T7317] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 84.865391][ T7329] loop8: detected capacity change from 0 to 256 [ 84.964746][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 84.981601][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.002186][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.013651][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.024913][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.036064][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.047861][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.059485][ T7329] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.076716][ T7328] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.087340][ T7328] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.158086][ T7340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7340 comm=syz.2.1076 [ 85.375724][ T7355] netlink: 'syz.6.1092': attribute type 39 has an invalid length. [ 85.385830][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 85.385845][ T28] audit: type=1400 audit(1781056173.847:1053): avc: denied { watch } for pid=7352 comm="syz.2.1082" path="/189/file0" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.220215][ T7370] capability: warning: `syz.8.1086' uses deprecated v2 capabilities in a way that may be insecure [ 86.291416][ T7288] Bluetooth: hci0: command 0x1003 tx timeout [ 86.297460][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.330936][ T7384] loop5: detected capacity change from 0 to 1024 [ 86.339659][ T7384] EXT4-fs: Ignoring removed bh option [ 86.366745][ T7384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.383110][ T28] audit: type=1400 audit(1781056174.847:1054): avc: denied { write } for pid=7383 comm="syz.5.1091" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.443795][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.471888][ T7396] loop5: detected capacity change from 0 to 128 [ 86.483342][ T7396] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.500049][ T7396] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.535080][ T28] audit: type=1400 audit(1781056174.997:1055): avc: denied { write } for pid=7395 comm="syz.5.1099" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.584434][ T3666] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.640147][ T7403] netlink: 'syz.5.1100': attribute type 5 has an invalid length. [ 86.656190][ T28] audit: type=1400 audit(1781056175.117:1056): avc: denied { write } for pid=7407 comm="syz.6.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.679586][ T28] audit: type=1400 audit(1781056175.137:1057): avc: denied { setopt } for pid=7407 comm="syz.6.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.776174][ T7423] netlink: 'syz.2.1109': attribute type 39 has an invalid length. [ 86.850888][ T7428] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7428 comm=syz.8.1111 [ 86.907741][ T7431] loop8: detected capacity change from 0 to 1024 [ 86.923765][ T7431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.945463][ T28] audit: type=1400 audit(1781056175.407:1058): avc: denied { write } for pid=7430 comm="syz.8.1112" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.946011][ T7431] EXT4-fs (loop8): shut down requested (0) [ 87.194213][ T6662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.402141][ T28] audit: type=1400 audit(1781056175.857:1059): avc: denied { write } for pid=7459 comm="syz.7.1124" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.460544][ T7463] __nla_validate_parse: 3 callbacks suppressed [ 87.460559][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1125'. [ 87.533562][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.590346][ T7471] loop5: detected capacity change from 0 to 128 [ 87.609085][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.673689][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.718380][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.756212][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.756212][ T7466] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 87.786052][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.786052][ T7466] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 87.820268][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.820268][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.834022][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.834022][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.847868][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.847868][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.861478][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.861478][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.876720][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.876720][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.891291][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.891291][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.892639][ T12] bridge_slave_1: left allmulticast mode [ 87.904773][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.904773][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.923618][ T7466] syz.5.1126: attempt to access beyond end of device [ 87.923618][ T7466] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 87.926805][ T12] bridge_slave_1: left promiscuous mode [ 87.944117][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.961759][ T12] bridge_slave_0: left allmulticast mode [ 87.979499][ T12] bridge_slave_0: left promiscuous mode [ 87.992508][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.062891][ T28] audit: type=1400 audit(1781056176.517:1060): avc: denied { write } for pid=7497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.111371][ T28] audit: type=1400 audit(1781056176.567:1061): avc: denied { write } for pid=7514 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.270113][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.289738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.309267][ T12] bond0 (unregistering): Released all slaves [ 88.332629][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 88.411248][ T12] hsr_slave_0: left promiscuous mode [ 88.435921][ T12] hsr_slave_1: left promiscuous mode [ 88.453402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.460867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.470343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.476058][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1140'. [ 88.480099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.508279][ T12] veth1_macvtap: left promiscuous mode [ 88.513971][ T12] veth0_macvtap: left promiscuous mode [ 88.552498][ T12] veth1_vlan: left promiscuous mode [ 88.557893][ T28] audit: type=1400 audit(1781056177.017:1062): avc: denied { setopt } for pid=7532 comm="syz.6.