last executing test programs: 8m27.531608383s ago: executing program 32 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) 8m25.292755505s ago: executing program 33 (id=113): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 8m9.299730162s ago: executing program 34 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8m6.361442905s ago: executing program 35 (id=379): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 7m56.564925566s ago: executing program 36 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) 7m23.775606867s ago: executing program 37 (id=806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) 6m52.318845005s ago: executing program 38 (id=1483): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x8048802) 6m25.35120917s ago: executing program 39 (id=1925): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 5m43.538744358s ago: executing program 40 (id=2613): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002700)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @remote}, 0x247, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x43}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) socket(0x1, 0x1, 0x0) readahead(r0, 0x5, 0xfc4) 5m42.171353141s ago: executing program 41 (id=2630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x3, 0x4) 5m36.007947777s ago: executing program 42 (id=2686): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x5f2, 0x11000, 0x7, 0x40, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010102}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5m30.606709638s ago: executing program 43 (id=2773): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) 5m19.273442268s ago: executing program 44 (id=2909): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271", 0x5, 0x4044880, 0x0, 0x0) 5m9.076559221s ago: executing program 9 (id=3076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x1, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x9, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd44, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0xf, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m8.79364119s ago: executing program 9 (id=3079): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x400c800) 5m8.695565284s ago: executing program 9 (id=3082): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 5m7.828052431s ago: executing program 9 (id=3097): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 5m7.724885475s ago: executing program 9 (id=3098): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 5m7.448072533s ago: executing program 9 (id=3102): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8, 0x106) 5m7.443194263s ago: executing program 45 (id=3102): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8, 0x106) 4m27.774002543s ago: executing program 2 (id=3831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 4m27.709080385s ago: executing program 2 (id=3822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) 4m27.666711366s ago: executing program 2 (id=3823): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) 4m27.617992897s ago: executing program 2 (id=3824): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 4m27.487064911s ago: executing program 2 (id=3826): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0xb}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4m27.034044966s ago: executing program 6 (id=3837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) write$tun(r0, &(0x7f0000003240)={@val={0x8, 0x886c}, @val={0x5, 0x1, 0x1ff, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e22, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) 4m26.774556684s ago: executing program 2 (id=3841): socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x40}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m26.694844327s ago: executing program 46 (id=3841): socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x40}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m26.080082597s ago: executing program 6 (id=3850): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10049, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xf2997131c051dba0}, 0x204, 0x0, 0x101, 0x9, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x203fffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a707", 0x6}], 0x1, 0x7, 0x407ff) 4m25.94705511s ago: executing program 6 (id=3851): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@orlov}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0xa2a41b4}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000004c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) open(0x0, 0x14f840, 0xa4) 4m25.427053127s ago: executing program 6 (id=3862): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004055}, 0x0) 4m25.288195251s ago: executing program 6 (id=3866): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m25.038721289s ago: executing program 6 (id=3868): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 4m9.551323061s ago: executing program 47 (id=3868): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 2m47.328203361s ago: executing program 7 (id=5336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 2m47.191926785s ago: executing program 7 (id=5338): mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) unshare(0x4040600) syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x71}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2m47.066022209s ago: executing program 7 (id=5341): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m47.001247411s ago: executing program 7 (id=5344): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m46.884377045s ago: executing program 7 (id=5348): unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x12) mount(0x0, 0x0, 0x0, 0x808001, 0x0) r1 = syz_clone(0x80080000, 0x0, 0x1f, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fchown(r0, 0x0, 0xee01) 2m46.763939199s ago: executing program 7 (id=5354): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) 2m46.763664029s ago: executing program 48 (id=5354): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) 27.42758972s ago: executing program 0 (id=7512): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x166) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) 25.954878937s ago: executing program 0 (id=7524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) inotify_init1(0x80000) select(0x40, &(0x7f00000000c0)={0x2, 0x202, 0x9, 0xa52, 0xb7, 0x7, 0x3, 0xd31}, 0x0, &(0x7f0000000100)={0x7f, 0xfffffffe, 0x80000010, 0xe, 0xa, 0x200, 0x2, 0x22451915}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) shutdown(r0, 0x1) 25.094013204s ago: executing program 0 (id=7536): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0xc1) 24.839552013s ago: executing program 0 (id=7546): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 24.117333075s ago: executing program 0 (id=7559): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 23.479978886s ago: executing program 0 (id=7570): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa412, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 23.479819436s ago: executing program 49 (id=7570): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa412, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.555898482s ago: executing program 5 (id=7818): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000440)=@file={0x1}, 0x6e) 2.264600113s ago: executing program 5 (id=7827): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000d00)=@ethtool_gstrings={0x48, 0x7}}) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x9fec6dab355a9826, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x883, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a54640831002000000ef4e7cc3151d00"}}, 0x80}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504090000000000090507"], 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x48011) 2.196892835s ago: executing program 4 (id=7829): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x4, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2.082116588s ago: executing program 4 (id=7832): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x9a) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x91000a7a) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) read(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x20, r3, 0x801, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x2400c000) 1.902424643s ago: executing program 4 (id=7838): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[], 0xa, 0x2e6, &(0x7f0000000780)="$eJzs3cuKHFUYB/Cveqqr2wvpWbgSwQJduAqZbN10FgmII4ihF9GFDiYBmW6EDIx4wdaVuPMFfAJBcOs7CCK4ENwIPoCCiwiBkrqlL6l0xpAeMfP7LXrO1Dn/rq8uzNSmv37nudnh9Txufv7JbzEcJtEbDyJuJ7EbvWh9FivGXwUA8H92uyjij6LWMf3Llxuywy3WBQBszwP+/zfS6vVaueK706sNANiOq9fefPXS/v7lN/J8GFdmXxxPkogof9bzl27GezGNG3EhRnEnonpQ6Ef1tFAOrxRFMU/z0m68OJsfT8rk7O0f6vjrr5WvZX4vRrFbbbv7tFHlX9m/vJfXlvLzso4nm/2Py/zFGMUzd8Mr+Ysd+Zhk8dILS/Wfj1H89G68H9O4XhWxyH+6l+c//xjx8VtleWU+mR9PBtW6hWKn3fm8/LV/utcJAAAAAAAAAAAAAAAAAAAAAIDHy/mmd85SO5um/87Onaja3OSt3dX+PPXiJOJcNVj0B4peURTzIr5u++tcyPO8SOr1i3waz6ZNY0EAAAAAAAAAAAAAAAAAAAA4444+/OjwYDq9ceuRDJoP+ccgIv6+Gn897PuMl7Y8H5sXD5p9HkynvWa4uiZd3hI77ZokYmMZkUZ0Tn1fph/VGasGT8Svf3ZOffNtZ6o8oqM0uqaGD95pPx661KcX1+KDpmNE5+L27jo8SLrP4SBrtwzLCxfrFy6L7jL662c+u1+p7a14sgPMOqdG//pEZU9Vg/mGNZFU9+p93ufl3+uyl45iZU1WndXOeL8ZLMXX7o3ua7E2iFEdv/dvRaJbBwAAAAAAAAAAAAAAAAAAbNXi07/3zp1LNkZ7xWB7dQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAaVp8//9JBulq+ASpLG4d/VfHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNnxTwAAAP//+GpT6Q==") bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioperm(0x3, 0x5, 0x7) gettid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000001c0)="9953306925c74f28ed4572616bf716c41961a045740d1da7f34a28547b336a5bd206e700d387d7dbb65c5a", 0x2b) 1.838734715s ago: executing program 3 (id=7839): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x1110000, &(0x7f0000001500)={[{@shortname_lower}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8no}]}, 0x3, 0x371, &(0x7f0000001600)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 1.644137931s ago: executing program 3 (id=7852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 1.632377871s ago: executing program 5 (id=7843): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) shutdown(0xffffffffffffffff, 0x2) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000720000042cbd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="080001000100000008000100010000000800010000000084"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 1.523440235s ago: executing program 5 (id=7844): socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x35, 0x0, 0x0, 0x2c}, 0x2c855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.523267015s ago: executing program 5 (id=7845): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.456600917s ago: executing program 4 (id=7848): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.388021258s ago: executing program 1 (id=7849): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.305621581s ago: executing program 4 (id=7850): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 1.304311181s ago: executing program 1 (id=7851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x17}}}, 0x24}}, 0x40040) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.112200957s ago: executing program 1 (id=7853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.092326767s ago: executing program 8 (id=7854): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x88, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @remote, @private1, [@dstopts={0x2c, 0x9, '\x00', [@generic={0x0, 0x19, "d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81"}, @generic={0x0, 0xe, "eb4422a287b5b723e69524086158"}, @jumbo, @hao={0xc9, 0x10, @mcast1}, @jumbo]}]}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x278, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x8001, 0x7, 0x2, 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x1}, {0x1, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x6}, 0x7, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x4, 0x6a}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) 868.599774ms ago: executing program 8 (id=7855): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x28020480) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 793.563546ms ago: executing program 4 (id=7856): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 793.450716ms ago: executing program 1 (id=7857): creat(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, 0x800001, 0x6, 0xfffe, 0x100, 0x5ffffffe, 0x84220211}) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000100)=@abs={0xa, 0x2}, 0x6e) 734.090548ms ago: executing program 3 (id=7858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 672.00599ms ago: executing program 8 (id=7859): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x831, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) 607.916102ms ago: executing program 3 (id=7860): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 560.709404ms ago: executing program 3 (id=7861): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r1, 0x1) 246.832713ms ago: executing program 8 (id=7862): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 246.642664ms ago: executing program 3 (id=7863): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 235.527384ms ago: executing program 1 (id=7864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000002010102000005000000000005000006080008400000008108"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, r4, 0x701, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'syz_tun\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x12}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0xdf77782b65c3a720}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x21}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xffff], 0x6, 0x5, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000290f00"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000001c00128009000100626f6e64000000000c00028008001e002010fd00"], 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) 158.767907ms ago: executing program 8 (id=7865): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 91.954748ms ago: executing program 5 (id=7866): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 70.452139ms ago: executing program 1 (id=7867): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1}, 0x40002000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c\"', 0x2}], 0x1}, 0x11) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 0s ago: executing program 8 (id=7868): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_clone(0x8a00000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ermissive=1 [ 439.814456][ T28] audit: type=1400 audit(1781826886.489:3812): avc: denied { watch watch_reads } for pid=24423 comm="syz.0.6304" path="/146" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 440.076751][T24435] loop0: detected capacity change from 0 to 1024 [ 440.090432][T24435] ext4: Unknown parameter 'nojournal' [ 440.158687][ T28] audit: type=1400 audit(1781826886.829:3813): avc: denied { read write } for pid=24441 comm="syz.3.6312" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 440.193390][ T28] audit: type=1400 audit(1781826886.829:3814): avc: denied { open } for pid=24441 comm="syz.3.6312" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 440.225641][ T28] audit: type=1400 audit(1781826886.829:3815): avc: denied { ioctl } for pid=24441 comm="syz.3.6312" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 440.449806][ T28] audit: type=1400 audit(1781826887.119:3816): avc: denied { write } for pid=24455 comm="syz.5.