last executing test programs: 55.593576784s ago: executing program 2 (id=324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x1b}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x6674ad706e0fb842}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 54.58488615s ago: executing program 2 (id=329): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) unshare(0x8000400) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000001c0)=0x8, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000780)={@remote, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x2, 0x6, "ba5740", 0xd47, 0x3a, 0x1, @mcast1, @private0, {[@srh={0x88, 0xe, 0x4, 0x7, 0x7, 0x10, 0x3, [@dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0xf}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @remote]}, @routing={0x2e, 0xa, 0x2, 0x6, 0x0, [@local, @local, @remote, @private2, @dev={0xfe, 0x80, '\x00', 0x19}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x0, 0x8, 0x0, [@rand_addr=' \x01\x00', @local]}, @dstopts={0x73, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo={0xc2, 0x4, 0x2000200}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @dstopts={0x5e, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xbc9a}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x1, [0x2, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x25, "a224307e7e54e3a37d1f94b9c7dbaf75a9968af9d8c80cfe4320d16d2bb58151641b516501"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfffb}, @ra={0x5, 0x2, 0xfffe}]}, @dstopts={0x21, 0x22, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x3c0, [0x8, 0x1, 0x6, 0x2, 0x97, 0x3ff, 0xffffffffffff2ed1, 0x0, 0xfffffffffffffff8]}}, @generic={0xb, 0xb6, "dda10aa03c7aa6b73885317f97c341443bf5494007647e967220a6152dc72613f1a4441465d2fd971e6f91d2586489e7e65e9397ee5a8f1f61dbdb7471aba1ab6b04415400c2cb0e6198bff120d0c3cb6b50177cc54c00e795bf66f820dc24f7ac39dd326ff3ce3342ebb16d3e4348f6c08989ccd8a3d02584ab8a50bc4bec8d18e77e3472ab9715974406626b9ccd9ab70f060be6b8832481245c6f77b5d99e0de5c73d8886383ff22c9493ac83e4c39a5344a58f0c"}, @pad1, @ra={0x5, 0x2, 0x3}]}, @srh={0xc, 0x12, 0x4, 0x9, 0x5, 0x20, 0x1000, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @empty, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x86, 0x50, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}]}, @dstopts={0x73, 0x10b, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x101, [0xffffffffffff8001, 0x7f]}}, @generic={0x8, 0x83d, "f92edbd1b59f4e9a935102a5eef3705c9eab2cabb6e9a749969f3dcb3d2ffd559e91961d6ea4ce1df0685e984c9ccce4ae59b875900c1b2a48e6efd6828d14b78d5897b897d450bd502652e6f20c78ba1486cfbabde7104e6490c2b0868f53df98585eea61c59c8a44c6263b27f442e04d223f2e903013c68713fb54139e10ab66cf20ba1ea552bc5e49b3370782fa6023eda0f62e8105b28944e3ab4fc5dc4098c4234dd5187c87466878168f4d91c82f035a5b82b93fdecb93e0a50f864a65aa39091e87f85594abb92d8b779dbd18b80ffcc91486995da14ded0be4e29cf92e36a683c809fb7f6d3271922882c7e9cfb76d7a5c737873e393e2cc47df6f53d4b612c81ed253a3a6395ef20361ff472436a98288ee24801a2b1443ea2ae8b99da50faa41280a4e5ec46663df2fd4416a046393b58d1460ef48cce87f33fa607c9cb44895f2e8f69eb9919182ed91560b8e1b63c7f86d10ae70f715b25d5c9036d9d2d0a