last executing test programs: 4m3.385360395s ago: executing program 1 (id=481): openat$rtc(0xffffff9c, &(0x7f0000000040), 0x8a000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 4m3.36762284s ago: executing program 1 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff4, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x0) 4m3.267190608s ago: executing program 1 (id=486): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 4m3.199359672s ago: executing program 1 (id=489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@srh={0x62, 0x0, 0x4, 0x0, 0xd4, 0x70, 0x800}, 0x8) accept4(r0, 0x0, 0x0, 0x80800) 4m3.173433426s ago: executing program 1 (id=490): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 4m3.086915546s ago: executing program 1 (id=492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8000}}}}}}}, 0x0) 4m2.612204706s ago: executing program 3 (id=501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@srh={0x62, 0x0, 0x4, 0x0, 0xd4, 0x70, 0x800}, 0x8) accept4(r0, 0x0, 0x0, 0x80800) 4m2.552157442s ago: executing program 3 (id=502): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xffffffffffffffff) 4m2.534266108s ago: executing program 3 (id=503): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) 4m2.503172921s ago: executing program 3 (id=504): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}]}, 0x4, 0x4fb, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 4m2.367738009s ago: executing program 3 (id=507): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 4m2.06555019s ago: executing program 3 (id=515): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 4m1.812394261s ago: executing program 32 (id=515): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 3m59.617788363s ago: executing program 0 (id=547): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 3m59.440820213s ago: executing program 0 (id=550): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80000) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 3m59.337557119s ago: executing program 0 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000280)="f9af9189230c329e0518", 0xa}], 0x4) 3m59.12695244s ago: executing program 0 (id=555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 3m59.075523438s ago: executing program 0 (id=556): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m59.030328597s ago: executing program 0 (id=557): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x7) 3m48.05677038s ago: executing program 33 (id=492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8000}}}}}}}, 0x0) 3m43.996893731s ago: executing program 34 (id=557): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) fchdir(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x7) 3m28.053871194s ago: executing program 7 (id=1080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={r1, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 3m28.030526249s ago: executing program 7 (id=1081): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c18, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x3bec, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1994, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x9, 0x0, 0x0, {{0xc}, {0x4}, {0x61, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x16c8, 0x12, 0x0, 0x0, {{0xb}, {0x1648, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x2000, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x5, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0x55, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4c6c599d69ef091"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x2250, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1fec, 0x4, 0x0, 0x0, {{0xa}, {0x1fc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1bc, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0x4, 0x4, 0x5, 0x6, 0x4, 0x1000}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x0, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0xfffffff8, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x40}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea325, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3c18}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m27.978718797s ago: executing program 7 (id=1083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_io_uring_setup(0x31c5, 0x0, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3m27.917641692s ago: executing program 7 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m27.846690816s ago: executing program 7 (id=1090): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3m27.689094269s ago: executing program 7 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) 3m27.644636189s ago: executing program 35 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) 3m6.161951891s ago: executing program 2 (id=1649): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 3m6.088399444s ago: executing program 2 (id=1652): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010101000000000000a1089291000a0c0019800800010002"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x880) 3m5.950046433s ago: executing program 2 (id=1663): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40010020) 3m5.880365097s ago: executing program 2 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m5.825247684s ago: executing program 2 (id=1658): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 3m5.635370569s ago: executing program 2 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x30bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x400, 0x2}, {0x0, 0x80000001, 0x100, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3m5.63507732s ago: executing program 36 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x30bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x400, 0x2}, {0x0, 0x80000001, 0x100, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.081561256s ago: executing program 6 (id=5219): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 3.030386774s ago: executing program 6 (id=5232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@random="7c46b480696d", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000010c0)={@random="c1522a5a18f7", @random="28c00bafd3f7", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x1f, 0x1c, 0x67, 0x0, 0x8, 0x2, 0x0, @multicast1, @rand_addr=0x64010100}, {0x22, 0x53, 0x0, @multicast1}}}}}, 0x0) 2.991437096s ago: executing program 6 (id=5221): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0xd0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2.158208567s ago: executing program 4 (id=5231): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RGETATTR(r0, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2.067338837s ago: executing program 6 (id=5233): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 2.066862207s ago: executing program 4 (id=5236): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000018afc5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/24], 0x50) close(0xffffffffffffffff) 1.397183546s ago: executing program 8 (id=5241): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) 1.396423716s ago: executing program 8 (id=5243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.349969945s ago: executing program 8 (id=5244): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(0x0, 0x140) 1.219575165s ago: executing program 4 (id=5245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x4000) 1.172940114s ago: executing program 6 (id=5246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020692500000000002020207b1a120000000000bfa100000000000007010000f8ffffffb702000008000000b7e487cd2a26e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) 1.097537098s ago: executing program 6 (id=5247): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 1.097187828s ago: executing program 4 (id=5248): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x200408d1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.080068674s ago: executing program 9 (id=5250): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x6, 0x5, 0x400}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 1.074988492s ago: executing program 5 (id=5251): mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2090080, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x121) 1.050916727s ago: executing program 4 (id=5252): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 1.042252765s ago: executing program 9 (id=5253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) 1.032190053s ago: executing program 4 (id=5254): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.025256381s ago: executing program 5 (id=5255): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0xbb) 967.540559ms ago: executing program 9 (id=5256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000002300), 0x4) 967.046168ms ago: executing program 5 (id=5257): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 666.43031ms ago: executing program 5 (id=5258): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x85, 0x800) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000080)='devpts\x00', 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x4e23, 0x0, @local, 0x5}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r0 = socket(0x11, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x20) 598.791815ms ago: executing program 5 (id=5259): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f0000000680)=""/160, 0xa0) 598.313175ms ago: executing program 5 (id=5260): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 435.978798ms ago: executing program 8 (id=5261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) 398.38722ms ago: executing program 8 (id=5262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3615c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 270.755671ms ago: executing program 8 (id=5263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 91.56628ms ago: executing program 9 (id=5264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x922000000001, 0x106) fstat(r2, &(0x7f00000021c0)) 25.150385ms ago: executing program 9 (id=5265): mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2090080, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x121) 0s ago: executing program 9 (id=5266): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r0, 0x80000001, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) kernel console output (not intermixed with test programs): 400 audit(2000000271.394:1649): avc: denied { create } for pid=9357 comm="syz.8.2021" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.072238][ T28] audit: type=1400 audit(2000000271.394:1650): avc: denied { map } for pid=9357 comm="syz.8.2021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.097210][ T28] audit: type=1400 audit(2000000271.394:1651): avc: denied { read write } for pid=9361 comm="syz.9.2022" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.133060][ T28] audit: type=1400 audit(2000000271.394:1653): avc: denied { open } for pid=9361 comm="syz.9.2022" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.157529][ T28] audit: type=1400 audit(2000000271.394:1652): avc: denied { read write } for pid=9357 comm="syz.8.2021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.182630][ T28] audit: type=1400 audit(2000000271.394:1654): avc: denied { create } for pid=9361 comm="syz.9.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.787209][ T9414] netlink: 'syz.5.2047': attribute type 1 has an invalid length. [ 130.824271][ T9414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.859568][ T9414] bond2: (slave gretap2): making interface the new active one [ 130.868173][ T9414] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 133.756101][ T9439] A link change request failed with some changes committed already. Interface sit6 may have been left with an inconsistent configuration, please check. [ 133.788017][ T9444] loop9: detected capacity change from 0 to 512 [ 133.814091][ T7595] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 133.845887][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 133.865051][ T9444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.898144][ T9444] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.923262][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 133.953092][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 133.967547][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 133.979649][ T9444] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2057'. [ 134.006106][ T9457] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 134.030552][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 134.041321][ T8489] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.097642][ T9463] loop6: detected capacity change from 0 to 512 [ 134.152948][ T9463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.297091][ T9463] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.337238][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2074'. [ 134.370826][ T9472] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 134.447817][ T5420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.747345][ T9488] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 134.774158][ T7612] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 60 sec [ 134.878536][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 134.878554][ T28] audit: type=1400 audit(2000000276.324:1721): avc: denied { write } for pid=9497 comm="syz.9.2079" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.901892][ T9504] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 134.915475][ T7612] IPVS: starting estimator thread 0... [ 134.919042][ T9500] loop9: detected capacity change from 0 to 512 [ 134.935210][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 134.941859][ T9500] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.962159][ T28] audit: type=1400 audit(2000000276.384:1722): avc: denied { mounton } for pid=9497 comm="syz.9.2079" path="/syzcgroup/unified/syz9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 134.962617][ T28] audit: type=1400 audit(2000000276.384:1723): avc: denied { create } for pid=9506 comm="syz.6.