last executing test programs: 3m50.552246278s ago: executing program 1 (id=11): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, '\x00', "dc64809611ad05588574f9a9ea44b572", '\x00', "e7cccf82d3c7c7f2"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "7ca14e0bb42b00ca", "e393a639e1714663d647b57d50144087", "d5825cc3", "e35bb6550c4661d5"}, 0x28) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)='_', 0x1}, {0x0}], 0x2) 3m48.9595126s ago: executing program 1 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000380)={@private2}, &(0x7f00000003c0)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4081) fchdir(r4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="0537", 0x2}], 0x1}, 0x88c1) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x5411, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) 3m48.024580417s ago: executing program 1 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x14) 3m47.893733245s ago: executing program 1 (id=22): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x5, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb446edcd875b863c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r2 = socket(0x2b, 0x80801, 0x1) listen(r2, 0x7e5a) bind$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="10000000050605"], 0x1c}}, 0x8000) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x6, 0x2) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000880)=[r4]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="4867ca4ed54e9e757bd0f8f04a0ff6c9a0b50c4e042a5b52dd784aa62336483d4511091725c80f50", 0x28}, {0x0}], 0x2, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100}}}], 0x38}}], 0x3, 0x48000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008094}, 0x2000c050) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000006119980000000000ae00000000000000950000000000000034977f56c2417ac7e24c001a4f5e1bf8e29bdb7988e0cbedcbb049aab09fe857701d493c19c915e928bca3db6a51a73ed4000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3m47.718756904s ago: executing program 1 (id=24): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x18}, 0x2000, 0x6, 0xfffffffc, 0x1, 0x9, 0x80, 0x800, 0x0, 0x0, 0x0, 0x20008005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x11, 0xa, 0x33774d76) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000200)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0xca0c, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8094}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="2800c3867784f9c972c6a54200000effffffff00000000000000020000030900020073797a31000091ef76a63416c83d5af63f75fb9f934fc3230b70cc8d5460c2dfffbeb0744b57250c4fac36e5da034cb026671e398a023e951c3444f1f5faac377b04f6162e54290ac4348e0e5c3b0694b3327699737f663e2bd8c2de088a0b7e10552ab9ccdff361f90e0679897cd1e8a1016a1507"], 0x28}}, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) close(0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/route\x00') preadv2(r3, &(0x7f0000002780)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x2, 0x7, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xff, 0x2}, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0xc9d86e, 0xfffffffffffffffe, 0x0, 0x8, 0x2, 0x400, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffefffffe}, 0x20}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0xfd3, 0x86}}, 0xe8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') 3m46.252312759s ago: executing program 1 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5e}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, r2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r4, 0x200000000c, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x40132, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x29, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x5, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x5, 0x18, 0xd, 0x0, 0x8, 0x2}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20000000}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000540)}, 0x10) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2e45) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYBLOB="3d89b078c8708c668d30b763fc58578a6620b39088d0c235f2d456a590552dd9093d609ee78561b97d443e94a0cbc6f67cb37c5de8380403b386c2bb8b6899b41e541385bf713cd24d7e370963c9fb9a34b9eb8a409e20ae54f055477df3a2fa9d79149c7da6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r9, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) 3m46.245717059s ago: executing program 32 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5e}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, r2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r4, 0x200000000c, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x40132, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x29, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x5, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x5, 0x18, 0xd, 0x0, 0x8, 0x2}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x20000000}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000540)}, 0x10) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x2, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x8005, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x2, 0x2000, 0x8}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2e45) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYBLOB="3d89b078c8708c668d30b763fc58578a6620b39088d0c235f2d456a590552dd9093d609ee78561b97d443e94a0cbc6f67cb37c5de8380403b386c2bb8b6899b41e541385bf713cd24d7e370963c9fb9a34b9eb8a409e20ae54f055477df3a2fa9d79149c7da6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r9, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) 2m10.138213966s ago: executing program 5 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="d6d9df982b1e9e0fc15390fa5f2c", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x9, {{0xa, 0x4e23, 0x7, @private0, 0x6}}}, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) 2m9.696227268s ago: executing program 5 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (rerun: 32) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000400)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x9}], 0x1, 0x100000c01, 0x61, 0x0, 0x0, 0x2}) (async) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 2m9.433963882s ago: executing program 5 (id=667): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x200000000000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=[0x9, 0x8], &(0x7f0000000100)=[0x2], 0xa1, 0x2, 0x0, r6}}, 0x40) 2m9.294646969s ago: executing program 5 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_PARMS={0x18, 0x1, {0x3873, 0x2, 0x2, 0x452, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "ecac453c8b581c2a7fd3f798141b120c"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQFNGVzc6mabpbN2k3W7O/H8zu+85M5nnfmX3e7AwzbAB963D9JY14KiLOJxHDG5YNRLbwcGO91ZWl4t2VpWIStdqFX5JIIuLOylKxuX6SvR+IiOWI+H9EfJOPOJqub3JPs1BdWJwaL5dLs1l9ZG768kh1YfHYpenxydJkaebEiy+dOn3y1NjxsY3NvVvbWMtvra/Xfrz+7rXvXrl5/dPPDi0X3x9P4kwMZcs29uNxauyTfJzZNP9kN4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6DO9I8oItqgxG1dRuKQB9IJD30qeb3gPr5b3Paye8ft842TkDqcVdXlorvRDP+QOPaROxdOzfZ/2ty35lJ/Xzz4E42lF1p+WpEjA4MPPj5T7LP3/aNPo4G0lVfn20cqAePf7o+/kSL8Weoee30ETXHv9Vs/FttET/XZvw732GMP17/6aO28a8OxtMt4yfr8ZMW8dOIeLPD+Dde+/J0u2W1jyOOROv4TcnDrw+PXLxULo02XlvG+OrIoZfb9z9if5v4jWu2e9casrH/e7I2pR32/4tvP39m+SHxn3/24ce/1f7fFxHvdRj/P3c+ebXdsltXk9v1bwFbPf5J5ONmh/FfOHP4h6zoqiEAAAAAAAAAADxG6dq9bElaWC+naaHQeIb3v7E/LVeqc0cvVuZnJhr3vB2MfNq802q4UU/q9bHsftxm/fim+olcFjC3b61eKFbKEz3uOwAAAAAAAAAAAAAAAAAAADwpDmx6/v+33Nrz/5t/rhrYrdr/5Dew28l/6F/353/Ss3YAO8//f+hbNfkP/Uv+Q/+S/9C/5D/0L/kP/Uv+Q/+S/wAAAAAAAAAAAAAAAAAAAAAAAAAA0BXnz52rT7W7K0vFen1iYGF+qvLWsYlSdaowPV8sFCuzlwuTlcpkuVQoVqb/bntJpXJ5NGbmr4zMlapzI9WFxTemK/Mzzd8ULeW73iMAAAAAAAAAAAAAAAAAAAD45xlam5K0EJFv1NO0UIj4V0QcTCK5eKlcGo2If0fE97n8YL0+1utGAwAAAAAAAAAAAAAAAAAAwC5TXVicGi+XS7PdKwxkoboYovPCwFZWjojlRwn6e61Wu39OfYtb3k4+24E93nW7o5B7Mj6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qXsP/Xb6F392t0EAAAAAAAAAAAAAAAAAAADQl9Kfk4ioT0eGnxvavHRPsppbe4+It29c+ODK+Nzc7Fh9/u31+XMfZvOP96L9QKeaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHuqC4tT4+VyaXabhcEO1ul1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2468AAAD//3+o0IY=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x10d) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x6d, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x14) 2m9.025985533s ago: executing program 5 (id=677): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xff3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180), 0x6e, &(0x7f0000002080)=[{0x0}], 0x1}, 0x2000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x3}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) 2m6.794312297s ago: executing program 5 (id=689): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0x0, 0x3, 0x0, 0x3, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) unshare(0x28000600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) writev(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000030000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fbffffff00000000000000000000000000000000000043e45a53d1df42c888d465939b1725d27d2d8820b3aa7cb3cf3cd9a65530010d162b44d1d2fae104f67025f173cf331c3b6b56ba39897956fae626c318a42a1a8646f0a2823f"], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r11 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 1m51.236597906s ago: executing program 33 (id=689): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0x0, 0x3, 0x0, 0x3, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) unshare(0x28000600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0) writev(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000000000030000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fbffffff00000000000000000000000000000000000043e45a53d1df42c888d465939b1725d27d2d8820b3aa7cb3cf3cd9a65530010d162b44d1d2fae104f67025f173cf331c3b6b56ba39897956fae626c318a42a1a8646f0a2823f"], 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r11 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 1m11.923495976s ago: executing program 2 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r0, &(0x7f00000006c0)=@ceph_nfs_fh={0x8, 0xfe, {0x40}}, 0x755c00) (async) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f00000000c0)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001d40)={[{@jqfmt_vfsold}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpid}], [], 0x2c}, 0x84, 0x509, &(0x7f0000000f80)="$eJzs3c9vHNUdAPDvjONfiRM7adQ2P9q4TataTWvHTtrm0ENbtVIurSq1h/ToOiYKcRIUG4lEEbERCkfEXxAQJyQkTlzgAhIg4AKIK9wRUoRySQCBFs3ujHe9v7y2Yxuzn4+02fdm3syb75t5s7Pz1pMAutZo9k8SMRQRn0TEcCW7ssBo5e3BvZszX967OZNEqfSfL5JyuRfv3ZwpihbL7ckzY2lE+nQSR5rUO3/9xqXpubnZa3l+YuHyYxPz12/8/uLl6QuzF2avTJ05c/rU5J/+OPWHjuK4tcr8LK77h5+8evTQ2f8998+ZUvz/vZez7R3K59+viaNipKN62xmN0Sjlimlf5/lfb3jt3y97YzD683Syq37u0tZvEB3piYhsd/WW+/9w9ER15w3HP55azry1TRsIbJrss2h/w9Se/D1d/vwCfogSfRy6VPGJn33/LV5bef2x3e7+Nft3thz/g/z1wb8qbZNm32VHIvoGWy//4ybTBqrJ0vAq9Q9VL7buRNP7EG0kHZcEAFj2Rnb987vG67/6O/b78jGUkYg4EREHIuJHEXEw0uUyP4mIn66x/tG6fOP1z0dtrr42Lrv++3M+tlW8KnOKuJLl3N5y/L3JIxfnZk/mbTIWvf1ZfrJNHW/+/eNnW83L4j+3+NWd4pXVn71XS6Sf7+pfucz56YXpDYS8wt2lSGJXs/iT5ZGArAUORcThdaw/a7OLv33paJbet6dx/urxt9EwzrR2pRciflPZ/4tRF38hqdTUanxyYiDmZk9OFEdFo/c/vP3v2nxvTXpF/AOdxTSw3mCbuLsUsbvp8Z/HX3SDYrx2Ps+/PdRxHbc/fabld5rG/Z/EucXaEvnxP1httuz470v+W0735dOemK6cJl7PJ1SnLyxcm6qurciX3ycr8Y8dXxl/5Xtxmp3jvn0+X+5IRGQH8c8i4ucRcSzf9l9ExC8j4nib+N/9268ebd9C6zz+H4JkKeJ8u/0fMZLUjtevI9Fz6Z3XWtVfv/+Tpue/0+XUWD6l9vzX12K9nW7gRtsPAAAAdoK0PAadpOMRUXebMQ7G7nTu6vzCidF4/Mr5ym/lR6I3Le50DdfcD53M7w0X+am6/KmI2F/+pdFgOT8+c3Vu7zbFDFTsqen/lXNBmo6PV+Z91rPdWwdsujWNo9X+6OyVVx/+xgBb6iGMowM7lP4P3Uv/h+6l/0P3atb/b0U82IZNAbbYej//638wAOw8rv+he+n/0L30f+hKjX8Snz9uJTsnrP9P/ucOnN3IEwM2P1EaXv/i0XrW4tpX2NNZ4eLpF83LfFNqWKp14dpEElGEk7aJq0ki0uqU4n81KE/prZTp66D2bUukq5b5y2qt0bumZ2IMNGmNY3miPyI6Xc+tzW3V/lhx/GQST5kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2tO8CAAD//7K66Eo=") (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r6, 0x200002) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) (async, rerun: 64) r8 = syz_open_pts(r7, 0x101000) (rerun: 64) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) syz_open_dev$MSR(&(0x7f0000000040), 0x20000000000000, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd"], 0xcfa4) 1m11.888210327s ago: executing program 2 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7fbd, 0x222002) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000040)={0x0, 0xa}, 0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x94, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x50, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}], @IFLA_VTI_REMOTE={0x14, 0x5, @private0}, @IFLA_VTI_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_VTI_LOCAL={0x14, 0x4, @private1}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000840) 1m11.782026923s ago: executing program 2 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$sock(r1, &(0x7f00000004c0)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x101, @private2, 0xc, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)='>', 0x1}], 0x1}, 0x20040010) (async) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) (async) shutdown(r1, 0x1) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1m11.693361007s ago: executing program 2 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400004056456b8b35fc1ad6e2407d3305d6e3a764c523fb", @ANYRES16=r2, @ANYBLOB="05020000000002000000120000001800018014000200626f6e645f736c6176655f31000000000800060001000000"], 0x34}}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x24ffffff) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240)={0x42c00, 0x30, 0x20}, 0x18) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1m10.584002545s ago: executing program 2 (id=1030): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x0, 0x2}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x8) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @local}, 0x14) r1 = syz_socket_connect_nvme_tcp() r2 = signalfd(r1, &(0x7f0000000180)={[0xd5]}, 0x8) write$binfmt_misc(r0, &(0x7f00000001c0)="bc518fc9b04ce4a999a65f9b2edc8c09487ce5a2ae9c1f700e6e79bf2b87e2ab59a536afb1738b6e7814200503e0a10b3600c1f44d9dba63de22a55e6fd158d860a10c65cbae6942563dfe3c0952758642718804743530a87510923cd97692014ed02d8d9682bb2a429f69644119d517cd0c83a0147e2c063d530654e5d33ed4e94a167ace38af81af05219184f334ca6b030bd4a83dbcd6c6bb25f5ba313ce9d9bb67e6ab47cd7f3b7fa548952dd33f66", 0xb1) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000ac0)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000300)={0x670, 0x3a, 0x806, 0x70bd2d, 