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 440.470062][ T28] audit: type=1400 audit(1781826887.119:3817): avc: denied { setopt } for pid=24455 comm="syz.5.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 440.628354][T24466] bond4: entered allmulticast mode [ 440.633957][T24466] vti0: entered allmulticast mode [ 440.672309][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6322'. [ 440.686601][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 440.695931][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 440.885965][T24498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6332'. [ 440.903964][T24498] vlan0: MTU too low for tipc bearer [ 440.915411][T24498] tipc: Enabling of bearer rejected, failed to enable media [ 440.978644][ T28] audit: type=1400 audit(1781826887.649:3818): avc: denied { mount } for pid=24503 comm="syz.5.6334" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 441.002732][ T28] audit: type=1400 audit(1781826887.649:3819): avc: denied { search } for pid=24503 comm="syz.5.6334" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.025569][ T28] audit: type=1400 audit(1781826887.659:3820): avc: denied { search } for pid=24503 comm="syz.5.6334" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.079923][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.400586][T24512] loop0: detected capacity change from 0 to 1024 [ 442.625136][T24566] sctp: [Deprecated]: syz.0.6355 (pid 24566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.625136][T24566] Use struct sctp_sack_info instead [ 442.751721][T24575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6359'. [ 442.770864][T24575] syzkaller1: entered promiscuous mode [ 442.776503][T24575] syzkaller1: entered allmulticast mode [ 442.917094][T24581] netlink: 67 bytes leftover after parsing attributes in process `syz.0.6361'. [ 443.039243][T24586] loop3: detected capacity change from 0 to 512 [ 443.080691][T24586] ext4: Unknown parameter 'euid' [ 443.134817][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6363'. [ 443.152470][T24588] Set syz1 is full, maxelem 6117 reached [ 443.747740][T24581] bridge0: port 3(batadv1) entered blocking state [ 443.756539][T24581] bridge0: port 3(batadv1) entered forwarding state [ 443.781916][T24581] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 443.796223][T24581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.828213][T24586] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 443.855747][T24586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 444.819451][T24633] xt_hashlimit: size too large, truncated to 1048576 [ 444.883876][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 444.883902][ T28] audit: type=1400 audit(1781826891.559:3836): avc: denied { create } for pid=24639 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 445.093950][T24656] loop3: detected capacity change from 0 to 512 [ 445.119612][ T28] audit: type=1400 audit(1781826891.789:3837): avc: denied { setopt } for pid=24653 comm="syz.1.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.122557][T24656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.181577][T24656] EXT4-fs: Mount option(s) incompatible with ext3 [ 445.196168][ T28] audit: type=1400 audit(1781826891.839:3838): avc: denied { bind } for pid=24653 comm="syz.1.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.409723][T24665] loop3: detected capacity change from 0 to 512 [ 445.683569][T24665] FAT-fs (loop3): FAT read failed (blocknr 128) [ 445.749910][T24677] FAT-fs (loop3): FAT read failed (blocknr 128) [ 445.777344][T24686] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6401'. [ 445.785212][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6411'. [ 445.859005][T24686] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.964941][ T28] audit: type=1400 audit(1781826892.639:3839): avc: denied { ioctl } for pid=24693 comm="syz.3.6403" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 446.027568][T24686] bond_slave_0: left promiscuous mode [ 446.117422][ T28] audit: type=1400 audit(1781826892.789:3840): avc: denied { write } for pid=24693 comm="syz.3.6403" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 446.130531][T24686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.154253][T24686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.206232][T24686] veth1_macvtap: left promiscuous mode [ 446.226569][T24686] veth0_macvtap: left promiscuous mode [ 446.255877][T24686] veth0_macvtap: entered promiscuous mode [ 446.288764][T24686] veth1_macvtap: entered promiscuous mode [ 446.372975][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'. [ 446.415382][T24686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.440793][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6412'. [ 446.457907][T24686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.477703][T24686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.682414][T24686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.728284][T24686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.746601][T24686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.759575][T24686] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 446.785313][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.792461][ T36] bridge0: port 2(bridge_slave_1) entered listening state [ 446.863404][ T3444] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.871792][ T3444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.880496][ T3444] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.888857][ T3444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.915620][ T3444] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.932797][ T3444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.955152][ T3444] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.990778][ T3444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.481791][T24721] kexec: Could not allocate control_code_buffer [ 448.686727][ T28] audit: type=1400 audit(1781826895.359:3841): avc: denied { unmount } for pid=24794 comm="syz.8.6439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 448.936110][ T28] audit: type=1400 audit(1781826895.609:3842): avc: denied { watch } for pid=24810 comm="syz.5.6445" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 449.005794][T24813] loop3: detected capacity change from 0 to 2048 [ 449.027878][T24813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.041556][T24813] ext4 filesystem being mounted at /1298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.055411][T24813] EXT4-fs (loop3): shut down requested (1) [ 449.070333][T24813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.080000][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.192337][ T28] audit: type=1400 audit(1781826895.869:3843): avc: denied { read } for pid=24819 comm="syz.3.6448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 449.323112][ T28] audit: type=1400 audit(1781826895.999:3844): avc: denied { getopt } for pid=24833 comm="syz.3.6454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.786095][ T28] audit: type=1326 audit(1781826896.459:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x0 [ 449.902943][ T28] audit: type=1326 audit(1781826896.579:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 449.905431][T24876] netlink: 67 bytes leftover after parsing attributes in process `syz.5.6470'. [ 449.968450][ T28] audit: type=1326 audit(1781826896.609:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 449.997280][ T28] audit: type=1326 audit(1781826896.609:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 450.055821][T24883] loop0: detected capacity change from 0 to 128 [ 450.072886][ T28] audit: type=1326 audit(1781826896.609:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 450.120376][ T28] audit: type=1326 audit(1781826896.669:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 450.172088][ T28] audit: type=1326 audit(1781826896.669:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 450.198285][ T28] audit: type=1326 audit(1781826896.669:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 450.228558][ T28] audit: type=1326 audit(1781826896.669:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 450.238048][T24876] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.254853][ T28] audit: type=1326 audit(1781826896.699:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 450.254898][ T28] audit: type=1326 audit(1781826896.699:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24866 comm="syz.8.6468" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 450.461717][T24876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.576728][T24876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.608453][T24876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.728094][T24876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.738734][T24876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.752011][T24876] veth1_macvtap: left promiscuous mode [ 450.758645][T24876] veth0_macvtap: left promiscuous mode [ 450.765325][T24876] veth0_macvtap: entered promiscuous mode [ 450.772240][T24876] veth1_macvtap: entered promiscuous mode [ 450.782201][T24876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.790828][T24876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.802737][T24876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.811239][T24876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.823798][T24876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.834290][T24876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.871933][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.879059][T11924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.894361][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.901499][T11924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.031405][T24864] Set syz1 is full, maxelem 65536 reached [ 451.578033][T24953] xt_hashlimit: size too large, truncated to 1048576 [ 451.918835][T24965] xt_hashlimit: size too large, truncated to 1048576 [ 451.950199][T24965] xt_hashlimit: max too large, truncated to 1048576 [ 452.226295][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6510'. [ 452.788972][T24991] netlink: 'syz.5.6515': attribute type 1 has an invalid length. [ 452.813849][T24991] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.928797][T24991] bond5: (slave veth19): Enslaving as a backup interface with a down link [ 452.979020][T24997] dummy0: left promiscuous mode [ 453.001264][T24997] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 453.029968][T19989] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 453.100625][T24991] netlink: 'syz.5.6515': attribute type 10 has an invalid length. [ 453.132860][T24991] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6515'. [ 453.150448][ T3444] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 453.166223][T24991] dummy0: entered promiscuous mode [ 453.201783][T24991] bond5: (slave dummy0): Removing an active aggregator [ 453.226935][T24991] bond5: (slave dummy0): Releasing backup interface [ 453.915851][T25024] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6528'. [ 453.921654][T25026] loop0: detected capacity change from 0 to 128 [ 454.017986][T25026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 454.028994][T25026] System zones: 1-3, 19-19, 35-36 [ 454.098365][T25026] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.139676][T25026] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.278108][T21732] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.391755][T25058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6536'. [ 455.246956][T25102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6554'. [ 455.257144][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 455.266349][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 455.357289][T25108] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6557'. [ 455.513048][T25121] loop0: detected capacity change from 0 to 512 [ 455.535334][T25121] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.549034][T25121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 455.562991][T25121] EXT4-fs (loop0): orphan cleanup on readonly fs [ 455.570567][T25121] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.6564: Allocating blocks 41-42 which overlap fs metadata [ 455.591450][T25121] loop0: lost filesystem error report for type 5 error -117 [ 455.591644][T25121] EXT4-fs (loop0): Remounting filesystem read-only [ 455.605569][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 455.605588][ C1] EXT4-fs (loop0): initial error at time 1781826902: ext4_mb_mark_diskspace_used:4222 [ 455.605615][ C1] EXT4-fs (loop0): last error at time 1781826902: ext4_mb_mark_diskspace_used:4222 [ 455.668128][T25137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6570'. [ 455.682889][T25121] __quota_error: 252 callbacks suppressed [ 455.682907][T25121] Quota error (device loop0): write_blk: dquota write failed [ 455.687577][T25137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6570'. [ 455.688898][T25121] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 455.716036][T25121] EXT4-fs (loop0): 1 truncate cleaned up [ 455.724950][T25121] EXT4-fs (loop0): pa ffff88810796a000: logic 1, phys. 41, len 23 [ 455.738335][T25121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.784086][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.252628][T25164] netlink: 'syz.0.6581': attribute type 1 has an invalid length. [ 456.278114][T25164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.377162][T25164] bond2: (slave geneve2): making interface the new active one [ 456.386965][T25164] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 456.437286][ T28] audit: type=1400 audit(1781826903.109:4108): avc: denied { create } for pid=25170 comm="syz.1.6582" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.467912][ T28] audit: type=1400 audit(1781826903.139:4109): avc: denied { write } for pid=25170 comm="syz.1.6582" name="file0" dev="tmpfs" ino=6381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.521619][ T28] audit: type=1400 audit(1781826903.139:4110): avc: denied { open } for pid=25170 comm="syz.1.6582" path="/1226/file0" dev="tmpfs" ino=6381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.568715][ T28] audit: type=1400 audit(1781826903.169:4111): avc: denied { ioctl } for pid=25170 comm="syz.1.6582" path="/1226/file0" dev="tmpfs" ino=6381 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.624271][ T28] audit: type=1400 audit(1781826903.179:4112): avc: denied { unlink } for pid=6927 comm="syz-executor" name="file0" dev="tmpfs" ino=6381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 457.445628][T25193] __nla_validate_parse: 3 callbacks suppressed [ 457.445672][T25193] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.6592'. [ 457.466862][T25193] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.6592'. [ 457.505326][ T28] audit: type=1400 audit(1781826904.179:4113): avc: denied { write } for pid=19552 comm="kworker/1:15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81081 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.579513][ T28] audit: type=1400 audit(1781826904.229:4114): avc: denied { create } for pid=25201 comm="syz.3.