last executing test programs: 2m6.903709808s ago: executing program 32 (id=25): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x68, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1m59.131700093s ago: executing program 0 (id=168): socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x40, &(0x7f0000000040)={0x0, 0x4012, 0xc000, 0x8, 0x3e5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m59.057884236s ago: executing program 0 (id=169): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="015aabe76a000000000000020400000005000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000000)='\r', 0x1}], 0x1}, 0x4000044) 1m59.024382007s ago: executing program 0 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@dioread_nolock}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0x4000000007}}, {@dont_appraise}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.815555524s ago: executing program 0 (id=175): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x40, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m58.575197181s ago: executing program 0 (id=181): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.339775599s ago: executing program 0 (id=187): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m58.339516049s ago: executing program 33 (id=187): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m56.863196858s ago: executing program 3 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'ipvlan1\x00', 0x400}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x54) 1m55.673628137s ago: executing program 3 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 1m55.628009428s ago: executing program 3 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000005c0)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m55.518276292s ago: executing program 3 (id=224): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 1m54.768673046s ago: executing program 3 (id=234): creat(0x0, 0xd931d3864d39dcdb) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) execveat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 1m54.3367031s ago: executing program 3 (id=241): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) close(0x3) 1m54.330365771s ago: executing program 34 (id=241): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) close(0x3) 1m52.666812935s ago: executing program 5 (id=264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300"], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1m52.392679604s ago: executing program 5 (id=267): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000003c0)='./file1\x00', 0x0) 1m51.456488665s ago: executing program 5 (id=290): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 1m51.260851301s ago: executing program 5 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m51.238718882s ago: executing program 5 (id=297): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m50.788634977s ago: executing program 5 (id=303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_io_uring_setup(0x5add, &(0x7f0000000440)={0x0, 0x231a, 0x100, 0xffffffff, 0xd}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 1m50.788385287s ago: executing program 35 (id=303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_io_uring_setup(0x5add, &(0x7f0000000440)={0x0, 0x231a, 0x100, 0xffffffff, 0xd}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 1m47.247495773s ago: executing program 8 (id=304): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES64=r1], 0xfdef) 1m47.096109368s ago: executing program 8 (id=349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r1, 0x0, 0x0) 1m46.065387482s ago: executing program 8 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1m45.896501717s ago: executing program 8 (id=360): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000840)={[{@auto_da_alloc}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@data_ordered}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000003c0)=0x11) 1m45.112705173s ago: executing program 8 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) 1m45.112536113s ago: executing program 36 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x4040000) 1m28.262178685s ago: executing program 1 (id=698): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@orlov}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) lseek(r0, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 1m27.935249436s ago: executing program 1 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m27.835744759s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) 1m27.597402227s ago: executing program 1 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) 1m27.554845569s ago: executing program 1 (id=714): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x4) lchown(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x80006, 0x4101, 0x4000000000000b, 0xffffffffffffffff, 0x939, 0x400000400, 0x80000000000a, 0x5, 0x100, 0x7, 0x2, 0xffffffffffffffff, 0x82, 0x761c9023, 0x3ff, 0x0, 0x2, 0x3, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) 1m27.295207677s ago: executing program 1 (id=721): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m27.277391698s ago: executing program 37 (id=721): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m2.937511397s ago: executing program 4 (id=948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m2.705252754s ago: executing program 4 (id=942): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x411b}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m1.766005045s ago: executing program 4 (id=946): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffd, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0xa}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000540)="eb", 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m1.765716795s ago: executing program 2 (id=947): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000001300)=0xffff0002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x1800, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r1, 0x8, 0x0, 0x8000) 1m1.412623657s ago: executing program 2 (id=955): socket$inet(0x2, 0x803, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000834000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x771f, 0x33, 0x0, 0x0) 1m1.168939824s ago: executing program 4 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) 1m1.113497397s ago: executing program 2 (id=960): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1m0.977642421s ago: executing program 6 (id=962): r0 = socket$inet6(0xa, 0x80001, 0x0) fchdir(r0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070000823b3b670200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000050000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x0, {{0xa, 0x4e20, 0x1, @mcast1, 0x5}}, 0x1}, 0x90) 1m0.939090522s ago: executing program 4 (id=963): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001640)="33e302e6", 0x4}], 0x1}, 0x40810) 59.440620172s ago: executing program 2 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r0, 0x2f}, 0x20) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="27031c", 0x3}], 0x1}, 0x2400800c) 57.132343657s ago: executing program 4 (id=965): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) 55.792740862s ago: executing program 6 (id=967): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 55.344137087s ago: executing program 7 (id=968): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setns(r3, 0x4000000) 51.828794023s ago: executing program 2 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100"], 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x20044800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c010) 51.239131282s ago: executing program 7 (id=970): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x6, 0x8, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac141410ac14141f00000000280000000000000000"], 0x48}, 0xd0) 48.844837811s ago: executing program 6 (id=972): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@delalloc}, {@orlov}]}, 0xff, 0x26c, &(0x7f00000002c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x10, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 46.776417549s ago: executing program 2 (id=973): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 44.227298073s ago: executing program 6 (id=975): socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 43.429477169s ago: executing program 7 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x1, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x9, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd44, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0xf, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 41.742338435s ago: executing program 6 (id=978): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 39.511730698s ago: executing program 38 (id=965): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x1) 38.227880651s ago: executing program 6 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 35.017625766s ago: executing program 9 (id=982): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174673d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc3704389136c9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2c0, &(0x7f0000000380)="$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") shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 31.133086104s ago: executing program 9 (id=983): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0xee01) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) sendto(r0, &(0x7f00000005c0)="a1bfc48b", 0x4, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 29.707996111s ago: executing program 39 (id=973): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 27.774651885s ago: executing program 9 (id=985): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.478311785s ago: executing program 7 (id=986): timer_create(0x0, &(0x7f0000000200)={0x0, 0x31, 0xfffffffffffffffe, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x195) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000140)=[{0x4, 0x10, 0x1800}], 0x5) semop(r0, &(0x7f0000000300)=[{0x3, 0x81, 0x1000}, {0x2, 0x7ff}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 24.033743938s ago: executing program 9 (id=987): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x0, 0x0, 0x2, 0xff, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040d3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 22.954429963s ago: executing program 7 (id=988): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4092, 0xffc}], 0x1}, 0x100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 21.352855816s ago: executing program 40 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 20.6357871s ago: executing program 9 (id=990): creat(&(0x7f0000000000)='./file0\x00', 0x6a) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x12000921) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r1, 0x0, 0x4, 0xa) 18.674091835s ago: executing program 7 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 17.574567211s ago: executing program 9 (id=992): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.919018756s ago: executing program 41 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 0s ago: executing program 42 (id=992): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): 32.588457][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.601423][ T3565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 32.628972][ T3666] loop0: detected capacity change from 0 to 2048 [ 32.629193][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.647753][ T3666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.659462][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 32.665320][ T3666] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.702058][ T3565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 32.722892][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.734116][ T3565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.857109][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.870823][ T3565] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.878805][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 32.896720][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.903900][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.921321][ T2278] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.928481][ T2278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.185129][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 33.207720][ T3674] netlink: 5 bytes leftover after parsing attributes in process `syz.1.53'. [ 33.230941][ T3674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 33.250498][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.318157][ T3747] loop2: detected capacity change from 0 to 128 [ 33.436060][ T3763] sctp: [Deprecated]: syz.0.70 (pid 3763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.436060][ T3763] Use struct sctp_sack_info instead [ 33.517526][ T3763] loop0: detected capacity change from 0 to 2048 [ 33.625295][ T3565] veth0_vlan: entered promiscuous mode [ 33.647657][ T3565] veth1_vlan: entered promiscuous mode [ 33.669138][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 33.707794][ T3565] veth0_macvtap: entered promiscuous mode [ 33.730454][ T3565] veth1_macvtap: entered promiscuous mode [ 33.751264][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.772067][ T3763] loop0: p3 < > p4 < > [ 33.776524][ T3763] loop0: partition table partially beyond EOD, truncated [ 33.784433][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.794781][ T3763] loop0: p3 start 4284289 is beyond EOD, truncated [ 33.802384][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.825004][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.837779][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.854763][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.891204][ T3793] loop1: detected capacity change from 0 to 256 [ 33.912585][ T3793] vfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 34.388570][ T3828] loop1: detected capacity change from 0 to 512 [ 34.434038][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.525468][ T3837] syz.1.87 (3837) used greatest stack depth: 9712 bytes left [ 34.589093][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111103000: rx timeout, send abort [ 34.699283][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.774128][ T3849] EXT4-fs: Ignoring removed bh option [ 34.785857][ T3849] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 34.802452][ T3849] EXT4-fs (loop5): 1 truncate cleaned up [ 34.815958][ T3849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.816306][ T3853] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 34.860246][ T3853] team0: Failed to send options change via netlink (err -105) [ 34.867925][ T3853] team0: Port device dummy0 added [ 34.885077][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.891864][ T3853] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 34.902651][ T3853] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 34.917078][ T3853] team0: Failed to send options change via netlink (err -105) [ 34.927623][ T3853] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 34.945396][ T3853] team0: Port device dummy0 removed [ 34.958832][ T3853] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.024738][ T3862] set_capacity_and_notify: 1 callbacks suppressed [ 35.024754][ T3862] loop0: detected capacity change from 0 to 512 [ 35.073769][ T3862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.085754][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111103200: rx timeout, send abort [ 35.099984][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111103000: abort rx timeout. Force session deactivation [ 35.139761][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.168330][ T3862] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.185383][ T3876] loop3: detected capacity change from 0 to 512 [ 35.199330][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.208861][ T3862] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 35.221164][ T3862] EXT4-fs: Cannot change journaled quota options when quota turned on [ 35.241184][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.251133][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.343028][ T3891] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 35.594013][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111103200: abort rx timeout. Force session deactivation [ 35.632723][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 35.632741][ T28] audit: type=1400 audit(1780444555.385:337): avc: denied { read } for pid=3906 comm="syz.3.116" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.662429][ T28] audit: type=1400 audit(1780444555.385:338): avc: denied { open } for pid=3906 comm="syz.3.116" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.688913][ T28] audit: type=1400 audit(1780444555.385:339): avc: denied { ioctl } for pid=3906 comm="syz.3.116" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 35.797705][ T28] audit: type=1400 audit(1780444555.555:340): avc: denied { create } for pid=3915 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.817426][ T28] audit: type=1400 audit(1780444555.555:341): avc: denied { write } for pid=3915 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.994757][ T3925] loop1: detected capacity change from 0 to 128 [ 36.019213][ T3925] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.124897][ T1020] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.622338][ T3948] loop1: detected capacity change from 0 to 8192 [ 36.666761][ T3952] loop5: detected capacity change from 0 to 1024 [ 36.712927][ T3948] loop1: p1 p2 p3 [ 36.716949][ T3948] loop1: p1 start 51379968 is beyond EOD, truncated [ 36.727429][ T28] audit: type=1400 audit(1780444556.465:342): avc: denied { read write } for pid=3956 comm="syz.0.138" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.734083][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.756708][ T28] audit: type=1400 audit(1780444556.465:343): avc: denied { open } for pid=3956 comm="syz.0.138" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.788493][ T3948] loop1: p3 size 100663552 extends beyond EOD, truncated [ 36.876176][ T3948] FAT-fs (loop1p2): bogus number of reserved sectors [ 36.883123][ T28] audit: type=1400 audit(1780444556.485:344): avc: denied { read write } for pid=3950 comm="syz.5.135" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.909349][ T3948] FAT-fs (loop1p2): Can't find a valid FAT filesystem [ 36.923989][ T28] audit: type=1400 audit(1780444556.485:345): avc: denied { open } for pid=3950 comm="syz.5.135" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.954958][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.966938][ T28] audit: type=1400 audit(1780444556.485:346): avc: denied { ioctl } for pid=3950 comm="syz.5.135" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.986543][ T3970] loop3: detected capacity change from 0 to 2048 [ 37.054006][ T3970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.109918][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.779470][ T4011] loop5: detected capacity change from 0 to 512 [ 37.822644][ T4011] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #11: comm syz.5.162: unexpected EA_INODE flag [ 37.865333][ T4011] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.866863][ T4011] EXT4-fs (loop5): Remounting filesystem read-only [ 37.876246][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 37.876281][ C1] EXT4-fs (loop5): initial error at time 1780444557: ext4_orphan_get:1397: inode 11 [ 37.876314][ C1] EXT4-fs (loop5): last error at time 1780444557: ext4_orphan_get:1397: inode 11 [ 37.910034][ T4011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.958593][ T4022] loop1: detected capacity change from 0 to 512 [ 37.992032][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.005262][ T4022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 38.013228][ T4022] System zones: 1-12 [ 38.020872][ T4022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.163: error while reading EA inode 32 err=-116 [ 38.034824][ T4022] loop1: lost filesystem error report for type 5 error -117 [ 38.035220][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 38.045368][ T4022] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.049009][ C1] EXT4-fs (loop1): initial error at time 1780444557: ext4_xattr_inode_iget:446 [ 38.067790][ T4022] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.163: error while reading EA inode 32 err=-116 [ 38.070908][ C1] EXT4-fs (loop1): last error at time 1780444557: ext4_xattr_inode_iget:446 [ 38.168043][ T4022] loop1: lost filesystem error report for type 5 error -117 [ 38.168412][ T4022] EXT4-fs (loop1): 1 orphan inode deleted [ 38.196811][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.248744][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.256761][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.293225][ T4036] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 38.302648][ T4022] __nla_validate_parse: 2 callbacks suppressed [ 38.302665][ T4022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 38.319287][ T4038] loop0: detected capacity change from 0 to 4096 [ 38.319585][ T4038] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 38.376147][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.463297][ T4052] loop0: detected capacity change from 0 to 1024 [ 38.500477][ T4052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.512646][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 38.543507][ T4052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.577088][ T4056] syzkaller0: entered promiscuous mode [ 38.590779][ T4052] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.593970][ T4056] syzkaller0: entered allmulticast mode [ 38.656280][ T4052] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 38.677728][ T3300] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 38.695382][ T3300] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 38.722294][ T4069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 38.891124][ T2278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.968334][ T2278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.020487][ T2278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.070716][ T2278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.186824][ T2278] bridge_slave_1: left allmulticast mode [ 39.192618][ T2278] bridge_slave_1: left promiscuous mode [ 39.199214][ T2278] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.207267][ T2278] bridge_slave_0: left allmulticast mode [ 39.212944][ T2278] bridge_slave_0: left promiscuous mode [ 39.218887][ T2278] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.470735][ T2278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.484778][ T2278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.495106][ T2278] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 39.504386][ T2278] bond0 (unregistering): Released all slaves [ 39.512280][ T4082] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.519678][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.527098][ T4082] bridge_slave_0: entered allmulticast mode [ 39.533720][ T4082] bridge_slave_0: entered promiscuous mode [ 39.540639][ T4082] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.547866][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.555143][ T4082] bridge_slave_1: entered allmulticast mode [ 39.561780][ T4082] bridge_slave_1: entered promiscuous mode [ 39.583171][ T2278] hsr_slave_0: left promiscuous mode [ 39.589659][ T2278] hsr_slave_1: left promiscuous mode [ 39.598296][ T2278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.606191][ T2278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.613697][ T2278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.621224][ T2278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.630906][ T2278] veth1_macvtap: left promiscuous mode [ 39.637149][ T2278] veth0_macvtap: left promiscuous mode [ 39.647096][ T2278] veth1_vlan: left promiscuous mode [ 39.652446][ T2278] veth0_vlan: left promiscuous mode [ 39.746781][ T2278] team0 (unregistering): Port device team_slave_1 removed [ 39.764426][ T2278] team0 (unregistering): Port device team_slave_0 removed [ 39.817598][ T4082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.841679][ T4082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.910371][ T4082] team0: Port device team_slave_0 added [ 39.944405][ T4082] team0: Port device team_slave_1 added [ 40.007409][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.016610][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.072214][ T4082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.106770][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 40.123135][ T4082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.138340][ T4082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.177350][ T4082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.298759][ T4082] hsr_slave_0: entered promiscuous mode [ 40.299861][ T4178] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 40.304978][ T4082] hsr_slave_1: entered promiscuous mode [ 40.358591][ T4178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.401568][ T4182] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 40.659843][ T4207] netlink: 'syz.2.214': attribute type 10 has an invalid length. [ 41.506085][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.519341][ T4207] team0: Port device dummy0 added [ 41.533281][ T4212] tipc: Started in network mode [ 41.544969][ T4212] tipc: Node identity ac14140f, cluster identity 4711 [ 41.552321][ T4212] tipc: New replicast peer: 255.255.255.255 [ 41.558518][ T4212] tipc: Enabled bearer , priority 10 [ 41.618504][ T4082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.640397][ T4082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.655263][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 41.655327][ T28] audit: type=1400 audit(1780444561.405:406): avc: denied { read } for pid=4226 comm="syz.5.221" name="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.691564][ T4082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.700549][ T28] audit: type=1400 audit(1780444561.405:407): avc: denied { read open } for pid=4226 comm="syz.5.221" path="/" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.725110][ T4082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.744013][ T4234] loop3: detected capacity change from 0 to 1024 [ 41.746037][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 41.768314][ T4234] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 41.778926][ T28] audit: type=1400 audit(1780444561.535:408): avc: denied { name_bind } for pid=4237 comm="syz.5.225" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.778987][ T4234] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 41.810405][ T4234] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.224: Failed to acquire dquot type 0 [ 41.811873][ T4082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.821995][ T4234] loop3: lost filesystem error report for type 5 error -117 [ 41.832410][ T4082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.835955][ T4234] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 41.840566][ T4082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.846864][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 41.846886][ C1] EXT4-fs (loop3): initial error at time 1780444561: ext4_acquire_dquot:7034 [ 41.876483][ C1] EXT4-fs (loop3): last error at time 1780444561: ext4_acquire_dquot:7034 [ 41.885138][ T4234] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.898678][ T4082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.909126][ T4235] vxlan0: entered promiscuous mode [ 41.917859][ T39] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.922137][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.224: corrupted inode contents [ 41.935394][ T39] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.938728][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.947517][ T4234] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #13: comm syz.3.224: mark_inode_dirty error [ 41.968171][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.968473][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.224: corrupted inode contents [ 41.974355][ T39] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.977816][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.000689][ T4234] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.224: mark_inode_dirty error [ 42.023067][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.023249][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.224: corrupted inode contents [ 42.045271][ T39] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.046569][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.055652][ T4234] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 42.084926][ T4234] loop3: lost filesystem error report for type 5 error -117 [ 42.085695][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.224: corrupted inode contents [ 42.124750][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.125704][ T4234] EXT4-fs error (device loop3): ext4_truncate:4690: inode #13: comm syz.3.224: mark_inode_dirty error [ 42.156817][ T4082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.162989][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 42.164395][ T4234] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 42.188317][ T4082] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.189302][ T28] audit: type=1400 audit(1780444561.945:409): avc: denied { write } for pid=4251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.222219][ T4234] loop3: lost filesystem error report for type 5 error -117 [ 42.222833][ T2278] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.237300][ T2278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.239597][ T28] audit: type=1400 audit(1780444562.005:410): avc: denied { write } for pid=4269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.252744][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.273496][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.284128][ T4234] EXT4-fs (loop3): 1 truncate cleaned up [ 42.290682][ T4234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.335149][ T4277] loop2: detected capacity change from 0 to 256 [ 42.360017][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 42.404898][ T4277] FAT-fs (loop2): Directory bread(block 64) failed [ 42.412076][ T4277] FAT-fs (loop2): Directory bread(block 65) failed [ 42.442881][ T4277] FAT-fs (loop2): Directory bread(block 66) failed [ 42.450149][ T28] audit: type=1400 audit(1780444562.195:411): avc: denied { mounton } for pid=4233 comm="syz.3.224" path="/57/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.473278][ T4277] FAT-fs (loop2): Directory bread(block 67) failed [ 42.482232][ T3303] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 74: comm syz-executor: path /57/file0/lost+found: bad entry in directory: directory entry overrun - offset=768, inode=0, rec_len=1024, size=1024 fake=0 [ 42.484748][ T4277] FAT-fs (loop2): Directory bread(block 68) failed [ 42.532792][ T4082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.546406][ T4277] FAT-fs (loop2): Directory bread(block 69) failed [ 42.565844][ T4277] FAT-fs (loop2): Directory bread(block 70) failed [ 42.566480][ T3303] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 42.572418][ T28] audit: type=1400 audit(1780444562.325:412): avc: denied { write } for pid=3303 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.603823][ T3392] tipc: Node number set to 2886997007 [ 42.609466][ T4277] FAT-fs (loop2): Directory bread(block 71) failed [ 42.621994][ T4277] FAT-fs (loop2): Directory bread(block 72) failed [ 42.642054][ T4277] FAT-fs (loop2): Directory bread(block 73) failed [ 42.673452][ T3303] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 0 [ 42.698749][ T4317] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 42.720268][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 42.725582][ T4317] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 42.745553][ T4317] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.237'. [ 42.762948][ T3303] bond0: (slave syz_tun): Releasing backup interface [ 42.768749][ T4277] syz.2.233: attempt to access beyond end of device [ 42.768749][ T4277] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 42.818708][ T4277] syz.2.233: attempt to access beyond end of device [ 42.818708][ T4277] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 42.840870][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.853264][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.887289][ T4082] veth0_vlan: entered promiscuous mode [ 42.899436][ T4082] veth1_vlan: entered promiscuous mode [ 42.921379][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.944747][ T4082] veth0_macvtap: entered promiscuous mode [ 42.973468][ T4082] veth1_macvtap: entered promiscuous mode [ 43.001082][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.039377][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.072364][ T4082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.102877][ T4348] loop1: detected capacity change from 0 to 4096 [ 43.114918][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.133530][ T4348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.139756][ T4361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.250'. [ 43.184375][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.202296][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.328950][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.338128][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.439232][ T12] bridge_slave_1: left allmulticast mode [ 43.445645][ T12] bridge_slave_1: left promiscuous mode [ 43.451867][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.452840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.471015][ T12] bridge_slave_0: left allmulticast mode [ 43.483791][ T12] bridge_slave_0: left promiscuous mode [ 43.497389][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.602392][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.612641][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.622248][ T12] bond0 (unregistering): Released all slaves [ 43.642390][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 43.659229][ T4405] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 43.681837][ T4405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.698215][ T12] hsr_slave_0: left promiscuous mode [ 43.703986][ T12] hsr_slave_1: left promiscuous mode [ 43.709589][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.717507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.725183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.733199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.746027][ T12] veth1_macvtap: left promiscuous mode [ 43.753521][ T12] veth0_macvtap: left promiscuous mode [ 43.760157][ T12] veth1_vlan: left promiscuous mode [ 43.772283][ T12] veth0_vlan: left promiscuous mode [ 43.830676][ T12] team0 (unregistering): Port device team_slave_1 removed [ 43.840334][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.032019][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.049291][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.068290][ T4344] bridge_slave_0: entered allmulticast mode [ 44.092239][ T4344] bridge_slave_0: entered promiscuous mode [ 44.099343][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.106730][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.114009][ T4344] bridge_slave_1: entered allmulticast mode [ 44.120813][ T4344] bridge_slave_1: entered promiscuous mode [ 44.128603][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 44.151245][ T4344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.172419][ T4344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.519418][ T4344] team0: Port device team_slave_0 added [ 44.531572][ T4458] loop1: detected capacity change from 0 to 512 [ 44.532547][ T4344] team0: Port device team_slave_1 added [ 44.575683][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 44.598809][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.627520][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.661927][ T4344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.673831][ T4344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.681058][ T4344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.707602][ T4344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.809620][ T4344] hsr_slave_0: entered promiscuous mode [ 44.818940][ T4344] hsr_slave_1: entered promiscuous mode [ 44.824943][ T4344] debugfs: 'hsr0' already exists in 'hsr' [ 44.831072][ T4344] Cannot create hsr debugfs directory [ 45.232681][ T4486] loop1: detected capacity change from 0 to 256 [ 45.439294][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 45.500859][ T4503] loop6: detected capacity change from 0 to 256 [ 45.536223][ T4502] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 45.609528][ T4521] loop1: detected capacity change from 0 to 1024 [ 45.636979][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.649705][ T4521] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.664013][ T4521] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 45.682321][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.398759][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.438851][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.489316][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.540513][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.556564][ T4577] ªªªªªª: renamed from vlan0 (while UP) [ 46.598119][ T4579] netlink: 'syz.1.306': attribute type 10 has an invalid length. [ 46.606329][ T4579] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.306'. [ 46.680485][ T39] bridge_slave_1: left allmulticast mode [ 46.691039][ T39] bridge_slave_1: left promiscuous mode [ 46.699002][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.706834][ T39] bridge_slave_0: left allmulticast mode [ 46.712526][ T39] bridge_slave_0: left promiscuous mode [ 46.718882][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.754947][ T4588] loop1: detected capacity change from 0 to 512 [ 46.763730][ T4588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.779237][ T4588] EXT4-fs (loop1): 1 truncate cleaned up [ 46.785771][ T4588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.812413][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.825529][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.846925][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.859579][ T39] bond0 (unregistering): Released all slaves [ 46.920586][ T4599] sctp: [Deprecated]: syz.6.313 (pid 4599) Use of int in max_burst socket option. [ 46.920586][ T4599] Use struct sctp_assoc_value instead [ 46.936670][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 46.936687][ T28] audit: type=1400 audit(46.900:434): avc: denied { connect } for pid=4601 comm="syz.1.314" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.964864][ T28] audit: type=1400 audit(46.910:435): avc: denied { write } for pid=4601 comm="syz.1.314" laddr=::ffff:127.0.0.1 lport=255 faddr=::ffff:127.0.0.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.999216][ T39] tipc: Disabling bearer [ 47.007443][ T39] tipc: Left network mode [ 47.017377][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.024606][ T4567] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.032073][ T4567] bridge_slave_0: entered allmulticast mode [ 47.038775][ T4567] bridge_slave_0: entered promiscuous mode [ 47.049781][ T39] hsr_slave_0: left promiscuous mode [ 47.050586][ T4599] loop6: detected capacity change from 0 to 128 [ 47.065110][ T39] hsr_slave_1: left promiscuous mode [ 47.072091][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.087544][ T4599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 47.096076][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.103380][ T4599] System zones: 1-3, 19-19, 35-36 [ 47.112853][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.121602][ T4599] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.134385][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.147049][ T39] veth1_macvtap: left promiscuous mode [ 47.152692][ T4599] EXT4-fs warning (device loop6): ext4_group_extend:1861: can't shrink FS - resize aborted [ 47.162903][ T39] veth0_macvtap: left promiscuous mode [ 47.163032][ T39] veth1_vlan: left promiscuous mode [ 47.163085][ T39] veth0_vlan: left promiscuous mode [ 47.181259][ T28] audit: type=1400 audit(47.140:436): avc: denied { create } for pid=4614 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.215749][ T28] audit: type=1400 audit(47.140:437): avc: denied { bind } for pid=4614 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.238400][ T28] audit: type=1400 audit(47.140:438): avc: denied { listen } for pid=4614 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.267761][ T4082] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.268320][ T28] audit: type=1400 audit(47.140:439): avc: denied { connect } for pid=4614 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.317555][ T39] team0 (unregistering): Port device team_slave_1 removed [ 47.324863][ T28] audit: type=1326 audit(47.290:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 47.352713][ T28] audit: type=1326 audit(47.290:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 47.378600][ T39] team0 (unregistering): Port device team_slave_0 removed [ 47.414357][ T28] audit: type=1326 audit(47.290:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 47.439947][ T28] audit: type=1326 