0x25dfdbfe, "", [@generic="72669cc7ca0b43f6ca01bfec59a10393cf35035c708dfa43dda2d56806bc59564a04a1633d03134d919669064520d4dee29918e1e2eae5d647fff9215db1a044faac7d75b45bc92332cd855da68c08de19f84ab43f2f78635a7f5a91c76986109e6c300d1324d8a462a9d231f15819670fe04dc3ea7d7806f5906b678c9c217d8fafce921f4f7f7dc76e347a40becbbabe37bac1ea04e622b9abfa5f52040054c5b76bab8d570b924d302fac1ac811a6848ac68a421d63fc491d8226cee6a8ac9725f7e279e4e303878ea558e05679", @generic="5c150bdf54f5c27c4a4f4eb76cb3ce55f6b021b44f3bb02e88acd780b5b9a4788880dc7af26b507c5e0f6df195d779dabb74442102940cbf29dfa44b7e3f12890a18ce42d414f5841f9e3d62c154925540a4ebff29cf2b50267deef3f77c9d6be5275fa6ddf3d4e60985efdc61c273a224e5e5683b6681e189460e2f25890f25d583754307d481728260eb963beb6d8679fbf846b99263c97218317826d89f671c7df2bcbd7f04fed8aebefba1964db28fe9e25b8be680b4bcf34a38f5c6b33e60411e8ec7939ecc71141b4cf5cb7cb384587c4de308", @typed={0x5, 0x128, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0xc43c}, @nested={0x17d, 0x94, 0x0, 0x1, [@generic="eccfbe2ef72386e50aeadb42121ca8fc16621e8d23a0b7ca48232e5fa263555c42b27ce1a2ecb8c47821c53db341ae904537904b57ca513e5f850242c35c823a555457b3e3b137b393f4a8b54ac48f4c00ebd3ced89de9634f713b0d471db9736f818fd86f75b6ecd2da3fd918", @nested={0x4, 0xa0}, @generic="9252ed78a26fcf766ffe98efaceca08eb839d1d5405edb02ee290b2070e2e988f3899634383278d58ace70dd40cb5a81060a4e166e041dce93d98330659471d3c831d3e679d519a4ea7cef7330b3149de8b1fa60242a17a1232a0ec4c767c387f5b13e8822a9e2353e3b030d9138953eed7510f262bb2bda3b081a637c4be97934f18705", @generic="95da4cc328a9b7dbc81d21eef0a2660f7df9b2e2bda0ccd5e02834d653f675b4228e77656e35f4b0856b35b1858cefcd44f24870438b0363e3a1af8acc136b0576f40462763642ffe726c7e310e0ad35ad2d451c0d0fa900870a40860c964f3a8a3b8b6c3e59ff92ef5d82cee8fc1c590f8e29192e7453b6bacb848c7e9bbd20b405691b"]}, @nested={0x2b4, 0x112, 0x0, 0x1, [@generic="21fac5bbe263cd2f55f5de9c3ec342bc60", @generic="e8b1c2b4e75bb6206bcc076cdcc2682b015ff9de351ff3f4fa30554d26544a79da0f2eb2b570c0e448ca748c1449b42958a4bc326ce38515aedd0e98953dc2600941871508fa3bdb5a5c17da6a2a0f2a52fc6d790ecb117a267bd255cdf2652e45051b713cc1ee38bc8aa0ff0288ebd56a90b1c0ba62b6815b72c52f9642f84822c430fcee6ec32ddf872fd890f050098133b5c53bbf0d116e4e7477f84388bf4e76153f11c30c24d5ab6ede8733afe1a30ea835cfdf9edc2dd0b32b26f8ebeb12a4b23c9d6eb4dd5d2af256b5", @generic="3553b2df119b78fdfbfb47ed924f3a9169fb7a15d1b52c09777f56a87b239a13d09e0862b402f934f7cd2c62a516a27a05a7f3192f41c8ad74dcada50bd19c2215066b362468ea8f90e082f43fb60141443d60368be7e262869df332aaef74", @generic="fda754243f36544763633901e943e191769172cabf8703d7e82f0977274b5393d7bc4e3a72106628cdf41b36", @generic="5c4b83e713e8e00d00ff02bb616339f676d901eb12db9322397a1430b69d88bd1c8a12e4e47a58a4868189f6fe06803d", @typed={0x8, 0xe5, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x51}, @generic="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", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x9bf5}]}, @generic="af85b7fb8eb74a8e", @nested={0x6c, 0x3a, 0x0, 0x1, [@generic="75f640025e9bae2051dcb29441803040f87911d70b65bb65ce01540094475996093561914e6c596a008e9fc690e2cd51f8e13e657715690f325d3a28cf3782cb6d655cd87edb56fe4d876b99e03277e5eeaa3ebcf565a78c00a423d7b687de9b94fe517f17be9834"]}]}, 0x670}, {&(0x7f0000000980)={0x30, 0x10, 0x2, 0x70bd26, 0x25dfdbfe, "", [@generic="2d405a15684c6b270293eabf5f62d460b7c5a6c25160c668853d", @generic="95f815cb"]}, 0x30}, {&(0x7f00000009c0)={0xac, 0x16, 0x300, 0x70bd28, 0x25dfdbfe, "", [@generic="823744256ad9d42277112bec0b2336d7e758655c1a7f12632187982d9368e8e1109c4db6bd593da7b45228bdfbd29593c16a9c76e75cd110240548b94579c493fd6300c6efac1de9d818e8d86ca98a84285937e3615e4e753dafa9fb0348409262949551d660b3bd03e1a90f069d8b8d7ca587e7fe13452b863502002a4e6f493eb5de913cc8ae0e3be2a760953604e56be2e557672f0062f0"]}, 0xac}], 0x3, 0x0, 0x0, 0x4040050}, 0x4004) r4 = accept4$x25(r2, &(0x7f0000000b00)={0x9, @remote}, &(0x7f0000000b40)=0x12, 0x0) preadv(r4, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/232, 0xe8}, {&(0x7f0000000c80)=""/164, 0xa4}, {&(0x7f0000000d40)=""/204, 0xcc}], 0x3, 0x7, 0x800) r5 = perf_event_open(&(0x7f0000000f40)={0x4, 0x80, 0x5, 0xd, 0x8, 0x82, 0x0, 0x3, 0x40000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0xf0}, 0x403d, 0x7, 0x3, 0x1, 0x8, 0x200, 0x78db, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, r0, 0x8) perf_event_open(&(0x7f0000000ec0)={0x4, 0x80, 0x40, 0x0, 0x4, 0x2, 0x0, 0x7fffffffffffffff, 0x2001, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000e80)}, 0x828, 0xa9, 0x1, 0x4, 0x1, 0x1, 0x5, 0x0, 0x1000, 0x0, 0xd}, r3, 0x2, r5, 0x9) close(r0) move_mount(r2, &(0x7f0000000fc0)='./file0\x00', r2, &(0x7f0000001000)='./file0\x00', 0x100) sched_setscheduler(r3, 0x5, &(0x7f0000001040)=0x4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x6e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x40000) ioctl$KDSETLED(r0, 0x4b32, 0x6) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000001180)={0x2}) rename(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='./file0\x00') r6 = openat(r0, &(0x7f0000001240)='./file0\x00', 0x100000, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x48000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001440)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, r9, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000001540)=""/71) 1m10.191140544s ago: executing program 2 (id=1041): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") (async) open(&(0x7f0000000140)='./file2/file0\x00', 0x100, 0x522607253a9ec6bf) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000010c0)='\'\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xe1b}, 0x16, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) getitimer(0x1, &(0x7f0000000200)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x240048d4) (async) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m10.159733296s ago: executing program 34 (id=1041): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$eJzs3U1vW1kZAOD33thMk2ZIBljMjMTMiBmUVFAnmdBpxKKAhGBVCSj7EhI3iuLEVeK0TVRBKn4AEkKAxAZWbJD4AUioPwEhKsEeAQJV0LJhUbjI9nWapraTUn9onOeRTu6Hj/2eN5aP7/E99g3gzHonImYjIsuy7EJETOX707zEQbPU6z1+dHelXpLIsmv/SCLJ97Ue65V8eT6/27mI+MZXI76dPB93Z29/Y7lSKW/n23O1zeRJlu1fXN9cXiuvlbcWFxc+WLq8dGlpvid5TkfElS//9Uff/8VXrvzms7f/dP3vs99pJth0NI9eaqZebPwvWgoRsd2PYENSaGTYdGnIbQEAoLv68f7HIuJTEXEhpmKscTQHAAAAjJLsC5PxJGme/wMAAABGUxoRk5GkpXy+72SkaanUnMP7iZhIK9Wd2meyqcPPC6ajmN5Yr5Tn87kD01FM6tsL+Rzb1vb7x7YXI+K1iPjh1Hhju7RSrawO9ZMPAAAAODvOPx3/v5F/h7Mx/gcAAABGzPSwGwAAAAD0nfE/AAAAjD7jfwAAABhpX7t6tV6y1vWvV2/t7W5Ub11cLe9slDZ3V0or1e2bpbVqda3xm32bJz1epVq9+bnY2r0zVyvv1OZ29vavb1Z3t2rX15+5BDYAAAAwQK+9ff+PSUQcfH48jYgsOXJbMSIbO1q5MPj2Af2Tvkjlv/SvHcDgjQ27AcDQOKSHs6t4chXfDoARd1I/0HHyzm973xYAAKA/Zt44PP/fKMDZcf9hY5Ekw24IMHDdzv+bGwCj7RTn/4ARVez2Lm9QACMv7fJSb30h6OXP/2fZi7cMAADopclGSdJSPg6YjDQtlSJebUz8LyY31ivl+Yj4aET8Yar4Sn17oXHPxMcDAAAAAAAAAAAAAAAAAAAAAAAAAHBKWZZE1sH4YR0AAADgwywi/VuSX/9rZuq9yeaI/+lVQT+S/HuqsYyI2z+99uM7y7Xa9kJ9/z8P99d+ku9/fxifYAAAAADHtcbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTS40d3V1plkHEffikiptvFL8S5xvJcFCNi4l9JFI7cL4mIsR7EP5iIiNfbxU/qzYrpvBXH46cRMd6L+Pf+//jnexAfzrL79f7ni+1ef2m801i2f/0V8vKyOvd/6WH/N9ah/3u13QOmz+9688Gv5jrGvxfxZqF9/9OKn3SI/+4pc/zWN/f3O92W/Txipu37T/JMrLmkcHNuZ2//4vrm8lp5rby1uLjwwdLlpUtL83M31ivl/G/bGD/45K//2y3/iQ7xp0/I/71T5v+fB3cefby5Wjx2UzF+lmWz77Z//l/vEL/13vfp/Omub8+01g+a60e99cvfvfV2l/xXO+R/0vM/e8r8L3z9e38+ZVUAYAB29vY3liuV8rYVK31bGY8BBl2ObnVaB7EDaM9381D9CvH7YkT/shhipwQAAPTF04P+YbcEAAAAAAAAAAAAAAAAAAAAzq6TfgasFz8wdjzmwXBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo6n8BAAD///phy8c=") (async) open(&(0x7f0000000140)='./file2/file0\x00', 0x100, 0x522607253a9ec6bf) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000010c0)='\'\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) (async) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0xe1b}, 0x16, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) getitimer(0x1, &(0x7f0000000200)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x240048d4) (async) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 27.184282773s ago: executing program 4 (id=1547): io_setup(0x7, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_destroy(r0) 26.812036212s ago: executing program 4 (id=1560): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 26.766700115s ago: executing program 4 (id=1562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 26.672207s ago: executing program 4 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 26.656225951s ago: executing program 4 (id=1568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2f, 0x8841}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 25.88024109s ago: executing program 4 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911038000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.860773002s ago: executing program 35 (id=1583): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911038000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.562023889s ago: executing program 7 (id=2277): socket$inet(0x2, 0x2, 0x0) close(0x3) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x82, 0xfffffffffffffffe, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xf0) listen(r0, 0xd9) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close(0x3) 1.492396043s ago: executing program 7 (id=2280): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x2000004, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x11, 0x2d1, &(0x7f0000000480)="$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") r0 = creat(&(0x7f0000000100)='./file1\x00', 0x10) pwrite64(r0, &(0x7f0000000c00), 0x0, 0x4) 1.469463014s ago: executing program 0 (id=2281): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x8) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4104, 0x1008}], 0x10000000000000b7) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.349717061s ago: executing program 0 (id=2282): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000080)) 1.273270504s ago: executing program 7 (id=2284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000080000000000000000aaff02000000000000000000000000000111"], 0xffe) 1.242402386s ago: executing program 3 (id=2285): prctl$PR_SET_THP_DISABLE(0x29, 0x1) 1.193501439s ago: executing program 3 (id=2286): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003500)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xa, &(0x7f0000000540)=""/10, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.147392811s ago: executing program 3 (id=2287): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.092042594s ago: executing program 0 (id=2289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x63365b72}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x62e, 0x2e6a6afa, 0x0, 0x2, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r4, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 972.99451ms ago: executing program 7 (id=2294): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) 924.156163ms ago: executing program 3 (id=2295): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x401, 0x42002) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000700)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x1b, 0xc, "54c870a8634edc745dfa1ab0a34a10a233e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a4791300", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "4921095856cdf9fd8199034f3b870104000009e3c7a181fb1c16c99189819ef4", [0x1, 0x9]}}) 917.373773ms ago: executing program 0 (id=2298): r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r0) exit(0xffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 860.800465ms ago: executing program 7 (id=2300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x21, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) r1 = dup(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) 760.238581ms ago: executing program 3 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c0001002dbd7000fedbdf2507000000", @ANYBLOB="800100010a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x400c0d4) 661.393245ms ago: executing program 3 (id=2309): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7df857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb1727d2adcb6bdcb0a65b9d53a384e47f96954b7c99099bc0a33bc1d8f4acc157abc6d5c74bab04e26413368f2590f57d7c254c07985a850892405d73f00aea13673fd68082aad90a47b8213c2f634c60207e532cfc100b86bbba315b1442b8ff773382d44e9013682bb55930010427fc0f526de46dbb9658468eaee1a0d6af1173b3313112bfdf5679fff89", 0x1ec}, {&(0x7f0000000d00)="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", 0x13f}, {&(0x7f0000001300)="e0cda6472d1ca3b7ff9e5b6b3e30ef2266c88b085e37271763c50968fe2e2eb13b9472381bade936", 0x28}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="420114913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9", 0xc2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 512.299293ms ago: executing program 6 (id=2314): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1de", 0x54}, {&(0x7f00000008c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808d", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="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", 0x3bc}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 512.141294ms ago: executing program 8 (id=2315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 502.879724ms ago: executing program 6 (id=2316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 491.089565ms ago: executing program 8 (id=2317): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) syz_io_uring_setup(0x54a9, &(0x7f0000000380)={0x0, 0xb002, 0x0, 0x1, 0x2d, 0x0, r0}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 416.223148ms ago: executing program 8 (id=2318): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x62e, 0x2e6a6afa, 0x0, 0x2, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r4, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 416.055018ms ago: executing program 6 (id=2319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000080000000000000000aaff02000000000000000000000000000111"], 0xffe) 378.62814ms ago: executing program 8 (id=2320): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r2, r0, 0x16, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000001080)={0x2, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e1b, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 372.307181ms ago: executing program 6 (id=2321): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x44044) 304.381284ms ago: executing program 8 (id=2322): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 304.235184ms ago: executing program 7 (id=2323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 300.681195ms ago: executing program 36 (id=2323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 282.008815ms ago: executing program 6 (id=2324): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) 265.797106ms ago: executing program 8 (id=2325): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='/', 0x1, 0x2f70000) 202.927319ms ago: executing program 6 (id=2326): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x63365b72}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x62e, 0x2e6a6afa, 0x0, 0x2, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r4, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 202.48µs ago: executing program 0 (id=2327): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x4, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=2328): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) syz_io_uring_setup(0x54a9, &(0x7f0000000380)={0x0, 0xb002, 0x0, 0x1, 0x2d, 0x0, r0}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): s" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.569265][ T6565] IPVS: persistence engine module ip_vs_pe_ not found [ 145.617083][ T28] audit: type=1400 audit(1773962099.635:836): avc: denied { read } for pid=6560 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 145.653208][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 145.662531][ T6573] netlink: 'syz.2.745': attribute type 7 has an invalid length. [ 145.678394][ T6573] netlink: 'syz.2.745': attribute type 8 has an invalid length. [ 145.686512][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 145.721442][ T28] audit: type=1326 audit(1773962099.755:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c8c4c799 code=0x7ffc0000 [ 145.754903][ T6573] gretap0: entered promiscuous mode [ 145.763271][ T6573] gretap0: left promiscuous mode [ 145.789666][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.746'. [ 145.826941][ T6581] netlink: 52 bytes leftover after parsing attributes in process `syz.4.747'. [ 145.834528][ T6578] loop5: detected capacity change from 0 to 7 [ 145.914720][ T4720] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.924093][ T4720] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.936887][ T6585] loop4: detected capacity change from 0 to 256 [ 145.979373][ T6585] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.991880][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 146.002902][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 146.151916][ T6585] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.197034][ T6588] netlink: 'syz.0.749': attribute type 13 has an invalid length. [ 147.390011][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 147.390031][ T28] audit: type=1400 audit(1773962101.435:846): avc: denied { ioctl } for pid=6597 comm="syz.4.752" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.448421][ T28] audit: type=1400 audit(1773962101.465:847): avc: denied { ioctl } for pid=6597 comm="syz.4.752" path="socket:[16043]" dev="sockfs" ino=16043 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.081890][ T28] audit: type=1400 audit(1773962102.125:848): avc: denied { append } for pid=6600 comm="syz.3.753" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 148.101201][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.120600][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.170613][ T6602] program syz.3.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.710814][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.437257][ T4532] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.456335][ T4532] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.480944][ T4532] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.497686][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 149.508232][ T28] audit: type=1400 audit(1773962103.535:849): avc: denied { write } for pid=6610 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.518434][ T4532] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.531609][ T6614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 149.551726][ T28] audit: type=1400 audit(1773962103.555:850): avc: denied { ioctl } for pid=6610 comm="syz.4.756" path="socket:[16814]" dev="sockfs" ino=16814 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.597157][ T4532] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.597270][ T4532] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.597310][ T4532] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.597394][ T4532] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.683678][ T6619] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 149.692826][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.759'. [ 149.695847][ T6619] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.719674][ T6619] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.004947][ T6638] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 150.976724][ T6639] bond3: entered promiscuous mode [ 151.100906][ T6638] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.152616][ T6649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.766'. [ 153.193649][ T6651] loop4: detected capacity change from 0 to 736 [ 153.294107][ T6654] loop5: detected capacity change from 0 to 7 [ 153.317038][ T28] audit: type=1400 audit(1773962107.355:851): avc: denied { mounton } for pid=6655 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 154.454096][ T6674] loop2: detected capacity change from 0 to 1764 [ 154.461557][ T6674] iso9660: Bad value for 'uid' [ 154.466452][ T6674] iso9660: Bad value for 'uid' [ 154.879544][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 154.889996][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 155.104884][ T6679] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 155.577304][ T6679] SELinux: failed to load policy [ 155.845478][ T28] audit: type=1400 audit(1773962109.855:852): avc: denied { ioctl } for pid=6682 comm="syz.3.776" path="socket:[16287]" dev="sockfs" ino=16287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.986395][ T6687] loop2: detected capacity change from 0 to 1764 [ 155.993404][ T6687] iso9660: Bad value for 'uid' [ 155.998696][ T6687] iso9660: Bad value for 'uid' [ 156.073540][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.083434][ T6690] team0: Port device batadv0 added [ 157.088630][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 157.129674][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.621161][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.634981][ T6655] bridge_slave_0: entered allmulticast mode [ 157.643013][ T6655] bridge_slave_0: entered promiscuous mode [ 157.651530][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.659174][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.679229][ T6655] bridge_slave_1: entered allmulticast mode [ 157.687708][ T6655] bridge_slave_1: entered promiscuous mode [ 157.757665][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.770085][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.910973][ T6704] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:0 [ 157.962276][ T6655] team0: Port device team_slave_0 added [ 157.992072][ T6655] team0: Port device team_slave_1 added [ 158.090992][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.139578][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.543913][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.561657][ T6718] SELinux: Context ›Y7»ôj [ 158.561657][ T6718] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 158.561657][ T6718] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 158.640822][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.660978][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.736870][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.751497][ T6718] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 158.770466][ T6718] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 158.830003][ T6718] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 158.855443][ T6718] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI> is not valid (left unmapped). [ 159.035142][ T6655] hsr_slave_0: entered promiscuous mode [ 159.041987][ T6655] hsr_slave_1: entered promiscuous mode [ 159.048273][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 159.054114][ T6655] Cannot create hsr debugfs directory [ 159.231950][ T28] audit: type=1326 audit(1773962113.275:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a29f6c799 code=0x0 [ 159.318645][ T28] audit: type=1400 audit(1773962113.335:854): avc: denied { getopt } for pid=6736 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.757953][ T6739] loop2: detected capacity change from 0 to 1764 [ 159.766102][ T6739] iso9660: Bad value for 'uid' [ 159.771106][ T6739] iso9660: Bad value for 'uid' [ 159.810909][ T6733] loop4: detected capacity change from 0 to 128 [ 160.000700][ T6733] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 160.208256][ T6733] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.264661][ T6748] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.789'. [ 160.341834][ T6752] loop2: detected capacity change from 0 to 7 [ 160.701868][ T6758] tmpfs: Bad value for 'mpol' [ 160.715001][ T28] audit: type=1400 audit(1773962114.755:855): avc: denied { bind } for pid=6757 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.783910][ T6655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.791218][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.803424][ T6655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.810991][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.825513][ T6655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.835646][ T6655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.880689][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.891994][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.911201][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.918565][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.929816][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.937088][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.946114][ T6769] tmpfs: Bad value for 'mpol' [ 160.984767][ T6771] loop4: detected capacity change from 0 to 1024 [ 160.988036][ T6655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.004283][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.017380][ T6771] EXT4-fs: dax option not supported [ 161.026879][ T28] audit: type=1400 audit(1773962115.065:856): avc: denied { execute } for pid=6768 comm="syz.2.794" path=2F6D656D66643A0241BBCCEB1416E86D146F536157F51B6D0AD329F5EF08BACAAB6901408627666AD04D033485C227F6E33DB8C86CD20F8071AF18FB4D906459B31D68776791D8D42807E5ED7509C6DADA7A881C7B81EADDC14D7303605BDFCCC5598F358BB6EB696A7FC42EB302F69444BDFE9CC6B7E6659C3B393927F458F06D8C4DBBE5F23E5AF606789E7732479CC568C7726388DA8D0274F9A7FDF81613EFCCDCD2AA3A40924CA8E6CECDFDEFBBFCE913DD1172840D0780A45C9C5BFCCFD9EEC16B2BCAA0808923DBD7E6FA6CBBB4B1AAD23C86E5F97FE44D48CCE1E0D4D6FBFDA49E4CABDD5D4627202864656C6574656429 dev="hugetlbfs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 161.126525][ T6776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.796'. [ 161.141795][ T6772] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 161.142206][ T6776] loop5: detected capacity change from 0 to 7 [ 161.181489][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.209054][ T6772] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.243897][ T6772] bond5: (slave bond6): making interface the new active one [ 161.260964][ T6772] bond5: (slave bond6): Enslaving as an active interface with an up link [ 161.281844][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 161.293424][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 161.326587][ T6773] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 161.418653][ T6789] netlink: 'syz.2.794': attribute type 9 has an invalid length. [ 161.474285][ T6788] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.919066][ T6803] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.799'. [ 162.269422][ T6655] veth0_vlan: entered promiscuous mode [ 162.308266][ T6655] veth1_vlan: entered promiscuous mode [ 162.541415][ T6807] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 162.565745][ T6655] veth0_macvtap: entered promiscuous mode [ 162.573101][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.800'. [ 162.591809][ T6655] veth1_macvtap: entered promiscuous mode [ 162.602484][ T6807] batadv0: entered promiscuous mode [ 162.609777][ T6807] batadv0: entered allmulticast mode [ 162.617255][ T6807] bridge0: port 3(batadv0) entered blocking state [ 162.624273][ T6807] bridge0: port 3(batadv0) entered disabled state [ 162.680336][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.730089][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.867954][ T2106] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.878024][ T2106] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.908397][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.600518][ T6821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6821 comm=syz.4.805 [ 163.613770][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.624397][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.717154][ T28] audit: type=1326 audit(1773962117.715:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.0.