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 457.727008][T25219] netlink: 'syz.3.6606': attribute type 1 has an invalid length. [ 457.764577][T25219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 457.906024][T25219] bond7: (slave geneve3): making interface the new active one [ 457.935356][T25219] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 457.957067][ T6107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.966551][ T6107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.983843][ T6107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.011079][ T6107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.144335][T25234] netlink: 'syz.8.6610': attribute type 39 has an invalid length. [ 458.356228][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6614'. [ 458.378519][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6614'. [ 458.425208][ T28] audit: type=1400 audit(1781826905.099:4115): avc: denied { getopt } for pid=25252 comm="syz.8.6616" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.794062][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6628'. [ 458.806450][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6628'. [ 459.256132][T25305] ref_ctr increment failed for inode: 0xed0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881180c0000 [ 459.635797][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6646'. [ 459.930580][T25337] loop0: detected capacity change from 0 to 512 [ 459.996033][T25337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.114887][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.238708][T25352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.297860][T25352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.404012][T25352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.495800][T25370] netlink: 'syz.5.6658': attribute type 1 has an invalid length. [ 460.563083][T25370] 8021q: adding VLAN 0 to HW filter on device bond6 [ 460.594635][T25379] vlan3: entered allmulticast mode [ 460.608833][T25379] veth0_to_bond: entered allmulticast mode [ 460.616208][T25381] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6351, delta: 1 [ 460.627847][T25381] ref_ctr increment failed for inode: 0x1b64 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881047b6900 [ 460.639422][T25379] bond6: (slave vlan3): making interface the new active one [ 460.648881][T25379] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 460.660796][T25352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.690192][T25383] lo: Caught tx_queue_len zero misconfig [ 460.739490][T19989] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.756370][T11924] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.779779][T11924] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.793110][T11924] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.929068][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 460.929147][ T28] audit: type=1400 audit(1781826907.589:4124): avc: denied { wake_alarm } for pid=25409 comm="syz.0.6672" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.980968][T25414] loop0: detected capacity change from 0 to 512 [ 461.005695][T25414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.018433][T25414] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.036084][ T28] audit: type=1400 audit(1781826907.709:4125): avc: denied { write } for pid=25413 comm="syz.0.6673" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.058270][ T28] audit: type=1400 audit(1781826907.709:4126): avc: denied { create } for pid=25413 comm="syz.0.6673" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.079660][ T28] audit: type=1400 audit(1781826907.709:4127): avc: denied { read append open } for pid=25413 comm="syz.0.6673" path="/225/file1/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.113977][ T28] audit: type=1400 audit(1781826907.789:4128): avc: denied { map } for pid=25413 comm="syz.0.6673" path="/225/file1/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 461.193264][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.301030][T25422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.370710][T25422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.450293][T25422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.530235][ T28] audit: type=1400 audit(1781826908.209:4129): avc: denied { create } for pid=25431 comm="syz.0.6680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 461.582808][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6682'. [ 461.588725][T25422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.819360][T19989] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.830470][T19989] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.845577][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6684'. [ 461.855095][T19989] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.884584][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 461.973807][ T6108] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.027343][T25462] loop0: detected capacity change from 0 to 8192 [ 462.427993][ T28] audit: type=1400 audit(1781826909.099:4130): avc: denied { getopt } for pid=25486 comm="syz.1.6696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.572175][ T28] audit: type=1400 audit(1781826909.249:4131): avc: denied { mount } for pid=25490 comm="syz.8.6698" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 462.825923][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'. [ 462.866417][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'. [ 462.896855][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'. [ 462.924979][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'. [ 462.951285][T25507] loop0: detected capacity change from 0 to 512 [ 462.965888][T25507] ext4: Unknown parameter 'euid' [ 463.006495][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6705'. [ 463.041739][T25509] netlink: 'syz.5.6706': attribute type 1 has an invalid length. [ 463.066883][T25509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.865806][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6719'. [ 464.493171][ T6108] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.557022][ T6108] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.623004][ T6108] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.701037][ T6108] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.011613][T25580] loop0: detected capacity change from 0 to 512 [ 465.086085][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.207331][T25580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.231925][T25580] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.386279][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.403427][ T28] audit: type=1400 audit(1781826912.079:4132): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 465.497260][ T28] audit: type=1400 audit(1781826912.159:4133): avc: denied { search } for pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.525501][ T6108] bridge_slave_1: left allmulticast mode [ 465.536687][ T6108] bridge_slave_1: left promiscuous mode [ 465.545033][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.565359][ T6108] bridge_slave_0: left allmulticast mode [ 465.571277][ T6108] bridge_slave_0: left promiscuous mode [ 465.590801][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.732742][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.747305][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.780039][ T6108] bond0 (unregistering): Released all slaves [ 465.982797][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 465.982817][ T28] audit: type=1400 audit(1781826912.649:4143): avc: denied { write } for pid=25625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.043660][ T28] audit: type=1400 audit(1781826912.649:4144): avc: denied { add_name } for pid=25625 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.089423][ T28] audit: type=1400 audit(1781826912.649:4145): avc: denied { create } for pid=25625 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.152143][ T28] audit: type=1400 audit(1781826912.649:4146): avc: denied { write } for pid=25625 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=25908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.221693][ T28] audit: type=1400 audit(1781826912.649:4147): avc: denied { append } for pid=25625 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=25908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.278624][ T28] audit: type=1400 audit(1781826912.719:4148): avc: denied { write } for pid=25643 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.325680][ T28] audit: type=1400 audit(1781826912.719:4149): avc: denied { remove_name } for pid=25643 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=25908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.366262][ T28] audit: type=1400 audit(1781826912.719:4150): avc: denied { unlink } for pid=25643 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=25908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.462229][T25660] netlink: 'syz.8.6757': attribute type 10 has an invalid length. [ 466.647667][ T28] audit: type=1400 audit(1781826913.319:4151): avc: denied { mounton } for pid=25665 comm="syz.5.6759" path="/file0" dev="ramfs" ino=82115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 466.690335][T25668] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6760'. [ 466.699547][T25668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6760'. [ 466.824784][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 466.916154][T25660] team0: Device wg2 is of different type [ 466.970887][ T6108] hsr_slave_0: left promiscuous mode [ 466.971421][ T6108] hsr_slave_1: left promiscuous mode [ 466.971851][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.972118][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.462336][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 467.479580][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 467.616095][ T28] audit: type=1400 audit(1781826914.289:4152): avc: denied { read } for pid=25681 comm="syz.3.6767" path="socket:[82145]" dev="sockfs" ino=82145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 467.891405][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 468.118731][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6771'. [ 468.227542][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 468.547218][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 469.148190][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6785'. [ 470.577667][T25917] loop0: detected capacity change from 0 to 128 [ 470.620673][T25926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6809'. [ 470.916374][T25944] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 470.922163][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6814'. [ 471.012415][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.038412][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.050615][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.114728][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.117770][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 471.117897][ T28] audit: type=1400 audit(1781826917.789:4176): avc: denied { read } for pid=25950 comm="syz.0.6819" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.142022][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.174956][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6818'. [ 471.191363][ T28] audit: type=1400 audit(1781826917.789:4177): avc: denied { open } for pid=25950 comm="syz.0.6819" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.191405][ T28] audit: type=1400 audit(1781826917.829:4178): avc: denied { ioctl } for pid=25950 comm="syz.0.6819" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 471.215967][T25957] loop0: detected capacity change from 0 to 512 [ 471.285609][T25957] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 471.307236][T25957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 471.355706][T25957] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.6821: Block bitmap for bg 0 marked uninitialized [ 471.388155][T25957] loop0: lost filesystem error report for type 5 error -117 [ 471.388300][T25957] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 471.396126][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 471.396163][ C0] EXT4-fs (loop0): initial error at time 1781826918: ext4_read_block_bitmap_nowait:517 [ 471.396193][ C0] EXT4-fs (loop0): last error at time 1781826918: ext4_read_block_bitmap_nowait:517 [ 471.430594][T25957] loop0: lost filesystem error report for type 5 error -117 [ 471.431386][T25957] EXT4-fs (loop0): 1 orphan inode deleted [ 471.445247][T25957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 471.581739][T25969] netlink: 'syz.8.6825': attribute type 13 has an invalid length. [ 471.622398][T25969] bridge0: port 3(gretap0) entered disabled state [ 