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.577866][ T12] veth0_vlan: left promiscuous mode [ 88.643379][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.653160][ T12] team0 (unregistering): Port device team_slave_0 removed [ 88.695913][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 88.731015][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.738325][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.746606][ T7472] bridge_slave_0: entered allmulticast mode [ 88.753280][ T7472] bridge_slave_0: entered promiscuous mode [ 88.761693][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768782][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.776310][ T7472] bridge_slave_1: entered allmulticast mode [ 88.782812][ T7472] bridge_slave_1: entered promiscuous mode [ 88.803315][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.813981][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.835332][ T7472] team0: Port device team_slave_0 added [ 88.845515][ T7472] team0: Port device team_slave_1 added [ 88.868550][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.875894][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.902142][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.913542][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.920490][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.946851][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.989687][ T7472] hsr_slave_0: entered promiscuous mode [ 88.995936][ T7472] hsr_slave_1: entered promiscuous mode [ 89.002279][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 89.009956][ T7472] Cannot create hsr debugfs directory [ 89.172734][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 89.196337][ T7472] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.596161][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.619595][ T7472] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.630621][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.643882][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 89.656114][ T7472] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.666943][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.676256][ T7472] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.710665][ T7472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.827346][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.876442][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.898893][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.906031][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.916719][ T7624] loop7: detected capacity change from 0 to 1024 [ 89.930201][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.937308][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.952058][ T7624] EXT4-fs: Ignoring removed bh option [ 89.988437][ T7624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.084813][ T7624] EXT4-fs error (device loop7): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.7.1158: path /135/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 90.139770][ T7624] EXT4-fs (loop7): Remounting filesystem read-only [ 90.216763][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.330954][ T5129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.373159][ T7472] veth0_vlan: entered promiscuous mode [ 90.399734][ T7472] veth1_vlan: entered promiscuous mode [ 90.445741][ T7472] veth0_macvtap: entered promiscuous mode [ 90.470309][ T7472] veth1_macvtap: entered promiscuous mode [ 90.503513][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.529235][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.545822][ T5137] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.554903][ T5137] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.577217][ T5137] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.587672][ T5137] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.624704][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 90.624719][ T28] audit: type=1400 audit(1781056179.087:1072): avc: denied { mount } for pid=7472 comm="syz-executor" name="/" dev="gadgetfs" ino=3542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 90.677642][ T28] audit: type=1400 audit(1781056179.127:1073): avc: denied { execute_no_trans } for pid=7687 comm="syz.5.1175" path="/201/file1" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.708927][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1176'. [ 90.718527][ T7691] loop9: detected capacity change from 0 to 1024 [ 90.744287][ T7691] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.798044][ T7691] EXT4-fs (loop9): shut down requested (0) [ 90.799961][ T28] audit: type=1400 audit(1781056179.257:1074): avc: denied { write } for pid=7689 comm="syz.9.1129" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.082644][ T7472] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.424693][ T5136] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.443318][ T7288] Bluetooth: hci0: unexpected event 0x18 length: 0 < 23 [ 92.432761][ T7763] netlink: 'syz.5.1204': attribute type 1 has an invalid length. [ 92.440592][ T7763] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1204'. [ 92.473111][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1205'. [ 92.567443][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1210'. [ 92.738598][ T7783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7783 comm=syz.9.1213 [ 92.759296][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1213'. [ 92.770517][ T7785] mmap: syz.2.1214 (7785) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.906276][ T28] audit: type=1400 audit(1781056181.367:1075): avc: denied { connect } for pid=7796 comm="syz.9.