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a29f6c799 code=0x7fc00000 [ 163.753653][ T4504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.931986][ T28] audit: type=1400 audit(1773962117.905:858): avc: denied { mounton } for pid=6655 comm="syz-executor" path="/root/syzkaller.E660Fc/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 164.069589][ T28] audit: type=1400 audit(1773962117.915:859): avc: denied { mounton } for pid=6655 comm="syz-executor" path="/root/syzkaller.E660Fc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.105219][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 164.114565][ T6832] loop6: detected capacity change from 0 to 512 [ 164.190712][ T6832] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 164.224071][ T28] audit: type=1400 audit(1773962117.915:860): avc: denied { mounton } for pid=6655 comm="syz-executor" path="/root/syzkaller.E660Fc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 164.224109][ T28] audit: type=1400 audit(1773962117.935:861): avc: denied { mounton } for pid=6655 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 164.224138][ T28] audit: type=1400 audit(1773962117.935:862): avc: denied { mount } for pid=6655 comm="syz-executor" name="/" dev="gadgetfs" ino=3826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 164.335777][ T6839] loop2: detected capacity change from 0 to 2048 [ 164.419102][ T6832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 164.427236][ T6832] System zones: 1-12 [ 164.442928][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.455235][ T6832] EXT4-fs (loop6): orphan cleanup on readonly fs [ 164.476119][ T6832] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.765: bg 0: block 361: padding at end of block bitmap is not set [ 164.501115][ T28] audit: type=1326 audit(1773962118.155:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 164.542068][ T6832] loop6: lost filesystem error report for type 5 error -117 [ 164.542313][ T6832] EXT4-fs (loop6): Remounting filesystem read-only [ 164.550568][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 164.550596][ C1] EXT4-fs (loop6): initial error at time 1773962118: ext4_validate_block_bitmap:441 [ 164.550620][ C1] EXT4-fs (loop6): last error at time 1773962118: ext4_validate_block_bitmap:441 [ 164.639911][ T28] audit: type=1326 audit(1773962118.155:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 164.678495][ T6839] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.809: bg 0: block 234: padding at end of block bitmap is not set [ 164.734357][ T6839] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 406 with error 28 [ 164.752851][ T28] audit: type=1326 audit(1773962118.205:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 164.782179][ T6832] EXT4-fs (loop6): 1 truncate cleaned up [ 164.800782][ T6832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 164.835859][ T6839] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.835859][ T6839] [ 164.873268][ T6839] EXT4-fs (loop2): Total free blocks count 0 [ 164.880826][ T28] audit: type=1326 audit(1773962118.205:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 164.937352][ T6839] EXT4-fs (loop2): Free/Dirty block details [ 164.958100][ T6655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 164.970398][ T6839] EXT4-fs (loop2): free_blocks=0 [ 164.975504][ T6839] EXT4-fs (loop2): dirty_blocks=416 [ 165.001232][ T28] audit: type=1326 audit(1773962118.205:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.025659][ T6839] EXT4-fs (loop2): Block reservation details [ 165.045531][ T6839] EXT4-fs (loop2): i_reserved_data_blocks=26 [ 165.078906][ T28] audit: type=1326 audit(1773962118.205:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.105090][ T28] audit: type=1326 audit(1773962118.205:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.130451][ T28] audit: type=1326 audit(1773962118.205:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.272763][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.300420][ T28] audit: type=1326 audit(1773962118.205:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.350357][ T28] audit: type=1326 audit(1773962118.205:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 165.376403][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 165.385843][ T6864] netlink: 'syz.2.814': attribute type 30 has an invalid length. [ 165.413124][ T2106] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.430953][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 165.441510][ T2106] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.453440][ T2106] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.471005][ T2106] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.481597][ T6864] netlink: 'syz.2.814': attribute type 30 has an invalid length. [ 165.644493][ T6885] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.822'. [ 165.954831][ T6892] loop2: detected capacity change from 0 to 1764 [ 165.964032][ T6892] iso9660: Bad value for 'uid' [ 165.969162][ T6892] iso9660: Bad value for 'uid' [ 167.056890][ T6915] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.833'. [ 167.740729][ T6923] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 167.770246][ T6923] bond7 (unregistering): Released all slaves [ 168.000109][ T6940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.011895][ T6940] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 168.051922][ T6944] netlink: 'syz.6.842': attribute type 6 has an invalid length. [ 168.393771][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.844'. [ 168.411308][ T6950] loop5: detected capacity change from 0 to 7 [ 168.572673][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 168.583097][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 168.806123][ T6964] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.848'. [ 168.869506][ T6968] loop6: detected capacity change from 0 to 1024 [ 169.023745][ T6968] EXT4-fs: quotafile must be on filesystem root [ 169.737068][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 169.737104][ T28] audit: type=1400 audit(1773962123.755:891): avc: denied { unmount } for pid=6655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 169.905562][ T28] audit: type=1400 audit(1773962123.935:892): avc: denied { name_bind } for pid=6974 comm="syz.6.851" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 169.975297][ T6977] netlink: 56 bytes leftover after parsing attributes in process `syz.0.853'. [ 170.073942][ T28] audit: type=1400 audit(1773962124.115:893): avc: denied { bind } for pid=6983 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.172566][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.855'. [ 170.289068][ T6973] loop2: detected capacity change from 0 to 512 [ 170.354918][ T6973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.394663][ T6973] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.662459][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.732551][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 171.132528][ T28] audit: type=1400 audit(1773962125.175:894): avc: denied { shutdown } for pid=7015 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.157843][ T7016] loop2: detected capacity change from 0 to 128 [ 171.168075][ T7016] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.218363][ T7016] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.277528][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.332108][ T7024] loop6: detected capacity change from 0 to 1764 [ 171.389643][ T7024] iso9660: Unknown parameter 'fowner< 48 0f b9 3a e9 02 ff ff ff e8 6f 87 dd 03 66 66 66 66 66 66 2e [ 187.661224][ T7541] RSP: 0018:ffffc90003ccf5a8 EFLAGS: 00010246 [ 187.667510][ T7541] RAX: ffff888101691b88 RBX: ffff88811aca5328 RCX: ffffffff81c01828 [ 187.676034][ T7541] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc500 [ 187.684253][ T7541] RBP: 000000000000000b R08: 000188811aca52db R09: 0000000000000000 [ 187.692460][ T7541] R10: ffffc90003ccf4d8 R11: 0001c90003ccf4d8 R12: ffff88811aca52d8 [ 187.700684][ T7541] R13: ffffffff871dc500 R14: ffff88811aca5290 R15: 0000000000000001 [ 187.708889][ T7541] FS: 00007f908d3df6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 187.718325][ T7541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.725291][ T7541] CR2: 00007fb95a718000 CR3: 0000000122408000 CR4: 00000000003506f0 [ 187.733638][ T7541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.741829][ T7541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 187.750019][ T7541] Call Trace: [ 187.753780][ T7541] [ 187.756728][ T7541] ext4_xattr_set_entry+0x77c/0x1010 [ 187.762290][ T7541] ext4_xattr_ibody_set+0x184/0x3c0 [ 187.767624][ T7541] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 187.773584][ T7541] __ext4_expand_extra_isize+0x246/0x280 [ 187.779558][ T7541] __ext4_mark_inode_dirty+0x29b/0x400 [ 187.785197][ T7541] ext4_evict_inode+0x7c3/0xd60 [ 187.790174][ T7541] ? __pfx_ext4_evict_inode+0x10/0x10 [ 187.795762][ T7541] evict+0x2af/0x510 [ 187.799699][ T7541] ? __dquot_initialize+0x146/0x7c0 [ 187.804974][ T7541] iput+0x41a/0x580 [ 187.808926][ T7541] ext4_process_orphan+0x1a9/0x1c0 [ 187.814325][ T7541] ext4_orphan_cleanup+0x6a8/0xa00 [ 187.819691][ T7541] ext4_fill_super+0x3408/0x37c0 [ 187.824791][ T7541] ? set_blocksize+0x14c/0x270 [ 187.829794][ T7541] ? setup_bdev_super+0x30e/0x370 [ 187.835136][ T7541] ? __pfx_ext4_fill_super+0x10/0x10 [ 187.840718][ T7541] get_tree_bdev_flags+0x291/0x300 [ 187.845867][ T7541] ? __pfx_ext4_fill_super+0x10/0x10 [ 187.851283][ T7541] get_tree_bdev+0x1f/0x30 [ 187.855769][ T7541] ext4_get_tree+0x1c/0x30 [ 187.860248][ T7541] vfs_get_tree+0x57/0x1d0 [ 187.864897][ T7541] do_new_mount+0x288/0x8d0 [ 187.869500][ T7541] path_mount+0x4d0/0xbc0 [ 187.874165][ T7541] __se_sys_mount+0x28c/0x2e0 [ 187.879125][ T7541] ? __se_sys_mkdirat+0xa2/0xf0 [ 187.884076][ T7541] ? kmem_cache_free+0xc8/0x380 [ 187.888970][ T7541] __x64_sys_mount+0x67/0x80 [ 187.893771][ T7541] x64_sys_call+0x2d61/0x3020 [ 187.898885][ T7541] do_syscall_64+0x12c/0x370 [ 187.903698][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.910069][ T7541] RIP: 0033:0x7f908ee1da0a [ 187.914860][ T7541] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.935477][ T7541] RSP: 002b:00007f908d3dee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.944252][ T7541] RAX: ffffffffffffffda RBX: 00007f908d3deee0 RCX: 00007f908ee1da0a [ 187.952284][ T7541] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f908d3deea0 [ 187.960389][ T7541] RBP: 0000200000000180 R08: 00007f908d3deee0 R09: 0000000000800718 [ 187.968704][ T7541] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 187.977160][ T7541] R13: 00007f908d3deea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 187.985592][ T7541] [ 187.988867][ T7541] ---[ end trace 0000000000000000 ]--- [ 188.289642][ T7535] loop6: detected capacity change from 0 to 2048 [ 188.434833][ T7541] EXT4-fs (loop2): 1 orphan inode deleted [ 188.441353][ T7541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.551978][ T7535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.612173][ T7535] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.095226][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 189.381790][ T7564] loop4: detected capacity change from 0 to 8192 [ 189.467860][ T6655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.521524][ T7576] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1001'. [ 189.595792][ T7586] Unsupported ieee802154 address type: 0 [ 189.621026][ T28] audit: type=1400 audit(1773962143.635:1278): avc: denied { bind } for pid=7584 comm="syz.6.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 189.626515][ T7585] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1002'. [ 189.642121][ T28] audit: type=1400 audit(1773962143.655:1279): avc: denied { getopt } for pid=7584 comm="syz.6.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.694544][ T28] audit: type=1400 audit(1773962143.735:1280): avc: denied { accept } for pid=7582 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 189.925915][ T7591] tipc: Started in network mode [ 189.931605][ T7591] tipc: Node identity , cluster identity 4711 [ 189.940555][ T7591] tipc: Failed to set node id, please configure manually [ 189.948353][ T7591] tipc: Enabling of bearer rejected, failed to enable media [ 189.986660][ T28] audit: type=1400 audit(1773962144.025:1281): avc: denied { name_bind } for pid=7588 comm="syz.6.1006" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 190.190165][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.781877][ T28] audit: type=1400 audit(1773962144.825:1282): avc: denied { read } for pid=7609 comm="syz.6.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.853640][ T7614] loop4: detected capacity change from 0 to 512 [ 190.871066][ T7615] syzkaller1: entered promiscuous mode [ 190.885884][ T28] audit: type=1326 audit(1773962144.895:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 190.926871][ T7615] syzkaller1: entered allmulticast mode [ 190.964672][ T7616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.977606][ T7614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.014799][ T4727] lo speed is unknown, defaulting to 1000 [ 191.021191][ T4727] syz2: Port: 1 Link DOWN [ 191.047147][ T28] audit: type=1326 audit(1773962144.895:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.071505][ T7614] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.083028][ T28] audit: type=1326 audit(1773962144.905:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.109292][ T28] audit: type=1326 audit(1773962144.905:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.154376][ T28] audit: type=1326 audit(1773962144.905:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.198789][ T7623] EXT4-fs error (device loop4): ext4_get_first_dir_block:3527: inode #12: comm syz.4.1013: Attempting to read directory block (0) that is past i_size (3) [ 191.221385][ T28] audit: type=1326 audit(1773962144.905:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.246178][ T7623] EXT4-fs (loop4): Remounting filesystem read-only [ 191.253602][ T28] audit: type=1326 audit(1773962144.905:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.278731][ T28] audit: type=1326 audit(1773962144.905:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.304815][ T28] audit: type=1326 audit(1773962144.905:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7612 comm="syz.2.