471.678084][T25969] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.685274][T25969] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.781803][T25969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.803164][T25969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.928542][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.816673][ T28] audit: type=1107 audit(1781826919.489:4179): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 473.115106][T26017] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 473.389118][T26023] VFS: Mount too revealing [ 473.398484][ T28] audit: type=1400 audit(1781826920.059:4180): avc: denied { mounton } for pid=26022 comm="syz.5.6847" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.486752][T26030] __nla_validate_parse: 8 callbacks suppressed [ 473.486771][T26030] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6850'. [ 475.422456][T26074] netlink: 'syz.3.6865': attribute type 13 has an invalid length. [ 475.439497][T26076] netlink: 'syz.8.6875': attribute type 1 has an invalid length. [ 475.485229][T26078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6866'. [ 475.624761][T26076] bond0: entered promiscuous mode [ 475.648651][T26076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.659933][T26079] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.672519][T26079] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 475.682983][T26079] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 475.702936][T26083] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.715567][T26083] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 475.754957][ T4730] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.763460][ T4730] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.777673][ T4730] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.788981][ T4730] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.918100][T26104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 475.934119][ T28] audit: type=1400 audit(1781826922.609:4181): avc: denied { ioctl } for pid=26105 comm="syz.8.6877" path="socket:[82570]" dev="sockfs" ino=82570 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.971491][T26104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6874'. [ 476.273363][ T28] audit: type=1400 audit(1781826922.949:4182): avc: denied { setattr } for pid=26120 comm="syz.3.6882" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 476.362422][T26125] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.372726][T26125] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.885422][T26134] netlink: 'syz.8.6897': attribute type 1 has an invalid length. [ 476.919397][T26134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.968555][ T28] audit: type=1400 audit(1781826923.639:4183): avc: denied { create } for pid=26131 comm="syz.8.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 477.010323][ T28] audit: type=1400 audit(1781826923.639:4184): avc: denied { write } for pid=26131 comm="syz.8.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 477.259057][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.266511][ C1] bridge0: topology change detected, propagating [ 477.295395][T26134] bond3: (slave gretap2): making interface the new active one [ 477.304399][T26134] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 477.319001][T26125] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.329486][T26125] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.393826][T26125] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.419192][T26125] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.502493][T26125] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.527851][T26125] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.612650][ T4739] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.622440][ T4739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.637245][ T4739] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.653277][ T4739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.678598][ T4739] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.689895][ T4739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.729625][ T4739] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.753997][ T4739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.926695][ T28] audit: type=1326 audit(1781826924.599:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.6901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7fc00000 [ 477.962281][ T28] audit: type=1326 audit(1781826924.629:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.6901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f13fb29ce59 code=0x7fc00000 [ 478.002271][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.015090][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.051816][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.069387][ T28] audit: type=1400 audit(1781826924.739:4187): avc: denied { create } for pid=26181 comm="syz.0.6907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 478.092336][ T28] audit: type=1400 audit(1781826924.739:4188): avc: denied { read } for pid=26181 comm="syz.0.6907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 478.125005][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.135274][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.158970][T26180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6905'. [ 478.498326][ T28] audit: type=1400 audit(1781826925.169:4189): avc: denied { write } for pid=26193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.576666][ T28] audit: type=1400 audit(1781826925.249:4190): avc: denied { write } for pid=26205 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.525589][ T28] audit: type=1400 audit(1781826926.199:4191): avc: denied { mounton } for pid=26224 comm="syz.0.6914" path="/file0" dev="autofs" ino=83606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 480.472944][T26296] __nla_validate_parse: 3 callbacks suppressed [ 480.472963][T26296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6933'. [ 480.651964][T26306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6937'. [ 480.770065][T26322] netlink: 'syz.3.6938': attribute type 1 has an invalid length. [ 480.796809][T26322] 8021q: adding VLAN 0 to HW filter on device bond8 [ 481.231954][T26342] syz.5.6943 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 481.281319][T26342] CPU: 0 UID: 0 PID: 26342 Comm: syz.5.6943 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 481.281397][T26342] Tainted: [W]=WARN [ 481.281409][T26342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.281426][T26342] Call Trace: [ 481.281435][T26342] [ 481.281473][T26342] __dump_stack+0x1d/0x30 [ 481.281581][T26342] dump_stack_lvl+0x95/0xd0 [ 481.281602][T26342] dump_stack+0x15/0x1b [ 481.281622][T26342] dump_header+0x80/0x240 [ 481.281644][T26342] oom_kill_process+0x295/0x350 [ 481.281687][T26342] out_of_memory+0x981/0xbc0 [ 481.281792][T26342] try_charge_memcg+0x621/0xa00 [ 481.281828][T26342] ? submit_bio_noacct_nocheck+0x54f/0x620 [ 481.282009][T26342] charge_memcg+0x6d/0x120 [ 481.282047][T26342] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 481.282202][T26342] __swap_cache_prepare_and_add+0x69/0x490 [ 481.282236][T26342] ? alloc_pages_mpol+0xd9/0x1d0 [ 481.282273][T26342] swap_cache_alloc_folio+0xa2/0x120 [ 481.282309][T26342] swap_cluster_readahead+0x25f/0x3c0 [ 481.282360][T26342] swapin_readahead+0xde/0x840 [ 481.282390][T26342] ? _raw_spin_unlock+0x9/0x30 [ 481.282420][T26342] ? __rcu_read_unlock+0x4e/0x70 [ 481.282453][T26342] ? swap_cache_get_folio+0x1e0/0x1f0 [ 481.282492][T26342] do_swap_page+0x34d/0x2150 [ 481.282518][T26342] ? __css_rstat_updated+0xbb/0x280 [ 481.282549][T26342] ? __rcu_read_lock+0x36/0x50 [ 481.282581][T26342] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 481.282662][T26342] handle_mm_fault+0xb3c/0x2da0 [ 481.282709][T26342] do_user_addr_fault+0x634/0x1060 [ 481.282748][T26342] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 481.282864][T26342] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 481.282911][T26342] ? trace_page_fault_user+0x1f/0xa0 [ 481.282957][T26342] exc_page_fault+0x62/0xa0 [ 481.283019][T26342] asm_exc_page_fault+0x26/0x30 [ 481.283083][T26342] RIP: 0033:0x7fd5fe44a80c [ 481.283105][T26342] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 481.283129][T26342] RSP: 002b:00007ffc1942fcb0 EFLAGS: 00010202 [ 481.283146][T26342] RAX: 0000000000000000 RBX: 00007fd5fe7f7080 RCX: 000055558f0a7808 [ 481.283189][T26342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.283206][T26342] RBP: 00007fd5fe7f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 481.283225][T26342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000075a49 [ 481.283242][T26342] R13: 00007fd5fe7f609c R14: 000000000007576f R15: 00007fd5fe7f6090 [ 481.283268][T26342] [ 481.287995][T26342] memory: usage 284836kB, limit 307200kB, failcnt 3467 [ 481.624958][T26342] memory+swap: usage 208764kB, limit 9007199254740988kB, failcnt 0 [ 481.654317][T26342] kmem: usage 183956kB, limit 9007199254740988kB, failcnt 0 [ 481.679485][T26342] Memory cgroup stats for /syz5: [ 481.683468][T26342] cache 0 [ 481.719647][T26342] rss 28672 [ 481.736881][T26342] shmem 0 [ 481.791933][T26342] mapped_file 0 [ 481.814031][T26342] dirty 0 [ 481.847667][T26342] writeback 0 [ 481.851232][T26342] workingset_refault_anon 631 [ 481.856043][T26342] workingset_refault_file 2684 [ 481.861103][T26342] swap 643072 [ 481.864491][T26342] swapcached 18796544 [ 481.868527][T26342] pgpgin 249412 [ 481.872349][T26342] pgpgout 249389 [ 481.875966][T26342] pgfault 199313 [ 481.879645][T26342] pgmajfault 3237 [ 481.892960][T26342] inactive_anon 69632 [ 481.897168][T26342] active_anon 16384 [ 481.901291][T26342] inactive_file 0 [ 481.904992][T26342] active_file 0 [ 481.908618][T26342] unevictable 8192 [ 481.934941][T26342] hierarchical_memory_limit 314572800 [ 481.973284][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6948'. [ 481.984435][T26342] hierarchical_memsw_limit 9223372036854771712 [ 482.010038][T26342] total_cache 0 [ 482.015153][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6948'. [ 482.027040][T26342] total_rss 28672 [ 482.038185][T26342] total_shmem 0 [ 482.049676][T26342] total_mapped_file 0 [ 482.056942][T26342] total_dirty 0 [ 482.074857][T26342] total_writeback 0 [ 482.088357][T26342] total_workingset_refault_anon 631 [ 482.101243][T26342] total_workingset_refault_file 2684 [ 482.106637][T26342] total_swap 643072 [ 482.113659][T26342] total_swapcached 18796544 [ 482.118304][T26342] total_pgpgin 249412 [ 482.122394][T26342] total_pgpgout 249389 [ 482.126522][T26342] total_pgfault 199313 [ 482.132785][T26342] total_pgmajfault 3237 [ 482.141473][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 482.141487][ T28] audit: type=1400 audit(1781826928.819:4200): avc: denied { read } for pid=26363 comm="syz.0.6952" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 482.172268][T26342] total_inactive_anon 69632 [ 482.186510][T26342] total_active_anon 16384 [ 482.197485][T26342] total_inactive_file 0 [ 482.207328][T26342] total_active_file 0 [ 482.215943][T26342] total_unevictable 8192 [ 482.220880][ T28] audit: type=1400 audit(1781826928.819:4201): avc: denied { open } for pid=26363 comm="syz.0.6952" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 482.249982][T26342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6943,pid=26342,uid=0 [ 482.282068][T26342] Memory cgroup out of memory: Killed process 26342 (syz.5.6943) total-vm:94168kB, anon-rss:1256kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 482.423833][ T28] audit: type=1400 audit(1781826929.099:4202): avc: denied { listen } for pid=26382 comm="syz.1.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 482.444847][ T28] audit: type=1400 audit(1781826929.119:4203): avc: denied { accept } for pid=26382 comm="syz.1.6961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 482.685018][T26394] netlink: 144 bytes leftover after parsing attributes in process `syz.8.6965'. [ 482.695201][T26401] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6966'. [ 482.736784][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6969'. [ 482.746071][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6969'. [ 482.755590][ T28] audit: type=1326 audit(1781826929.419:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26403 comm="syz.8.6967" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13fb29ce59 code=0x0 [ 482.884382][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6971'. [ 482.900720][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6971'. [ 482.954739][ T28] audit: type=1326 audit(1781826929.629:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26421 comm="syz.5.6975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x0 [ 483.061846][ T28] audit: type=1326 audit(1781826929.739:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26421 comm="syz.5.6975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 483.117039][ T28] audit: type=1326 audit(1781826929.739:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26421 comm="syz.5.6975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 483.161096][ T28] audit: type=1326 audit(1781826929.739:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26421 comm="syz.5.6975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 483.197842][ T28] audit: type=1326 audit(1781826929.739:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26421 comm="syz.5.6975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 483.524289][T26441] loop0: detected capacity change from 0 to 4096 [ 483.531945][T26441] EXT4-fs: Ignoring removed bh option [ 483.560248][T26441] EXT4-fs (loop0): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 483.586352][T26441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.837866][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.501701][T26517] bridge0: port 3(batadv1) entered disabled state [ 485.513928][T26517] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.529689][T26517] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.890446][T26517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.974332][T26517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.085017][T26531] netlink: 'syz.5.7014': attribute type 4 has an invalid length. [ 486.097313][ T4723] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.123436][ T4723] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.151105][ T4723] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.161310][T26537] loop0: detected capacity change from 0 to 512 [ 486.167763][ T4723] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.180363][T26537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 