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.060078][ T9505] IPVS: using max 2448 ests per chain, 122400 per kthread [ 135.078834][ T28] audit: type=1400 audit(2000000276.384:1724): avc: denied { write } for pid=9506 comm="syz.6.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.102623][ T28] audit: type=1400 audit(2000000276.384:1725): avc: denied { nlmsg_write } for pid=9506 comm="syz.6.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.144866][ T9500] EXT4-fs error (device loop9): __ext4_iget:5378: inode #11: block 1: comm syz.9.2079: invalid block [ 135.156519][ T9519] loop5: detected capacity change from 0 to 2048 [ 135.165246][ T9500] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.169794][ T9500] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2079: couldn't read orphan inode 11 (err -117) [ 135.179270][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 135.179296][ C0] EXT4-fs (loop9): initial error at time 2000000276: __ext4_iget:5378: inode 11: block 1 [ 135.179338][ C0] EXT4-fs (loop9): last error at time 2000000276: __ext4_iget:5378: inode 11: block 1 [ 135.217845][ T9500] loop9: lost filesystem error report for type 5 error -117 [ 135.218392][ T9500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.257233][ T9519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.273566][ T28] audit: type=1400 audit(2000000276.694:1726): avc: denied { block_suspend } for pid=9497 comm="syz.9.2079" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.298251][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 135.340287][ T28] audit: type=1400 audit(2000000276.784:1727): avc: denied { create } for pid=9529 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.369952][ T28] audit: type=1400 audit(2000000276.784:1728): avc: denied { bind } for pid=9529 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.396028][ T28] audit: type=1400 audit(2000000276.784:1729): avc: denied { setopt } for pid=9529 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.399329][ T4779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.603100][ T28] audit: type=1400 audit(2000000277.034:1730): avc: denied { write } for pid=9548 comm="syz.5.2098" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.671645][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2110'. [ 135.688487][ T9551] netlink: 'syz.6.2110': attribute type 20 has an invalid length. [ 135.697324][ T9551] netlink: 'syz.6.2110': attribute type 21 has an invalid length. [ 136.127354][ T9598] loop6: detected capacity change from 0 to 1024 [ 136.161489][ T9598] EXT4-fs: Ignoring removed orlov option [ 136.210136][ T9598] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 136.286118][ T9598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.317271][ T9598] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 136.329526][ T9617] xt_NFQUEUE: number of total queues is 0 [ 136.373881][ T5420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.427576][ T9634] loop8: detected capacity change from 0 to 128 [ 136.467745][ T9636] atomic_op ffff88811b058528 conn xmit_atomic 0000000000000000 [ 136.468138][ T9639] sit2: entered promiscuous mode [ 136.533429][ T6871] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 136.554157][ T6871] FAT-fs (loop8): Filesystem has been set read-only [ 136.599701][ T9651] loop5: detected capacity change from 0 to 512 [ 136.653729][ T9651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.666762][ T9651] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.766813][ T9667] netlink: 'syz.8.2135': attribute type 5 has an invalid length. [ 136.777460][ T4779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.788839][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2135'. [ 136.855546][ T9673] loop8: detected capacity change from 0 to 512 [ 136.898020][ T9673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.032793][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.065906][ T9686] netlink: 'syz.8.2141': attribute type 1 has an invalid length. [ 137.088625][ T9688] sit4: entered promiscuous mode [ 138.039785][ T9835] team_slave_0: entered promiscuous mode [ 138.045538][ T9835] team_slave_1: entered promiscuous mode [ 138.051708][ T9835] macsec1: entered promiscuous mode [ 138.057833][ T9835] team0: entered promiscuous mode [ 138.078718][ T9835] team0: Device macsec1 is already an upper device of the team interface [ 138.097078][ T9835] team0: left promiscuous mode [ 138.109968][ T9835] team_slave_0: left promiscuous mode [ 138.115474][ T9835] team_slave_1: left promiscuous mode [ 138.537412][ T9899] geneve2: entered promiscuous mode [ 138.542746][ T9899] geneve2: entered allmulticast mode [ 138.966474][ T9915] loop5: detected capacity change from 0 to 512 [ 139.035978][ T9915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.049555][ T9915] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.149746][ T4779] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.399842][ T9934] xt_hashlimit: size too large, truncated to 1048576 [ 139.658179][ T9951] __nla_validate_parse: 5 callbacks suppressed [ 139.658198][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2201'. [ 139.678839][ T9954] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.687099][ T9954] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.734026][ T9956] netlink: 'syz.9.2203': attribute type 12 has an invalid length. [ 139.752048][ T9956] netlink: 'syz.9.2203': attribute type 29 has an invalid length. [ 139.760486][ T9956] netlink: 'syz.9.2203': attribute type 1 has an invalid length. [ 139.768495][ T9956] netlink: 'syz.9.2203': attribute type 37 has an invalid length. [ 139.776488][ T9956] netlink: 'syz.9.2203': attribute type 2 has an invalid length. [ 139.784581][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.897031][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 139.897049][ T28] audit: type=1400 audit(2000000281.344:1833): avc: denied { listen } for pid=9967 comm="syz.9.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.947685][ T28] audit: type=1400 audit(2000000281.364:1834): avc: denied { accept } for pid=9967 comm="syz.9.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.089980][ T9980] xt_hashlimit: size too large, truncated to 1048576 [ 140.234270][ T28] audit: type=1400 audit(2000000281.674:1835): avc: denied { watch watch_reads } for pid=9993 comm="syz.4.2220" path="/539/file0" dev="tmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.281579][ T28] audit: type=1400 audit(2000000281.674:1836): avc: denied { execute_no_trans } for pid=9993 comm="syz.4.2220" path="/539/file0" dev="tmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.331576][ T28] audit: type=1400 audit(2000000281.694:1837): avc: denied { read } for pid=9996 comm="syz.4.2221" path="socket:[25302]" dev="sockfs" ino=25302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.832444][ T28] audit: type=1326 audit(2000000282.274:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10002 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 140.863821][ T28] audit: type=1326 audit(2000000282.274:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10002 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 140.865396][T10007] loop6: detected capacity change from 0 to 512 [ 140.887713][ T28] audit: type=1326 audit(2000000282.304:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10002 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 140.917608][ T28] audit: type=1326 audit(2000000282.304:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10002 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 140.949000][ T28] audit: type=1326 audit(2000000282.304:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10002 comm="syz.5.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 140.949252][T10007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.985866][T10007] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.132523][ T5420] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.196922][T10031] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.205184][T10031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.212432][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 141.221641][T10031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.228888][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 143.999285][T10018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.039379][T10048] xt_hashlimit: size too large, truncated to 1048576 [ 144.048623][T10047] netlink: 'syz.8.2247': attribute type 1 has an invalid length. [ 144.066677][T10047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.129617][T10047] bond1: (slave gretap1): making interface the new active one [ 144.141573][T10047] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 144.405122][T10082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10082 comm=syz.9.2256 [ 144.484555][T10089] ip6gre1: entered promiscuous mode [ 144.489878][T10089] ip6gre1: entered allmulticast mode [ 144.550570][T10096] loop8: detected capacity change from 0 to 512 [ 144.557458][T10096] ext4: Unknown parameter 'euid>00000000000000060929' [ 144.996797][T10116] ip6gre1: entered promiscuous mode [ 145.005942][T10116] ip6gre1: entered allmulticast mode [ 145.018051][T10118] loop5: detected capacity change from 0 to 512 [ 145.040494][T10118] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.077498][T10118] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 1: comm syz.5.2269: invalid block [ 145.097324][T10118] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.097532][T10118] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2269: couldn't read orphan inode 11 (err -117) [ 145.106761][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 145.106801][ C1] EXT4-fs (loop5): initial error at time 2000000286: __ext4_iget:5378: inode 11: block 1 [ 145.106839][ C1] EXT4-fs (loop5): last error at time 2000000286: __ext4_iget:5378: inode 11: block 1 [ 145.145071][T10118] loop5: lost filesystem error report for type 5 error -117 [ 145.145575][T10118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.258792][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2275'. [ 145.811768][T10155] loop6: detected capacity change from 0 to 512 [ 145.842713][T10155] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.931260][T10155] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 1: comm syz.6.2284: invalid block [ 145.956150][T10155] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.956426][T10155] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2284: couldn't read orphan inode 11 (err -117) [ 145.965639][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 145.965660][ C1] EXT4-fs (loop6): initial error at time 2000000287: __ext4_iget:5378: inode 11: block 1 [ 145.965692][ C1] EXT4-fs (loop6): last error at time 2000000287: __ext4_iget:5378: inode 11: block 1 [ 146.003622][T10155] loop6: lost filesystem error report for type 5 error -117 [ 146.008935][T10155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.133669][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 146.133690][ T28] audit: type=1400 audit(2000000287.574:1869): avc: denied { mount } for pid=10161 comm="syz.4.2298" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 146.162812][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2288'. [ 146.184059][T10163] netlink: 'syz.9.2288': attribute type 20 has an invalid length. [ 146.193771][T10163] netlink: 'syz.9.2288': attribute type 21 has an invalid length. [ 146.210787][ T28] audit: type=1400 audit(2000000287.624:1870): avc: denied { read } for pid=10167 comm="syz.5.2302" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.274043][ T28] audit: type=1400 audit(2000000287.624:1871): avc: denied { open } for pid=10167 comm="syz.5.2302" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.681500][ T28] audit: type=1400 audit(2000000288.114:1872): avc: denied { create } for pid=10201 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.749419][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2311'. [ 146.749585][ T28] audit: type=1400 audit(2000000288.114:1873): avc: denied { connect } for pid=10201 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.779080][ T28] audit: type=1400 audit(2000000288.114:1874): avc: denied { write } for pid=10201 comm="syz.5.2309" path="socket:[26667]" dev="sockfs" ino=26667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.784627][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2311'. [ 146.821692][T10208] geneve2: entered promiscuous mode [ 146.827318][T10208] geneve2: entered allmulticast mode [ 147.016049][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2319'. [ 147.349937][T10238] netlink: 'syz.5.2326': attribute type 10 has an invalid length. [ 147.371312][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.401521][T10238] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.415484][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.458838][T10240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.479091][T10240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.498273][T10240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.544759][T10240] bond0: (slave batadv0): Releasing backup interface [ 147.573581][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2329'. [ 147.586630][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2329'. [ 147.609328][T10243] geneve3: entered promiscuous mode [ 147.638308][T10243] geneve3: entered allmulticast mode [ 147.798409][T10256] hub 9-0:1.0: USB hub found [ 147.815739][T10256] hub 9-0:1.0: 8 ports detected [ 147.882170][T10258] loop8: detected capacity change from 0 to 2048 [ 147.908618][ T28] audit: type=1400 audit(2000000289.354:1875): avc: denied { create } for pid=10261 comm="syz.6.