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f908ee1c799 code=0x7ffc0000 [ 191.493707][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 191.630277][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 191.642866][ T7646] veth1_macvtap: left promiscuous mode [ 191.659873][ T7648] loop2: detected capacity change from 0 to 256 [ 191.703836][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.707008][ T7648] FAT-fs (loop2): Directory bread(block 64) failed [ 191.721064][ T809] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 191.737729][ T7648] FAT-fs (loop2): Directory bread(block 65) failed [ 191.744698][ T7648] FAT-fs (loop2): Directory bread(block 66) failed [ 191.752182][ T7648] FAT-fs (loop2): Directory bread(block 67) failed [ 191.759350][ T7648] FAT-fs (loop2): Directory bread(block 68) failed [ 191.766430][ T7648] FAT-fs (loop2): Directory bread(block 69) failed [ 191.773716][ T7648] FAT-fs (loop2): Directory bread(block 70) failed [ 191.781737][ T7648] FAT-fs (loop2): Directory bread(block 71) failed [ 191.798107][ T7648] FAT-fs (loop2): Directory bread(block 72) failed [ 191.810742][ T7648] FAT-fs (loop2): Directory bread(block 73) failed [ 191.857481][ T7653] syzkaller1: entered promiscuous mode [ 191.869486][ T7653] syzkaller1: entered allmulticast mode [ 191.902395][ T7656] syzkaller0: entered promiscuous mode [ 191.916585][ T7656] syzkaller0: entered allmulticast mode [ 192.017887][ T7661] loop2: detected capacity change from 256 to 0 [ 192.189827][ T7666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.201435][ T7666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.213976][ T7666] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1026'. [ 192.570099][ T7671] loop4: detected capacity change from 0 to 512 [ 192.578427][ T7671] ext4: Unknown parameter 'smackfshat' [ 192.823562][ T7683] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 192.824245][ T7682] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 192.853577][ T30] FAT-fs (loop2): unable to read inode block for updating (i_pos 324) [ 192.867209][ T4997] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 192.880526][ T7683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.908582][ T7683] bond0: (slave bond1): making interface the new active one [ 192.916818][ T7683] bond0: (slave bond1): Enslaving as an active interface with an up link [ 192.926054][ T7686] syzkaller1: entered promiscuous mode [ 192.931866][ T7686] syzkaller1: entered allmulticast mode [ 192.975046][ T7683] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 193.003696][ T7682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7682 comm=syz.0.1032 [ 193.020701][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1032'. [ 193.030412][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1032'. [ 193.043142][ T7683] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 193.059316][ T7683] bridge2: entered promiscuous mode [ 193.070148][ T7682] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 193.091207][ T7682] bridge3: entered promiscuous mode [ 193.097160][ T7704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=7704 comm=syz.3.1038 [ 193.197325][ T809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.209717][ T809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.260332][ T7718] netlink: 'syz.4.1040': attribute type 39 has an invalid length. [ 193.407230][ T809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.451565][ T809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.548542][ T7742] loop4: detected capacity change from 0 to 512 [ 193.557510][ T809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.594514][ T809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.596072][ T7742] EXT4-fs (loop4): 1 orphan inode deleted [ 193.611205][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 193.642758][ T36] loop4: lost filesystem error report for type 5 error -117 [ 193.643074][ T7742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.664302][ T7754] loop0: detected capacity change from 0 to 512 [ 193.671252][ T7742] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.739876][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.754622][ T809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.776547][ T809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.809413][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1051: inode has both inline data and extents flags [ 193.823500][ T7754] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.823624][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1051: couldn't read orphan inode 15 (err -117) [ 193.833338][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 193.833363][ C0] EXT4-fs (loop0): initial error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 193.833418][ C0] EXT4-fs (loop0): last error at time 2000000000: ext4_orphan_get:1391: inode 15 [ 193.851481][ T7720] lo speed is unknown, defaulting to 1000 [ 193.853490][ T7754] loop0: lost filesystem error report for type 5 error -117 [ 193.879960][ T7754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.916215][ T7770] loop4: detected capacity change from 0 to 128 [ 193.927613][ T809] bridge0: port 3(batadv0) entered disabled state [ 193.937440][ T809] bridge_slave_1: left allmulticast mode [ 193.946232][ T809] bridge_slave_1: left promiscuous mode [ 193.952743][ T809] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.981512][ T7770] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.006045][ T809] bridge_slave_0: left allmulticast mode [ 194.016694][ T7770] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.033583][ T809] bridge_slave_0: left promiscuous mode [ 194.040150][ T809] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.095348][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.107632][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.190746][ T809] gretap0 (unregistering): left promiscuous mode [ 194.206671][ T7782] loop4: detected capacity change from 0 to 512 [ 194.214123][ T809] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 194.263856][ T7782] EXT4-fs (loop4): 1 orphan inode deleted [ 194.277547][ T7782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.331056][ T809] bond0 (unregistering): left promiscuous mode [ 194.340144][ T809] bond_slave_0: left promiscuous mode [ 194.345894][ T809] bond_slave_1: left promiscuous mode [ 194.355206][ T809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.365872][ T809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.376507][ T809] bond0 (unregistering): Released all slaves [ 194.384409][ T809] bond1 (unregistering): Released all slaves [ 194.393179][ T809] bond2 (unregistering): Released all slaves [ 194.402133][ T809] bond3 (unregistering): Released all slaves [ 194.410616][ T809] bond4 (unregistering): Released all slaves [ 194.420889][ T809] bond5 (unregistering): (slave bond6): Releasing backup interface [ 194.429728][ T809] bond5 (unregistering): Released all slaves [ 194.439140][ T809] bond6 (unregistering): Released all slaves [ 194.492626][ T7794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7794 comm=syz.0.1061 [ 194.492881][ T809] IPVS: stopping master sync thread 6496 ... [ 194.538782][ T809] hsr_slave_0: left promiscuous mode [ 194.545133][ T809] hsr_slave_1: left promiscuous mode [ 194.566293][ T809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.576429][ T809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.587996][ T809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.596570][ T809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.614064][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 194.614695][ T809] veth1_macvtap: left promiscuous mode [ 194.624169][ T7814] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 194.631133][ T809] veth0_macvtap: left promiscuous mode [ 194.647868][ T7814] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1065'. [ 194.654818][ T809] veth1_vlan: left promiscuous mode [ 194.669272][ T809] veth0_vlan: left promiscuous mode [ 194.759815][ T809] team0 (unregistering): Port device team_slave_1 removed [ 194.770055][ T809] team0 (unregistering): Port device team_slave_0 removed [ 194.806708][ T7806] FAULT_INJECTION: forcing a failure. [ 194.806708][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.822604][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.6.1063 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.822641][ T7806] Tainted: [W]=WARN [ 194.822649][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.822663][ T7806] Call Trace: [ 194.822733][ T7806] [ 194.822743][ T7806] __dump_stack+0x1d/0x30 [ 194.822773][ T7806] dump_stack_lvl+0x95/0xd0 [ 194.822801][ T7806] dump_stack+0x15/0x1b [ 194.822825][ T7806] should_fail_ex+0x263/0x280 [ 194.822906][ T7806] should_fail+0xb/0x20 [ 194.823065][ T7806] should_fail_usercopy+0x1a/0x20 [ 194.823084][ T7806] _copy_from_user+0x1c/0xb0 [ 194.823176][ T7806] ip_tunnel_parm_from_user+0x4c/0x260 [ 194.823224][ T7806] ip_tunnel_siocdevprivate+0x45/0xe0 [ 194.823285][ T7806] dev_ifsioc+0x923/0xf60 [ 194.823307][ T7806] ? __mutex_lock_slowpath+0xa/0x10 [ 194.823331][ T7806] dev_ioctl+0x78c/0x960 [ 194.823430][ T7806] sock_ioctl+0x593/0x610 [ 194.823446][ T7806] ? __pfx_sock_ioctl+0x10/0x10 [ 194.823513][ T7806] __se_sys_ioctl+0xce/0x140 [ 194.823528][ T7806] __x64_sys_ioctl+0x43/0x50 [ 194.823549][ T7806] x64_sys_call+0x1563/0x3020 [ 194.823626][ T7806] do_syscall_64+0x12c/0x370 [ 194.823645][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.823661][ T7806] RIP: 0033:0x7fe477d6c799 [ 194.823714][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.823728][ T7806] RSP: 002b:00007fe4767c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.823745][ T7806] RAX: ffffffffffffffda RBX: 00007fe477fe5fa0 RCX: 00007fe477d6c799 [ 194.823755][ T7806] RDX: 0000200000000500 RSI: 00000000000089f3 RDI: 0000000000000003 [ 194.823765][ T7806] RBP: 00007fe4767c7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.823774][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.823783][ T7806] R13: 00007fe477fe6038 R14: 00007fe477fe5fa0 R15: 00007ffdf1389708 [ 194.823836][ T7806] [ 195.050260][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.070000][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1067'. [ 195.105741][ T7833] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1068'. [ 195.128019][ T7833] loop5: detected capacity change from 0 to 7 [ 195.142129][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 195.189536][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.197182][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.205068][ T7720] bridge_slave_0: entered allmulticast mode [ 195.212380][ T7720] bridge_slave_0: entered promiscuous mode [ 195.226540][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.247089][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.257456][ T7720] bridge_slave_1: entered allmulticast mode [ 195.264544][ T7720] bridge_slave_1: entered promiscuous mode [ 195.281167][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 195.292216][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 195.319233][ T7720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.333070][ T7720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.343449][ T7843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'. [ 195.353522][ T7720] team0: Port device team_slave_0 added [ 195.361859][ T7720] team0: Port device team_slave_1 added [ 195.475409][ T7863] loop0: detected capacity change from 0 to 512 [ 195.486099][ T7843] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 195.497927][ T7843] bridge3: entered promiscuous mode [ 195.507115][ T7863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.526610][ T809] IPVS: stop unused estimator thread 0... [ 195.532863][ T7863] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 195.539121][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.549533][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.612109][ T7720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.655018][ T7865] loop4: detected capacity change from 0 to 1764 [ 195.663146][ T7865] iso9660: Bad value for 'uid' [ 195.668251][ T7865] iso9660: Bad value for 'uid' [ 195.717578][ T7720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.725063][ T7720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.752646][ T7720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.139835][ T7872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.191993][ T7720] hsr_slave_0: entered promiscuous mode [ 196.449361][ T7720] hsr_slave_1: entered promiscuous mode [ 196.467584][ T7720] debugfs: 'hsr0' already exists in 'hsr' [ 196.473446][ T7720] Cannot create hsr debugfs directory [ 196.675787][ T7879] syzkaller0: entered promiscuous mode [ 196.694179][ T7879] syzkaller0: entered allmulticast mode [ 196.700021][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 196.700045][ T28] audit: type=1400 audit(2000000003.660:1314): avc: denied { view } for pid=7884 comm="syz.6.1075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 196.900452][ T7897] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1076'. [ 196.966578][ T7897] loop5: detected capacity change from 0 to 7 [ 197.157791][ T7720] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.235961][ T7720] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.249467][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 197.260078][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 197.302659][ T7720] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.376999][ T7720] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.624025][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.677877][ T7932] loop6: detected capacity change from 0 to 2048 [ 197.707792][ T3304] loop6: p1 < > p4 [ 197.713338][ T3304] loop6: p4 size 8388608 extends beyond EOD, truncated [ 197.768841][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.825751][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.832960][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.904003][ T7720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.953826][ T7720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.003561][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.011235][ T4501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.081608][ T7932] loop6: p1 < > p4 [ 198.086178][ T7932] loop6: p4 size 8388608 extends beyond EOD, truncated [ 198.170740][ T7938] loop4: detected capacity change from 0 to 2048 [ 198.273401][ T7938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.329790][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 198.350389][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.375277][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 198.430414][ T28] audit: type=1400 audit(2000000005.400:1315): avc: denied { setopt } for pid=7937 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.484272][ T28] audit: type=1400 audit(2000000005.430:1316): avc: denied { listen } for pid=7937 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.615321][ T7720] veth0_vlan: entered promiscuous mode [ 198.633518][ T7720] veth1_vlan: entered promiscuous mode [ 198.673937][ T7720] veth0_macvtap: entered promiscuous mode [ 198.691605][ T7720] veth1_macvtap: entered promiscuous mode [ 198.717443][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.740167][ T7720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.768831][ T2106] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.787699][ T2106] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.809492][ T2106] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.845056][ T2106] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.949506][ T7958] Set syz1 is full, maxelem 65536 reached [ 198.956067][ T7981] loop7: detected capacity change from 0 to 512 [ 198.975534][ T7981] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #17: comm syz.7.1042: corrupted in-inode xattr: invalid ea_ino [ 198.990637][ T7981] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 