486.208840][T26541] netlink: 'syz.5.7027': attribute type 2 has an invalid length. [ 486.229357][T26537] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7017: Invalid block bitmap block 0 in block_group 0 [ 486.254008][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.254166][T26537] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 486.261626][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 486.261650][ C1] EXT4-fs (loop0): initial error at time 1781826932: ext4_read_block_bitmap_nowait:483 [ 486.261680][ C1] EXT4-fs (loop0): last error at time 1781826932: ext4_read_block_bitmap_nowait:483 [ 486.297115][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.297303][T26537] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.7017: attempt to clear invalid blocks 983261 len 1 [ 486.318594][T26537] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 486.320456][T26537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.7017: Invalid inode table block 0 in block_group 0 [ 486.353691][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.354122][T26537] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 486.371065][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.371473][T26537] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 486.388797][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.391998][T26537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.7017: Invalid inode table block 0 in block_group 0 [ 486.412178][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.412318][T26537] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 486.418564][T26545] netlink: 'syz.5.7020': attribute type 10 has an invalid length. [ 486.419648][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.420187][T26537] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.7017: mark_inode_dirty error [ 486.457250][T26537] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 486.457445][T26537] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 486.471448][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.476277][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.482831][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.482848][T26537] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.7017: Invalid inode table block 0 in block_group 0 [ 486.498409][T26547] sock: sock_set_timeout: `syz.1.7021' (pid 26547) tries to set negative timeout [ 486.512708][T26537] loop0: lost filesystem error report for type 5 error -117 [ 486.522932][T26545] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.531900][T26537] EXT4-fs (loop0): 1 truncate cleaned up [ 486.537589][T26545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.550718][T26545] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.556258][T26537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.557799][T26545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.640989][T26545] team0: Port device bridge0 added [ 486.914777][T26575] netlink: 'syz.1.7030': attribute type 1 has an invalid length. [ 486.940259][T26578] gretap0: left allmulticast mode [ 486.940283][T26578] gretap0: left promiscuous mode [ 486.940510][T26578] bridge0: port 3(gretap0) entered disabled state [ 486.941562][T26578] bridge_slave_0: left allmulticast mode [ 486.941583][T26578] bridge_slave_0: left promiscuous mode [ 486.941763][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.942670][T26578] bridge_slave_1: left allmulticast mode [ 486.942763][T26578] bridge_slave_1: left promiscuous mode [ 486.942926][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.944646][T26578] team0: Port device team_slave_0 removed [ 486.945573][T26578] team0: Port device team_slave_1 removed [ 486.945758][T26578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.946186][T26578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.946606][T26578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.975678][T26575] bond8: (slave veth17): Enslaving as an active interface with a down link [ 486.975784][T26578] team0: Mode changed to "broadcast" [ 487.184977][T26575] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 487.202852][T26583] dummy0: left promiscuous mode [ 487.209464][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.218499][T26583] bond8: (slave dummy0): making interface the new active one [ 487.226200][T26583] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 487.596579][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 487.596598][ T28] audit: type=1326 audit(1781826934.269:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.651219][ T28] audit: type=1326 audit(1781826934.269:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.699964][ T28] audit: type=1326 audit(1781826934.269:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.741410][ T28] audit: type=1326 audit(1781826934.269:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.793390][ T28] audit: type=1326 audit(1781826934.269:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.841599][ T28] audit: type=1326 audit(1781826934.269:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.907244][ T28] audit: type=1326 audit(1781826934.279:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 487.977123][ T28] audit: type=1326 audit(1781826934.309:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 488.026777][ T28] audit: type=1326 audit(1781826934.309:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 488.078097][ T28] audit: type=1326 audit(1781826934.309:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26615 comm="syz.5.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd5fe57ce59 code=0x7ffc0000 [ 488.364349][T26649] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7055'. [ 488.412146][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7055'. [ 488.682471][T26662] ipvlan0: entered promiscuous mode [ 488.750056][T26662] bridge0: port 1(ipvlan0) entered blocking state [ 488.765517][T26662] bridge0: port 1(ipvlan0) entered disabled state [ 488.777850][T26662] ipvlan0: entered allmulticast mode [ 488.785294][T26662] bridge0: entered allmulticast mode [ 488.801991][T26662] ipvlan0: left allmulticast mode [ 488.807639][T26662] bridge0: left allmulticast mode [ 489.250989][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7064'. [ 489.267022][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7064'. [ 489.421049][T26685] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7071'. [ 489.607875][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7079'. [ 489.632189][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7079'. [ 489.840138][T26719] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7084'. [ 490.036811][T26723] loop0: detected capacity change from 0 to 512 [ 490.092325][T26723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.124424][T26723] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.7085: iget: bad i_size value: 38620345925642 [ 490.151921][T26723] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.153569][T26723] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7085: couldn't read orphan inode 15 (err -117) [ 490.162974][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 490.163022][ C0] EXT4-fs (loop0): initial error at time 1781826936: ext4_orphan_get:1399: inode 15 [ 490.163120][ C0] EXT4-fs (loop0): last error at time 1781826936: ext4_orphan_get:1399: inode 15 [ 490.201117][T26723] loop0: lost filesystem error report for type 5 error -117 [ 490.206395][T26723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.422179][ T36] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 490.441202][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28 [ 490.454836][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 490.454836][ T36] [ 490.465034][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 490.480681][ T36] EXT4-fs (loop0): Free/Dirty block details [ 490.486814][ T36] EXT4-fs (loop0): free_blocks=0 [ 490.502585][ T36] EXT4-fs (loop0): dirty_blocks=564 [ 490.519794][ T36] EXT4-fs (loop0): Block reservation details [ 490.525901][ T36] EXT4-fs (loop0): i_reserved_data_blocks=564 [ 490.552709][T21732] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 490.582975][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.629403][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7094'. [ 490.641817][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7094'. [ 492.358926][T26817] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 492.368139][T26817] bond3: entered allmulticast mode [ 492.375471][T26813] netlink: 'syz.3.7116': attribute type 4 has an invalid length. [ 492.381259][T26817] ip6gretap1: entered promiscuous mode [ 492.391076][T26817] ip6gretap1: entered allmulticast mode [ 492.396901][T26817] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 492.416615][T26813] netlink: 'syz.3.7116': attribute type 4 has an invalid length. [ 492.435805][T26813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.673080][ T28] kauditd_printk_skb: 228 callbacks suppressed [ 492.673097][ T28] audit: type=1326 audit(1781826939.349:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 492.752529][ T28] audit: type=1326 audit(1781826939.349:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 492.847479][ T28] audit: type=1326 audit(1781826939.389:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f13fb29ce59 code=0x7ffc0000 [ 492.935866][ T28] audit: type=1326 audit(1781826939.399:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.032641][ T28] audit: type=1326 audit(1781826939.399:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.089531][ T28] audit: type=1326 audit(1781826939.399:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.150423][ T28] audit: type=1326 audit(1781826939.409:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.211496][ T28] audit: type=1326 audit(1781826939.409:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.275567][ T28] audit: type=1326 audit(1781826939.409:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.341369][ T28] audit: type=1326 audit(1781826939.409:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26811 comm="syz.8.7113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13fb25d68e code=0x7ffc0000 [ 493.725035][T26866] netlink: 'syz.1.7139': attribute type 10 has an invalid length. [ 493.734421][T26866] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.743884][T26866] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.751012][T26866] bridge0: port 2(bridge_slave_1) entered listening state [ 493.761554][T26866] team0: Port device bridge0 added [ 494.734242][T26888] __nla_validate_parse: 1 callbacks suppressed [ 494.734264][T26888] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.7145'. [ 495.379868][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7151'. [ 495.971247][T26940] netlink: 'syz.1.7161': attribute type 7 has an invalid length. [ 495.980378][T26940] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7161'. [ 496.189629][T26949] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7164'. [ 496.208833][T26947] bridge0: Device is already in use. [ 498.576358][T27048] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 498.594883][ T28] kauditd_printk_skb: 584 callbacks suppressed [ 498.594956][ T28] audit: type=1400 audit(1781826945.249:5338): avc: denied { mac_admin } for pid=27047 comm="syz.8.7199" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.624521][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7199'. [ 498.633603][ T28] audit: type=1400 audit(1781826945.289:5339): avc: denied { write } for pid=27044 comm="syz.5.7198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.674930][ T28] audit: type=1400 audit(1781826945.329:5340): avc: denied { relabelto } for pid=27047 comm="syz.8.7199" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 498.704381][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7199'. [ 498.731306][ T28] audit: type=1400 audit(1781826945.339:5341): avc: denied { associate } for pid=27047 comm="syz.8.7199" name="832" dev="tmpfs" ino=4304 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 498.819030][ T28] audit: type=1400 audit(1781826945.489:5342): avc: denied { write } for pid=13747 comm="syz-executor" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 498.853411][T27056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.860735][T27056] IPv6: NLM_F_CREATE should be set when creating new route [ 498.861500][ T28] audit: type=1400 audit(1781826945.489:5343): avc: denied { remove_name } for pid=13747 comm="syz-executor" name="binderfs" dev="tmpfs" ino=4308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 498.867949][T27056] IPv6: NLM_F_CREATE should be set when creating new route [ 498.867964][T27056] IPv6: NLM_F_CREATE should be set when creating new route [ 498.881187][T27056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.954504][ T28] audit: type=1400 audit(1781826945.489:5344): avc: denied { write } for pid=13747 comm="syz-executor" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 498.981594][ T28] audit: type=1400 audit(1781826945.489:5345): avc: denied { write } for pid=13747 comm="syz-executor" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 498.997895][T27059] loop0: detected capacity change from 0 to 512 [ 499.009298][ T28] audit: type=1400 audit(1781826945.489:5346): avc: denied { write } for pid=13747 comm="syz-executor" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 499.095297][ T28] audit: type=1400 audit(1781826945.489:5347): avc: denied { rmdir } for pid=13747 comm="syz-executor" name="832" dev="tmpfs" ino=4304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 499.252965][T27076] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.7210'. [ 500.019454][T27112] loop0: detected capacity change from 0 to 512 [ 500.063863][T27112] EXT4-fs: Ignoring removed bh option [ 500.102198][T27112] EXT4-fs: inline encryption not supported [ 500.136702][T27112] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 500.168409][T27112] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 500.199169][T27112] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7221: bg 0: block 248: padding at end of block bitmap is not set [ 500.231805][T27112] loop0: lost filesystem error report for type 5 error -117 [ 500.233530][T27112] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.7221: Failed to acquire dquot type 1 [ 500.240988][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 500.241007][ C1] EXT4-fs (loop0): last error at time 1781826946: ext4_validate_block_bitmap:441 [ 500.270090][T27121] ref_ctr