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 147.949903][T10258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.993684][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.086004][ T28] audit: type=1326 audit(2000000289.534:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 148.139516][ T28] audit: type=1326 audit(2000000289.534:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 148.204121][ T28] audit: type=1326 audit(2000000289.534:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 148.248158][T10284] loop8: detected capacity change from 0 to 512 [ 148.287985][T10284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.317850][T10284] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.373554][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.571377][T10296] netlink: 'syz.8.2345': attribute type 10 has an invalid length. [ 148.614647][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.631483][T10296] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.657073][T10296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.673490][T10296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.695335][T10296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.704371][T10296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.725608][T10296] bond0: (slave batadv0): Releasing backup interface [ 148.961148][T10320] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2359'. [ 148.980099][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 149.206242][T10346] netlink: 'syz.4.2367': attribute type 10 has an invalid length. [ 149.371646][T10357] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2374'. [ 149.603851][T10384] GUP no longer grows the stack in syz.9.2386 (10384): 200000004000-20000000a000 (200000002000) [ 149.631999][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.9.2386 Not tainted syzkaller #0 PREEMPT(full) [ 149.632102][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.632127][T10384] Call Trace: [ 149.632136][T10384] [ 149.632145][T10384] __dump_stack+0x1d/0x30 [ 149.632179][T10384] dump_stack_lvl+0x95/0xd0 [ 149.632243][T10384] dump_stack+0x15/0x1b [ 149.632263][T10384] __get_user_pages+0x195b/0x1ea0 [ 149.632298][T10384] ? xfd_validate_state+0x45/0xf0 [ 149.632341][T10384] ? __rcu_read_unlock+0x4e/0x70 [ 149.632400][T10384] get_user_pages_remote+0x1d5/0x6b0 [ 149.632518][T10384] __access_remote_vm+0x15c/0x580 [ 149.632549][T10384] access_remote_vm+0x32/0x40 [ 149.632610][T10384] proc_pid_cmdline_read+0x32b/0x6b0 [ 149.632645][T10384] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 149.632736][T10384] vfs_readv+0x432/0x6e0 [ 149.632765][T10384] __x64_sys_preadv+0xfd/0x1c0 [ 149.632788][T10384] x64_sys_call+0x2915/0x3020 [ 149.632820][T10384] do_syscall_64+0x12c/0x370 [ 149.632914][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.632940][T10384] RIP: 0033:0x7fa62037c799 [ 149.632961][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.632982][T10384] RSP: 002b:00007fa61edcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 149.633063][T10384] RAX: ffffffffffffffda RBX: 00007fa6205f5fa0 RCX: 00007fa62037c799 [ 149.633081][T10384] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 149.633097][T10384] RBP: 00007fa620412bd9 R08: 00000000fffffff9 R09: 0000000000000000 [ 149.633113][T10384] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 149.633137][T10384] R13: 00007fa6205f6038 R14: 00007fa6205f5fa0 R15: 00007fffec51d0f8 [ 149.633158][T10384] [ 150.965037][ T7618] IPVS: starting estimator thread 0... [ 150.971524][T10435] veth0: entered promiscuous mode [ 150.981165][T10435] __nla_validate_parse: 3 callbacks suppressed [ 150.981219][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2410'. [ 151.084052][T10436] IPVS: using max 2640 ests per chain, 132000 per kthread [ 151.199668][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2423'. [ 151.233435][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.832663][T10479] hub 9-0:1.0: USB hub found [ 151.837592][T10479] hub 9-0:1.0: 8 ports detected [ 151.900341][T10485] ip6gre1: entered allmulticast mode [ 151.929212][T10488] dummy0: entered promiscuous mode [ 151.943427][T10488] bond0: entered promiscuous mode [ 151.984003][T10488] bond_slave_0: entered promiscuous mode [ 152.014184][T10488] bond_slave_1: entered promiscuous mode [ 152.034770][T10488] hsr2: entered allmulticast mode [ 152.044014][T10488] dummy0: entered allmulticast mode [ 152.054220][T10488] bond0: entered allmulticast mode [ 152.064125][T10488] bond_slave_0: entered allmulticast mode [ 152.080367][T10488] bond_slave_1: entered allmulticast mode [ 152.162415][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 152.162506][ T28] audit: type=1400 audit(2000000293.604:1927): avc: denied { create } for pid=10503 comm="syz.6.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.196073][ T28] audit: type=1400 audit(2000000293.644:1928): avc: denied { read } for pid=10503 comm="syz.6.2442" path="socket:[27081]" dev="sockfs" ino=27081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.924051][ T28] audit: type=1400 audit(2000000294.364:1929): avc: denied { create } for pid=10536 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.962782][ T28] audit: type=1400 audit(2000000294.364:1930): avc: denied { bind } for pid=10536 comm="syz.6.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.994674][T10544] loop8: detected capacity change from 0 to 512 [ 153.001569][T10544] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 153.162779][T10551] loop8: detected capacity change from 0 to 512 [ 153.171936][T10551] EXT4-fs: Ignoring removed nobh option [ 153.186759][T10551] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 153.211114][T10551] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.254001][ T4237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.260360][ T3645] Bluetooth: hci0: command 0x1003 tx timeout [ 153.285198][T10551] EXT4-fs (loop8): 1 truncate cleaned up [ 153.291926][T10551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.311877][T10551] EXT4-fs warning (device loop8): ext4_group_extend:1861: can't shrink FS - resize aborted [ 153.315536][ T28] audit: type=1400 audit(2000000294.754:1931): avc: denied { append } for pid=10550 comm="syz.8.2461" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.463365][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.602990][T10574] netlink: 'syz.8.2469': attribute type 20 has an invalid length. [ 153.624091][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2469'. [ 153.633441][T10574] netlink: 'syz.8.2469': attribute type 20 has an invalid length. [ 153.643986][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2469'. [ 153.947180][T10577] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2474'. [ 154.270002][T10596] ip6gre1: entered allmulticast mode [ 154.505745][T10617] dummy0: entered promiscuous mode [ 154.514255][T10617] bond0: entered promiscuous mode [ 154.519418][T10617] bond_slave_0: entered promiscuous mode [ 154.525385][T10617] bond_slave_1: entered promiscuous mode [ 154.532132][T10617] debugfs: 'hsr1' already exists in 'hsr' [ 154.538195][T10617] Cannot create hsr debugfs directory [ 154.543979][T10617] hsr1: entered allmulticast mode [ 154.549188][T10617] dummy0: entered allmulticast mode [ 154.554670][T10617] bond0: entered allmulticast mode [ 154.559837][T10617] bond_slave_0: entered allmulticast mode [ 154.566065][T10617] bond_slave_1: entered allmulticast mode [ 154.632044][T10629] ip6gre2: entered allmulticast mode [ 154.926132][T10653] dummy0: entered promiscuous mode [ 154.933555][T10653] bond0: entered promiscuous mode [ 154.939175][T10653] bond_slave_0: entered promiscuous mode [ 154.946056][T10653] bond_slave_1: entered promiscuous mode [ 154.952822][T10653] debugfs: 'hsr1' already exists in 'hsr' [ 154.958776][T10653] Cannot create hsr debugfs directory [ 154.968650][T10653] hsr1: entered allmulticast mode [ 154.977126][T10653] dummy0: entered allmulticast mode [ 154.982507][T10653] bond0: entered allmulticast mode [ 154.989066][T10653] bond_slave_0: entered allmulticast mode [ 155.010907][T10653] bond_slave_1: entered allmulticast mode [ 155.077178][ T7618] IPVS: starting estimator thread 0... [ 155.174133][T10672] IPVS: using max 2304 ests per chain, 115200 per kthread [ 155.295294][ T28] audit: type=1326 audit(2000000296.744:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 155.335763][ T28] audit: type=1326 audit(2000000296.764:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 155.359991][ T28] audit: type=1326 audit(2000000296.764:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 155.431603][ T28] audit: type=1326 audit(2000000296.764:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 155.456628][ T28] audit: type=1326 audit(2000000296.764:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.5.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 155.484327][T10698] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2527'. [ 155.768659][T10726] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2539'. [ 156.177625][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.231907][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2572'. [ 158.214024][ T4237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.214523][ T3645] Bluetooth: hci0: command 0x1003 tx timeout [ 158.966453][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2614'. [ 159.148200][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2609'. [ 159.345072][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 159.345092][ T28] audit: type=1326 audit(2000000300.794:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.378552][ T28] audit: type=1326 audit(2000000300.794:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.402137][ T28] audit: type=1326 audit(2000000300.794:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.425839][ T28] audit: type=1326 audit(2000000300.794:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.449913][ T28] audit: type=1326 audit(2000000300.794:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.475360][ T28] audit: type=1326 audit(2000000300.794:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.499169][ T28] audit: type=1326 audit(2000000300.794:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.523075][ T28] audit: type=1326 audit(2000000300.794:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.546683][ T28] audit: type=1326 audit(2000000300.794:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.570562][ T28] audit: type=1326 audit(2000000300.794:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.4.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 159.988607][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2626'. [ 160.037116][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2631'. [ 160.802845][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2644'. [ 161.035308][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.044964][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.260092][T11168] xt_hashlimit: size too large, truncated to 1048576 [ 164.049344][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.499394][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 164.499413][ T28] audit: type=1326 audit(2000000305.944:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.529443][ T28] audit: type=1326 audit(2000000305.944:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.553310][ T28] audit: type=1326 audit(2000000305.944:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.577336][ T28] audit: type=1326 audit(2000000305.944:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.602341][ T28] audit: type=1326 audit(2000000305.944:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.626806][ T28] audit: type=1326 audit(2000000305.944:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 164.997544][T11267] xt_hashlimit: size too large, truncated to 1048576 [ 165.496433][T11294] netlink: 'syz.4.2781': attribute type 7 has an invalid length. [ 165.511319][T11294] netlink: 'syz.4.2781': attribute type 7 has an invalid length. [ 165.618391][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.631416][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.238076][T11321] xt_hashlimit: size too large, truncated to 1048576 [ 166.738243][T11351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.774986][T11351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.015399][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 167.466682][T11393] netlink: 'syz.9.2825': attribute type 7 has an invalid length. [ 167.475134][T11393] netlink: 'syz.9.2825': attribute type 7 has an invalid length. [ 167.645122][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.272573][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.328407][T11411] xt_hashlimit: size too large, truncated to 1048576 [ 168.773720][T11441] netlink: 'syz.8.2836': attribute type 10 has an invalid length. [ 168.783107][T11441] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2836'. [ 168.792298][T11441] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 169.464104][ T28] audit: type=1400 audit(2000000310.904:2013): avc: denied { name_connect } for pid=11485 