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.353851][ T7819] loop9: detected capacity change from 0 to 4096 [ 93.369907][ T7819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.400215][ T28] audit: type=1400 audit(1781056181.857:1076): avc: denied { write } for pid=7817 comm="syz.9.1228" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.458614][ T7472] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.464137][ T28] audit: type=1400 audit(1781056181.887:1077): avc: denied { mounton } for pid=7817 comm="syz.9.1228" path="/17/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.490520][ T28] audit: type=1400 audit(1781056181.907:1078): avc: denied { write } for pid=7472 comm="syz-executor" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.495975][ T3563] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.512804][ T7288] Bluetooth: hci0: command 0x1003 tx timeout [ 93.526284][ T28] audit: type=1400 audit(1781056181.907:1079): avc: denied { remove_name } for pid=7472 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.549602][ T28] audit: type=1400 audit(1781056181.907:1080): avc: denied { rmdir } for pid=7472 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.572954][ T28] audit: type=1400 audit(1781056181.907:1081): avc: denied { write } for pid=7472 comm="syz-executor" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.584877][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.625487][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.638273][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.643092][ T7835] loop5: detected capacity change from 0 to 1024 [ 93.651044][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.669729][ T7835] EXT4-fs: Ignoring removed bh option [ 93.676884][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.717016][ T7835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.745114][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.754517][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'. [ 93.758428][ T7835] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.5.1232: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 93.790858][ T7835] EXT4-fs (loop5): Remounting filesystem read-only [ 93.833582][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.841122][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.849224][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.917832][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.932385][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.985144][ T5132] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.996218][ T5132] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.019131][ T5132] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.029228][ T5132] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.101302][ T7864] loop5: detected capacity change from 0 to 4096 [ 94.113400][ T7864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.177321][ T3666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.116893][ T7906] loop7: detected capacity change from 0 to 4096 [ 95.127874][ T7906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.201869][ T5129] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.638192][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 95.638207][ T28] audit: type=1400 audit(1781056184.097:1147): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.671997][ T7959] netlink: 'syz.5.1280': attribute type 16 has an invalid length. [ 95.691889][ T28] audit: type=1400 audit(1781056184.157:1148): avc: denied { read write } for pid=7956 comm="syz.9.1279" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.730548][ T28] audit: type=1400 audit(1781056184.157:1149): avc: denied { read } for pid=7960 comm="syz.7.1281" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 95.782027][ T28] audit: type=1400 audit(1781056184.157:1150): avc: denied { read write } for pid=3666 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.824795][ T28] audit: type=1400 audit(1781056184.237:1151): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.869347][ T28] audit: type=1400 audit(1781056184.237:1152): avc: denied { read write } for pid=3666 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.920465][ T28] audit: type=1400 audit(1781056184.267:1153): avc: denied { create } for pid=7966 comm="syz.7.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 95.958248][ T28] audit: type=1400 audit(1781056184.287:1154): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.023887][ T28] audit: type=1400 audit(1781056184.317:1155): avc: denied { open } for pid=7968 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 96.088531][ T28] audit: type=1400 audit(1781056184.327:1156): avc: denied { allowed } for pid=7968 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 96.481821][ T8020] team0: Port device team_slave_0 removed [ 97.505590][ T8134] __nla_validate_parse: 146 callbacks suppressed [ 97.505609][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'. [ 97.910894][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1377'. [ 98.035017][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 98.095708][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1388'. [ 98.559331][ T8243] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1409'. [ 98.583743][ T8243] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1409'. [ 99.455176][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 99.478425][ T8330] netlink: 'syz.7.1452': attribute type 10 has an invalid length. [ 99.486764][ T8330] batman_adv: batadv0: Interface deactivated: gretap1 [ 99.497718][ T8330] batman_adv: batadv0: Removing interface: gretap1 [ 99.579080][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1461'. [ 99.645517][ T8349] team0: Port device team_slave_0 removed [ 99.658835][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1468'. [ 99.752146][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.760550][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.775268][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.814427][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.823186][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.833644][ T8379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.844481][ T8379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.870231][ T8379] veth1_macvtap: left promiscuous mode [ 99.876587][ T8379] veth0_macvtap: left promiscuous mode [ 99.882840][ T8379] veth0_macvtap: entered promiscuous mode [ 99.889540][ T8379] veth1_macvtap: entered promiscuous mode [ 99.898430][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.906978][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.916073][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.924546][ T8379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.947032][ T5132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.956950][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.964085][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.974671][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.981764][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.006469][ T5137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.015521][ T5137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.041429][ T5137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050556][ T5137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.089484][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1495'. [ 100.725138][ T28] kauditd_printk_skb: 654 callbacks suppressed [ 100.725153][ T28] audit: type=1400 audit(1781056189.187:1811): avc: denied { read write } for pid=3666 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.789925][ T28] audit: type=1400 audit(1781056189.227:1812): avc: denied { open } for pid=8466 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.836202][ T28] audit: type=1400 audit(1781056189.227:1813): avc: denied { map_create } for pid=8466 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.878462][ T28] audit: type=1400 audit(1781056189.237:1814): avc: denied { module_request } for pid=8464 comm="syz.2.1507" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 100.925782][ T28] audit: type=1400 audit(1781056189.237:1815): avc: denied { sys_module } for pid=8464 comm="syz.2.1507" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 101.032265][ T28] audit: type=1400 audit(1781056189.237:1816): avc: denied { read write } for pid=3666 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.040036][ T8492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.066652][ T5129] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.094672][ T8497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.096887][ T5129] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 101.242175][ T8512] ipvlan0: entered promiscuous mode [ 101.263122][ T8512] team0: Device ipvlan0 failed to register rx_handler [ 101.971384][ T3384] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 102.706695][ T8653] __nla_validate_parse: 10 callbacks suppressed [ 102.706711][ T8653] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1587'. [ 102.731899][ T8653] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1587'. [ 102.772235][ T8656] xt_limit: Overflow, try lower: 7/0 [ 102.848786][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1592'. [ 102.885106][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1592'. [ 103.305343][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1607'. [ 103.659030][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'. [ 103.728127][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1634'. [ 103.903799][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1645'. [ 104.162314][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1661'. [ 104.291315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.347833][ T8830] ipip0: entered promiscuous mode [ 104.609537][ T8861] sock: sock_set_timeout: `syz.5.1686' (pid 8861) tries to set negative timeout [ 104.689876][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 104.716869][ T8877] netlink: 'syz.7.1693': attribute type 1 has an invalid length. [ 104.748788][ T8877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.778403][ T8877] bond2: (slave veth11): Enslaving as an active interface with a down link [ 104.807082][ T8877] bond3: entered allmulticast mode [ 104.815008][ T8877] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.823930][ T8877] bond2: (slave bond3): Enslaving as an active interface with a down link [ 105.741811][ T28] kauditd_printk_skb: 691 callbacks suppressed [ 105.741859][ T28] audit: type=1400 audit(1781056194.207:2503): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.774209][ T28] audit: type=1400 audit(1781056194.217:2504): avc: denied { create } for pid=8927 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 105.814719][ T28] audit: type=1400 audit(1781056194.217:2505): avc: denied { create } for pid=8927 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 105.846183][ T28] audit: type=1400 audit(1781056194.217:2506): avc: denied { execmem } for pid=8927 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 105.866886][ T28] audit: type=1400 audit(1781056194.237:2507): avc: denied { create } for pid=8920 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 105.913952][ T28] audit: type=1400 audit(1781056194.257:2508): avc: denied { block_suspend } for pid=8925 comm="syz.6.1714" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 105.939920][ T28] audit: type=1400 audit(1781056194.257:2509): avc: denied { block_suspend } for pid=8925 comm="syz.6.1714" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 105.962171][ T28] audit: type=1400 audit(1781056194.267:2510): avc: denied { allowed } for pid=8932 comm="syz.2.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 105.981860][ T28] audit: type=1400 audit(1781056194.267:2511): avc: denied { prog_load } for pid=8932 comm="syz.2.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.001083][ T28] audit: type=1400 audit(1781056194.267:2512): avc: denied { prog_load } for pid=8935 comm="syz.6.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 106.028864][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.036038][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.065096][ T8956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.074925][ T8956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.117368][ T5137] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.127555][ T5137] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.136811][ T5137] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.146006][ T5137] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.224958][ T8977] erspan1: entered allmulticast mode [ 106.597818][ T8990] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 106.618336][ T8990] bond2: (slave gretap1): making interface the new active one [ 106.626485][ T8990] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 106.957518][ T4968] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.966738][ T4968] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.976505][ T4968] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.985957][ T4968] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.046398][ T4968] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.059189][ T4968] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.069687][ T3384] IPVS: starting estimator thread 0... [ 107.078571][ T4968] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.103385][ T4968] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.161687][ T9031] IPVS: using max 2400 ests per chain, 120000 per kthread [ 107.758054][ T9086] __nla_validate_parse: 5 callbacks suppressed [ 107.758069][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 107.780440][ T9086] erspan1: entered allmulticast mode [ 107.869002][ T9099] netlink: 'syz.6.1791': attribute type 1 has an invalid length. [ 107.912924][ T9099] bond1: (slave