increment failed for inode: 0x10ee offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810501e900 [ 500.312019][T27120] uprobe: syz.8.7226:27120 failed to unregister, leaking uprobe [ 500.357069][T27112] loop0: lost filesystem error report for type 5 error -28 [ 500.357742][T27112] EXT4-fs (loop0): 1 truncate cleaned up [ 500.385765][T27112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 500.460687][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 500.606864][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7228'. [ 500.622745][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7228'. [ 500.773435][T27140] loop0: detected capacity change from 0 to 512 [ 500.803617][T27140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.836647][T27140] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.884765][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.300064][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7242'. [ 501.310403][T27163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7242'. [ 502.171971][T27198] netlink: 'syz.8.7266': attribute type 1 has an invalid length. [ 502.205101][T27198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 503.015287][T27198] bond4: (slave geneve2): making interface the new active one [ 503.050276][T27198] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 503.087847][ T4723] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.120728][ T4723] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.137084][T27219] SET target dimension over the limit! [ 503.151802][ T4723] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.170029][ T4723] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.575213][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7267'. [ 503.997566][T27253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7277'. [ 504.399181][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'. [ 506.476168][ T49] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.493550][ T49] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.514040][ T49] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.533760][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 506.533777][ T28] audit: type=1400 audit(1781826953.199:5401): avc: denied { create } for pid=27269 comm="syz.0.7282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 506.535687][ T49] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.577028][T27270] loop0: detected capacity change from 0 to 512 [ 506.586246][T27270] EXT4-fs: Ignoring removed oldalloc option [ 506.604931][T27270] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7282: corrupted in-inode xattr: invalid ea_ino [ 506.618552][T27270] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 506.619742][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 506.635429][ C0] EXT4-fs (loop0): initial error at time 1781826953: ext4_iget_extra_inode:5180: inode 15 [ 506.645457][ C0] EXT4-fs (loop0): last error at time 1781826953: ext4_iget_extra_inode:5180: inode 15 [ 506.656746][T27270] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7282: couldn't read orphan inode 15 (err -117) [ 506.669144][T27270] loop0: lost filesystem error report for type 5 error -117 [ 506.672640][T27270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.695265][T27283] syz_tun: entered allmulticast mode [ 506.710920][ T28] audit: type=1400 audit(1781826953.389:5402): avc: denied { write } for pid=27269 comm="syz.0.7282" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.802146][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.814534][ T28] audit: type=1400 audit(1781826953.389:5403): avc: denied { create } for pid=27269 comm="syz.0.7282" name="\" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 506.890933][ T28] audit: type=1400 audit(1781826953.409:5404): avc: denied { write } for pid=27269 comm="syz.0.7282" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.995392][ T28] audit: type=1400 audit(1781826953.669:5405): avc: denied { read } for pid=27297 comm="syz.1.7293" path="socket:[87824]" dev="sockfs" ino=87824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 507.045120][T27301] loop0: detected capacity change from 0 to 512 [ 507.065558][T27301] EXT4-fs: Ignoring removed orlov option [ 507.123933][T27301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.132542][ T28] audit: type=1400 audit(1781826953.809:5406): avc: denied { name_bind } for pid=27305 comm="syz.5.7296" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 507.155665][T27301] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.200672][T27301] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.7294: corrupted xattr block 33: invalid ea_ino [ 507.201318][ T28] audit: type=1400 audit(1781826953.879:5407): avc: denied { write } for pid=27300 comm="syz.0.7294" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 507.255299][T27301] EXT4-fs (loop0): Remounting filesystem read-only [ 507.282887][T27301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 507.311214][T27301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 507.330010][T27301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 507.339026][ T28] audit: type=1400 audit(1781826954.009:5408): avc: denied { read append } for pid=27300 comm="syz.0.7294" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 507.376056][ T28] audit: type=1400 audit(1781826954.049:5409): avc: denied { open } for pid=27300 comm="syz.0.7294" path="/355/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 507.432215][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.447435][ T28] audit: type=1400 audit(1781826954.049:5410): avc: denied { name_bind } for pid=27272 comm="syz.8.7284" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 507.472672][T27315] tipc: Started in network mode [ 507.478993][T27315] tipc: Node identity 4, cluster identity 4711 [ 507.509259][T27315] tipc: Node number set to 4 [ 507.743425][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7308'. [ 507.886753][T27348] netlink: 'syz.3.7312': attribute type 1 has an invalid length. [ 507.930332][T27348] bond9: entered promiscuous mode [ 507.946174][T27348] 8021q: adding VLAN 0 to HW filter on device bond9 [ 508.072357][T27348] bond9: (slave bridge10): making interface the new active one [ 508.097022][T27348] bridge10: entered promiscuous mode [ 508.113332][T27348] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 508.905200][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7328'. [ 508.922267][T27393] bond4: entered promiscuous mode [ 508.927818][T27393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.215314][T27408] xt_HMARK: proto mask must be zero with L3 mode [ 509.249792][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 509.743140][T27431] loop0: detected capacity change from 0 to 512 [ 509.751436][T27446] tipc: Started in network mode [ 509.760842][T27446] tipc: Node identity 4, cluster identity 4711 [ 509.768522][T27446] tipc: Node number set to 4 [ 509.800324][T19553] page_pool_release_retry() stalled pool shutdown: id 361, 1 inflight 60 sec [ 509.949211][T27431] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.7343: bad orphan inode 13 [ 509.964444][T27431] loop0: lost filesystem error report for type 5 error -117 [ 509.970791][T27431] ext4_test_bit(bit=12, block=4) = 1 [ 509.982519][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 509.983671][ C1] EXT4-fs (loop0): initial error at time 1781826956: ext4_orphan_get:1425 [ 509.985141][ C1] EXT4-fs (loop0): last error at time 1781826956: ext4_orphan_get:1425 [ 510.037452][T27431] is_bad_inode(inode)=0 [ 510.047155][T27431] NEXT_ORPHAN(inode)=0 [ 510.056247][T27431] max_ino=32 [ 510.064512][T27431] i_nlink=1 [ 510.071524][T27431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.146260][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7343'. [ 510.390504][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.490228][T27474] syzkaller0: entered promiscuous mode [ 510.505070][T27474] syzkaller0: entered allmulticast mode [ 510.526235][T27474] tipc: Started in network mode [ 510.536521][T27474] tipc: Node identity 4a4656877545, cluster identity 4711 [ 510.555353][T27474] tipc: Enabled bearer , priority 0 [ 510.569229][T27474] tipc: Resetting bearer [ 510.589874][T27474] tipc: Disabling bearer [ 511.064629][T27500] sctp: [Deprecated]: syz.3.7369 (pid 27500) Use of int in max_burst socket option deprecated. [ 511.064629][T27500] Use struct sctp_assoc_value instead [ 511.126793][T27504] netlink: 'syz.8.7371': attribute type 1 has an invalid length. [ 511.172160][T27504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.216010][T27508] bond5: (slave veth11): Enslaving as an active interface with a down link [ 511.244957][T27504] bond5: (slave dummy0): making interface the new active one [ 511.253757][T27504] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 511.266063][T27504] netlink: 'syz.8.7371': attribute type 10 has an invalid length. [ 511.274063][T27504] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7371'. [ 511.283211][T27504] dummy0: entered promiscuous mode [ 511.291926][T27504] bond5: (slave dummy0): Releasing active interface [ 511.545316][T18185] Process accounting resumed [ 511.825515][ T28] kauditd_printk_skb: 822 callbacks suppressed [ 511.825534][ T28] audit: type=1400 audit(1781826958.499:6233): avc: denied { getopt } for pid=27539 comm="syz.0.7384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.398252][T27565] tipc: Enabling of bearer rejected, failed to enable media [ 513.064148][T27578] loop0: detected capacity change from 0 to 512 [ 513.092524][T27578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.193742][ T28] audit: type=1400 audit(1781826959.869:6234): avc: denied { write } for pid=27577 comm="syz.0.7399" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.249906][ T28] audit: type=1400 audit(1781826959.869:6235): avc: denied { read write } for pid=27577 comm="syz.0.7399" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 513.291019][ T28] audit: type=1400 audit(1781826959.869:6236): avc: denied { open } for pid=27577 comm="syz.0.7399" path="/379/file2/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 513.403351][ T28] audit: type=1400 audit(1781826960.079:6237): avc: denied { getopt } for pid=27600 comm="syz.8.7407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.906246][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.946654][T27630] netlink: 'syz.0.7415': attribute type 4 has an invalid length. [ 514.152288][T27635] loop0: detected capacity change from 0 to 512 [ 514.306394][T27635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.322470][T27635] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.452579][T21732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.829555][T27682] netlink: 'syz.0.7435': attribute type 1 has an invalid length. [ 514.925852][T27682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.943019][T27682] bond5: (slave bond6): making interface the new active one [ 514.955963][T27682] bond5: (slave bond6): Enslaving as an active interface with an up link [ 514.986552][T27685] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 515.029918][T27682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7435'. [ 515.040491][T27682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.078012][T27688] bridge6: entered promiscuous mode [ 515.096763][T27688] bridge6: entered allmulticast mode [ 515.292696][T27691] can: request_module (can-proto-0) failed. [ 518.292110][ T28] audit: type=1400 audit(1781826964.959:6238): avc: denied { write } for pid=27709 comm="syz.0.7446" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 518.468586][T27728] can: request_module (can-proto-0) failed. [ 518.828887][T27767] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7466'. [ 518.839602][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7466'. [ 519.064555][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7451'. [ 519.867202][T27887] netlink: 'syz.1.7480': attribute type 4 has an invalid length. [ 519.889790][T27887] netlink: 'syz.1.7480': attribute type 4 has an invalid length. [ 520.037860][T27905] netlink: 'syz.3.7486': attribute type 39 has an invalid length. [ 520.088583][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.124196][T27916] veth0: entered promiscuous mode [ 520.132981][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7490'. [ 520.218664][T27916] veth0 (unregistering): left promiscuous mode [ 520.436057][T27940] netlink: 'syz.0.7501': attribute type 1 has an invalid length. [ 520.462431][T27940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 520.479876][T27940] vlan3: entered allmulticast mode [ 520.485186][T27940] bond7: entered allmulticast mode [ 520.499388][T27940] bond7: (slave geneve3): making interface the new active one [ 520.507272][T27940] geneve3: entered allmulticast mode [ 520.514413][T27940] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 520.523331][T19990] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.531813][T19990] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.541052][T19990] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.549495][T19990] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.708330][T27948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7503'. [ 520.970507][T27962] netlink: 'syz.5.7508': attribute type 1 has an invalid length. [ 520.983975][T27962] netlink: 'syz.5.7508': attribute type 2 has an invalid length. [ 522.897393][ T28] audit: type=1400 audit(1781826969.569:6239): avc: denied { ioctl } for pid=28024 comm="syz.1.7533" path="socket:[89639]" dev="sockfs" ino=89639 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.091676][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7540'. [ 523.276134][T28061] loop0: detected capacity change from 0 to 512 [ 523.305751][T28061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.320866][T28061] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.343499][ T28] audit: type=1400 audit(1781826970.019:6240): avc: denied { write } for pid=28060 comm="syz.0.7546" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.381327][ T28] audit: type=1400 audit(1781826970.059:6241): avc: denied { write } for pid=28060 comm="syz.0.7546" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 523.415794][ T28] audit: type=1400 audit(1781826970.059:6242): avc: denied { mounton } for pid=28060 comm="syz.0.7546" path="/409/file1/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 523.457602][ T28] audit: type=1400 audit(1781826970.129:6243): avc: denied { execute } for pid=28056 