comm="syz.6.2854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 170.220464][T11519] loop8: detected capacity change from 0 to 128 [ 170.231319][T11519] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.258780][T11519] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.383813][ T6871] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.775612][T11591] loop8: detected capacity change from 0 to 512 [ 171.805507][T11591] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 171.840724][T11591] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2901: bad orphan inode 131083 [ 171.851453][T11591] loop8: lost filesystem error report for type 5 error -117 [ 171.854095][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 171.869340][ C0] EXT4-fs (loop8): initial error at time 2000000313: ext4_orphan_get:1417 [ 171.874788][T11591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.878836][ C0] EXT4-fs (loop8): last error at time 2000000313: ext4_orphan_get:1417 [ 172.475237][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.605604][T11620] loop8: detected capacity change from 0 to 512 [ 172.620006][T11620] EXT4-fs: Ignoring removed nobh option [ 172.669679][T11620] EXT4-fs: Ignoring removed bh option [ 172.686220][T11620] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 172.714985][T11620] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2902: invalid indirect mapped block 256 (level 1) [ 172.764012][T11620] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 172.773958][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 172.789839][ C1] EXT4-fs (loop8): initial error at time 2000000314: ext4_free_branches:1023: inode 13 [ 172.799548][ C1] EXT4-fs (loop8): last error at time 2000000314: ext4_free_branches:1023: inode 13 [ 172.804154][T11620] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2902: invalid indirect mapped block 2683928664 (level 1) [ 172.851010][T11620] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 172.860748][T11620] EXT4-fs (loop8): 1 truncate cleaned up [ 172.884743][T11620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.918034][ T28] audit: type=1400 audit(2000000314.364:2014): avc: denied { remount } for pid=11619 comm="syz.8.2902" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.919384][T11620] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 172.968968][T11620] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 173.025548][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.672036][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2912'. [ 173.886499][ T28] audit: type=1400 audit(2000000315.334:2015): avc: denied { append } for pid=11675 comm="syz.9.2920" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.044989][ T28] audit: type=1400 audit(2000000315.494:2016): avc: denied { read } for pid=11684 comm="syz.9.2924" path="socket:[31067]" dev="sockfs" ino=31067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.690290][ T28] audit: type=1400 audit(2000000316.134:2017): avc: denied { remount } for pid=11710 comm="syz.6.2935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.766243][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2951'. [ 176.168543][T11772] cgroup: fork rejected by pids controller in /syz6 [ 177.123812][ T28] audit: type=1400 audit(2000000318.564:2018): avc: denied { getopt } for pid=12899 comm="syz.4.2970" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.404401][ T28] audit: type=1400 audit(2000000320.794:2019): avc: denied { bind } for pid=12990 comm="syz.4.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.432033][ T28] audit: type=1400 audit(2000000320.794:2020): avc: denied { setopt } for pid=12990 comm="syz.4.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.669736][T13008] loop8: detected capacity change from 0 to 512 [ 179.737443][T13008] EXT4-fs: Ignoring removed nobh option [ 179.751395][T13008] EXT4-fs: Ignoring removed orlov option [ 179.813441][T13016] cgroup: fork rejected by pids controller in /syz9 [ 179.823757][T13008] EXT4-fs error (device loop8): __ext4_iget:5378: inode #11: block 1: comm syz.8.3013: invalid block [ 179.836507][T13008] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.839167][T13008] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3013: couldn't read orphan inode 11 (err -117) [ 179.849487][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 179.849676][ C0] EXT4-fs (loop8): initial error at time 2000000321: __ext4_iget:5378: inode 11: block 1 [ 179.850167][ C0] EXT4-fs (loop8): last error at time 2000000321: __ext4_iget:5378: inode 11: block 1 [ 179.898508][T13008] loop8: lost filesystem error report for type 5 error -117 [ 179.910221][T13008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.956667][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.967655][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.522964][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.600243][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3012'. [ 182.144948][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3053'. [ 182.156913][T14654] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 182.180086][T14654] bond2: entered promiscuous mode [ 182.186007][T14654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.204078][T14654] bond2: (slave bridge1): making interface the new active one [ 182.234166][T14654] bridge1: entered promiscuous mode [ 182.274912][T14654] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 182.296376][T14660] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3056'. [ 182.358061][T14668] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 182.608122][ T28] audit: type=1400 audit(2000000324.054:2021): avc: denied { rename } for pid=14700 comm="syz.4.3073" name="file0" dev="tmpfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 182.645285][T14707] team0: entered promiscuous mode [ 182.650478][T14707] team_slave_0: entered promiscuous mode [ 182.684517][T14707] team_slave_1: entered promiscuous mode [ 182.704376][T14706] team0: left promiscuous mode [ 182.725407][T14706] team_slave_0: left promiscuous mode [ 182.740302][T14706] team_slave_1: left promiscuous mode [ 182.811127][T14720] team0: Device gtp0 is of different type [ 182.838845][T14722] netlink: 'syz.5.3082': attribute type 2 has an invalid length. [ 182.853448][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3082'. [ 182.872183][ T28] audit: type=1400 audit(2000000324.314:2022): avc: denied { setopt } for pid=14725 comm="syz.6.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.022288][T14747] batadv_slave_1: entered promiscuous mode [ 183.046759][T14752] netlink: 'syz.9.3094': attribute type 1 has an invalid length. [ 183.056214][ T28] audit: type=1400 audit(2000000324.504:2023): avc: denied { read } for pid=14746 comm="syz.6.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.082813][T14752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.097250][T14745] batadv_slave_1: left promiscuous mode [ 183.111039][ T28] audit: type=1400 audit(2000000324.554:2024): avc: denied { setopt } for pid=14746 comm="syz.6.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.169988][ T28] audit: type=1400 audit(2000000324.614:2025): avc: denied { read } for pid=14759 comm="syz.8.3098" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.214124][ T28] audit: type=1400 audit(2000000324.614:2026): avc: denied { open } for pid=14759 comm="syz.8.3098" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.239795][ T28] audit: type=1400 audit(2000000324.614:2027): avc: denied { ioctl } for pid=14759 comm="syz.8.3098" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.325605][ T28] audit: type=1326 audit(2000000324.774:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14770 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 183.365158][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3104'. [ 183.374249][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3100'. [ 183.391848][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3104'. [ 183.411366][ T309] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.420208][ T309] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.430643][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3104'. [ 183.444421][ T309] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.470877][ T309] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.481021][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3104'. [ 184.435547][T14851] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3139'. [ 184.592845][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3148'. [ 184.633489][ T37] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.636941][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 184.636958][ T28] audit: type=1326 audit(2000000326.084:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.6.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdad6c799 code=0x7ffc0000 [ 184.727610][ T50] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.729451][ T28] audit: type=1326 audit(2000000326.124:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.6.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdad6c799 code=0x7ffc0000 [ 184.801899][ T50] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.802406][ T28] audit: type=1326 audit(2000000326.194:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.6.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fdcdad6c799 code=0x7ffc0000 [ 184.825632][ T50] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.903800][ T28] audit: type=1326 audit(2000000326.194:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.6.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdad6c799 code=0x7ffc0000 [ 184.935865][ T28] audit: type=1326 audit(2000000326.194:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.6.3147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcdad6c799 code=0x7ffc0000 [ 185.010259][ T28] audit: type=1400 audit(2000000326.454:2093): avc: denied { wake_alarm } for pid=14880 comm="syz.9.3152" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.135488][ T28] audit: type=1400 audit(2000000326.574:2094): avc: denied { listen } for pid=14893 comm="syz.6.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.228738][T14906] xt_hashlimit: size too large, truncated to 1048576 [ 185.351588][ T28] audit: type=1400 audit(2000000326.794:2095): avc: denied { read } for pid=14915 comm="syz.6.3165" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.375537][ T28] audit: type=1400 audit(2000000326.794:2096): avc: denied { open } for pid=14915 comm="syz.6.3165" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.596408][ T28] audit: type=1400 audit(2000000327.044:2097): avc: denied { read write } for pid=14931 comm="syz.5.3170" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.624999][ T7618] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.646630][ T7618] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.226841][T15011] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.247021][T15011] bond3: (slave lo): Enslaving as an active interface with an up link [ 186.263264][T15011] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 186.612828][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.626738][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.781078][T15066] program syz.8.3212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.312355][T15087] __nla_validate_parse: 3 callbacks suppressed [ 187.312376][T15087] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3221'. [ 188.726606][T15143] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 188.834937][T15143] bond2: (slave lo): Enslaving as an active interface with an up link [ 188.873083][T15143] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.040617][T15160] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.058545][T15160] bond2: (slave lo): Enslaving as an active interface with an up link [ 189.074965][T15160] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.573016][T15178] xt_hashlimit: size too large, truncated to 1048576 [ 189.954770][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 189.954799][ T28] audit: type=1326 audit(2000000331.404:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.8.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 189.990631][ T28] audit: type=1326 audit(2000000331.434:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.8.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 190.014771][ T28] audit: type=1326 audit(2000000331.434:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.8.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 190.039568][ T28] audit: type=1326 audit(2000000331.434:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.8.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 190.064563][ T28] audit: type=1326 audit(2000000331.434:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.8.