gretap1): making interface the new active one [ 107.931960][ T9099] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.846090][ T9155] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.1813'. [ 108.863480][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1813'. [ 109.128267][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1817'. [ 109.659240][ T9180] veth1_macvtap: left promiscuous mode [ 109.709707][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'. [ 109.731741][ T9192] netlink: 'syz.7.1830': attribute type 2 has an invalid length. [ 109.751766][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 109.820980][ T9199] netlink: 'syz.7.1830': attribute type 2 has an invalid length. [ 110.043062][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1846'. [ 110.123715][ T9242] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1864'. [ 110.162732][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1858'. [ 110.192416][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1861'. [ 110.240082][ T9264] netlink: 'syz.2.1866': attribute type 4 has an invalid length. [ 110.609180][ T9320] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 110.634773][ T9320] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 110.741279][ T9337] futex_wake_op: syz.6.1900 tries to shift op by 144; fix this program [ 110.753588][ T28] kauditd_printk_skb: 429 callbacks suppressed [ 110.753601][ T28] audit: type=1400 audit(1781056199.217:2942): avc: denied { prog_load } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.763531][ T9341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.788160][ T28] audit: type=1400 audit(1781056199.247:2943): avc: denied { open } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 110.790832][ T9344] bridge0: port 3(team0) entered blocking state [ 110.813838][ T28] audit: type=1400 audit(1781056199.247:2944): avc: denied { open } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 110.833942][ T28] audit: type=1400 audit(1781056199.247:2945): avc: denied { create } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 110.853838][ T28] audit: type=1400 audit(1781056199.247:2946): avc: denied { map_create } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.873168][ T28] audit: type=1400 audit(1781056199.247:2947): avc: denied { prog_load } for pid=9343 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.879843][ T9344] bridge0: port 3(team0) entered disabled state [ 110.892441][ T28] audit: type=1400 audit(1781056199.277:2948): avc: denied { create } for pid=9345 comm="syz.6.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 110.918957][ T28] audit: type=1400 audit(1781056199.277:2949): avc: denied { create } for pid=9345 comm="syz.6.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 110.925018][ T9344] team0: entered allmulticast mode [ 110.944989][ T9344] team_slave_1: entered allmulticast mode [ 110.951729][ T9344] team0: entered promiscuous mode [ 110.957015][ T9344] team_slave_1: entered promiscuous mode [ 110.962738][ T28] audit: type=1400 audit(1781056199.297:2950): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.992309][ T9341] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.002548][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.035364][ T28] audit: type=1400 audit(1781056199.407:2951): avc: denied { create } for pid=9349 comm="syz.7.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 111.121411][ T5132] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.729760][ T9426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.768419][ T9426] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.831387][ T310] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.951280][ T310] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.441425][ T9493] netlink: 'syz.5.1971': attribute type 4 has an invalid length. [ 112.767913][ T9529] __nla_validate_parse: 5 callbacks suppressed [ 112.767932][ T9529] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1982'. [ 112.797712][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1982'. [ 112.884747][ T9537] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 112.912401][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1990'. [ 112.927831][ T9537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.950154][ T9541] bond2: (slave ip6erspan0): making interface the new active one [ 112.959454][ T9541] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 113.304258][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2000'. [ 115.215990][ T9659] ================================================================== [ 115.224123][ T9659] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 115.231109][ T9659] [ 115.233438][ T9659] read-write to 0xffff888119f7b5a4 of 4 bytes by task 9656 on cpu 1: [ 115.241516][ T9659] fifo_open+0x86/0x5d0 [ 115.245706][ T9659] do_dentry_open+0x4be/0xa90 [ 115.250401][ T9659] vfs_open+0x37/0x1e0 [ 115.254481][ T9659] path_openat+0x1b70/0x2050 [ 115.259107][ T9659] do_file_open+0x16c/0x290 [ 115.263638][ T9659] do_sys_openat2+0x94/0x130 [ 115.268250][ T9659] __se_sys_openat2+0x193/0x1f0 [ 115.273109][ T9659] __x64_sys_openat2+0x55/0x70 [ 115.277884][ T9659] x64_sys_call+0x2170/0x3020 [ 115.282573][ T9659] do_syscall_64+0x12c/0x3b0 [ 115.287186][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.293098][ T9659] [ 115.295431][ T9659] read to 0xffff888119f7b5a4 of 4 bytes by task 9659 on cpu 0: [ 115.302983][ T9659] wait_for_partner+0xd5/0x1e0 [ 115.307776][ T9659] fifo_open+0x462/0x5d0 [ 115.312049][ T9659] do_dentry_open+0x4be/0xa90 [ 115.316746][ T9659] vfs_open+0x37/0x1e0 [ 115.320835][ T9659] path_openat+0x1b70/0x2050 [ 115.325448][ T9659] do_file_open+0x16c/0x290 [ 115.329981][ T9659] do_sys_openat2+0x94/0x130 [ 115.334585][ T9659] __x64_sys_openat+0xf2/0x120 [ 115.339368][ T9659] x64_sys_call+0x1e39/0x3020 [ 115.344069][ T9659] do_syscall_64+0x12c/0x3b0 [ 115.348689][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.354605][ T9659] [ 115.356921][ T9659] value changed: 0x00000001 -> 0x00000002 [ 115.362628][ T9659] [ 115.364935][ T9659] Reported by Kernel Concurrency Sanitizer on: [ 115.371093][ T9659] CPU: 0 UID: 0 PID: 9659 Comm: syz.2.2038 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.380381][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.390430][ T9659] ================================================================== [ 115.918817][ T28] kauditd_printk_skb: 410 callbacks suppressed [ 115.918909][ T28] audit: type=1400 audit(1781056204.377:3362): avc: denied { read write } for pid=5129 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0