audit(47.290:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4618 comm="syz.1.321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 47.470651][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.486614][ T4567] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.508387][ T4567] bridge_slave_1: entered allmulticast mode [ 47.515182][ T4567] bridge_slave_1: entered promiscuous mode [ 47.560588][ T4567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.572080][ T4567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.584707][ T4625] netlink: 'syz.6.324': attribute type 21 has an invalid length. [ 47.592058][ T4567] team0: Port device team_slave_0 added [ 47.602738][ T4567] team0: Port device team_slave_1 added [ 47.613980][ T4625] netlink: 132 bytes leftover after parsing attributes in process `syz.6.324'. [ 47.629438][ T4567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.636574][ T4567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.663909][ T4567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.676670][ T4567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.688022][ T4567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.735175][ T4567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.757354][ T4470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.768271][ T4344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 47.786842][ T4344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.795843][ T4344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 47.827284][ T4344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.857032][ T4344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 47.883686][ T4344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.902813][ T4567] hsr_slave_0: entered promiscuous mode [ 47.909884][ T4567] hsr_slave_1: entered promiscuous mode [ 47.919619][ T4567] debugfs: 'hsr0' already exists in 'hsr' [ 47.935439][ T4567] Cannot create hsr debugfs directory [ 47.958424][ T4344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 47.968998][ T4344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.068247][ T4344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.092928][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 48.111628][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.121164][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.121360][ T4344] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.148408][ T4567] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 48.159655][ T4567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.177001][ T4567] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 48.203083][ T4567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.221092][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.228263][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.243492][ T4567] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 48.259680][ T4567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.269400][ T4567] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 48.279900][ T4567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.295320][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.301920][ T4628] loop6: detected capacity change from 0 to 512 [ 48.302423][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.410760][ T4567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.440054][ T4567] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.452942][ T4628] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.472508][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.479624][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.494614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.501786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.539696][ T4567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.572737][ T4567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.677525][ T4344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.852864][ T4567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.942044][ T4628] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.044264][ T4628] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.325: bg 0: block 248: padding at end of block bitmap is not set [ 49.112635][ T4628] loop6: lost filesystem error report for type 5 error -117 [ 49.125283][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 49.142382][ C0] EXT4-fs (loop6): last error at time 49: ext4_validate_block_bitmap:441 [ 49.147894][ T4344] veth0_vlan: entered promiscuous mode [ 49.164497][ T4344] veth1_vlan: entered promiscuous mode [ 49.222861][ T4344] veth0_macvtap: entered promiscuous mode [ 49.252729][ T4344] veth1_macvtap: entered promiscuous mode [ 49.254364][ T4628] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.325: Failed to acquire dquot type 1 [ 49.302741][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.316465][ T4344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.363235][ T4628] loop6: lost filesystem error report for type 5 error -28 [ 49.397060][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.403979][ T4628] EXT4-fs (loop6): 1 truncate cleaned up [ 49.407140][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.407213][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.407248][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.473381][ T4567] veth0_vlan: entered promiscuous mode [ 49.492175][ T4567] veth1_vlan: entered promiscuous mode [ 49.543119][ T4567] veth0_macvtap: entered promiscuous mode [ 49.562270][ T4567] veth1_macvtap: entered promiscuous mode [ 49.602928][ T4567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.639228][ T4567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.663485][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.676599][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.715884][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.735250][ T4811] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 49.764768][ T4628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 49.812085][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829682][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 50.155635][ T4628] syz.6.325 (4628) used greatest stack depth: 8064 bytes left [ 50.166212][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 50.175727][ T68] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 50.206308][ T68] loop6: lost filesystem error report for type 5 error -117 [ 50.344542][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 50.820635][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 50.829241][ T4842] loop7: detected capacity change from 0 to 32768 [ 50.839608][ T4887] loop6: detected capacity change from 0 to 1024 [ 50.878608][ T4887] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.899375][ T4842] loop7: p1 p3 < > [ 50.937211][ T4887] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.357: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.009267][ T4887] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.013395][ T4887] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.357: Failed to acquire dquot type 0 [ 51.022801][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 51.022836][ C0] EXT4-fs (loop6): initial error at time 50: ext4_map_blocks:833: inode 3: block 1 [ 51.022871][ C0] EXT4-fs (loop6): last error at time 50: ext4_map_blocks:833: inode 3: block 1 [ 51.081618][ T4894] loop7: detected capacity change from 0 to 1024 [ 51.084088][ T4887] loop6: lost filesystem error report for type 5 error -117 [ 51.095607][ T4887] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.357: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.124500][ T4894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.154820][ T4887] loop6: lost filesystem error report for type 5 error -117 [ 51.155106][ T4887] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.357: Invalid inode bitmap blk 0 in block_group 0 [ 51.176122][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 51.186939][ T49] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.192492][ T4894] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.358: Bad quota inum: 1, type: 0 [ 51.217047][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 51.227921][ T4894] loop7: lost filesystem error report for type 5 error -117 [ 51.228035][ T4894] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 51.235428][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 51.235459][ C0] EXT4-fs (loop7): initial error at time 51: ext4_quota_enable:7221 [ 51.235484][ C0] EXT4-fs (loop7): last error at time 51: ext4_quota_enable:7221 [ 51.246700][ T4887] loop6: lost filesystem error report for type 5 error -117 [ 51.251558][ T4894] EXT4-fs (loop7): mount failed [ 51.259002][ T49] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.312549][ T4887] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 51.363927][ T49] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 51.377115][ T4887] loop6: lost filesystem error report for type 5 error -117 [ 51.378653][ T4887] EXT4-fs (loop6): 1 orphan inode deleted [ 51.410579][ T49] loop6: lost filesystem error report for type 5 error -117 [ 51.414106][ T4887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.440245][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 51.512147][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.728711][ T4931] netlink: 100 bytes leftover after parsing attributes in process `syz.2.367'. [ 51.929773][ T4947] netlink: 'syz.7.371': attribute type 13 has an invalid length. [ 52.387739][ T4952] loop2: detected capacity change from 0 to 32768 [ 52.449197][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 52.449216][ T28] audit: type=1400 audit(52.420:494): avc: denied { read } for pid=4964 comm="syz.1.379" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.500354][ T4952] loop2: p1 p3 < > [ 52.528305][ T39] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.528967][ T28] audit: type=1400 audit(52.420:495): avc: denied { open } for pid=4964 comm="syz.1.379" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.579044][ T28] audit: type=1400 audit(52.470:496): avc: denied { ioctl } for pid=4964 comm="syz.1.379" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.618028][ T39] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.689008][ T28] audit: type=1400 audit(52.660:497): avc: denied { mount } for pid=4976 comm="syz.1.381" name="/" dev="autofs" ino=11423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 52.756583][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.757618][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 52.820207][ T39] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.830727][ T28] audit: type=1400 audit(52.790:498): avc: denied { bind } for pid=4987 comm="syz.7.385" lport=54399 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 52.898200][ T28] audit: type=1400 audit(52.810:499): avc: denied { name_bind } for pid=4987 comm="syz.7.385" src=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.939348][ T39] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.992360][ T28] audit: type=1400 audit(52.810:500): avc: denied { node_bind } for pid=4987 comm="syz.7.385" saddr=255.255.255.255 src=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 53.152313][ T39] bridge_slave_1: left allmulticast mode [ 53.158075][ T39] bridge_slave_1: left promiscuous mode [ 53.166871][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.390'. [ 53.175461][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.196302][ T39] bridge_slave_0: left allmulticast mode [ 53.202006][ T39] bridge_slave_0: left promiscuous mode [ 53.218194][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.229726][ T5014] loop6: detected capacity change from 0 to 512 [ 53.269501][ T5014] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.392: corrupted in-inode xattr: invalid ea_ino [ 53.298411][ T5014] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.298618][ T5014] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.392: couldn't read orphan inode 15 (err -117) [ 53.307877][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 53.307912][ C1] EXT4-fs (loop6): initial error at time 53: ext4_iget_extra_inode:5128: inode 15 [ 53.307949][ C1] EXT4-fs (loop6): last error at time 53: ext4_iget_extra_inode:5128: inode 15 [ 53.330597][ T28] audit: type=1400 audit(53.300:501): avc: denied { write } for pid=5002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.335584][ T5014] loop6: lost filesystem error report for type 5 error -117 [ 53.344833][ T5020] netlink: 20 bytes leftover after parsing attributes in process `syz.7.393'. [ 53.388123][ T5014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.429965][ T28] audit: type=1400 audit(53.400:502): avc: denied { write } for pid=5026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.467097][ T28] audit: type=1400 audit(53.430:503): avc: denied { write } for pid=5013 comm="syz.6.392" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.506493][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.531208][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.544968][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.560650][ T39] bond0 (unregistering): Released all slaves [ 53.594399][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 53.657257][ T39] hsr_slave_0: left promiscuous mode [ 53.678070][ T5043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.397'. [ 53.687084][ T39] hsr_slave_1: left promiscuous mode [ 53.692879][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.700710][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.708562][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.716342][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.727020][ T39] veth1_macvtap: left promiscuous mode [ 53.730785][ T5044] netlink: 'syz.2.397': attribute type 39 has an invalid length. [ 53.732798][ T39] veth0_macvtap: left promiscuous mode [ 53.746449][ T39] veth1_vlan: left promiscuous mode [ 53.751826][ T39] veth0_vlan: left promiscuous mode [ 53.815256][ T39] team0 (unregistering): Port device team_slave_1 removed [ 53.824833][ T39] team0 (unregistering): Port device team_slave_0 removed [ 53.875434][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.882568][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.890527][ T4960] bridge_slave_0: entered allmulticast mode [ 53.897650][ T4960] bridge_slave_0: entered promiscuous mode [ 53.904600][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.911755][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.919357][ T4960] bridge_slave_1: entered allmulticast mode [ 53.925777][ T4960] bridge_slave_1: entered promiscuous mode [ 53.944436][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.955101][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.976986][ T4960] team0: Port device team_slave_0 added [ 53.983705][ T4960] team0: Port device team_slave_1 added [ 53.999658][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.006673][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.035370][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.050793][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.065328][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.093643][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.120678][ T5062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 54.131140][ T4960] hsr_slave_0: entered promiscuous mode [ 54.137677][ T4960] hsr_slave_1: entered promiscuous mode [ 54.143884][ T4960] debugfs: 'hsr0' already exists in 'hsr' [ 54.145380][ T5062] netlink: 'syz.1.401': attribute type 7 has an invalid length. [ 54.149835][ T4960] Cannot create hsr debugfs directory [ 54.163699][ T5062] netlink: 'syz.1.401': attribute type 8 has an invalid length. [ 54.191319][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 54.201567][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 54.283332][ T4960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 54.298055][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.309867][ T4960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 54.327252][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.337695][ T4960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 54.351683][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.361985][ T4960] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 54.372986][ T5070] loop1: detected capacity change from 0 to 512 [ 54.379936][ T4960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.390656][ T5070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.413168][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.420432][ T4960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.427748][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.434882][ T4960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.467349][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.493873][ T5091] can0: slcan on ttyS3. [ 54.512445][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.519217][ T5093] loop7: detected capacity change from 0 to 128 [ 54.523164][ T4960] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.554782][ T5093] syz.7.404: attempt to access beyond end of device [ 54.554782][ T5093] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 54.572584][ T5093] syz.7.404: attempt to access beyond end of device [ 54.572584][ T5093] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 54.588179][ T5093] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 54.598525][ T5093] syz.7.404: attempt to access beyond end of device [ 54.598525][ T5093] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 54.612486][ T5093] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 54.635816][ T5092] syz.7.404: attempt to access beyond end of device [ 54.635816][ T5092] loop7: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 54.652024][ T5092] syz.7.404: attempt to access beyond end of device [ 54.652024][ T5092] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 54.652183][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.667329][ T5092] syz.7.404: attempt to access beyond end of device [ 54.667329][ T5092] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 54.689072][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 54.704225][ T5097] syz.7.404: attempt to access beyond end of device [ 54.704225][ T5097] loop7: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 54.728757][ T5091] can0 (unregistered): slcan off ttyS3. [ 54.763783][ T5097] syz.7.404: attempt to access beyond end of device [ 54.763783][ T5097] loop7: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 54.991592][ T5130] pim6reg: entered allmulticast mode [ 55.022370][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.043865][ T5130] pim6reg: left allmulticast mode [ 55.429544][ T4960] veth0_vlan: entered promiscuous mode [ 55.459902][ T4960] veth1_vlan: entered promiscuous mode [ 55.526450][ T4960] veth0_macvtap: entered promiscuous mode [ 55.560376][ T4960] veth1_macvtap: entered promiscuous mode [ 55.592375][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.623454][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.657473][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.673879][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.695056][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 55.709996][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.727742][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.882111][ T5267] loop7: detected capacity change from 0 to 512 [ 55.930703][ T5267] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.960348][ T5267] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 55.992805][ T5267] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.421: inode #15: comm syz.7.421: iget: illegal inode # [ 56.018035][ T5267] loop7: lost filesystem error report for type 5 error -117 [ 56.020365][ T5267] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.421: couldn't read orphan inode 15 (err -117) [ 56.027781][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 56.027802][ C0] EXT4-fs (loop7): initial error at time 55: ext4_orphan_get:1397 [ 56.027825][ C0] EXT4-fs (loop7): last error at time 55: ext4_orphan_get:1397 [ 56.061894][ T5267] loop7: lost filesystem error report for type 5 error -117 [ 56.063722][ T5267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.096816][ T5281] loop6: detected capacity change from 0 to 256 [ 56.114905][ T5267] EXT4-fs (loop7): shut down requested (2) [ 56.121603][ T5267] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 56.137902][ T5298] loop2: detected capacity change from 0 to 4096 [ 56.139448][ T5267] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 56.205500][ T5298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.309262][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.584519][ T5338] loop1: detected capacity change from 0 to 4096 [ 56.601057][ T5338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.638975][ T5338] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 56.669566][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.842036][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.887593][ T5353] lo: Caught tx_queue_len zero misconfig [ 57.038411][ T5361] mmap: syz.7.441 (5361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.172850][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.187401][ T5364] netlink: 'syz.6.442': attribute type 1 has an invalid length. [ 57.252893][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.443'. [ 57.284654][ T5364] gretap1: entered allmulticast mode [ 57.306099][ T5364] bond1: (slave gretap1): making interface the new active one [ 57.314537][ T5364] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.488170][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 57.488215][ T28] audit: type=1400 audit(57.460:544): avc: denied { execute } for pid=5390 comm="syz.9.450" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 57.889515][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.459'. [ 57.903550][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.459'. [ 58.003705][ T28] audit: type=1400 audit(57.970:545): avc: denied { read } for pid=5422 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.407560][ T28] audit: type=1400 audit(58.370:546): avc: denied { write } for pid=5435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.479253][ T28] audit: type=1400 audit(58.450:547): avc: denied { write } for pid=5456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.668399][ T28] audit: type=1400 audit(58.640:548): avc: denied { block_suspend } for pid=5469 comm="syz.9.476" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.706487][ T28] audit: type=1400 audit(58.680:549): avc: denied { ioctl } for pid=5475 comm="syz.7.480" path="socket:[13500]" dev="sockfs" ino=13500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.731181][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.738403][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.762802][ T5482] loop2: detected capacity change from 0 to 512 [ 58.789566][ T5482] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.802926][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.810063][ T5477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.817499][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.824629][ T5477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.853806][ T5477] bridge0: entered promiscuous mode [ 58.859261][ T5477] bridge0: entered allmulticast mode [ 58.863662][ T5482] EXT4-fs (loop2): 1 truncate cleaned up [ 58.883888][ T5482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.936653][ T28] audit: type=1400 audit(58.910:550): avc: denied { create } for pid=5489 comm="syz.9.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.946238][ T5494] loop6: detected capacity change from 0 to 512 [ 58.985316][ T28] audit: type=1400 audit(58.910:551): avc: denied { ioctl } for pid=5489 comm="syz.9.483" path="socket:[12999]" dev="sockfs" ino=12999 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.020484][ T5494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.059924][ T28] audit: type=1400 audit(59.030:552): avc: denied { write } for pid=5493 comm="syz.6.485" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.100817][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.206520][ T28] audit: type=1400 audit(59.170:553): avc: denied { create } for pid=5496 comm="syz.7.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.224710][ T5497] loop7: detected capacity change from 0 to 512 [ 59.277318][ T5497] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.486: bg 0: block 5: invalid block bitmap [ 59.327721][ T5497] loop7: lost filesystem error report for type 5 error -117 [ 59.328268][ T5497] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 59.335649][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 59.335671][ C1] EXT4-fs (loop7): initial error at time 59: ext4_validate_block_bitmap:432 [ 59.335693][ C1] EXT4-fs (loop7): last error at time 59: ext4_validate_block_bitmap:432 [ 59.437093][ T5497] loop7: lost filesystem error report for type 5 error -117 [ 59.437416][ T5497] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.486: invalid indirect mapped block 3 (level 2) [ 59.466365][ T5497] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.466658][ T5497] EXT4-fs (loop7): 2 truncates cleaned up [ 59.484544][ T5497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.672691][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.839780][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.086770][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.505'. [ 60.110413][ T5544] loop2: detected capacity change from 0 to 128 [ 60.256983][ T5562] netlink: 60 bytes leftover after parsing attributes in process `syz.7.513'. [ 60.260358][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 60.362296][ T5567] loop7: detected capacity change from 0 to 2048 [ 60.408255][ T5567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.464116][ T5582] sctp: [Deprecated]: syz.6.522 (pid 5582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.464116][ T5582] Use struct sctp_sack_info instead [ 60.583452][ T5587] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.515: bg 0: block 345: padding at end of block bitmap is not set [ 60.607773][ T5593] loop1: detected capacity change from 0 to 128 [ 60.615581][ T5587] EXT4-fs (loop7): Remounting filesystem read-only [ 60.625502][ T5276] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 60.902368][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.269170][ T5607] netlink: 5 bytes leftover after parsing attributes in process `syz.7.532'. [ 61.279528][ T5607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.453108][ T5625] Zero length message leads to an empty skb [ 61.716233][ T5649] loop7: detected capacity change from 0 to 512 [ 61.740358][ T5649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.839335][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.123915][ T5692] loop1: detected capacity change from 0 to 128 [ 62.218219][ T5700] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 62.301998][ T5700] bond2: entered promiscuous mode [ 62.317032][ T5700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.360855][ T5711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.392489][ T5711] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 62.402972][ T5711] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 62.415043][ T5711] bond2: (slave ip6gre1): making interface the new active one [ 62.422638][ T5711] ip6gre1: entered promiscuous mode [ 62.431262][ T5711] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 62.545033][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 62.545049][ T28] audit: type=1400 audit(62.510:602): avc: denied { write } for pid=5722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.574812][ T28] audit: type=1400 audit(62.530:603): avc: denied { write } for pid=5741 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.699742][ T28] audit: type=1400 audit(62.670:604): avc: denied { write } for pid=5746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.727985][ T28] audit: type=1400 audit(62.690:605): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.810012][ T28] audit: type=1400 audit(62.780:606): avc: denied { append } for pid=5780 comm="syz.7.573" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.001197][ T28] audit: type=1400 audit(62.970:607): avc: denied { setopt } for pid=5795 comm="syz.9.