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 190.114647][ T28] audit: type=1326 audit(2000000331.564:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 190.146259][ T28] audit: type=1326 audit(2000000331.564:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 190.172234][ T28] audit: type=1326 audit(2000000331.564:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 190.200959][ T28] audit: type=1326 audit(2000000331.564:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 190.225493][ T28] audit: type=1326 audit(2000000331.564:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 190.290920][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3275'. [ 190.300692][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3275'. [ 190.321471][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3275'. [ 190.341021][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3275'. [ 190.778327][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 190.813466][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 190.823243][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 190.832532][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'. [ 191.112929][ T3392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 191.142416][ T3392] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.465924][T15319] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 191.484794][T15319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.735673][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3320'. [ 191.861657][T15365] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 191.917831][T15368] team0: entered promiscuous mode [ 191.928193][T15368] team_slave_0: entered promiscuous mode [ 191.934113][T15368] team_slave_1: entered promiscuous mode [ 191.948569][T15367] team0: left promiscuous mode [ 191.956054][T15367] team_slave_0: left promiscuous mode [ 191.970336][T15367] team_slave_1: left promiscuous mode [ 192.037537][T15376] batadv_slave_1: entered promiscuous mode [ 192.095453][T15374] batadv_slave_1: left promiscuous mode [ 192.291513][T15400] netlink: 'syz.8.3350': attribute type 1 has an invalid length. [ 192.330109][T15400] bond3: entered promiscuous mode [ 192.340074][T15400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.384106][T15407] bond3: (slave bridge1): making interface the new active one [ 192.391732][T15407] bridge1: entered promiscuous mode [ 192.405234][T15407] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 193.094486][T15452] netlink: 'syz.6.3354': attribute type 1 has an invalid length. [ 193.167790][T15452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.999730][T15527] netlink: 'syz.5.3370': attribute type 1 has an invalid length. [ 194.029308][T15527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.342815][T15564] netlink: 'syz.4.3387': attribute type 4 has an invalid length. [ 194.386163][T15564] netlink: 'syz.4.3387': attribute type 4 has an invalid length. [ 194.391479][T15570] netlink: 'syz.8.3390': attribute type 1 has an invalid length. [ 194.410847][T15570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.765271][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3402'. [ 194.819366][T15596] syzkaller0: entered promiscuous mode [ 194.839112][T15596] syzkaller0: entered allmulticast mode [ 196.519433][T15669] netlink: 'syz.5.3431': attribute type 4 has an invalid length. [ 196.558064][T15669] netlink: 'syz.5.3431': attribute type 4 has an invalid length. [ 196.590874][T15673] netlink: 'syz.5.3433': attribute type 12 has an invalid length. [ 196.619337][T15673] netlink: 'syz.5.3433': attribute type 29 has an invalid length. [ 196.664379][T15673] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3433'. [ 196.685216][T15673] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 196.905290][T15679] netlink: 'syz.6.3435': attribute type 2 has an invalid length. [ 196.978084][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 196.978122][ T28] audit: type=1400 audit(2000000338.424:2156): avc: denied { mount } for pid=15685 comm="syz.6.3447" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.181372][T15695] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3442'. [ 197.330023][ T28] audit: type=1400 audit(2000000338.774:2157): avc: denied { firmware_load } for pid=15699 comm="syz.8.3445" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 197.425925][T15688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.470233][T15688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.506107][T15708] loop8: detected capacity change from 0 to 512 [ 197.526677][T15710] netlink: 'syz.6.3450': attribute type 4 has an invalid length. [ 197.541881][T15708] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.557160][T15710] netlink: 'syz.6.3450': attribute type 4 has an invalid length. [ 197.599439][ T28] audit: type=1400 audit(2000000339.034:2158): avc: denied { write } for pid=15712 comm="syz.9.3451" path="socket:[36007]" dev="sockfs" ino=36007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.623764][T15708] EXT4-fs error (device loop8): ext4_quota_enable:7188: comm syz.8.3449: Bad quota inum: 2, type: 1 [ 197.654799][T15708] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 197.724397][T15718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.733044][T15718] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 197.745316][T15718] EXT4-fs error (device loop8): ext4_quota_enable:7188: comm syz.8.3449: Bad quota inum: 2, type: 1 [ 197.764008][T15718] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 197.789545][ T6871] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 198.021898][T15753] syzkaller1: entered promiscuous mode [ 198.027901][T15753] syzkaller1: entered allmulticast mode [ 198.379308][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3476'. [ 198.514908][ T28] audit: type=1400 audit(2000000339.964:2159): avc: denied { connect } for pid=15792 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.556548][ T28] audit: type=1400 audit(2000000339.964:2160): avc: denied { getopt } for pid=15792 comm="syz.9.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.604336][T15794] loop8: detected capacity change from 0 to 512 [ 198.620475][T15794] EXT4-fs: Ignoring removed bh option [ 198.634515][T15794] EXT4-fs: inline encryption not supported [ 198.642285][T15801] netlink: 'syz.6.3483': attribute type 12 has an invalid length. [ 198.650389][T15801] netlink: 'syz.6.3483': attribute type 29 has an invalid length. [ 198.658579][T15801] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3483'. [ 198.681310][T15794] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.721097][T15794] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 198.736054][T15794] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3481: bg 0: block 248: padding at end of block bitmap is not set [ 198.751092][T15794] loop8: lost filesystem error report for type 5 error -117 [ 198.751369][T15794] Quota error (device loop8): write_blk: dquota write failed [ 198.769136][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 198.769160][ C1] EXT4-fs (loop8): last error at time 2000000340: ext4_validate_block_bitmap:441 [ 198.785274][T15794] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 198.788671][T15813] syzkaller0: entered promiscuous mode [ 198.795411][T15794] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3481: Failed to acquire dquot type 1 [ 198.812294][T15794] loop8: lost filesystem error report for type 5 error -117 [ 198.813362][T15813] syzkaller0: entered allmulticast mode [ 198.826841][T15794] EXT4-fs (loop8): 1 truncate cleaned up [ 198.834167][T15794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 198.919494][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 198.934867][ T28] audit: type=1400 audit(2000000340.384:2161): avc: denied { bind } for pid=15821 comm="syz.5.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.235496][ T28] audit: type=1400 audit(2000000341.684:2162): avc: denied { unmount } for pid=5420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 200.305974][T15876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.317431][T15876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.852405][T15895] loop8: detected capacity change from 0 to 512 [ 200.867450][T15895] EXT4-fs: Ignoring removed orlov option [ 200.881924][T15900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3528'. [ 200.891802][T15895] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 200.912186][T15895] EXT4-fs (loop8): 1 truncate cleaned up [ 200.918639][T15895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.944003][ T28] audit: type=1400 audit(2000000342.384:2163): avc: denied { create } for pid=15892 comm="syz.8.3534" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.983675][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.076040][T15912] smc: net device hsr0 applied user defined pnetid SYZ2 [ 201.112364][T15912] smc: net device hsr0 erased user defined pnetid SYZ2 [ 201.349629][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.378845][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.466599][T15953] loop8: detected capacity change from 0 to 1024 [ 201.485865][T15953] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.527622][T15953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.548707][T15953] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.560297][T15953] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.633681][T15962] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 201.643671][T15962] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 201.663734][T15962] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 202.027095][T15989] validate_nla: 2 callbacks suppressed [ 202.027160][T15989] netlink: 'syz.5.3564': attribute type 1 has an invalid length. [ 202.050127][T15989] bond4: entered promiscuous mode [ 202.057124][T15989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.085799][T15989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.099135][T15989] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 202.109529][T15989] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 202.122223][T15989] bond4: (slave vcan1): making interface the new active one [ 202.129919][T15989] vcan1: entered promiscuous mode [ 202.138784][T15989] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 202.742198][T16010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.754462][T16010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.773620][T16096] netlink: 'syz.6.3599': attribute type 2 has an invalid length. [ 203.781508][T16096] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3599'. [ 204.161838][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.201140][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.379273][T16179] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3610'. [ 204.548488][ T3392] kernel read not supported for file /2431/coredump_filter (pid: 3392 comm: kworker/1:3) [ 204.778693][T16208] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 204.818648][T16208] bond4: entered promiscuous mode [ 204.845108][T16208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.902796][T16208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.924511][T16208] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 204.940594][T16216] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3625'. [ 204.998009][T16208] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 205.037410][T16208] bond4: (slave vcan1): making interface the new active one [ 205.074304][T16208] vcan1: entered promiscuous mode [ 205.081292][T16208] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 205.188388][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 205.188406][ T28] audit: type=1400 audit(2000000346.634:2167): avc: denied { transition } for pid=16230 comm="syz.6.3640" path="/566/file1" dev="tmpfs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 205.245670][ T28] audit: type=1400 audit(2000000346.634:2168): avc: denied { entrypoint } for pid=16230 comm="syz.6.3640" path="/566/file1" dev="tmpfs" ino=2933 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.294020][ T28] audit: type=1400 audit(2000000346.634:2169): avc: denied { noatsecure } for pid=16230 comm="syz.6.3640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 205.375153][ T28] audit: type=1400 audit(2000000346.824:2170): avc: denied { read } for pid=16235 comm="syz.4.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.999916][ T7617] kernel read not supported for file /1514/coredump_filter (pid: 7617 comm: kworker/0:13) [ 207.187195][T16317] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3666'. [ 207.311725][T16323] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3670'. [ 208.280619][T16343] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3678'. [ 209.217847][T16393] netlink: 'syz.8.3697': attribute type 1 has an invalid length. [ 209.258853][T16393] bond5: entered promiscuous mode [ 209.280726][T16393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.333075][T16404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.354714][T16404] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 209.366440][T16404] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 209.394521][T16404] bond5: (slave vcan1): making interface the new active one [ 209.402688][T16404] vcan1: entered promiscuous mode [ 209.438318][T16404] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 209.986202][ T28] audit: type=1400 audit(2000000351.434:2171): avc: denied { setopt } for pid=16469 comm="syz.6.3710" lport=59241 faddr=::ffff:100.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 211.101474][ T28] audit: type=1400 audit(2000000352.544:2172): avc: denied { getopt } for pid=16542 comm="syz.5.