comm="syz.5.7545" path="/memory.swap.current" dev="ramfs" ino=88635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 523.515374][T28061] loop0: detected capacity change from 512 to 0 [ 523.522093][ C0] I/O error, dev loop0, sector 104 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 523.531881][T28071] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 523.540246][T28071] EXT4-fs error (device loop0): ext4_write_dquot:7021: comm syz.0.7546: Failed to commit dquot type 0 [ 523.577988][T28071] buffer_io_error: 50 callbacks suppressed [ 523.578007][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.592763][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.599936][T28071] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 523.608135][T28071] EXT4-fs error (device loop0): ext4_write_dquot:7021: comm syz.0.7546: Failed to commit dquot type 1 [ 523.619260][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.628061][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.635219][T28071] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #18: block 37: comm syz.0.7546: unable to read itable block [ 523.651426][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.660433][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.669685][T28071] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 523.678764][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.687333][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.694580][T28071] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #18: comm syz.0.7546: mark_inode_dirty error [ 523.706438][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.715131][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.725121][T28080] ip_vti0: entered promiscuous mode [ 523.737512][T28080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7553'. [ 523.752585][T28071] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #18: block 37: comm syz.0.7546: unable to read itable block [ 523.771914][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.773078][T28082] netlink: 'syz.8.7564': attribute type 20 has an invalid length. [ 523.795195][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7564'. [ 523.811320][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.823081][T28082] netlink: 'syz.8.7564': attribute type 20 has an invalid length. [ 523.826834][T28071] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 523.832234][T11924] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.852024][T11924] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.863272][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7564'. [ 523.873805][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.882576][T11924] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.891443][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.896335][T11924] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.914190][T28071] EXT4-fs error (device loop0): ext4_truncate:4691: inode #18: comm syz.0.7546: mark_inode_dirty error [ 523.923715][T28090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7557'. [ 523.935782][T28071] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 523.944786][T28071] EXT4-fs (loop0): I/O error while writing superblock [ 523.972514][T21732] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #2: block 35: comm syz-executor: unable to read itable block [ 523.987933][T21732] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 524.011041][ T28] audit: type=1400 audit(1781826970.679:6244): avc: denied { create } for pid=28094 comm="syz.5.7560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.040180][T21732] EXT4-fs (loop0): I/O error while writing superblock [ 524.047031][T21732] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 524.061046][T21732] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 524.120388][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7562'. [ 524.125170][T28105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7563'. [ 524.150057][T28104] team2: entered promiscuous mode [ 524.167094][T28104] team2: entered allmulticast mode [ 524.181628][T28104] 8021q: adding VLAN 0 to HW filter on device team2 [ 524.191568][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7562'. [ 524.211658][T28107] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 524.266538][T28107] team3: entered promiscuous mode [ 524.295454][T28107] team3: entered allmulticast mode [ 524.314770][T28107] 8021q: adding VLAN 0 to HW filter on device team3 [ 524.521212][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 524.599765][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.607044][ C1] bridge0: topology change detected, propagating [ 524.697008][ T28] audit: type=1400 audit(1781826971.369:6245): avc: denied { mounton } for pid=28126 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 525.118531][T28126] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.125810][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.133464][T28126] bridge_slave_0: entered allmulticast mode [ 525.140489][T28126] bridge_slave_0: entered promiscuous mode [ 525.147725][T28126] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.155026][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.162638][T28126] bridge_slave_1: entered allmulticast mode [ 525.169462][T28126] bridge_slave_1: entered promiscuous mode [ 525.190268][T28126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.201575][T28126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.224781][T28126] team0: Port device team_slave_0 added [ 525.231637][T28126] team0: Port device team_slave_1 added [ 525.265872][T28126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.272999][T28126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.299264][T28126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.315592][T28126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.323031][T28126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.381253][T28126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.431781][T28126] hsr_slave_0: entered promiscuous mode [ 525.449084][T28126] hsr_slave_1: entered promiscuous mode [ 525.456860][T28126] debugfs: 'hsr0' already exists in 'hsr' [ 525.469106][T28126] Cannot create hsr debugfs directory [ 525.734396][T28160] netlink: 'syz.5.7576': attribute type 21 has an invalid length. [ 525.753157][T28160] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7576'. [ 525.907159][ T28] audit: type=1400 audit(1781826972.579:6246): avc: denied { write } for pid=28161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.975074][T28126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 526.001833][ T28] audit: type=1400 audit(1781826972.639:6247): avc: denied { write } for pid=28181 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.026811][T28126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.046702][T28126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 526.094248][T28126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.124654][T28197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7583'. [ 526.124851][T28126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 526.188173][T28126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.206855][T28126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 526.223659][T28126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.682646][T28126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.707291][T28126] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.724477][T19990] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.731623][T19990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.757141][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.764332][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.005267][T28126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.333052][T28126] veth0_vlan: entered promiscuous mode [ 527.371969][T28126] veth1_vlan: entered promiscuous mode [ 527.416317][T28126] veth0_macvtap: entered promiscuous mode [ 527.439758][T28126] veth1_macvtap: entered promiscuous mode [ 527.473591][T28126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.506199][T28126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.572973][T11924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.602304][T11924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.643528][T11924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.659493][T11924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.926740][T28384] rdma_rxe: rxe_newlink: failed to add bond0 [ 528.381444][ T28] kauditd_printk_skb: 338 callbacks suppressed [ 528.381466][ T28] audit: type=1400 audit(1781826975.059:6586): avc: denied { write } for pid=28404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.436634][ T28] audit: type=1400 audit(1781826975.109:6587): avc: denied { write } for pid=28422 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.601383][ T28] audit: type=1400 audit(1781826975.269:6588): avc: denied { write } for pid=28424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.680993][ T28] audit: type=1400 audit(1781826975.339:6589): avc: denied { write } for pid=28441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.888146][ T28] audit: type=1400 audit(1781826975.559:6590): avc: denied { write } for pid=28443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.979392][ T28] audit: type=1400 audit(1781826975.649:6591): avc: denied { write } for pid=28462 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.417039][T28482] loop4: detected capacity change from 0 to 1764 [ 529.460580][T28485] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 530.085292][T28519] netlink: 'syz.8.7636': attribute type 1 has an invalid length. [ 530.121080][T28519] bond6: entered promiscuous mode [ 530.130625][T28519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.151801][T28526] loop4: detected capacity change from 0 to 128 [ 530.158958][T28519] vlan0: entered allmulticast mode [ 530.164267][T28519] bond6: entered allmulticast mode [ 530.180036][T28519] bond6: (slave bridge8): making interface the new active one [ 530.187707][T28519] bridge8: entered promiscuous mode [ 530.193296][T28519] bridge8: entered allmulticast mode [ 530.200885][T28519] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 530.289197][T28538] netlink: 'syz.3.7643': attribute type 1 has an invalid length. [ 530.307843][T28538] 8021q: adding VLAN 0 to HW filter on device bond10 [ 530.352680][ T28] audit: type=1400 audit(1781826977.019:6592): avc: denied { read write } for pid=28533 comm="syz.4.7641" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.380399][ T28] audit: type=1400 audit(1781826977.029:6593): avc: denied { open } for pid=28533 comm="syz.4.7641" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.404833][ T28] audit: type=1400 audit(1781826977.059:6594): avc: denied { ioctl } for pid=28533 comm="syz.4.7641" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.416850][T28538] vlan5: entered allmulticast mode [ 530.484907][T28538] bond10: entered allmulticast mode [ 531.036480][ T28] audit: type=1400 audit(1781826977.709:6595): avc: denied { unlink } for pid=6927 comm="syz-executor" name="file0" dev="tmpfs" ino=7514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 531.445660][T28560] unsupported nlmsg_type 40 [ 531.542139][T28567] netlink: 'syz.1.7651': attribute type 1 has an invalid length. [ 531.621315][T28567] bond9: entered promiscuous mode [ 531.634159][T28567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.684860][T28574] bridge0: entered allmulticast mode [ 531.692115][T28576] netlink: 'syz.5.7655': attribute type 1 has an invalid length. [ 531.716633][T28567] vlan1: entered allmulticast mode [ 531.723657][T28567] bond9: entered allmulticast mode [ 531.732467][ T3386] IPVS: starting estimator thread 0... [ 531.746863][T28576] 8021q: adding VLAN 0 to HW filter on device bond8 [ 531.761198][T28579] bond9: (slave bridge5): making interface the new active one [ 531.771308][T28579] bridge5: entered promiscuous mode [ 531.782838][T28579] bridge5: entered allmulticast mode [ 531.817503][T28579] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 531.839836][T28585] IPVS: using max 1680 ests per chain, 84000 per kthread [ 531.959646][T28587] bond8: (slave veth0_to_bond): making interface the new active one [ 531.990183][T28587] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 532.011519][T28589] loop4: detected capacity change from 0 to 8192 [ 532.291917][T28613] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.7667'. [ 532.545262][T28628] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 533.561444][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.054200][ T28] kauditd_printk_skb: 359 callbacks suppressed [ 534.054220][ T28] audit: type=1400 audit(1781826980.729:6955): avc: denied { setopt } for pid=28674 comm="syz.4.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 534.106093][ T28] audit: type=1400 audit(1781826980.779:6956): avc: denied { shutdown } for pid=28674 comm="syz.4.