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.028839][ T28] audit: type=1400 audit(62.970:608): avc: denied { shutdown } for pid=5795 comm="syz.9.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.163394][ T5813] netlink: 6068 bytes leftover after parsing attributes in process `syz.7.589'. [ 63.262245][ T5821] loop7: detected capacity change from 0 to 1024 [ 63.271114][ T5821] EXT4-fs: Ignoring removed bh option [ 63.301004][ T5821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.326665][ T28] audit: type=1400 audit(63.300:609): avc: denied { write } for pid=5820 comm="syz.7.593" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.366545][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.406321][ T5834] af_packet: tpacket_rcv: packet too big, clamped from 64726 to 3944. macoff=96 [ 63.438762][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.599'. [ 63.509561][ T28] audit: type=1400 audit(63.480:610): avc: denied { write } for pid=5836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.541809][ T5848] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 63.544106][ T28] audit: type=1400 audit(63.510:611): avc: denied { write } for pid=5857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.937415][ T5904] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 64.063875][ T5929] loop6: detected capacity change from 0 to 512 [ 64.114575][ T5929] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 64.160971][ T5929] EXT4-fs (loop6): bad block size 32768 [ 64.239918][ T5917] netlink: 277 bytes leftover after parsing attributes in process `syz.6.620'. [ 64.278664][ T5950] raw_sendmsg: syz.6.626 forgot to set AF_INET. Fix it! [ 65.628426][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.642'. [ 66.164744][ T6008] loop1: detected capacity change from 0 to 1024 [ 66.186642][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.207888][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.299528][ T6013] loop9: detected capacity change from 0 to 2048 [ 66.325054][ T6013] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.349855][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.655'. [ 66.471099][ T4960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.563977][ T6028] loop2: detected capacity change from 0 to 1024 [ 66.574070][ T6028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.604095][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.624649][ T6028] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.648764][ T6028] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 66.710406][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.742921][ T6031] syzkaller0: entered promiscuous mode [ 66.752339][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 66.764521][ T6031] syzkaller0: entered allmulticast mode [ 66.803510][ T4691] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 66.813463][ T4691] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.866036][ T6037] loop1: detected capacity change from 0 to 4096 [ 66.901972][ T6037] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 66.987016][ T6044] netlink: 7 bytes leftover after parsing attributes in process `syz.2.673'. [ 67.086327][ T6059] loop2: detected capacity change from 0 to 512 [ 67.098183][ T6059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 67.106607][ T6059] System zones: 1-12 [ 67.111488][ T6059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.664: error while reading EA inode 32 err=-116 [ 67.123980][ T6059] loop2: lost filesystem error report for type 5 error -117 [ 67.127289][ T6059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.664: error while reading EA inode 32 err=-116 [ 67.142338][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 67.153465][ C1] EXT4-fs (loop2): initial error at time 67: ext4_xattr_inode_iget:446 [ 67.161755][ C1] EXT4-fs (loop2): last error at time 67: ext4_xattr_inode_iget:446 [ 67.181092][ T6059] loop2: lost filesystem error report for type 5 error -117 [ 67.181979][ T6059] EXT4-fs (loop2): 1 orphan inode deleted [ 67.196143][ T6059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.214391][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 67.267396][ T6070] loop7: detected capacity change from 0 to 512 [ 67.288910][ T6070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.315710][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.540924][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.710124][ T6089] netlink: 'syz.6.677': attribute type 1 has an invalid length. [ 67.749847][ T6089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.800876][ T6094] bond2: (slave geneve2): making interface the new active one [ 67.826691][ T6094] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 67.896082][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 67.896157][ T28] audit: type=1326 audit(67.725:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 67.962689][ T28] audit: type=1326 audit(67.762:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.021054][ T28] audit: type=1326 audit(67.762:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.098671][ T28] audit: type=1326 audit(67.762:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.185817][ T6114] loop9: detected capacity change from 0 to 512 [ 68.196722][ T28] audit: type=1326 audit(67.762:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.251398][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 68.263617][ T28] audit: type=1326 audit(67.762:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.306274][ T28] audit: type=1326 audit(67.762:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.340733][ T28] audit: type=1326 audit(67.762:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.351571][ T6114] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.390652][ T6114] EXT4-fs (loop9): group descriptors corrupted! [ 68.424284][ T28] audit: type=1326 audit(67.762:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.463930][ T6133] loop1: detected capacity change from 0 to 512 [ 68.483343][ T6133] EXT4-fs: Ignoring removed orlov option [ 68.500656][ T6133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.514694][ T28] audit: type=1326 audit(67.762:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6096 comm="syz.1.679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1818abce59 code=0x7ffc0000 [ 68.522615][ T6078] loop2: detected capacity change from 0 to 512 [ 68.561104][ T6133] EXT4-fs (loop1): 1 truncate cleaned up [ 68.567730][ T6133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.648153][ T6150] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 68.663941][ T6150] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.690: invalid indirect mapped block 9 (level 0) [ 68.677940][ T6150] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.679237][ T6150] EXT4-fs (loop6): 1 truncate cleaned up [ 68.688449][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 68.688471][ C0] EXT4-fs (loop6): initial error at time 68: ext4_free_branches:1023: inode 11 [ 68.688521][ C0] EXT4-fs (loop6): last error at time 68: ext4_free_branches:1023: inode 11 [ 68.713698][ T6157] netlink: 7 bytes leftover after parsing attributes in process `syz.9.692'. [ 68.751675][ T6078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.755720][ T6150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.812616][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.859397][ T6078] EXT4-fs (loop2): 1 orphan inode deleted [ 68.869295][ T6078] EXT4-fs (loop2): 1 truncate cleaned up [ 68.959722][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.068128][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.074676][ T6184] EXT4-fs: Ignoring removed orlov option [ 69.082999][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.141736][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.179973][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.219028][ T6184] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.698: bg 0: block 234: padding at end of block bitmap is not set [ 69.251966][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 69.265894][ T6184] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 69.295544][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.343251][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.387102][ T6204] netlink: 'syz.2.705': attribute type 21 has an invalid length. [ 69.387161][ T6204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.705'. [ 69.594426][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.594517][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.714434][ T6223] set_capacity_and_notify: 2 callbacks suppressed [ 69.714450][ T6223] loop7: detected capacity change from 0 to 256 [ 70.035492][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.052265][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.119876][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.131538][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.166743][ T6263] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 70.187081][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.198811][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.301550][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.320185][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.476962][ T6282] loop6: detected capacity change from 0 to 4096 [ 70.505301][ T6282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.561860][ T12] bridge_slave_1: left allmulticast mode [ 70.576679][ T6282] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 70.596409][ T12] bridge_slave_1: left promiscuous mode [ 70.609975][ T6282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.616984][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.634338][ T12] bridge_slave_0: left allmulticast mode [ 70.642641][ T12] bridge_slave_0: left promiscuous mode [ 70.648652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.734790][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.752593][ T12] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 70.763293][ T12] ip6gre1 (unregistering): left promiscuous mode [ 70.876778][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.990804][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.036361][ T12] bond0 (unregistering): Released all slaves [ 71.050832][ T12] bond1 (unregistering): Released all slaves [ 71.060295][ T12] bond2 (unregistering): Released all slaves [ 71.083869][ T6308] can0: slcan on ttyS3. [ 71.085168][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 71.119387][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.146367][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.156814][ T6308] can0 (unregistered): slcan off ttyS3. [ 71.172924][ T6253] bridge_slave_0: entered allmulticast mode [ 71.179505][ T6253] bridge_slave_0: entered promiscuous mode [ 71.186466][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.193618][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.207943][ T6253] bridge_slave_1: entered allmulticast mode [ 71.227712][ T6253] bridge_slave_1: entered promiscuous mode [ 71.240735][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.7.743'. [ 71.252249][ T12] hsr_slave_0: left promiscuous mode [ 71.266260][ T12] hsr_slave_1: left promiscuous mode [ 71.273109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.282432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.289986][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.306357][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.7.743'. [ 71.311563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.327149][ T12] veth1_macvtap: left promiscuous mode [ 71.332703][ T12] veth0_macvtap: left promiscuous mode [ 71.338538][ T12] veth1_vlan: left promiscuous mode [ 71.344123][ T12] veth0_vlan: left promiscuous mode [ 71.419247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.429031][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.496671][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.510478][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.537881][ T6253] team0: Port device team_slave_0 added [ 71.544720][ T6253] team0: Port device team_slave_1 added [ 71.570323][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.577318][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.604734][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.623015][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.630166][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.656834][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.668219][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 71.705014][ T6253] hsr_slave_0: entered promiscuous mode [ 71.716292][ T6253] hsr_slave_1: entered promiscuous mode [ 71.725197][ T6253] debugfs: 'hsr0' already exists in 'hsr' [ 71.731375][ T6253] Cannot create hsr debugfs directory [ 71.899317][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 72.048674][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 72.189285][ T6253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.200356][ T6253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.208780][ T6253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.218013][ T6253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.225953][ T6253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.236456][ T6253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.244440][ T6253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.257619][ T6253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.311801][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.330332][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.338742][ T6374] loop7: detected capacity change from 0 to 512 [ 72.340060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.352979][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.386947][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.394067][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.405181][ T6439] netlink: 'syz.6.762': attribute type 10 has an invalid length. [ 72.410144][ T6253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.425232][ T6253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.464063][ T6439] syz_tun: entered promiscuous mode [ 72.470796][ T6374] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 72.474190][ T6439] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 72.610593][ T6461] sg_write: data in/out 1701604413/14 bytes for SCSI command 0x0-- guessing data in; [ 72.610593][ T6461] program syz.6.754 not setting count and/or reply_len properly [ 72.696159][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.789590][ T6374] EXT4-fs (loop7): 1 orphan inode deleted [ 72.808885][ T6374] EXT4-fs (loop7): 1 truncate cleaned up [ 72.879438][ T6374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.913174][ T6253] veth0_vlan: entered promiscuous mode [ 72.922912][ T6253] veth1_vlan: entered promiscuous mode [ 72.941470][ T6253] veth0_macvtap: entered promiscuous mode [ 72.959487][ T6253] veth1_macvtap: entered promiscuous mode [ 72.976834][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.995584][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.007227][ T5276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.018180][ T5276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.031130][ T5276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040565][ T5276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.064132][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.089679][ T6511] loop6: detected capacity change from 0 to 512 [ 73.115133][ T6514] netlink: 124 bytes leftover after parsing attributes in process `syz.4.723'. [ 73.115557][ T6511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.146278][ T6511] EXT4-fs (loop6): 1 truncate cleaned up [ 73.153496][ T6511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.170981][ T6516] can0: slcan on ttyS3. [ 73.248148][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 73.248164][ T28] audit: type=1400 audit(72.739:706): avc: denied { write } for pid=6509 comm="syz.6.757" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.347649][ T6516] can0 (unregistered): slcan off ttyS3. [ 73.359311][ T28] audit: type=1400 audit(72.832:707): avc: denied { ioctl } for pid=6509 comm="syz.6.757" path="/107/file1/file1" dev="loop6" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.413006][ T28] audit: type=1400 audit(72.879:708): avc: denied { unlink } for pid=6509 comm="syz.6.757" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.456358][ T28] audit: type=1400 audit(72.879:709): avc: denied { write } for pid=6509 comm="syz.6.757" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.478198][ T3641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.484479][ T28] audit: type=1400 audit(72.879:710): avc: denied { link } for pid=6509 comm="syz.6.757" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.545074][ T28] audit: type=1400 audit(72.982:711): avc: denied { write } for pid=6520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.586792][ T4082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.619126][ T28] audit: type=1400 audit(73.047:712): avc: denied { write } for pid=6539 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.732354][ T6552] loop4: detected capacity change from 0 to 512 [ 73.875922][ T28] audit: type=1400 audit(73.319:713): avc: denied { write } for pid=6553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.952800][ T28] audit: type=1400 audit(73.393:714): avc: denied { write } for pid=6571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.974960][ T6570] sctp: [Deprecated]: syz.2.766 (pid 6570) Use of int in max_burst socket option. [ 73.974960][ T6570] Use struct sctp_assoc_value instead [ 74.010330][ T6573] loop2: detected capacity change from 0 to 128 [ 74.026244][ T6573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 74.045874][ T6573] System zones: 1-3, 19-19, 35-36 [ 74.073234][ T6573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.140246][ T6570] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 74.194777][ T28] audit: type=1400 audit(73.618:715): avc: denied { write } for pid=6574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.765386][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.812978][ T6617] loop2: detected capacity change from 0 to 256 [ 74.828125][ T6616] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 75.748451][ T6707] loop2: detected capacity change from 0 to 256 [ 75.767027][ T6707] vfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 75.867823][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 75.901259][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 75.920154][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 75.940358][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 76.077137][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.802'. [ 76.105430][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.802'. [ 76.614879][ T6738] netlink: 48 bytes leftover after parsing attributes in process `syz.6.806'. [ 76.806451][ T6744] netlink: 7 bytes leftover after parsing attributes in process `syz.6.808'. [ 76.895397][ T6748] loop7: detected capacity change from 0 to 512 [ 76.952561][ T6748] EXT4-fs: Ignoring removed orlov option [ 77.037361][ T6748] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 77.086586][ T6748] EXT4-fs (loop7): 1 truncate cleaned up [ 77.099253][ T6748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.108445][ T6728] loop9: detected capacity change from 0 to 512 [ 77.193919][ T6728] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 77.313050][ T4344] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.360209][ T6728] EXT4-fs (loop9): 1 orphan inode deleted [ 77.414025][ T6728] EXT4-fs (loop9): 1 truncate cleaned up [ 77.456344][ T6728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.745265][ T6776] netlink: 'syz.7.820': attribute type 10 has an invalid length. [ 77.799889][ T6776] team0: Port device dummy0 added [ 77.849808][ T4960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.855806][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.822'. [ 77.931976][ T6779] ip6erspan0: entered promiscuous mode [ 78.018378][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.7.823'. [ 78.789128][ T6722] loop2: detected capacity change from 0 to 1764 [ 79.731558][ T6819] loop4: detected capacity change from 0 to 512 [ 79.975888][ T6819] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.139776][ T6841] loop6: detected capacity change from 0 to 512 [ 80.405216][ T6841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.433224][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 80.433300][ T28] audit: type=1400 audit(79.455:733): avc: denied { write } for pid=6838 comm="syz.6.839" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.494166][ T28] audit: type=1400 audit(79.492:734): avc: denied { write } for pid=6849 comm="syz.6.839" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.584807][ T28] audit: type=1400 audit(79.492:735): avc: denied { write } for pid=4082 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.627035][ T28] audit: type=1400 audit(79.492:736): avc: denied { write } for pid=4082 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.672727][ T28] audit: type=1400 audit(79.492:737): avc: denied { write } for pid=4082 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.720384][ T28] audit: type=1400 audit(79.492:738): avc: denied { write } for pid=4082 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.766135][ T28] audit: type=1400 audit(79.492:739): avc: denied { unlink } for pid=4082 comm="syz-executor" name="core" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.813371][ T28] audit: type=1400 audit(79.492:740): avc: denied { write } for pid=4082 comm="syz-executor" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.865593][ T28] audit: type=1400 audit(79.492:741): avc: denied { write } for pid=4082 comm="syz-executor" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.915171][ T28] audit: type=1400 audit(79.502:742): avc: denied { unlink } for pid=4082 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.791063][ T6849] bond0: (slave syz_tun): Releasing backup interface [ 82.828113][ T6849] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.994407][ T6874] sctp: [Deprecated]: syz.7.862 (pid 6874) Use of int in max_burst socket option. [ 82.994407][ T6874] Use struct sctp_assoc_value instead [ 83.026380][ T5255] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.111768][ T6879] loop7: detected capacity change from 0 to 128 [ 83.219584][ T6819] EXT4-fs (loop4): 1 orphan inode deleted [ 83.239272][ T6819] EXT4-fs (loop4): 1 truncate cleaned up [ 83.341937][ T6819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.485453][ T6253] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.495346][ T6879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 83.503622][ T6879] System zones: 1-3, 19-19, 35-36 [ 83.516397][ T6879] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.537109][ T5255] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.621215][ T6874] EXT4-fs warning (device loop7): ext4_group_extend:1861: can't shrink FS - resize aborted [ 83.670801][ T5255] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.722738][ T4344] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.773052][ T5255] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.929710][ T5255] bridge_slave_1: left allmulticast mode [ 83.935474][ T5255] bridge_slave_1: left promiscuous mode [ 83.943178][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.959886][ T5255] bridge_slave_0: left allmulticast mode [ 83.965641][ T5255] bridge_slave_0: left promiscuous mode [ 83.971813][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.131185][ T5255] bond1 (unregistering): (slave gretap1): Releasing active interface [ 84.189186][ T5255] bond2 (unregistering): (slave geneve2): Releasing active interface [ 84.374130][ T5255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.484853][ T6921] loop4: detected capacity change from 0 to 2048 [ 84.516086][ T5255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.537448][ T6921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.581623][ T5255] bond0 (unregistering): Released all slaves [ 84.591281][ T5255] bond1 (unregistering): Released all slaves [ 84.601155][ T5255] bond2 (unregistering): Released all slaves [ 84.660350][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.787620][ T6931] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.860: bg 0: block 345: padding at end of block bitmap is not set [ 84.843994][ T6931] EXT4-fs (loop4): Remounting filesystem read-only [ 84.879446][ T5274] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 85.091373][ T6253] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.207054][ T5255] hsr_slave_0: left promiscuous mode [ 85.252211][ T5255] hsr_slave_1: left promiscuous mode [ 85.274342][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.306760][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.354146][ T5255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.385799][ T5255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.469743][ T5255] veth1_macvtap: left promiscuous mode [ 85.478081][ T5255] veth0_macvtap: left promiscuous mode [ 85.492433][ T5255] veth1_vlan: left promiscuous mode [ 85.511212][ T5255] veth0_vlan: left promiscuous mode [ 85.714632][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.7.868'. [ 85.771580][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.868'. [ 85.806689][ T5255] team0 (unregistering): Port device team_slave_1 removed [ 85.847252][ T5255] team0 (unregistering): Port device team_slave_0 removed [ 85.986081][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 86.369079][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 86.369096][ T28] audit: type=1400 audit(85.002:763): avc: denied { write } for pid=6970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.518352][ T28] audit: type=1400 audit(85.142:764): avc: denied { write } for pid=6984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.891559][ T6998] loop4: detected capacity change from 0 to 2048 [ 86.970556][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.993251][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.005217][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.015686][ T6888] bridge_slave_0: entered allmulticast mode [ 87.024755][ T6888] bridge_slave_0: entered promiscuous mode [ 87.056697][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.063835][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.071644][ T6888] bridge_slave_1: entered allmulticast mode [ 87.078244][ T6888] bridge_slave_1: entered promiscuous mode [ 87.094568][ T28] audit: type=1400 audit(85.656:765): avc: denied { write } for pid=6996 comm="syz.4.874" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.122242][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.151097][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.175158][ T28] audit: type=1400 audit(85.685:766): avc: denied { map } for pid=6996 comm="syz.4.874" path="/26/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.238633][ T6253] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.267107][ T6888] team0: Port device team_slave_0 added [ 87.275330][ T28] audit: type=1400 audit(85.806:767): avc: denied { write } for pid=6989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.354617][ T6888] team0: Port device team_slave_1 added [ 87.410858][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.441756][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.521454][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.561030][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.593454][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.625115][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.639227][ T28] audit: type=1400 audit(86.171:768): avc: denied { write } for pid=7013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.714044][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.832288][ T6888] hsr_slave_0: entered promiscuous mode [ 87.864159][ T6888] hsr_slave_1: entered promiscuous mode [ 88.476925][ T28] audit: type=1400 audit(86.975:769): avc: denied { write } for pid=7025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.548140][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 88.602059][ T28] audit: type=1400 audit(87.088:770): avc: denied { write } for pid=7056 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.694644][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 88.841624][ T6888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.859741][ T7071] loop9: detected capacity change from 0 to 128 [ 88.871124][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.891997][ T28] audit: type=1400 audit(87.368:771): avc: denied { mounton } for pid=7070 comm="syz.9.887" path="/86/file1/file0" dev="loop9" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 88.925966][ T6888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.960747][ T28] audit: type=1400 audit(87.424:772): avc: denied { write } for pid=7063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.996708][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.010187][ T6888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.045711][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.065136][ T6888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.095846][ T6888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.193369][ T7079] loop4: detected capacity change from 0 to 8192 [ 89.251097][ T7079] loop4: p1 p2 p3 p4 [ 89.260419][ T7079] loop4: p1 start 16777216 is beyond EOD, truncated [ 89.292885][ T7079] loop4: p2 start 268435456 is beyond EOD, truncated [ 89.305655][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.9.898'. [ 89.328873][ T7079] loop4: p4 size 33554432 extends beyond EOD, truncated [ 89.393886][ T2983] loop4: p1 p2 p3 p4 [ 89.398867][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.9.898'. [ 89.412756][ T2983] loop4: p1 start 16777216 is beyond EOD, truncated [ 89.435931][ T2983] loop4: p2 start 268435456 is beyond EOD, truncated [ 89.480230][ T2983] loop4: p4 size 33554432 extends beyond EOD, truncated [ 89.646286][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.748955][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.810292][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.817437][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.951961][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.959229][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.355328][ T5479] udevd[5479]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 90.384342][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 90.639764][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.742812][ T5479] udevd[5479]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 90.777507][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 91.263150][ T6888] veth0_vlan: entered promiscuous mode [ 91.317029][ T7197] loop2: detected capacity change from 0 to 7 [ 91.349502][ T7152] netlink: 5 bytes leftover after parsing attributes in process `syz.9.896'. [ 91.448381][ T7152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.465223][ T6888] veth1_vlan: entered promiscuous mode [ 91.572537][ T6888] veth0_macvtap: entered promiscuous mode [ 91.598101][ T6888] veth1_macvtap: entered promiscuous mode [ 91.624231][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.651628][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.663522][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672781][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690286][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.699715][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.510001][ T7222] loop9: detected capacity change from 0 to 8192 [ 92.622708][ T7222] loop9: p1 p2 p3 p4 [ 92.626920][ T7222] loop9: p1 start 16777216 is beyond EOD, truncated [ 92.635635][ T7222] loop9: p2 start 268435456 is beyond EOD, truncated [ 92.650742][ T7222] loop9: p4 size 33554432 extends beyond EOD, truncated [ 94.107414][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.941'. [ 94.118751][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 94.118767][ T28] audit: type=1400 audit(92.242:783): avc: denied { write } for pid=7274 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.201977][ T7280] netlink: 'syz.4.936': attribute type 10 has an invalid length. [ 94.213494][ T7280] team0: Port device dummy0 added [ 94.289202][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.9.935'. [ 94.358753][ T28] audit: type=1400 audit(92.466:784): avc: denied { sqpoll } for pid=7285 comm="syz.7.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.403660][ T28] audit: type=1326 audit(92.504:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.2.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa91c03ce59 code=0x0 [ 94.886433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4a9800: rx timeout, send abort [ 95.421000][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bc4d800: rx timeout, send abort [ 95.429259][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4a9800: abort rx timeout. Force session deactivation [ 95.516037][ T7311] loop2: detected capacity change from 0 to 512 [ 95.552723][ T7311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.568260][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.949'. [ 95.611152][ T28] audit: type=1400 audit(93.645:786): avc: denied { write } for pid=7307 comm="syz.2.947" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.746345][ T28] audit: type=1400 audit(93.738:787): avc: denied { append } for pid=7307 comm="syz.2.947" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.802924][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.963768][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bc4d800: abort rx timeout. Force session deactivation [ 96.170575][ T28] audit: type=1400 audit(94.178:788): avc: denied { create } for pid=7341 comm="syz.6.959" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.229262][ T28] audit: type=1400 audit(94.197:789): avc: denied { write } for pid=7341 comm="syz.6.959" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.326291][ T28] audit: type=1400 audit(94.197:790): avc: denied { open } for pid=7341 comm="syz.6.959" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.390574][ T28] audit: type=1400 audit(94.197:791): avc: denied { ioctl } for pid=7341 comm="syz.6.959" path="/8/file0" dev="tmpfs" ino=58 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.715391][ T28] audit: type=1400 audit(94.206:792): avc: denied { unlink } for pid=6888 comm="syz-executor" name="file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 109.505914][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.970'. [ 109.659888][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 109.955732][ T7444] netlink: 'syz.7.970': attribute type 11 has an invalid length. [ 110.498176][ T7448] loop6: detected capacity change from 0 to 128 [ 110.708960][ T7448] EXT4-fs: Ignoring removed orlov option [ 111.020857][ T7436] udevd[7436]: incorrect ext4 checksum on /dev/loop6 [ 111.048761][ T7448] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 112.270099][ T5287] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.360078][ T5287] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.690510][ T5287] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.857609][ T5287] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.676844][ T28] audit: type=1400 audit(111.483:793): avc: denied { read } for pid=7460 comm="syz.6.975" path="socket:[17731]" dev="sockfs" ino=17731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.803871][ T7485] loop9: detected capacity change from 0 to 256 [ 123.972689][ T7485] vfat: Unknown parameter 'uni_xlatg' [ 124.674807][ T28] audit: type=1400 audit(120.837:794): avc: denied { ioctl } for pid=7484 comm="syz.9.982" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.803267][ T28] audit: type=1400 audit(123.718:795): avc: denied { create } for pid=7488 comm="syz.9.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 128.318685][ T28] audit: type=1400 audit(124.242:796): avc: denied { setattr } for pid=7488 comm="syz.9.983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 128.541121][ T28] audit: type=1400 audit(124.326:797): avc: denied { write } for pid=7488 comm="syz.9.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.906803][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.9.992'. [ 141.913242][ T7530] netlink: 7 bytes leftover after parsing attributes in process `syz.9.992'. [ 200.538921][ T7412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.195199][ T7412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.403574][ T7412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.953316][ T7412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.517132][ T7412] bridge_slave_1: left allmulticast mode [ 323.657724][ T7412] bridge_slave_1: left promiscuous mode [ 323.918393][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.525153][ T7412] bridge_slave_0: left allmulticast mode [ 324.628089][ T7412] bridge_slave_0: left promiscuous mode [ 324.794796][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.302788][ C1] ================================================================== [ 404.310925][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 404.318166][ C1] [ 404.320499][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 404.328592][ C1] wq_worker_tick+0x64/0x240 [ 404.333213][ C1] sched_tick+0xbc/0x1f0 [ 404.337480][ C1] update_process_times+0x15e/0x190 [ 404.342704][ C1] tick_nohz_handler+0x275/0x3d0 [ 404.347667][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 404.352898][ C1] hrtimer_interrupt+0x261/0x850 [ 404.357874][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 404.363804][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 404.369463][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.375468][ C1] __tsan_read8+0x12/0x190 [ 404.379916][ C1] ip_rcv_finish+0x124/0x1a0 [ 404.384533][ C1] ip_rcv+0x62/0x160 [ 404.388458][ C1] process_backlog+0x341/0x670 [ 404.393254][ C1] __napi_poll+0x61/0x300 [ 404.397609][ C1] net_rx_action+0x452/0x930 [ 404.402226][ C1] handle_softirqs+0xb9/0x280 [ 404.406916][ C1] do_softirq+0x45/0x60 [ 404.411109][ C1] __local_bh_enable_ip+0x70/0x80 [ 404.416174][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 404.421143][ C1] nsim_dev_trap_report_work+0x53b/0x640 [ 404.426889][ C1] process_scheduled_works+0x4f0/0x9c0 [ 404.432368][ C1] worker_thread+0x58a/0x780 [ 404.436982][ C1] kthread+0x22a/0x280 [ 404.441061][ C1] ret_from_fork+0x146/0x330 [ 404.445685][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.450469][ C1] [ 404.452804][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 404.460878][ C1] wq_worker_tick+0x64/0x240 [ 404.465499][ C1] sched_tick+0xbc/0x1f0 [ 404.469764][ C1] update_process_times+0x15e/0x190 [ 404.474980][ C1] tick_nohz_handler+0x275/0x3d0 [ 404.479964][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 404.485192][ C1] hrtimer_interrupt+0x261/0x850 [ 404.490149][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 404.496069][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 404.501756][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.507757][ C1] __tsan_read1+0x113/0x180 [ 404.512376][ C1] skb_free_head+0x2e/0x220 [ 404.516901][ C1] skb_release_data+0x5c4/0x600 [ 404.521773][ C1] __kfree_skb+0x44/0x150 [ 404.526124][ C1] consume_skb+0x4b/0x130 [ 404.530478][ C1] nft_synproxy_eval_v6+0x24f/0x2a0 [ 404.535705][ C1] nft_synproxy_do_eval+0x203/0x270 [ 404.540928][ C1] nft_synproxy_eval+0x29/0x40 [ 404.545716][ C1] nft_do_chain+0x205/0xe00 [ 404.550234][ C1] nft_do_chain_inet+0x2f0/0x320 [ 404.555197][ C1] nf_hook_slow+0x78/0x180 [ 404.559637][ C1] ip6_input+0x118/0x160 [ 404.563904][ C1] ip6_rcv_finish+0x1f5/0x330 [ 404.568612][ C1] ipv6_rcv+0x72/0x170 [ 404.572700][ C1] process_backlog+0x2a5/0x670 [ 404.577490][ C1] __napi_poll+0x61/0x300 [ 404.581838][ C1] net_rx_action+0x452/0x930 [ 404.586455][ C1] handle_softirqs+0xb9/0x280 [ 404.591163][ C1] do_softirq+0x45/0x60 [ 404.595364][ C1] __local_bh_enable_ip+0x70/0x80 [ 404.600422][ C1] __alloc_skb+0x658/0x690 [ 404.604852][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 404.610508][ C1] process_scheduled_works+0x4f0/0x9c0 [ 404.615994][ C1] worker_thread+0x58a/0x780 [ 404.620609][ C1] kthread+0x22a/0x280 [ 404.624695][ C1] ret_from_fork+0x146/0x330 [ 404.629338][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.634214][ C1] [ 404.636548][ C1] value changed: 0x0000000007d17ed0 -> 0x0000000007d1a5e0 [ 404.643674][ C1] [ 404.646006][ C1] Reported by Kernel Concurrency Sanitizer on: [ 404.652179][ C1] CPU: 1 UID: 0 PID: 5264 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(lazy) [ 404.661749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.671823][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 404.678622][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)