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.599688][ T28] audit: type=1400 audit(2000000353.044:2173): avc: denied { read write } for pid=16553 comm="syz.5.3743" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 211.714537][ T28] audit: type=1400 audit(2000000353.044:2174): avc: denied { open } for pid=16553 comm="syz.5.3743" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 211.828646][ T28] audit: type=1400 audit(2000000353.274:2175): avc: denied { ioctl } for pid=16557 comm="syz.5.3735" path="socket:[42454]" dev="sockfs" ino=42454 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 212.887900][ T28] audit: type=1400 audit(2000000354.324:2176): avc: denied { read } for pid=16615 comm="syz.5.3760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.984774][T16623] tipc: Enabling of bearer rejected, failed to enable media [ 213.809447][T16489] bridge_slave_1: left allmulticast mode [ 213.816013][T16489] bridge_slave_1: left promiscuous mode [ 213.821762][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.832247][T16489] bridge_slave_0: left allmulticast mode [ 213.839010][T16489] bridge_slave_0: left promiscuous mode [ 213.846396][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.893609][T16489] erspan0 (unregistering): left promiscuous mode [ 213.903773][T16489] gretap0 (unregistering): left promiscuous mode [ 213.924287][T16489] bond1 (unregistering): (slave geneve2): Releasing active interface [ 214.007414][T16489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.034643][T16489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.055137][T16489] bond0 (unregistering): Released all slaves [ 214.062772][T16489] bond1 (unregistering): Released all slaves [ 214.150418][T16489] hsr_slave_0: left promiscuous mode [ 214.167095][T16489] hsr_slave_1: left promiscuous mode [ 214.172981][T16489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.214552][T16489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.326648][T16489] team0 (unregistering): Port device team_slave_1 removed [ 214.356463][T16489] team0 (unregistering): Port device team_slave_0 removed [ 214.415859][T16489] team0 (unregistering): Port device dummy0 removed [ 214.960859][T16729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.026849][ T28] audit: type=1400 audit(2000000356.474:2177): avc: denied { create } for pid=16740 comm="syz.6.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 215.079716][ T28] audit: type=1400 audit(2000000356.474:2178): avc: denied { sys_admin } for pid=16740 comm="syz.6.3787" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 215.452821][ T28] audit: type=1400 audit(2000000356.894:2179): avc: denied { setopt } for pid=16765 comm="syz.6.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.502262][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3794'. [ 215.555824][ T28] audit: type=1400 audit(2000000357.004:2180): avc: denied { bind } for pid=16776 comm="syz.4.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.690521][T16789] sctp: [Deprecated]: syz.4.3803 (pid 16789) Use of int in max_burst socket option deprecated. [ 215.690521][T16789] Use struct sctp_assoc_value instead [ 216.264302][T16819] gretap2: entered promiscuous mode [ 216.603755][T16849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.615555][T16849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.071376][T16853] tipc: Enabling of bearer rejected, failed to enable media [ 217.085229][T16840] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.493967][ T3645] Bluetooth: hci0: command 0x1003 tx timeout [ 217.499382][ T4237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.649941][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3852'. [ 218.701599][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3852'. [ 218.721891][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3852'. [ 218.728981][T16913] bond6: entered promiscuous mode [ 218.758353][T16913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.536636][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3874'. [ 221.551947][T16980] bond5: entered promiscuous mode [ 221.557352][T16980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.572947][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3874'. [ 221.582543][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3874'. [ 224.635209][T16986] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.754873][T17025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3894'. [ 224.812163][T17032] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3906'. [ 224.975296][T17032] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3906'. [ 225.098905][T17043] loop7: detected capacity change from 0 to 16384 [ 225.713582][T17069] ip6gre2: entered promiscuous mode [ 225.725141][T17069] ip6gre2: entered allmulticast mode [ 225.875000][T17044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.885740][T17083] netlink: 'syz.6.3909': attribute type 1 has an invalid length. [ 225.895340][T17083] netlink: 'syz.6.3909': attribute type 4 has an invalid length. [ 225.903090][T17083] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3909'. [ 225.983356][T17096] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3911'. [ 226.000547][T17096] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3911'. [ 226.084196][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 226.367760][ T28] audit: type=1400 audit(2000000367.804:2181): avc: denied { module_load } for pid=17127 comm="syz.6.3915" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=47798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 226.475175][T17140] ip6gre2: entered promiscuous mode [ 226.497508][T17128] Invalid ELF header magic: != ELF [ 226.577412][T17140] ip6gre2: entered allmulticast mode [ 227.066424][T17166] __nla_validate_parse: 3 callbacks suppressed [ 227.066442][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3926'. [ 227.082329][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3926'. [ 227.094304][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3926'. [ 227.113569][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3926'. [ 227.205035][T17165] loop8: detected capacity change from 0 to 1024 [ 227.224138][T17165] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 227.248870][ T28] audit: type=1400 audit(2000000368.694:2182): avc: denied { mac_admin } for pid=17164 comm="syz.8.3925" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.256274][T17165] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 227.463684][T17180] Invalid ELF header magic: != ELF [ 227.568296][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 228.714346][T17220] Invalid ELF header magic: != ELF [ 229.550067][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3963'. [ 230.828524][T17330] loop8: detected capacity change from 0 to 1024 [ 230.836882][T17330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 230.845075][T17330] System zones: 0-1, 3-36 [ 230.859894][T17330] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3989: bad orphan inode 134217728 [ 230.870750][T17330] loop8: lost filesystem error report for type 5 error -117 [ 230.871964][T17330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.943238][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.111547][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 231.128139][T17342] netlink: 'syz.4.3993': attribute type 30 has an invalid length. [ 231.872913][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4010'. [ 231.883458][T17379] netlink: 'syz.8.4010': attribute type 30 has an invalid length. [ 232.036155][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4011'. [ 232.046937][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4011'. [ 232.108607][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4017'. [ 232.582298][T17428] delete_channel: no stack [ 232.641105][T17435] loop8: detected capacity change from 0 to 512 [ 232.706371][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4035'. [ 232.716044][T17435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.886638][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.160400][ T28] audit: type=1400 audit(2000000374.604:2183): avc: denied { read } for pid=17458 comm="syz.9.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 233.678944][ T28] audit: type=1400 audit(2000000375.124:2184): avc: denied { map } for pid=17473 comm="syz.9.4047" path="socket:[53464]" dev="sockfs" ino=53464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 234.007067][ T28] audit: type=1400 audit(2000000375.454:2185): avc: denied { mounton } for pid=17490 comm="syz.8.4053" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 234.128860][ T28] audit: type=1400 audit(2000000375.554:2186): avc: denied { unmount } for pid=17499 comm="syz.5.4058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.194729][ T28] audit: type=1400 audit(2000000375.604:2187): avc: denied { unmount } for pid=6871 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.380527][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4063'. [ 234.382871][T17509] SELinux: failed to load policy [ 234.395748][ T28] audit: type=1400 audit(2000000375.824:2188): avc: denied { load_policy } for pid=17508 comm="syz.8.4062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 234.708498][T17518] syzkaller1: entered promiscuous mode [ 234.741641][T17518] syzkaller1: entered allmulticast mode [ 235.742669][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4082'. [ 235.917839][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4090'. [ 236.022542][T17581] syzkaller1: entered promiscuous mode [ 236.029576][T17581] syzkaller1: entered allmulticast mode [ 236.679651][T17602] batadv_slave_1: entered promiscuous mode [ 236.686886][T17602] batadv_slave_0: entered promiscuous mode [ 236.692981][T17601] batadv_slave_0: left promiscuous mode [ 236.706745][T17601] batadv_slave_1: left promiscuous mode [ 237.023813][T17612] netlink: 'syz.5.4107': attribute type 3 has an invalid length. [ 237.031679][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 237.177713][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4113'. [ 237.213557][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4113'. [ 237.244113][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4113'. [ 237.258393][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4113'. [ 237.265499][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4121'. [ 237.489534][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4129'. [ 237.570552][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 237.598727][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 237.617380][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4135'. [ 237.623615][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 239.666760][T17764] netlink: 'syz.8.4178': attribute type 6 has an invalid length. [ 241.436208][ T28] audit: type=1400 audit(2000000382.884:2189): avc: denied { read } for pid=17868 comm="syz.6.4218" path="socket:[61658]" dev="sockfs" ino=61658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.513980][ T28] audit: type=1400 audit(2000000382.954:2190): avc: denied { read } for pid=17874 comm="syz.6.4220" path="socket:[61669]" dev="sockfs" ino=61669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.291012][ T28] audit: type=1326 audit(2000000383.734:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17920 comm="syz.9.4238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa62037c799 code=0x0 [ 242.365931][T17928] __nla_validate_parse: 14 callbacks suppressed [ 242.365952][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4240'. [ 242.381944][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4240'. [ 242.586140][T17941] VFS: Mount too revealing [ 242.591024][ T28] audit: type=1400 audit(2000000384.034:2192): avc: denied { mounton } for pid=17940 comm="syz.4.4246" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.632969][T17944] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4247'. [ 242.691711][T17953] VFS: Mount too revealing [ 242.758380][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4253'. [ 242.768604][T17960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4253'. [ 243.000453][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4260'. [ 243.329084][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4264'. [ 243.471321][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4265'. [ 243.480729][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4265'. [ 243.670891][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4270'. [ 244.016986][T18018] VFS: Mount too revealing [ 244.153781][T18021] xt_hashlimit: size too large, truncated to 1048576 [ 244.352698][T18040] netlink: 'syz.5.4288': attribute type 1 has an invalid length. [ 244.362839][T18040] netlink: 'syz.5.4288': attribute type 4 has an invalid length. [ 245.030524][ T28] audit: type=1400 audit(2000000386.474:2193): avc: denied { ioctl } for pid=18062 comm="syz.9.4296" path="socket:[62470]" dev="sockfs" ino=62470 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.708427][T18077] loop8: detected capacity change from 0 to 512 [ 245.746557][T18077] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 245.830871][ T28] audit: type=1400 audit(2000000387.264:2194): avc: denied { mount } for pid=18079 comm="syz.8.4305" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 245.936383][T18086] sctp: [Deprecated]: syz.4.4304 (pid 18086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.936383][T18086] Use struct sctp_sack_info instead [ 246.157289][T18097] ipip1: entered promiscuous mode [ 247.258217][T18141] VFS: Mount too revealing [ 247.430945][T18155] sctp: [Deprecated]: syz.9.4332 (pid 18155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.430945][T18155] Use struct sctp_sack_info instead [ 247.811024][T18171] __nla_validate_parse: 9 callbacks suppressed [ 247.811057][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4340'. [ 247.878383][ T28] audit: type=1400 audit(2000000389.324:2195): avc: denied { bind } for pid=18172 comm="syz.4.4341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.929441][ T28] audit: type=1400 audit(2000000389.324:2196): avc: denied { name_bind } for pid=18172 comm="syz.4.4341" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 247.977766][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 247.986382][ T28] audit: type=1400 audit(2000000389.324:2197): avc: denied { node_bind } for pid=18172 comm="syz.4.4341" saddr=10.1.1.