198.991747][ T7981] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1042: couldn't read orphan inode 17 (err -117) [ 199.001617][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 199.001644][ C1] EXT4-fs (loop7): initial error at time 2000000005: ext4_iget_extra_inode:5025: inode 17 [ 199.001691][ C1] EXT4-fs (loop7): last error at time 2000000005: ext4_iget_extra_inode:5025: inode 17 [ 199.043766][ T7981] loop7: lost filesystem error report for type 5 error -117 [ 199.044505][ T7981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.071951][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1042'. [ 199.112994][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.188862][ T7991] loop0: detected capacity change from 0 to 512 [ 199.201303][ T28] audit: type=1400 audit(2000000006.170:1317): avc: denied { mounton } for pid=7990 comm="syz.0.1087" path="/233/file0" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 199.230514][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1085'. [ 199.404043][ T7993] loop4: detected capacity change from 0 to 8192 [ 199.419660][ T7991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.439396][ T7993] loop4: p1 < > p2 p4 < p5 > [ 199.444229][ T7993] loop4: partition table partially beyond EOD, truncated [ 199.452128][ T7993] loop4: p1 start 134217728 is beyond EOD, truncated [ 199.459383][ T7993] loop4: p2 size 591360 extends beyond EOD, truncated [ 199.481090][ T7993] loop4: p5 size 591360 extends beyond EOD, truncated [ 199.801476][ T7991] EXT4-fs (loop0): 1 orphan inode deleted [ 199.967607][ T7991] EXT4-fs (loop0): 1 truncate cleaned up [ 200.013150][ T28] audit: type=1400 audit(2000000006.490:1318): avc: denied { listen } for pid=7988 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.047766][ T7991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.061741][ T7720] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.316650][ T7991] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.330717][ T8002] loop6: detected capacity change from 0 to 256 [ 200.354783][ T8002] vfat: Unknown parameter '00000000000000000004' [ 200.374496][ T8010] loop4: detected capacity change from 0 to 1024 [ 200.392103][ T8002] sctp: [Deprecated]: syz.6.1089 (pid 8002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.392103][ T8002] Use struct sctp_sack_info instead [ 200.459388][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 200.479555][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 200.491692][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 200.620307][ T8020] netlink: 'syz.6.1095': attribute type 29 has an invalid length. [ 200.631273][ T8020] netlink: 'syz.6.1095': attribute type 29 has an invalid length. [ 200.642448][ T8020] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1095'. [ 200.696330][ T8020] delete_channel: no stack [ 200.721528][ T28] audit: type=1400 audit(2000000007.680:1319): avc: denied { accept } for pid=8017 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 200.880076][ T28] audit: type=1400 audit(2000000007.850:1320): avc: denied { map } for pid=8040 comm="syz.7.1101" path="socket:[22222]" dev="sockfs" ino=22222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 200.937733][ T8045] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1102'. [ 201.041825][ T8051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8051 comm=syz.6.1102 [ 201.081087][ T8052] loop0: detected capacity change from 0 to 512 [ 201.111585][ T8052] EXT4-fs (loop0): 1 orphan inode deleted [ 201.131020][ T8052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.171392][ T8052] openvswitch: netlink: Message has 40 unknown bytes. [ 201.302213][ T8059] loop6: detected capacity change from 0 to 256 [ 201.312501][ T8059] vfat: Unknown parameter '00000000000000000004' [ 201.343215][ T8059] sctp: [Deprecated]: syz.6.1105 (pid 8059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.343215][ T8059] Use struct sctp_sack_info instead [ 201.410370][ T8062] loop6: detected capacity change from 0 to 512 [ 201.448997][ T8062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.467144][ T8062] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.538128][ T28] audit: type=1400 audit(2000000008.510:1321): avc: denied { getopt } for pid=8065 comm="syz.7.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.686985][ T6655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.762725][ T8072] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1109'. [ 201.808458][ T8074] tmpfs: Unknown parameter 'ÿÿ' [ 201.819610][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.837592][ T8075] program syz.7.1108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.857154][ T8072] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1109'. [ 201.879805][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1109'. [ 201.911981][ T8072] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 201.933451][ T8072] bridge1: entered promiscuous mode [ 201.945998][ T8072] bridge1: entered allmulticast mode [ 212.472697][ T8144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1114'. [ 212.486488][ T8144] loop5: detected capacity change from 0 to 7 [ 212.722266][ T8155] GUP no longer grows the stack in syz.6.1111 (8155): 200000006000-200000009000 (200000004000) [ 212.733738][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.6.1111 Tainted: G W syzkaller #0 PREEMPT(full) [ 212.733778][ T8155] Tainted: [W]=WARN [ 212.733788][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.733804][ T8155] Call Trace: [ 212.733814][ T8155] [ 212.733827][ T8155] __dump_stack+0x1d/0x30 [ 212.733868][ T8155] dump_stack_lvl+0x95/0xd0 [ 212.733894][ T8155] dump_stack+0x15/0x1b [ 212.733917][ T8155] fixup_user_fault+0x4fb/0x550 [ 212.733968][ T8155] fault_in_user_writeable+0x5c/0xc0 [ 212.734019][ T8155] futex_lock_pi+0x60b/0x7e0 [ 212.734093][ T8155] ? __pfx_futex_wake_mark+0x10/0x10 [ 212.734127][ T8155] do_futex+0x21f/0x380 [ 212.734187][ T8155] __se_sys_futex+0x2f6/0x370 [ 212.734326][ T8155] ? xfd_validate_state+0x45/0xf0 [ 212.734367][ T8155] __x64_sys_futex+0x78/0x90 [ 212.734396][ T8155] x64_sys_call+0x24ab/0x3020 [ 212.734454][ T8155] do_syscall_64+0x12c/0x370 [ 212.734480][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.734507][ T8155] RIP: 0033:0x7fe477d6c799 [ 212.734568][ T8155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.734591][ T8155] RSP: 002b:00007fe476785028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.734709][ T8155] RAX: ffffffffffffffda RBX: 00007fe477fe6180 RCX: 00007fe477d6c799 [ 212.734724][ T8155] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 212.734738][ T8155] RBP: 00007fe477e02c99 R08: 0000000000000000 R09: 0000000000000082 [ 212.734751][ T8155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.734764][ T8155] R13: 00007fe477fe6218 R14: 00007fe477fe6180 R15: 00007ffdf1389708 [ 212.734785][ T8155] [ 213.243805][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 213.255503][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 213.767414][ T8167] loop4: detected capacity change from 0 to 256 [ 213.800456][ T8167] vfat: Unknown parameter '00000000000000000003' [ 213.920271][ T8174] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1118'. [ 213.972958][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 213.982978][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 214.016545][ T8178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1120'. [ 214.249903][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1123'. [ 214.282920][ T8192] loop0: detected capacity change from 0 to 128 [ 214.303448][ T28] audit: type=1400 audit(2000000021.270:1322): avc: denied { write } for pid=8189 comm="syz.7.1123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 214.378225][ T8192] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.580694][ T8192] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.798301][ T8199] random: crng reseeded on system resumption [ 214.832736][ T8199] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.459226][ T8203] netlink: 'syz.3.1126': attribute type 2 has an invalid length. [ 215.652192][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.701356][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 215.723204][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1127'. [ 215.742931][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1127'. [ 215.757687][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1127'. [ 215.809464][ T28] audit: type=1400 audit(2000000022.770:1323): avc: denied { listen } for pid=8206 comm="syz.4.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.335288][ T8229] loop7: detected capacity change from 0 to 1764 [ 217.342898][ T8229] iso9660: Bad value for 'uid' [ 217.347899][ T8229] iso9660: Bad value for 'uid' [ 217.432774][ T8230] loop0: detected capacity change from 0 to 1764 [ 217.440493][ T8230] iso9660: Bad value for 'uid' [ 217.445676][ T8230] iso9660: Bad value for 'uid' [ 219.707051][ T28] audit: type=1400 audit(2000000026.330:1324): avc: denied { getopt } for pid=8224 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.925729][ T8234] loop6: detected capacity change from 0 to 512 [ 220.713902][ T8234] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.737792][ T8234] EXT4-fs (loop6): 1 truncate cleaned up [ 220.744268][ T8234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.796496][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'. [ 220.807382][ T28] audit: type=1400 audit(2000000027.770:1325): avc: denied { read } for pid=8236 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 220.988721][ T6655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.011976][ T8257] loop4: detected capacity change from 0 to 256 [ 221.027571][ T8257] vfat: Unknown parameter '00000000000000000004' [ 221.042478][ T8257] sctp: [Deprecated]: syz.4.1139 (pid 8257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.042478][ T8257] Use struct sctp_sack_info instead [ 221.093671][ T8259] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1140'. [ 221.127925][ T8259] loop6: detected capacity change from 0 to 1024 [ 221.174806][ T8259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.174843][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.207471][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.235616][ T28] audit: type=1400 audit(2000000028.200:1326): avc: denied { read } for pid=8258 comm="syz.6.1140" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 221.275104][ T6655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.416658][ T8282] netlink: 'syz.6.1147': attribute type 7 has an invalid length. [ 221.426918][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1147'. [ 221.441527][ T2106] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.441606][ T8282] netlink: 'syz.6.1147': attribute type 7 has an invalid length. [ 221.450836][ T2106] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.459574][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1147'. [ 221.477030][ T2106] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.487851][ T2106] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.096778][ T8325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8325 comm=syz.4.1165 [ 222.127025][ T8325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8325 comm=syz.4.1165 [ 222.265087][ T28] audit: type=1400 audit(2000000029.230:1327): avc: denied { watch } for pid=8341 comm="syz.6.1173" path="/proc/293/task/294/ns" dev="proc" ino=24500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 222.523042][ T28] audit: type=1326 audit(2000000029.490:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.7.1181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f16a1c799 code=0x0 [ 222.714530][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 223.219255][ T28] audit: type=1326 audit(2000000030.190:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.1206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe477d6c799 code=0x0 [ 224.864920][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 224.919617][ T8527] netlink: 'syz.0.1249': attribute type 28 has an invalid length. [ 225.273380][ T28] audit: type=1326 audit(2000000032.240:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.6.1258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe477d6c799 code=0x0 [ 225.393235][ T8564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8564 comm=syz.0.1264 [ 225.423605][ T28] audit: type=1400 audit(2000000032.390:1331): avc: denied { write } for pid=8565 comm="syz.0.1265" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 225.904098][ T8600] io-wq is not configured for unbound workers [ 226.234468][ T8640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=8640 comm=syz.6.1298 [ 227.506909][ T28] audit: type=1400 audit(2000000034.470:1332): avc: denied { mount } for pid=8719 comm="syz.7.1331" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.507697][ T8722] loop4: detected capacity change from 0 to 128 [ 227.531126][ T28] audit: type=1400 audit(2000000034.500:1333): avc: denied { unmount } for pid=8719 comm="syz.7.1331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 227.662943][ T28] audit: type=1400 audit(2000000034.620:1334): avc: denied { getopt } for pid=8730 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.744441][ T8744] loop4: detected capacity change from 0 to 136 [ 227.770454][ T8744] Attempt to read inode for relocated directory [ 227.788387][ T8741] syzkaller0: entered promiscuous mode [ 227.815571][ T8741] syzkaller0: entered allmulticast mode [ 227.998824][ T8765] loop0: detected capacity change from 0 to 256 [ 228.270748][ T8788] xt_hashlimit: overflow, try lower: 3/0 [ 228.278263][ T8788] xt_hashlimit: max too large, truncated to 1048576 [ 228.635190][ T8797] loop7: detected capacity change from 0 to 128 [ 228.742985][ T8799] loop4: detected capacity change from 0 to 256 [ 228.774268][ T8803] loop6: detected capacity change from 0 to 256 [ 229.099071][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 229.113766][ T8830] loop6: detected capacity change from 0 to 128 [ 229.125486][ T8830] msdos: Unknown parameter '0x00000000000000000xffffffffffffffff184467440737095516150xffffffffffffffff' [ 229.129135][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 229.162564][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 229.201065][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 229.391228][ T8853] loop4: detected capacity change from 0 to 256 [ 229.460305][ T8858] loop4: detected capacity change from 0 to 256 [ 229.486763][ T8858] FAT-fs (loop4): Directory bread(block 