153a67746846ce7a733c93111084c2d1da4b04df8830a6e32e87eccac25c50f5314db9e16435fe7e12b858fe0d87bb7d0b5ea591fc9e681d2bf92006b09a6231bb0a6622200f9bd4a5daaa47e204b5b8dc844111af2ec5cda29a1d56dbe109dac5d70fd8a1200719018c8e907e603cbccc7370a8e1be5ff102d2a1fbfd67571d083ef0dd321e73197c05f10b77a3186bdee24a5ec40a963689ecf958ddb66fa37c17fc06f53a05809f2f6cfa38e544c2c40538414e9f00d46e66f070b5f0b3f302b66182f52c78301c32d8671297cac212bde3cdc3d091405c59de1dd6acae341699408e3bcf4cfdeb8ae8272aa5a0550db638267040515efbe728b84e75fd00315920161b116e50923bafb3b638488ba499c3d168450aa17a58867c3a825bad1ecc1a0b5571b570affcd2c25659b551c6f3f2384061ae275f5e313e87791128c21733a7f71b0d88d4a79a6863bc4640a2cfe0af3e4b0804c9e3c43fddd0bad21295289d7412d14511c09eef7aceda0cdc023f71185661310a0c42eb927a121711e8495544252ed810a8e4d0c5fcda4f3d6357852b6cd37f67401f8d4dbc8069e3a756a0e645739b1f966ff98e737e8b4779f4b5450f8afde5358a009adacdc4482d4ff3d417467ab03fe2716072820c6ca8907651c5eac669ebc5cbc17ac44b61cab4b6f4ecf3297ccae6d984be42657b9dd779bc6893caf4e0c8339857378d8a37e09bcc5f60976ee0596c12d69e8be2896ad2c76f50010f2dc57a14a0dc6b1c497fb017de72fd9ebe7f26b263bda48e64db1e9823f9b8a055f49c9daad30480465dddd15979cd0074befa103da580bf93122ab76876336eadbaf7f590b66b7b1a3458f5fcb58b315cf4e4b490b2951d2774b0de2af5ffccfe9b614bcbc41b5a95f393b716d483f9530a40734de71d75b77a35f3ac324ad130bf957b283e954993957794b731894a1188018203655cfe34b905cfac0316252ced4bda985e4452475295e54c189c8a73d60870d7879a47b8c631a23418595d522befe8c78f9a3b5d85c294c4ef66cc6ae73d7ed9e6a33dac1988c19b238d067613b48ff451ce7d77a4dca3c1e922fa51daf118dd1a0b82b2793f2acd33cefe5f610f6cd6d9a132440c5fff3f9f7c33d784e801df72ef1900174390b92ecf477ccc45d350a7d44dcee316edd511e533987d1f323dffe0cab87cce1e22b875b4293d0d601d3dd6e9dfa92d3c15c9086f0e5161303e2c5af54efb9c9e009e2fd3c7c93f67104dd1613732da22839ba5ec9fb0f1bb012d8b0f4cde3405653e23d22a8181b98466b934a96f7151013506f26b991351b178e1553a42c3c29ccc0b6d1e5155e24cd587f216d23d28a0e124e6c41c580ab4a52a4691c86afc568d2298cd6f687292ee9982811e0a56d11c39023222f1ecc306ccfd92d2a13f783456a6ebe834e9ff43da4a945cffce35263313666fa237fe7f9938723ce9dc3ecfde68746275dbe6a15228d2a65d467147e3fee0d0c181eed33659d2ca6e25e9f5f95809a35662c62ae4b9ddc70c2083d29b9a2e4640f415b623622548af7f71a006c60bdc156679cb8a28bb54492d7eba17661d954fd40e99205044b2708c8c26c826348866120c9938a4750f037b10fe3cde42fe8b9314b4cc364c45cafe1c4c4bfbe13c5e9c9e15add16d2aaf9d7f224ea89124a1bf6f05165c46c416d9c734a3a4ad639eb4081cf40b999348c078280d5861f315e694d1e2af66d7a0681ea0be1372256823decfffc04a358f81c0da7675931dd2a669a06450fcc701b6892bed79b1d79e2a2b585060931a775860f18e782efd7a385f4c321f03aa2cabd14b4b6000a24a3a8632d1e08b182235f4cb4a423e7ce34d5370e90aff1458816edaa5362ac0c98911791e93dfa55f331540c2644f47123059796880d35688974410d911bde2d63555d433ab16f1ec7158949a68a10cf4e270754e4c91ea8f16614db876c72cf226bdafdb646ca4a1a02c086aafbb1c8a4584fbb248cbb89fcc99e035a99a98c1ec4ae9029b295323a010018fd478f07e9c9c8ee0665e2b38d245f4e667d5ae94befd45eef60564003c92df93a2061e93ccd0630232f73631495ea80bc521916a2634664329d240fa33f3c48d5dd473e0795169df4c9e7e3ae4cff4bca10724d7671d12d50db07e1802eb901e4902d5294f930cbd9ab356dd04246c5e9cc984dfb70de74e58e140c2cd8cf6321f8c58bcfedfb08973b8f60478b3176417a196ff763bfcf36a29097b29ad97dce7692cbd8c9fde76b17670d4c7676bf7be4c7431018423c3fcedd324bdcd87244f71502ad4b4ff1ca5e800de2b3136fd1edb16d8db83c2ae20f2ff31006e454c995788aee109e409ae3ecaca9ba625506443118f506069b5900fd7e9239f357a63ffeb9cd7a27e5b27d3d8c2a54026c78ba08e56e85816a79bbaa758b79c6d5af40d258293481da633a875f09c635b05d"}]}, @routing={0x0, 