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 247.989521][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4342'. [ 248.351288][ T28] audit: type=1400 audit(2000000389.794:2198): avc: denied { remount } for pid=18194 comm="syz.9.4349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.499879][ T28] audit: type=1400 audit(2000000389.944:2199): avc: denied { ioctl } for pid=18198 comm="syz.9.4350" path="socket:[62048]" dev="sockfs" ino=62048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.526575][T18199] ipvlan2: entered promiscuous mode [ 248.532921][T18199] ipvlan2: entered allmulticast mode [ 248.557837][T18199] hsr0: entered allmulticast mode [ 248.572112][T18201] loop8: detected capacity change from 0 to 1024 [ 248.573372][T18199] hsr_slave_0: entered allmulticast mode [ 248.591413][T18199] hsr_slave_1: entered allmulticast mode [ 248.611758][T18199] team0: Device ipvlan2 failed to register rx_handler [ 248.626113][T18201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.646570][ T28] audit: type=1400 audit(2000000390.094:2200): avc: denied { map } for pid=18200 comm="syz.8.4351" path="/589/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.670459][ T28] audit: type=1400 audit(2000000390.094:2201): avc: denied { execute } for pid=18200 comm="syz.8.4351" path="/589/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.671630][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.732264][T18206] loop8: detected capacity change from 0 to 512 [ 248.754784][T18206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.774961][T18206] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.824605][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.917649][T18228] sctp: [Deprecated]: syz.8.4358 (pid 18228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.917649][T18228] Use struct sctp_sack_info instead [ 249.731114][T18239] ipvlan2: entered promiscuous mode [ 249.737461][T18239] ipvlan2: entered allmulticast mode [ 249.742872][T18239] hsr0: entered allmulticast mode [ 249.754725][T18239] hsr_slave_0: entered allmulticast mode [ 249.774714][T18239] hsr_slave_1: entered allmulticast mode [ 249.798204][T18247] netlink: 'syz.6.4369': attribute type 11 has an invalid length. [ 249.806746][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4369'. [ 249.817205][T18239] team0: Device ipvlan2 failed to register rx_handler [ 249.876636][T18247] netlink: 'syz.6.4369': attribute type 11 has an invalid length. [ 249.885639][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4369'. [ 249.984641][ T28] audit: type=1400 audit(2000000391.424:2202): avc: denied { bind } for pid=18251 comm="syz.4.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.242137][ T28] audit: type=1326 audit(2000000391.684:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 250.301967][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4383'. [ 250.314014][T18278] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4383'. [ 250.316840][ T28] audit: type=1326 audit(2000000391.684:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18272 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 250.323426][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4383'. [ 250.323525][T18278] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4383'. [ 250.467538][T18288] loop8: detected capacity change from 0 to 512 [ 250.486361][T18288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 250.569742][T18288] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4387: bad orphan inode 131083 [ 250.580525][T18288] loop8: lost filesystem error report for type 5 error -117 [ 250.581480][T18288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.644119][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.496525][T18345] geneve2: entered promiscuous mode [ 251.502000][T18345] geneve2: entered allmulticast mode [ 251.512129][T16146] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.522114][T16146] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.545727][T18350] batadv_slave_1: entered promiscuous mode [ 251.551810][T16146] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.562241][T18350] batadv_slave_0: entered promiscuous mode [ 251.568830][T18349] batadv_slave_0: left promiscuous mode [ 251.574713][T18349] batadv_slave_1: left promiscuous mode [ 251.594041][T16146] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.441200][T18393] netlink: 'syz.4.4428': attribute type 11 has an invalid length. [ 252.463042][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4428'. [ 252.489081][T18393] netlink: 'syz.4.4428': attribute type 11 has an invalid length. [ 253.546888][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 253.546904][ T28] audit: type=1326 audit(2000000394.994:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 253.588849][ T28] audit: type=1326 audit(2000000395.024:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 253.733711][ T28] audit: type=1326 audit(2000000395.024:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 253.814082][ T28] audit: type=1326 audit(2000000395.024:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e6026cfce code=0x7ffc0000 [ 253.894037][ T28] audit: type=1326 audit(2000000395.024:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.017476][ T28] audit: type=1326 audit(2000000395.024:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.149339][ T28] audit: type=1326 audit(2000000395.024:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.214126][ T28] audit: type=1326 audit(2000000395.024:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.272033][ T28] audit: type=1326 audit(2000000395.024:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.323200][ T28] audit: type=1326 audit(2000000395.024:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18427 comm="syz.8.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e602ac799 code=0x7ffc0000 [ 254.545158][T18447] __nla_validate_parse: 1 callbacks suppressed [ 254.545188][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4446'. [ 254.585307][T18447] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4446'. [ 254.639538][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4446'. [ 254.668887][T18447] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4446'. [ 256.201255][T18493] geneve3: entered promiscuous mode [ 256.252149][T18499] loop8: detected capacity change from 0 to 256 [ 256.396908][T18505] loop8: detected capacity change from 0 to 1024 [ 256.403698][T18505] EXT4-fs: Ignoring removed bh option [ 256.497573][T18505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.528743][T18505] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.560312][T18505] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.594469][T18505] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.644307][T18505] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.704341][T18505] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.774091][T18522] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.792272][T18522] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #15: comm syz.8.4471: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.825272][T18524] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.4471: Freeing blocks not in datazone - block = 0, count = 1 [ 256.995170][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.030212][T18528] loop8: detected capacity change from 0 to 512 [ 257.075898][T18528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.117287][T18528] ext4 filesystem being mounted at /616/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.233556][T18528] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.4477: corrupted inode contents [ 257.282228][T18528] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.4477: mark_inode_dirty error [ 257.377084][T18528] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.4477: corrupted inode contents [ 257.420460][T18528] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.4477: mark_inode_dirty error [ 257.491855][T18528] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.4477: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 257.491855][T18528] [ 257.600654][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.641157][T18548] netlink: 'syz.9.4485': attribute type 83 has an invalid length. [ 258.096216][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4502'. [ 258.723336][T18636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4516'. [ 258.814284][T18646] netlink: 'syz.5.4523': attribute type 4 has an invalid length. [ 258.852387][T18646] netlink: 'syz.5.4523': attribute type 4 has an invalid length. [ 259.196223][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4534'. [ 260.021468][T18703] netlink: 'syz.6.4548': attribute type 83 has an invalid length. [ 260.176807][T18705] netlink: 'syz.6.4549': attribute type 4 has an invalid length. [ 260.196995][T18705] netlink: 'syz.6.4549': attribute type 4 has an invalid length. [ 260.494407][T18712] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4561'. [ 260.528244][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4561'. [ 260.633369][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4557'. [ 260.651434][T18724] netlink: 'syz.4.4556': attribute type 1 has an invalid length. [ 260.661583][T18724] netlink: 'syz.4.4556': attribute type 4 has an invalid length. [ 260.708308][T18724] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4556'. [ 260.777657][T18732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18732 comm=syz.4.4560 [ 262.347284][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4576'. [ 262.389289][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4576'. [ 263.386876][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'. [ 263.426832][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4590'. [ 263.436134][T18809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4591'. [ 263.436485][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'. [ 263.616423][T18833] netem: incorrect gi model size [ 263.631600][T18833] netem: change failed [ 263.874036][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 263.874053][ T28] audit: type=1400 audit(2000000405.314:2236): avc: denied { map } for pid=18852 comm="syz.5.4621" path="socket:[63481]" dev="sockfs" ino=63481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 264.016772][ T28] audit: type=1326 audit(2000000405.464:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.094819][T18872] netem: incorrect gi model size [ 264.100109][T18872] netem: change failed [ 264.164433][ T28] audit: type=1326 audit(2000000405.494:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.253938][ T28] audit: type=1326 audit(2000000405.494:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.326317][ T28] audit: type=1326 audit(2000000405.494:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.373574][ T28] audit: type=1326 audit(2000000405.494:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.400162][ T28] audit: type=1326 audit(2000000405.494:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.484381][ T28] audit: type=1326 audit(2000000405.494:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.509232][ T28] audit: type=1326 audit(2000000405.494:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 264.541597][ T28] audit: type=1326 audit(2000000405.494:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18869 comm="syz.4.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7f86bfc799 code=0x7ffc0000 [ 266.432377][T19021] netlink: 'syz.9.4680': attribute type 6 has an invalid length. [ 266.440527][T19021] __nla_validate_parse: 9 callbacks suppressed [ 266.440542][T19021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4680'. [ 266.676219][T19041] bond3: (slave lo): Releasing backup interface [ 266.693441][T19041] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 266.718096][T19041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 267.014976][T19061] netlink: 'syz.6.4694': attribute type 6 has an invalid length. [ 267.033282][T19061] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4694'. [ 267.291086][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4702'. [ 267.306520][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4702'. [ 268.301599][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4730'. [ 268.516170][T19167] syz_tun: entered allmulticast mode [ 268.711876][T19166] syz_tun: left allmulticast mode [ 269.069839][T19184] loop8: detected capacity change from 0 to 512 [ 269.106767][T19184] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 269.137664][T19200] Process accounting resumed [ 269.178241][T19184] EXT4-fs (loop8): 1 truncate cleaned up [ 269.194497][T19184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.656087][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.807122][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4763'. [ 269.816630][T19229] netlink: 'syz.5.4763': attribute type 5 has an invalid length. [ 269.861613][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4763'. [ 269.908851][T19229] geneve3: entered promiscuous mode [ 269.938019][T19229] geneve3: entered allmulticast mode [ 269.956797][T16165] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 41849 - 0 [ 269.974792][T16165] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 41849 - 0 [ 269.992338][T16165] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 41849 - 0 [ 270.018943][T16165] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 41849 - 0 [ 270.253055][T19223] Invalid option length (1042149) for dns_resolver key [ 271.219611][T19284] tipc: Started in network mode [ 271.226679][T19284] tipc: Node identity ac14140f, cluster identity 4711 [ 271.233638][T19284] tipc: New replicast peer: 10.1.1.0 [ 271.249359][T19284] tipc: Enabled bearer , priority 10 [ 271.261758][T19284] tipc: New replicast peer: 100.1.1.2 [ 271.730535][T19292] Process accounting resumed [ 271.888895][T19310] netlink: 'syz.6.4795': attribute type 3 has an invalid length. [ 271.911540][T19310] netlink: 'syz.6.4795': attribute type 1 has an invalid length. [ 271.932698][T19310] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.4795'. [ 272.363926][ T3392] tipc: Node number set to 2886997007 [ 273.019922][T19348] loop8: detected capacity change from 0 to 1024 [ 273.085341][T19348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 273.098429][T19348] System zones: 0-1, 3-36 [ 273.112724][T19348] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4809: bad orphan inode 134217728 [ 273.125868][T19348] loop8: lost filesystem error report for type 5 error -117 [ 273.131880][T19348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.182492][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.202264][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 273.202283][ T28] audit: type=1400 audit(273.177:2309): avc: denied { accept } for pid=19369 comm="syz.5.4817" path="socket:[65003]" dev="sockfs" ino=65003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.284606][T19375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.292120][T19375] IPv6: NLM_F_CREATE should be set when creating new route [ 274.109593][T19403] netlink: 'syz.5.4833': attribute type 10 has an invalid length. [ 274.167841][T19411] ªªªªªª: renamed from vlan0 (while UP) [ 275.238127][T19466] netlink: 'syz.4.4860': attribute type 5 has an invalid length. [ 275.289651][T19468] bond2: (slave lo): Releasing backup interface [ 275.312998][T19468] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 275.410135][T19468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.227867][ T28] audit: type=1400 audit(276.207:2310): avc: denied { write } for pid=19522 comm="syz.9.4884" path="socket:[65232]" dev="sockfs" ino=65232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 276.453695][T19542] netlink: 'syz.6.4903': attribute type 10 has an invalid length. [ 276.668456][T19559] netlink: 'syz.9.4899': attribute type 5 has an invalid length. [ 277.353269][T19552] Invalid option length (1042149) for dns_resolver key [ 277.378103][T19584] syz_tun: entered allmulticast mode [ 277.584492][T19583] syz_tun: left allmulticast mode [ 278.552273][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4927'. [ 278.563304][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4927'. [ 279.530772][T19684] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 279.655039][ T28] audit: type=1400 audit(279.637:2311): avc: denied { read } for pid=7623 comm="kworker/0:16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70338 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 281.127921][ T28] audit: type=1400 audit(281.107:2312): avc: denied { setopt } for pid=19755 comm="syz.5.4981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.395292][T19775] netlink: 'syz.8.4989': attribute type 6 has an invalid length. [ 281.553938][ T28] audit: type=1400 audit(281.527:2313): avc: denied { mount } for pid=19785 comm="syz.5.4993" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 281.621560][T19787] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.633991][ T28] audit: type=1400 audit(281.537:2314): avc: denied { search } for pid=19785 comm="syz.5.4993" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 281.667786][T19787] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.683974][ T28] audit: type=1400 audit(281.537:2315): avc: denied { search } for pid=19785 comm="syz.5.4993" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 281.734441][ T28] audit: type=1400 audit(281.537:2316): avc: denied { read open } for pid=19785 comm="syz.5.4993" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 281.790379][T19767] netlink: 'syz.6.4996': attribute type 16 has an invalid length. [ 281.814553][T19767] netlink: 'syz.6.4996': attribute type 17 has an invalid length. [ 281.911211][T19767] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.938448][T19767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.269639][T19805] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 282.436024][T19824] netlink: 'syz.5.5010': attribute type 10 has an invalid length. [ 282.449656][T19824] team0: Port device dummy0 added [ 282.540109][ T28] audit: type=1400 audit(282.517:2317): avc: denied { map } for pid=19840 comm="syz.6.5013" path="socket:[66259]" dev="sockfs" ino=66259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.728525][T19867] tipc: Failed to remove unknown binding: 66,1,1/0:96386148/96386150 [ 282.753936][T19867] tipc: Failed to remove unknown binding: 66,1,1/0:96386148/96386150 [ 283.004659][ T28] audit: type=1326 audit(282.987:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f86bfc799 code=0x7fc00000 [ 283.087512][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5036'. [ 283.154317][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5036'. [ 283.526129][T19929] loop8: detected capacity change from 0 to 256 [ 283.540825][T19929] FAT-fs (loop8): Directory bread(block 64) failed [ 283.547812][T19929] FAT-fs (loop8): Directory bread(block 65) failed [ 283.554570][T19929] FAT-fs (loop8): Directory bread(block 66) failed [ 283.561153][T19929] FAT-fs (loop8): Directory bread(block 67) failed [ 283.568252][T19929] FAT-fs (loop8): Directory bread(block 68) failed [ 283.575182][T19929] FAT-fs (loop8): Directory bread(block 69) failed [ 283.582038][T19929] FAT-fs (loop8): Directory bread(block 70) failed [ 283.588786][T19929] FAT-fs (loop8): Directory bread(block 71) failed [ 283.595554][T19929] FAT-fs (loop8): Directory bread(block 72) failed [ 283.602207][T19929] FAT-fs (loop8): Directory bread(block 73) failed [ 283.650446][T19932] loop8: detected capacity change from 0 to 128 [ 283.662886][ T28] audit: type=1326 audit(283.637:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.5026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f86b9db19 code=0x7fc00000 [ 283.686618][T19932] syz.8.5049: attempt to access beyond end of device [ 283.686618][T19932] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 283.700885][T19932] syz.8.5049: attempt to access beyond end of device [ 283.700885][T19932] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 283.715313][T19932] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 283.725004][T19934] syz.8.5049: attempt to access beyond end of device [ 283.725004][T19934] loop8: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 283.750179][T19934] syz.8.5049: attempt to access beyond end of device [ 283.750179][T19934] loop8: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 283.772664][T19934] Buffer I/O error on dev loop8, logical block 77, lost async page write [ 285.792631][T20003] tipc: Failed to remove unknown binding: 66,1,1/0:1314968104/1314968106 [ 285.802135][T20003] tipc: Failed to remove unknown binding: 66,1,1/0:1314968104/1314968106 [ 285.827408][T20009] netlink: 'syz.9.5078': attribute type 10 has an invalid length. [ 286.111440][T20029] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5090'. [ 286.259761][T20037] loop8: detected capacity change from 0 to 128 [ 286.962129][ T28] audit: type=1400 audit(286.937:2320): avc: denied { name_connect } for pid=20125 comm="syz.4.5109" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 288.088410][ T28] audit: type=1326 audit(288.067:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.5.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7fc00000 [ 288.169623][ T28] audit: type=1400 audit(288.147:2322): avc: denied { create } for pid=20212 comm="syz.8.5125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.195996][ T28] audit: type=1400 audit(288.177:2323): avc: denied { write } for pid=20212 comm="syz.8.5125" path="socket:[79007]" dev="sockfs" ino=79007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.758515][ T28] audit: type=1326 audit(288.727:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20195 comm="syz.5.5119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9279aadb19 code=0x7fc00000 [ 288.820518][ T28] audit: type=1326 audit(288.797:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.5.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 288.851885][ T28] audit: type=1326 audit(288.797:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.5.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 288.877226][ T28] audit: type=1326 audit(288.797:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.5.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 288.901751][ T28] audit: type=1326 audit(288.797:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.5.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 288.939983][ T28] audit: type=1326 audit(288.797:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.5.5135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9279b0c799 code=0x7ffc0000 [ 289.070097][T20243] loop8: detected capacity change from 0 to 8192 [ 290.700832][T20306] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5164'. [ 290.791087][T20313] netlink: 642 bytes leftover after parsing attributes in process `syz.5.5169'. [ 291.768883][T20356] loop8: detected capacity change from 0 to 512 [ 291.780030][T20356] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.096118][T20343] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.103235][T20343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.195484][T20378] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.715148][T20401] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5203'. [ 293.862431][T20418] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 294.044773][T20437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20437 comm=syz.4.5228 [ 294.890511][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5224'. [ 295.175700][ T4237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.211391][T20477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20477 comm=syz.8.5237 [ 295.429310][T20482] loop8: detected capacity change from 0 to 2048 [ 295.487906][T20482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.574959][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.804406][T20496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5242'. [ 295.884731][T20466] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.891864][T20466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.958335][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 295.958353][ T28] audit: type=1400 audit(295.937:2350): avc: denied { write } for pid=20500 comm="syz.4.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 296.901692][T20540] loop8: detected capacity change from 0 to 512 [ 296.926264][T20540] EXT4-fs: Ignoring removed nobh option [ 296.953239][T20540] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 296.991957][T20540] EXT4-fs (loop8): 1 truncate cleaned up [ 297.002503][T20540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.311226][ T6871] ================================================================== [ 297.319620][ T6871] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 297.327032][ T6871] [ 297.329371][ T6871] read-write to 0xffff888107a68230 of 8 bytes by interrupt on cpu 1: [ 297.337449][ T6871] __xa_clear_mark+0xf5/0x1e0 [ 297.342239][ T6871] __folio_end_writeback+0xf4/0x360 [ 297.347560][ T6871] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 297.353905][ T6871] folio_end_writeback+0x1c/0x70 [ 297.358860][ T6871] ext4_finish_bio+0x459/0x8b0 [ 297.363647][ T6871] ext4_end_bio+0x27b/0x380 [ 297.368261][ T6871] bio_endio+0x38a/0x420 [ 297.372528][ T6871] blk_update_request+0x338/0x740 [ 297.377765][ T6871] blk_mq_end_request+0x26/0x50 [ 297.382649][ T6871] lo_complete_rq+0x98/0x140 [ 297.387365][ T6871] blk_done_softirq+0x77/0xb0 [ 297.392067][ T6871] handle_softirqs+0xb9/0x2a0 [ 297.396768][ T6871] run_ksoftirqd+0x1c/0x30 [ 297.401214][ T6871] smpboot_thread_fn+0x32a/0x510 [ 297.406272][ T6871] kthread+0x22a/0x280 [ 297.410529][ T6871] ret_from_fork+0x150/0x360 [ 297.415465][ T6871] ret_from_fork_asm+0x1a/0x30 [ 297.420332][ T6871] [ 297.422654][ T6871] read to 0xffff888107a68230 of 8 bytes by task 6871 on cpu 0: [ 297.430465][ T6871] xas_find_marked+0x213/0x620 [ 297.435242][ T6871] filemap_get_folios_tag+0xfa/0x510 [ 297.440533][ T6871] filemap_fdatawait_keep_errors+0x6c/0x190 [ 297.446443][ T6871] sync_inodes_sb+0x40e/0x4c0 [ 297.451132][ T6871] sync_filesystem+0x102/0x190 [ 297.455902][ T6871] generic_shutdown_super+0x4c/0x220 [ 297.461372][ T6871] kill_block_super+0x2a/0x70 [ 297.466149][ T6871] ext4_kill_sb+0x42/0x80 [ 297.470663][ T6871] deactivate_locked_super+0x75/0x1c0 [ 297.476235][ T6871] deactivate_super+0x97/0xa0 [ 297.481025][ T6871] cleanup_mnt+0x2bb/0x330 [ 297.485469][ T6871] __cleanup_mnt+0x19/0x20 [ 297.489992][ T6871] task_work_run+0x130/0x1a0 [ 297.494849][ T6871] exit_to_user_mode_loop+0x1f4/0x6f0 [ 297.500398][ T6871] do_syscall_64+0x249/0x370 [ 297.505086][ T6871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.511068][ T6871] [ 297.513388][ T6871] value changed: 0x003ffffffffffffe -> 0x003fffffffffff40 [ 297.520579][ T6871] [ 297.522903][ T6871] Reported by Kernel Concurrency Sanitizer on: [ 297.529056][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 297.538606][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.548662][ T6871] ================================================================== [ 297.645111][ T6871] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.