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 534.161281][ T28] audit: type=1400 audit(1781826980.809:6957): avc: denied { read } for pid=28674 comm="syz.4.7689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 534.262160][T28679] loop4: detected capacity change from 0 to 512 [ 534.281402][T28679] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 534.321993][T28679] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 534.349246][T28679] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7690: bg 0: block 248: padding at end of block bitmap is not set [ 534.370410][T28679] loop4: lost filesystem error report for type 5 error -117 [ 534.379460][T28679] Quota error (device loop4): write_blk: dquota write failed [ 534.379850][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 534.380823][ C1] EXT4-fs (loop4): last error at time 1781826981: ext4_validate_block_bitmap:441 [ 534.424678][T28679] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 534.438203][T28679] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7690: Failed to acquire dquot type 1 [ 534.454222][T28679] loop4: lost filesystem error report for type 5 error -28 [ 534.454907][T28679] EXT4-fs (loop4): 1 truncate cleaned up [ 534.532218][T28679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 534.928681][T28679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7690'. [ 534.973042][T28126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 534.984841][T28684] xt_hashlimit: size too large, truncated to 1048576 [ 535.169989][T28699] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7695'. [ 535.309950][T28694] loop4: detected capacity change from 0 to 512 [ 535.321798][T28694] EXT4-fs: Ignoring removed bh option [ 535.334845][T28694] EXT4-fs: inline encryption not supported [ 535.418210][T28694] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 535.470968][T28694] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 535.555864][T28694] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7695: bg 0: block 248: padding at end of block bitmap is not set [ 535.623424][T28694] loop4: lost filesystem error report for type 5 error -117 [ 535.634005][T28694] Quota error (device loop4): write_blk: dquota write failed [ 535.642056][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 535.642135][ C1] EXT4-fs (loop4): last error at time 1781826982: ext4_validate_block_bitmap:441 [ 535.709471][T28694] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 535.725953][T28694] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7695: Failed to acquire dquot type 1 [ 535.740104][T28694] loop4: lost filesystem error report for type 5 error -28 [ 535.763547][T28694] EXT4-fs (loop4): 1 truncate cleaned up [ 535.810425][T28720] netlink: 'syz.1.7704': attribute type 10 has an invalid length. [ 535.815013][T28694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 535.819445][T28720] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.7704'. [ 535.856731][T28730] netlink: 'syz.3.7706': attribute type 1 has an invalid length. [ 535.882017][T28730] 8021q: adding VLAN 0 to HW filter on device bond11 [ 535.912370][T28730] bond11: (slave veth9): Enslaving as an active interface with a down link [ 535.934191][T28694] syz.4.7695 (28694) used greatest stack depth: 8128 bytes left [ 535.942883][T28126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 535.960680][T28730] veth0_virt_wifi: entered promiscuous mode [ 535.990031][T28730] bond11: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 536.013677][T28732] 8021q: VLANs not supported on ip6tnl0 [ 536.026854][T28730] bond11: (slave veth0_virt_wifi): Releasing active interface [ 536.107324][T28745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7712'. [ 536.137345][T28745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28745 comm=syz.4.7712 [ 537.951129][T28774] veth3: entered promiscuous mode [ 538.183520][ T28] audit: type=1326 audit(1781826984.859:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28783 comm="syz.4.7728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999000ce59 code=0x7ffc0000 [ 538.242799][ T28] audit: type=1326 audit(1781826984.859:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28783 comm="syz.4.7728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f999000ce59 code=0x7ffc0000 [ 538.297460][ T28] audit: type=1326 audit(1781826984.859:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28783 comm="syz.4.7728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999000ce59 code=0x7ffc0000 [ 538.394216][T28791] loop4: detected capacity change from 0 to 2048 [ 538.424272][T28791] EXT4-fs: dax option not supported [ 539.116225][T28812] --map-set only usable from mangle table [ 539.461818][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 539.461854][ T28] audit: type=1400 audit(1781826986.139:6968): avc: denied { connect } for pid=28822 comm="syz.3.7743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 540.478603][ T28] audit: type=1400 audit(1781826987.149:6969): avc: denied { connect } for pid=28862 comm="syz.8.7750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 540.646920][ T28] audit: type=1400 audit(1781826987.319:6970): avc: denied { getattr } for pid=28866 comm="syz.8.7752" path="socket:[90930]" dev="sockfs" ino=90930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 541.312544][T28937] tipc: Failed to remove unknown binding: 66,0,0/2886997162:900396023/900396024 [ 541.376038][T28942] netlink: 'syz.1.7769': attribute type 1 has an invalid length. [ 541.420613][T28942] 8021q: adding VLAN 0 to HW filter on device bond10 [ 541.465418][T28935] netlink: 127592 bytes leftover after parsing attributes in process `syz.3.7767'. [ 541.475625][T28947] netlink: 'syz.5.7771': attribute type 1 has an invalid length. [ 541.498725][T28947] 8021q: adding VLAN 0 to HW filter on device bond9 [ 541.530503][T28947] bond9: (slave veth21): Enslaving as an active interface with a down link [ 541.591501][ T28] audit: type=1400 audit(1781826988.269:6971): avc: denied { connect } for pid=28952 comm="syz.3.7773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 541.623234][T28942] bond10: (slave veth0_to_bond): making interface the new active one [ 541.651901][T28942] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 541.687179][T28947] veth0_virt_wifi: entered promiscuous mode [ 541.721230][T28947] bond9: (slave veth0_virt_wifi): making interface the new active one [ 541.737915][T28947] bond9: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 541.770330][T28951] bond9: (slave veth0_virt_wifi): Releasing active interface [ 542.453624][T28978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7783'. [ 542.471241][T28978] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 542.686986][T28989] netlink: 'syz.5.7788': attribute type 4 has an invalid length. [ 542.703043][T28989] netlink: 'syz.5.7788': attribute type 4 has an invalid length. [ 543.093707][ T28] audit: type=1400 audit(1781826989.769:6972): avc: denied { setopt } for pid=28990 comm="syz.1.7791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 544.023010][T29049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7811'. [ 544.035563][T29049] bond0: (slave bond_slave_0): Releasing backup interface [ 544.083423][T29049] bond_slave_0: entered promiscuous mode [ 544.099172][T29049] bond_slave_0: entered allmulticast mode [ 544.101222][T29051] Timeout policy `syz1' can only be used by L3 protocol number 17157 [ 544.476084][T29072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7816'. [ 544.489994][T29074] tipc: Failed to remove unknown binding: 66,0,0/4:3836990435/3836990436 [ 544.510936][T29074] tipc: Failed to remove unknown binding: 66,0,0/4:3836990435/3836990436 [ 544.625518][ T28] audit: type=1400 audit(1781826991.299:6973): avc: denied { write } for pid=29064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.716153][ T28] audit: type=1400 audit(1781826991.389:6974): avc: denied { write } for pid=29089 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.728562][T29087] netlink: 'syz.8.7820': attribute type 10 has an invalid length. [ 545.299612][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7822'. [ 545.344606][T29100] bond12: entered promiscuous mode [ 545.366728][T29100] 8021q: adding VLAN 0 to HW filter on device bond12 [ 545.415434][T29102] 8021q: adding VLAN 0 to HW filter on device bond12 [ 545.457762][T29100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.465107][T29100] IPv6: NLM_F_CREATE should be set when creating new route [ 545.472792][T29100] IPv6: NLM_F_CREATE should be set when creating new route [ 545.476000][T29102] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 545.480929][T29100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.516863][T29107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7824'. [ 545.556654][T29102] bond12: (slave wireguard0): Error -95 calling set_mac_address [ 545.587175][T29100] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 545.598710][T29100] bond12: (slave wireguard0): Error -95 calling set_mac_address [ 545.646984][T29110] bridge1: port 1(dummy0) entered blocking state [ 545.679544][T29110] bridge1: port 1(dummy0) entered disabled state [ 545.699353][T29110] dummy0: entered allmulticast mode [ 545.715872][T29107] netlink: 'syz.4.7824': attribute type 10 has an invalid length. [ 545.750548][T29110] dummy0: entered promiscuous mode [ 545.768301][T29107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7824'. [ 545.794283][T29107] bridge1: port 1(dummy0) entered blocking state [ 545.800740][T29107] bridge1: port 1(dummy0) entered forwarding state [ 545.843881][T29107] dummy0: left allmulticast mode [ 545.857873][T29107] bridge1: port 1(dummy0) entered disabled state [ 545.925963][T29116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7828'. [ 546.181337][T29136] tipc: Failed to remove unknown binding: 66,0,0/4:437715237/437715238 [ 546.187558][T29139] bond11: entered allmulticast mode [ 546.213811][T29142] tipc: Failed to remove unknown binding: 66,0,0/0:2739263349/2739263351 [ 546.214225][T29139] ip6gretap1: entered promiscuous mode [ 546.230553][T29139] ip6gretap1: entered allmulticast mode [ 546.236670][T29139] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 546.250250][T29142] tipc: Failed to remove unknown binding: 66,0,0/0:2739263349/2739263350 [ 546.263892][T29139] bond3: (slave lo): Releasing backup interface [ 546.270697][T29142] tipc: Failed to remove unknown binding: 66,0,0/0:2739263349/2739263351 [ 546.273104][T29144] loop4: detected capacity change from 0 to 256 [ 546.286999][T29142] tipc: Failed to remove unknown binding: 66,0,0/0:2739263349/2739263350 [ 546.297328][T29139] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 546.311275][T29139] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 546.332926][T29139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.503478][T29160] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7843'. [ 546.608336][T29144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7838'. [ 546.700133][T29172] tipc: Failed to remove unknown binding: 66,0,0/0:4150423475/4150423477 [ 546.719107][T29172] tipc: Failed to remove unknown binding: 66,0,0/0:4150423475/4150423476 [ 546.734145][T29176] tipc: Failed to remove unknown binding: 66,0,0/4:4032892505/4032892506 [ 546.744015][T29172] tipc: Failed to remove unknown binding: 66,0,0/0:4150423475/4150423477 [ 546.753477][T29172] tipc: Failed to remove unknown binding: 66,0,0/0:4150423475/4150423476 [ 546.841507][T29178] loop4: detected capacity change from 0 to 512 [ 546.895630][T29180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7851'. [ 546.911689][T29178] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 546.927972][T29178] EXT4-fs (loop4): orphan cleanup on readonly fs [ 546.948006][T29178] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 546.966055][T29178] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 546.997902][T29178] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 547.017946][T29188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 547.048057][T29178] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.7850: inode has both inline data and extents flags [ 547.064402][T29178] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 547.069738][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 547.085447][ C0] EXT4-fs (loop4): initial error at time 1781826993: ext4_orphan_get:1399: inode 16 [ 547.094914][ C0] EXT4-fs (loop4): last error at time 1781826993: ext4_orphan_get:1399: inode 16 [ 547.107947][T29188] team0: Device xfrm0 is of different type [ 547.110112][T29178] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7850: couldn't read orphan inode 16 (err -117) [ 547.128488][T29178] loop4: lost filesystem error report for type 5 error -117 [ 547.130382][T29178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.184887][T29191] tipc: Enabled bearer , priority 0 [ 547.311807][T28126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.890504][T29218] bond12: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 547.908757][T29216] tipc: Failed to remove unknown binding: 66,0,0/0:2625527791/2625527792 [ 547.933862][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7864'. [ 547.947091][T29218] bond12 (unregistering): Released all slaves [ 547.970404][T29221] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 547.978036][T29221] netlink: 'syz.1.7864': attribute type 30 has an invalid length. [ 547.986974][T29224] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7865'. [ 548.035968][T29224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29224 comm=syz.8.7865 [ 548.170475][T29234] ================================================================== [ 548.178624][T29234] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 548.185617][T29234] [ 548.187973][T29234] read-write to 0xffff88810039e124 of 4 bytes by task 29227 on cpu 0: [ 548.196154][T29234] fifo_open+0x89/0x5b0 [ 548.200377][T29234] do_dentry_open+0x49f/0xa60 [ 548.205104][T29234] vfs_open+0x37/0x1e0 [ 548.209208][T29234] path_openat+0x1b39/0x2000 [ 548.213887][T29234] do_file_open_root+0x233/0x430 [ 548.218879][T29234] file_open_root+0xfd/0x130 [ 548.223515][T29234] do_handle_open+0x6d2/0x7b0 [ 548.228232][T29234] __x64_sys_open_by_handle_at+0x44/0x50 [ 548.233920][T29234] x64_sys_call+0x153d/0x3020 [ 548.238641][T29234] do_syscall_64+0x136/0x3c0 [ 548.243266][T29234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.249196][T29234] [ 548.251550][T29234] read to 0xffff88810039e124 of 4 bytes by task 29234 on cpu 1: [ 548.259223][T29234] wait_for_partner+0xc9/0x1d0 [ 548.264023][T29234] fifo_open+0x443/0x5b0 [ 548.268320][T29234] do_dentry_open+0x49f/0xa60 [ 548.273075][T29234] vfs_open+0x37/0x1e0 [ 548.277188][T29234] path_openat+0x1b39/0x2000 [ 548.281830][T29234] do_file_open+0x16c/0x290 [ 548.286380][T29234] do_sys_openat2+0xa0/0x130 [ 548.291037][T29234] __x64_sys_openat+0xf2/0x120 [ 548.295848][T29234] x64_sys_call+0x1e39/0x3020 [ 548.300572][T29234] do_syscall_64+0x136/0x3c0 [ 548.305198][T29234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.311169][T29234] [ 548.313513][T29234] value changed: 0x00000001 -> 0x00000002 [ 548.319337][T29234] [ 548.321688][T29234] Reported by Kernel Concurrency Sanitizer on: [ 548.327869][T29234] CPU: 1 UID: 0 PID: 29234 Comm: syz.5.7866 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 548.338858][T29234] Tainted: [W]=WARN [ 548.342684][T29234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.352776][T29234] ================================================================== [ 550.199908][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 554.920820][ T28] audit: type=1400 audit(1781827001.599:6975): avc: denied { write } for pid=29239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.960774][ T28] audit: type=1400 audit(1781827001.639:6976): avc: denied { write } for pid=29250 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.863971][ T28] audit: type=1400 audit(1781827003.539:6977): avc: denied { write } for pid=29254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.899529][ T28] audit: type=1400 audit(1781827003.569:6978): avc: denied { write } for pid=29265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1