0x2, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0xa, "a32699178d08965fb6952ee29193e279e51e9d9834f6d2de1944ff1024ef42c11df3c8cee556ed01a383be596da0f8231bcc3441baa773e24d46104a45ee8070584291d8ab93491d178fa2cb509a"}, {0x5, 0x1b, "15ccf20a9b35a572f5377959b012a71a7d6bcf2f5380540798818fcf78446fd8209d14b4432f53395c8feb718a8fa22373d362e7ac9b15445920097ac11168b1516a49c0bdba7f657e65a52ae700a84dd8ff0b002a9d14a80e05622bc324c113d3ad5a277d267498204dc384894938ed020beffb41f72b40296607649792260cb89b735ce34387f31565bfed18b7c505bb73bdee5df087a852275ce42514d1a15d0d794e8060213377e7d17e24d2def797bfc426001526f9d7a36ed4f8537f0c5ab3f9c8f1376767680f2f3d2dd44e29ccb2c56ff589cc6ab2b2e0194a"}]}}}}}}}, 0x0) 54.416323304s ago: executing program 2 (id=330): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 53.556153006s ago: executing program 2 (id=335): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2, 0x1}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x50) syz_emit_ethernet(0x34, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "0a0286870000"}}}}}}, 0x0) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 52.769390236s ago: executing program 2 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'syz_tun\x00', @ifru_mtu=0x1f4}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0, 0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x550) syz_emit_ethernet(0x3e2, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d4, 0x5678, 0x6000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x3c0, 0x0, @opaque='\x00'/952}}}}}, 0x0) syz_emit_ethernet(0x432, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x424, 0x5678, 0x4078, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, '\x00'/1040}}}}, 0x0) 51.903716358s ago: executing program 2 (id=348): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000810}, 0x400d0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200880c0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)=ANY=[@ANYBLOB="6e6f636f6d70726573732c63727566832c636865636b3d7374726963742c6d6f64653d3078303030303030303030303030303030372c6d6f64653d3078303030303030303030303030306137632c757466382c757466382c00"], 0x0, 0x567, &(0x7f0000000200)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsLvSzofgdj7EXM+XQfMRMvJL6GuSMiVNh/n/IvBJfHzOYyfy0xPFxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMRyq7ZdsKRhvPaKGsytBn4zLU6JUtnWe+v77S0eWAzpV8SK/8nsrFxNX7r6t73VV+L/bsl8+mxeZuPFrOz+6cqfH/51eqq//ZCAz8T2zu6rtW6383bSgYzRtUuD19W1Z0LfNJ26Vib0VaVctu8u10JVMw0dymykm8oNtBP5wYXsnS0pnV/121696jS0WnAXVaFSeXCnaNtl9STf0k4Q+t7dJ/nQXTaNhvHqSZ14dVznQfxBfGoiFWmnqdTGZrdTGrUDcaXCSSoVR1Uq2sVioVAsFsr3K/cf2Pb0kRfsQ+RIjcl/aDFZ3+jMDZzeVJb/pSFGPGnLiqhjH65UJRBfmgPWZxYfZYW7emi/+/N/P8tf3Vs9J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSV5R8Svii5KKlKUstjyXZalJKEpqYqQhWsLe++y9biafrkC0OBKJL4EoWRBXFkVJQSpSkZIo0ZKXVfGlLZ7UpSpO0sqGbCbHvTQk5i+VCgOr5Pqfu44Uh7RE/sfpfatTN3BqvX7+H+LimUUDAAAAAADGwUq+fY/H/zNyLSnVTEPbkw4LAAAAAAB8Q71eryfzYsXjfxG5JhbjfwAAAAAAvjdWco2dJSI5uZGWNsRKLpfiSwAAAAAAAL4TyZX/1+NFMgfKDbG+TJfC+B8AAAAAgO/EfwfPsT+bVWldsn76RYJgxvrQWvm7teXELzpb2YTuFw63GNXmrMtZI8miPJ09c/W8lc1+uTcJZtrL541Rc/1bWQBW+pXFXgCXTh6A/F9upnVurqfL9f6atJdczTR03vUbDwviOJenIr0S/ev15r8l2f3/ec3Llmxsdjv5F2+668nB+BC38mErm0DxyDyKQ2J5l8y3kFxzcewezyQXYmT95tJ+7f4b8Ficral086kT9/lIPsotEZneq5s7uP+zcZ+F/KC9z6IonHLPP8rttM7thdvp4pgoiqOiKO6P4quPxQmjKI2KovQVUVhyNAoAmJSNEVnIOpr4f8O5Nsnu0yfI7qf580I+ykJaZ2EuObFOzx1zRrdHndHtU2a3H4/cA2lQjo37/eFQVv0Ub/BpYL9ho2jFh/DCu61/ypXtnd07m1trLzsvO6+LxVLZvmfbPUvS3ZCZZDEkUgDAH9foe+yMrGHdGzGq/suXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0HysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/RMOGyDpKNw5Z2Tc24TmR8T4V+O3B1XqlQa7WVE0krmqr2IlMzcdFTrcA0nWBVPfMb7aZWVR26gWlFftpgvy/j1fygmTSbn/TBBgDgnNje2X211u123o6xMOl9BAAAB5GlAQAAAAAAAAAAAAAAAAAAAAA4/87i+j8KYy+s/NzrnYMwzknhopyLMH7fhZGnjvdncoICMDa/BgAA//+IFFJh") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xfffffffffffffffd, 0x0, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x54, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x40, 0x60, "dc73f7b9e835d57e"}}]}, 0x144}}, 0x0) ptrace(0x10, r0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 51.851570159s ago: executing program 32 (id=348): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000810}, 0x400d0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200880c0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)=ANY=[@ANYBLOB="6e6f636f6d70726573732c63727566832c636865636b3d7374726963742c6d6f64653d3078303030303030303030303030303030372c6d6f64653d3078303030303030303030303030306137632c757466382c757466382c00"], 0x0, 0x567, &(0x7f0000000200)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xfffffffffffffffd, 0x0, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x54, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x40, 0x60, "dc73f7b9e835d57e"}}]}, 0x144}}, 0x0) ptrace(0x10, r0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 5.809591732s ago: executing program 4 (id=680): r0 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_getaffinity(r0, 0x8, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000c40)='./file2\x00', 0x808080, &(0x7f00000001c0), 0x2c, 0x52c, &(0x7f0000000640)="$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") socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b442, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, r3, 0x6, 0x1001, 0x1, 0x1}) 4.143929935s ago: executing program 4 (id=698): socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) socket(0x2, 0x3, 0xff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x100800, @loopback}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e23, @empty}], 0x48) 3.396959384s ago: executing program 1 (id=711): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_create(&(0x7f0000000440)='-B\xd5O4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb90a\xa9\xb2\x00\x00\x00\x00=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7V\x00@Ip]D\xd6\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xf6L\\\xa3O\x92\x90i\xed\xd36\xf3\xa5\xaf\x87\x90@k\xe2\x14/rn$x\x13/\xc5\\W\x04\br\x17\xd18\xd9L:\xc2\x11\xfb2\a\x99i\x90/\x19@\x1cq\xeb\xc8\xb9KvJ\x8c\xf2c\xfe\x8d]k\x01\xb7\x84H?