64) failed [ 229.504290][ T8858] FAT-fs (loop4): Directory bread(block 65) failed [ 229.517202][ T8858] FAT-fs (loop4): Directory bread(block 66) failed [ 229.523952][ T8858] FAT-fs (loop4): Directory bread(block 67) failed [ 229.547080][ T8858] FAT-fs (loop4): Directory bread(block 68) failed [ 229.556996][ T8858] FAT-fs (loop4): Directory bread(block 69) failed [ 229.574256][ T8858] FAT-fs (loop4): Directory bread(block 70) failed [ 229.587379][ T8858] FAT-fs (loop4): Directory bread(block 71) failed [ 229.597332][ T8858] FAT-fs (loop4): Directory bread(block 72) failed [ 229.607293][ T8858] FAT-fs (loop4): Directory bread(block 73) failed [ 229.658749][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1390'. [ 229.700898][ T8867] loop7: detected capacity change from 0 to 512 [ 229.709417][ T8867] FAT-fs (loop7): bogus number of FAT sectors [ 229.717008][ T8867] FAT-fs (loop7): Can't find a valid FAT filesystem [ 229.764978][ T8858] syz.4.1388: attempt to access beyond end of device [ 229.764978][ T8858] loop4: rw=2049, sector=1920, nr_sectors = 8 limit=256 [ 229.765195][ T8870] syz.4.1388: attempt to access beyond end of device [ 229.765195][ T8870] loop4: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 229.875191][ T4501] kworker/u8:10: attempt to access beyond end of device [ 229.875191][ T4501] loop4: rw=1, sector=1352, nr_sectors = 128 limit=256 [ 229.900134][ T8881] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 229.900308][ T4501] kworker/u8:10: attempt to access beyond end of device [ 229.900308][ T4501] loop4: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 229.942290][ T4501] kworker/u8:10: attempt to access beyond end of device [ 229.942290][ T4501] loop4: rw=1, sector=1864, nr_sectors = 56 limit=256 [ 229.975924][ T8887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=8887 comm=syz.7.1401 [ 230.026202][ T8893] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1401'. [ 230.062785][ T8894] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.122382][ T28] audit: type=1400 audit(2000000037.060:1335): avc: denied { remount } for pid=8884 comm="syz.6.1400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 230.224092][ T8894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.874814][ T8930] netlink: 'syz.0.1418': attribute type 12 has an invalid length. [ 230.891809][ T8930] netlink: 'syz.0.1418': attribute type 29 has an invalid length. [ 230.910991][ T8930] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1418'. [ 230.942550][ T8930] netlink: 'syz.0.1418': attribute type 2 has an invalid length. [ 231.527009][ T8930] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1418'. [ 231.906127][ T8967] pimreg: tun_chr_ioctl cmd 1074025677 [ 231.920443][ T8967] pimreg: linktype set to 768 [ 232.599175][ T9006] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.994426][ T9030] set_capacity_and_notify: 3 callbacks suppressed [ 232.994449][ T9030] loop0: detected capacity change from 0 to 164 [ 234.851658][ T9138] loop0: detected capacity change from 0 to 512 [ 234.859008][ T9138] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 235.392453][ T9145] loop6: detected capacity change from 0 to 512 [ 236.332726][ T9236] loop6: detected capacity change from 0 to 128 [ 236.340237][ T9236] FAT-fs (loop6): bogus number of FAT sectors [ 236.353359][ T9236] FAT-fs (loop6): Can't find a valid FAT filesystem [ 237.072225][ T4501] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.134198][ T4501] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.558217][ T4501] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.573248][ T9303] loop7: detected capacity change from 0 to 8192 [ 237.577027][ T4501] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.618482][ T9313] loop6: detected capacity change from 0 to 128 [ 237.649318][ T4501] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.700520][ T4501] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.779481][ T4501] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.792654][ T4501] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.944137][ T4501] bridge_slave_1: left allmulticast mode [ 237.957323][ T4501] bridge_slave_1: left promiscuous mode [ 237.971537][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.982728][ T4501] bridge_slave_0: left allmulticast mode [ 237.990872][ T4501] bridge_slave_0: left promiscuous mode [ 238.008366][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.131070][ T4501] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 238.143390][ T4501] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - 52:c2:37:7d:13:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 238.162219][ T4501] bond1 (unregistering): (slave bond2): making interface the new active one [ 238.279014][ T4501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.296150][ T4501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.306535][ T4501] bond0 (unregistering): Released all slaves [ 238.315756][ T4501] bond1 (unregistering): (slave bond2): Releasing backup interface [ 238.325129][ T4501] bond1 (unregistering): Released all slaves [ 238.334624][ T4501] bond2 (unregistering): Released all slaves [ 238.344006][ T4501] bond3 (unregistering): Released all slaves [ 238.470916][ T4501] hsr_slave_0: left promiscuous mode [ 238.501878][ T4501] hsr_slave_1: left promiscuous mode [ 238.519067][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1615'. [ 238.528927][ T4501] veth1_macvtap: left promiscuous mode [ 238.535009][ T4501] veth0_macvtap: left promiscuous mode [ 238.543881][ T4501] veth1_vlan: left promiscuous mode [ 238.553836][ T4501] veth0_vlan: left promiscuous mode [ 238.652314][ T4501] team0 (unregistering): Port device team_slave_1 removed [ 238.669614][ T4501] team0 (unregistering): Port device team_slave_0 removed [ 238.714625][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.732804][ T9396] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 238.757625][ T9398] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 238.769468][ T9398] bond1 (unregistering): Released all slaves [ 238.789882][ T9307] chnl_net:caif_netlink_parms(): no params data found [ 238.945366][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.536919][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.544913][ T9307] bridge_slave_0: entered allmulticast mode [ 239.564427][ T9307] bridge_slave_0: entered promiscuous mode [ 239.607491][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.616383][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.624458][ T9307] bridge_slave_1: entered allmulticast mode [ 239.636250][ T9307] bridge_slave_1: entered promiscuous mode [ 239.675219][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.722741][ T4501] IPVS: stop unused estimator thread 0... [ 239.760073][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.849845][ T9307] team0: Port device team_slave_0 added [ 239.893440][ T9307] team0: Port device team_slave_1 added [ 239.924616][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.937412][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.989678][ T9307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.005324][ T9492] syzkaller0: entered promiscuous mode [ 240.017066][ T9492] syzkaller0: entered allmulticast mode [ 240.026515][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.034649][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.064257][ T9307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.123916][ T9307] hsr_slave_0: entered promiscuous mode [ 240.131747][ T9307] hsr_slave_1: entered promiscuous mode [ 240.147385][ T9307] debugfs: 'hsr0' already exists in 'hsr' [ 240.157141][ T9307] Cannot create hsr debugfs directory [ 240.333239][ T9307] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 240.344115][ T9307] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 240.353456][ T9307] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 240.364098][ T9307] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 240.436243][ T9307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.453057][ T9307] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.482966][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.490720][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.512642][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.520219][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.638786][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.835590][ T9307] veth0_vlan: entered promiscuous mode [ 240.855077][ T9307] veth1_vlan: entered promiscuous mode [ 240.887234][ T9307] veth0_macvtap: entered promiscuous mode [ 240.895717][ T9307] veth1_macvtap: entered promiscuous mode [ 240.913203][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.935978][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.950294][ T2106] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.972041][ T2106] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.985814][ T2106] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.002683][ T2106] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.065394][ T9589] netlink: 'syz.8.1584': attribute type 8 has an invalid length. [ 241.170053][ T9598] loop6: detected capacity change from 0 to 128 [ 241.197892][ T9598] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.225988][ T9598] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.240411][ T9598] netlink: 'syz.6.1666': attribute type 3 has an invalid length. [ 241.248670][ T9598] netlink: 'syz.6.1666': attribute type 3 has an invalid length. [ 241.256536][ T9598] team0: No ports can be present during mode change [ 241.294109][ T2106] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.359833][ T9604] syzkaller0: entered promiscuous mode [ 241.377924][ T9604] syzkaller0: entered allmulticast mode [ 241.496792][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 241.570668][ T28] audit: type=1400 audit(2000000048.540:1336): avc: denied { create } for pid=9613 comm="syz.8.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 241.595582][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1680'. [ 241.608077][ T9625] pim6reg1: entered promiscuous mode [ 241.616976][ T9625] pim6reg1: entered allmulticast mode [ 241.934290][ T9637] vlan2: entered allmulticast mode [ 241.956540][ T9637] bridge0: port 3(vlan2) entered blocking state [ 241.974522][ T9637] bridge0: port 3(vlan2) entered disabled state [ 242.003572][ T9637] vlan2: entered promiscuous mode [ 242.188553][ T9674] netlink: 'syz.7.1701': attribute type 12 has an invalid length. [ 242.216091][ T9674] netlink: 'syz.7.1701': attribute type 29 has an invalid length. [ 242.235323][ T9674] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1701'. [ 242.258529][ T9674] netlink: 59 bytes leftover after parsing attributes in process `syz.7.1701'. [ 242.950602][ T9717] netlink: 'syz.8.1720': attribute type 12 has an invalid length. [ 242.983655][ T9717] netlink: 'syz.8.1720': attribute type 29 has an invalid length. [ 242.992276][ T9717] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1720'. [ 243.001595][ T9717] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1720'. [ 243.252177][ T9744] netlink: 'syz.7.1733': attribute type 8 has an invalid length. [ 243.326237][ T9747] syzkaller0: entered promiscuous mode [ 243.337162][ T9747] syzkaller0: entered allmulticast mode [ 243.533399][ T9779] syzkaller0: entered promiscuous mode [ 243.544224][ T9779] syzkaller0: entered allmulticast mode [ 243.698185][ T9802] netlink: 'syz.7.1760': attribute type 12 has an invalid length. [ 243.708198][ T9802] netlink: 'syz.7.1760': attribute type 29 has an invalid length. [ 243.716775][ T9802] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1760'. [ 243.726480][ T9802] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1760'. [ 244.050169][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 244.060621][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 244.070088][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 244.079554][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 244.089139][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 244.892925][ T9868] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1791'. [ 244.945786][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 244.983540][ T9869] ip6gre1: entered promiscuous mode [ 244.989923][ T9869] ip6gre1: entered allmulticast mode [ 245.019175][ T2106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.038396][ T2106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.048319][ T4721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.138211][ T9886] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1799'. [ 245.972885][ T4721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.017470][ T4721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.149909][ T9917] validate_nla: 3 callbacks suppressed [ 246.149934][ T9917] netlink: 'syz.8.1812': attribute type 12 has an invalid length. [ 246.177106][ T9917] netlink: 'syz.8.1812': attribute type 29 has an invalid length. [ 246.874886][ T9947] syzkaller0: entered promiscuous mode [ 246.888040][ T9947] syzkaller0: entered allmulticast mode [ 247.095674][ T9959] loop8: detected capacity change from 0 to 8192 [ 247.118956][ T9967] syzkaller0: entered promiscuous mode [ 247.132560][ T9967] syzkaller0: entered allmulticast mode [ 247.272122][ T9986] netlink: 'syz.8.1843': attribute type 8 has an invalid length. [ 247.369158][ T9988] syzkaller0: entered promiscuous mode [ 247.405916][ T9988] syzkaller0: entered allmulticast mode [ 247.463707][T10001] ip6gre1: entered promiscuous mode [ 247.477052][T10001] ip6gre1: entered allmulticast mode [ 247.604280][T10009] syzkaller0: entered promiscuous mode [ 247.629983][T10009] syzkaller0: entered allmulticast mode [ 247.753178][ T28] audit: type=1400 audit(2000000054.720:1337): avc: denied { mount } for pid=10013 comm="syz.3.1854" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 248.177299][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.211914][ T3530] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.220109][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.300646][T10036] syzkaller0: entered promiscuous mode [ 248.311446][T10036] syzkaller0: entered allmulticast mode [ 248.467194][ T4721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.647098][ T4721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.743142][T10059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10059 comm=syz.6.1872 [ 249.354190][T10070] loop6: detected capacity change from 0 to 256 [ 249.420080][T10074] syzkaller0: entered promiscuous mode [ 249.422449][T10070] FAT-fs (loop6): Directory bread(block 64) failed [ 249.426195][T10074] syzkaller0: entered allmulticast mode [ 249.433193][T10070] FAT-fs (loop6): Directory bread(block 65) failed [ 249.445898][T10070] FAT-fs (loop6): Directory bread(block 66) failed [ 249.452733][T10070] FAT-fs (loop6): Directory bread(block 67) failed [ 249.470693][T10070] FAT-fs (loop6): Directory bread(block 68) failed [ 249.480047][T10070] FAT-fs (loop6): Directory bread(block 69) failed [ 249.491359][T10070] FAT-fs (loop6): Directory bread(block 70) failed [ 249.504563][T10070] FAT-fs (loop6): Directory bread(block 71) failed [ 249.523514][T10070] FAT-fs (loop6): Directory bread(block 72) failed [ 249.532764][T10070] FAT-fs (loop6): Directory bread(block 73) failed [ 250.099163][T10113] erspan0: entered promiscuous mode [ 250.114748][T10113] vlan2: entered promiscuous mode [ 250.845525][T10149] netlink: 'syz.3.1902': attribute type 12 has an invalid length. [ 250.889418][T10149] netlink: 'syz.3.1902': attribute type 29 has an invalid length. [ 250.917984][T10161] __nla_validate_parse: 5 callbacks suppressed [ 250.918006][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1906'. [ 250.938190][T10149] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1902'. [ 250.948992][T10149] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1902'. [ 251.399775][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1920'. [ 251.448602][T10214] netlink: 'syz.0.1922': attribute type 12 has an invalid length. [ 251.458932][T10214] netlink: 'syz.0.1922': attribute type 29 has an invalid length. [ 251.466911][T10214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1922'. [ 251.483584][T10214] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1922'. [ 251.586638][T10222] loop0: detected capacity change from 0 to 8192 [ 252.086719][T10254] netlink: 'syz.8.1939': attribute type 12 has an invalid length. [ 252.097027][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 252.097065][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.106606][T10254] netlink: 'syz.8.1939': attribute type 29 has an invalid length. [ 252.120738][T10254] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1939'. [ 252.132884][T10254] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1939'. [ 252.291203][T10281] loop0: detected capacity change from 0 to 128 [ 252.639381][T10323] netlink: 'syz.0.1964': attribute type 12 has an invalid length. [ 252.657781][T10323] netlink: 'syz.0.1964': attribute type 29 has an invalid length. [ 252.688104][T10323] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1964'. [ 252.697977][T10323] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1964'. [ 252.972458][T10358] loop0: detected capacity change from 0 to 128 [ 253.126042][T10373] loop7: detected capacity change from 0 to 128 [ 253.259043][T10392] loop7: detected capacity change from 0 to 256 [ 253.285188][T10392] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.444595][T10411] netlink: 'syz.6.2000': attribute type 12 has an invalid length. [ 253.463039][T10411] netlink: 'syz.6.2000': attribute type 29 has an invalid length. [ 253.575300][T10427] xt_hashlimit: size too large, truncated to 1048576 [ 253.640926][T10437] loop7: detected capacity change from 0 to 512 [ 253.670036][T10437] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 253.858699][T10451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=10451 comm=syz.7.2012 [ 254.168763][T10472] syzkaller0: entered promiscuous mode [ 254.195187][T10472] syzkaller0: entered allmulticast mode [ 254.242422][T10477] loop0: detected capacity change from 0 to 512 [ 254.287044][T10477] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 254.395995][T10491] loop0: detected capacity change from 0 to 128 [ 255.134833][T10518] loop8: detected capacity change from 0 to 512 [ 255.189429][T10518] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 255.351550][T10522] netlink: 'syz.6.2042': attribute type 12 has an invalid length. [ 255.359998][T10522] netlink: 'syz.6.2042': attribute type 29 has an invalid length. [ 255.407355][T10526] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 255.590015][T10539] syzkaller0: entered promiscuous mode [ 255.602769][T10539] syzkaller0: entered allmulticast mode [ 255.677492][ T28] audit: type=1400 audit(2000000062.650:1338): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 255.755787][T10562] loop8: detected capacity change from 0 to 128 [ 256.008807][T10596] __nla_validate_parse: 11 callbacks suppressed [ 256.008843][T10596] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2078'. [ 256.025124][T10596] netlink: 51 bytes leftover after parsing attributes in process `syz.8.2078'. [ 256.083903][T10602] loop8: detected capacity change from 0 to 256 [ 256.096332][T10602] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.111176][T10602] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 8200) [ 256.120320][T10602] FAT-fs (loop8): Filesystem has been set read-only [ 256.370196][T10620] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2089'. [ 256.380143][T10620] netlink: 59 bytes leftover after parsing attributes in process `syz.8.2089'. [ 256.587580][T10645] validate_nla: 9 callbacks suppressed [ 256.587604][T10645] netlink: 'syz.8.2101': attribute type 12 has an invalid length. [ 256.604778][T10645] netlink: 'syz.8.2101': attribute type 29 has an invalid length. [ 256.614221][T10645] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2101'. [ 256.624111][T10645] netlink: 59 bytes leftover after parsing attributes in process `syz.8.2101'. [ 256.999379][T10675] netlink: 'syz.0.2114': attribute type 12 has an invalid length. [ 257.008673][T10675] netlink: 'syz.0.2114': attribute type 29 has an invalid length. [ 257.016756][T10675] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2114'. [ 257.027502][T10675] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2114'. [ 257.883548][T10721] syzkaller0: entered promiscuous mode [ 257.892975][T10730] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2134'. [ 257.903097][T10721] syzkaller0: entered allmulticast mode [ 257.921439][T10730] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2134'. [ 258.295337][T10762] syzkaller0: entered promiscuous mode [ 258.302737][T10762] syzkaller0: entered allmulticast mode [ 258.417081][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.719002][T10801] syzkaller0: entered promiscuous mode [ 258.735065][T10801] syzkaller0: entered allmulticast mode [ 259.082504][T10843] syzkaller0: entered promiscuous mode [ 259.095142][T10843] syzkaller0: entered allmulticast mode [ 259.398688][T10860] loop7: detected capacity change from 0 to 164 [ 259.417962][T10860] ISOFS: Unable to identify CD-ROM format. [ 259.539922][T10872] loop6: detected capacity change from 0 to 128 [ 259.754081][T10895] netlink: 'syz.7.2211': attribute type 1 has an invalid length. [ 260.160841][T10929] loop6: detected capacity change from 0 to 128 [ 260.192340][T10931] loop6: detected capacity change from 0 to 256 [ 260.201476][T10931] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.337075][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.384953][T10946] loop8: detected capacity change from 0 to 164 [ 260.466078][T10956] loop8: detected capacity change from 0 to 128 [ 260.714014][T10982] loop6: detected capacity change from 0 to 128 [ 260.951928][ T28] audit: type=1326 audit(2000000067.910:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a29f6c799 code=0x7fc00000 [ 261.000417][ T28] audit: type=1326 audit(2000000067.910:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.0.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9a29f6c799 code=0x7fc00000 [ 261.385153][T11019] loop6: detected capacity change from 0 to 128 [ 261.703818][T11035] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2270'. [ 261.725631][T11037] program syz.6.2271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.792072][T11043] loop6: detected capacity change from 0 to 128 [ 261.811164][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 261.896421][T11055] loop7: detected capacity change from 0 to 256 [ 261.932487][T11055] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.296906][T11076] syzkaller0: entered promiscuous mode [ 262.305751][T11076] syzkaller0: entered allmulticast mode [ 262.332398][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2290'. [ 262.620841][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 262.631401][T11112] netlink: 'syz.8.2305': attribute type 13 has an invalid length. [ 262.640832][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2305'. [ 262.650998][T11112] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 263.062409][T11159] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2322'. [ 263.374673][T11164] ================================================================== [ 263.383251][T11164] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 263.390877][T11164] [ 263.393317][T11164] write to 0xffff88815793f656 of 1 bytes by task 11176 on cpu 0: [ 263.401237][T11164] fat12_ent_put+0x74/0x170 [ 263.405870][T11164] fat_alloc_clusters+0x57b/0xc50 [ 263.411193][T11164] fat_get_block+0x258/0x5e0 [ 263.416684][T11164] __block_write_begin_int+0x400/0xf90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.422555][T11164] cont_write_begin+0x5fe/0x970 [ 263.427716][T11164] fat_write_begin+0x4f/0xe0 [ 263.432884][T11164] cont_write_begin+0x1b0/0x970 [ 263.438044][T11164] fat_write_begin+0x4f/0xe0 [ 263.442860][T11164] generic_perform_write+0x183/0x490 [ 263.447863][ T28] audit: type=1400 audit(2000000326.402:1341): avc: denied { write } for pid=3297 comm="syz-executor" path="pipe:[2619]" dev="pipefs" ino=2619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 263.448704][T11164] __generic_file_write_iter+0x9e/0x120 [ 263.479119][T11164] generic_file_write_iter+0x8d/0x310 [ 263.485039][T11164] vfs_write+0x5a6/0x9f0 [ 263.489725][T11164] __x64_sys_pwrite64+0xfd/0x150 [ 263.495214][T11164] x64_sys_call+0xa2a/0x3020 [ 263.500278][T11164] do_syscall_64+0x12c/0x370 [ 263.504982][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.511092][T11164] [ 263.513613][T11164] read to 0xffff88815793f600 of 512 bytes by task 11164 on cpu 1: [ 263.521826][T11164] fat_mirror_bhs+0x1df/0x320 [ 263.526727][T11164] fat_alloc_clusters+0xb48/0xc50 [ 263.532208][T11164] fat_get_block+0x258/0x5e0 [ 263.536884][T11164] __block_write_begin_int+0x400/0xf90 [ 263.543118][T11164] cont_write_begin+0x5fe/0x970 [ 263.548413][T11164] fat_write_begin+0x4f/0xe0 [ 263.553460][T11164] generic_perform_write+0x183/0x490 [ 263.559107][T11164] __generic_file_write_iter+0x9e/0x120 [ 263.564937][T11164] generic_file_write_iter+0x8d/0x310 [ 263.570521][T11164] vfs_write+0x5a6/0x9f0 [ 263.574985][T11164] ksys_write+0xdc/0x1a0 [ 263.579353][T11164] __x64_sys_write+0x40/0x50 [ 263.584401][T11164] x64_sys_call+0x27e1/0x3020 [ 263.589182][T11164] do_syscall_64+0x12c/0x370 [ 263.593915][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.600019][T11164] [ 263.602440][T11164] Reported by Kernel Concurrency Sanitizer on: [ 263.608692][T11164] CPU: 1 UID: 0 PID: 11164 Comm: syz.8.2325 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.619988][T11164] Tainted: [W]=WARN [ 263.623825][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.634591][T11164] ================================================================== [ 263.657477][ T28] audit: type=1400 audit(2000000326.452:1342): avc: denied { recv } for pid=1 comm="init" saddr=10.128.0.163 src=40352 daddr=10.128.1.192 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 264.019002][ T12] bond0 (unregistering): Released all slaves [ 264.171072][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.230543][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.280160][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.330702][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.412043][ T12] bridge_slave_1: left allmulticast mode [ 264.418932][ T12] bridge_slave_1: left promiscuous mode [ 264.425108][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.434485][ T12] bridge_slave_0: left allmulticast mode [ 264.441051][ T12] bridge_slave_0: left promiscuous mode [ 264.447249][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.560946][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.571431][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.581431][ T12] bond0 (unregistering): Released all slaves [ 264.616703][ T12] hsr_slave_0: left promiscuous mode [ 264.623281][ T12] hsr_slave_1: left promiscuous mode [ 264.629542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.637299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.647167][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.656359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.670782][ T12] veth1_macvtap: left promiscuous mode [ 264.676683][ T12] veth0_macvtap: left promiscuous mode [ 264.682886][ T12] veth1_vlan: left promiscuous mode [ 264.688213][ T12] veth0_vlan: left promiscuous mode [ 264.756813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 264.766674][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.339469][ T12] hsr0: left allmulticast mode [ 265.344382][ T12] hsr_slave_0: left allmulticast mode [ 265.350484][ T12] hsr_slave_1: left allmulticast mode [ 265.356037][ T12] bridge0: port 3(hsr0) entered disabled state [ 265.363136][ T12] bridge_slave_1: left allmulticast mode [ 265.368922][ T12] bridge_slave_1: left promiscuous mode [ 265.374927][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.383257][ T12] bridge_slave_0: left allmulticast mode [ 265.389305][ T12] bridge_slave_0: left promiscuous mode [ 265.395600][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.460204][ T12] team0: Port device bridge1 removed [ 265.578784][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.588510][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.598135][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 265.607592][ T12] bond0 (unregistering): Released all slaves [ 265.615588][ T12] bond1 (unregistering): (slave veth3): Releasing backup interface [ 265.625029][ T12] bond1 (unregistering): Released all slaves [ 265.695012][ T12] hsr_slave_0: left promiscuous mode [ 265.701464][ T12] hsr_slave_1: left promiscuous mode [ 265.712012][ T12] team0 (unregistering): Port device batadv0 removed [ 265.753593][ T12] team0 (unregistering): Port device team_slave_1 removed [ 265.763079][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.991249][ T12] IPVS: stop unused estimator thread 0...