\xc0z:\x913\xfa8\xac\xd3q\xe4vPGUQ\x93\xca1\xff\xf8\x13\x0fT\xa9\xc3\xcfozi_\x9a1\x97\xd4\xb1\x96\xc0\r\xdd\xe8\xe7P\x16\xbcT\xa5\t\xe2X\x1e\x19\xff\xfd\xa0\r\x94c\r\xb8\f\xed.M0[y\xfbz\xeb{\\j~\xf6\xca\xd9\xa5\xf13\t-\x00j\xf5\x88\x94p\x04\xe9\x93\xadcn~\xb9:\x0e+P\x97\x7f\xa3\xcd\xe8\xb8\x9c+\x9c|\x90\xdcg_t\x92l\x88UU\xf0\xdc\xd9\x00\xb4\xa5\xe3*\xb7\xba\x81\xbazT\xb8\xb7\xf8\xbb\xcew\xb3\x0e\xc47BR\x88B\xe4\xffQt\x96\xbd_\xaashy\xd3\x1d\xcc\xf9G\xc1wpAL\v\xf3|\x93\x00%+\xe4\xef\x97\xc9\xde\x98(\x01\x85\xe5;\xd6a\xb5\x14\x1f\xc9\x0e\xf0\x8a\xe4\x9a\xc2\x86\xb85\x8e\x85)\xaa\a1\x86\x82B|\xee\a\xca5\xb2\x06\xf4_\x86\x15z`\x8e\xd3\x81\aT\xd4}\xea\xc82\xbb\xfc\xc5\xad\x9dgf\xd6L\xcf\x17)\xc6v\x06\xe8O\xcdd\x91\x06|\xbe\xc1\xb8\n\x18+\x04\x81\xdc\xdf~Q\x85{\x10x\x18c#6\x96Bl\x00~\x7f\x16eQe{\xa2\xf9q\xb6\xc1t*S\\\xff:\x8b\xa3\x11\xb0\x86t\xac\xc4(8V&*B+[<\xde\xab\xc8X\xd6\x1d\x1b\xdf\xa8b\x82l\x94ecwrDb\x15\xc8r\xec\x91\x88\xc9\xf4\x81C\xee\x8c\x93\xbdr\x1d_\xd7\xc9\x90\xef\xf3n1\fy\xbe\x93\x060x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.341775245s ago: executing program 4 (id=713): setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') 3.165266599s ago: executing program 4 (id=714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 3.14766338s ago: executing program 3 (id=724): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200100001a0001000004000000000000fc000000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000600)=0xc) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x20, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x80000007, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x8000, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) 3.12172302s ago: executing program 1 (id=715): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x2}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x0, 0x19, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x5550}, 0xe0c0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000400) syz_usb_connect$rtl8150(0x5, 0xfffffdc6, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x22}}]}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5b}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4008080) 3.103920061s ago: executing program 4 (id=716): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x1, 0x5) unshare(0x20000400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 3.040845893s ago: executing program 3 (id=717): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x3e3}, 0x44de, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x10, 0x20000000}, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8890) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2.891181356s ago: executing program 0 (id=718): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 2.855940937s ago: executing program 4 (id=719): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)='N]F', 0x3}], 0x1) fsopen(0x0, 0x0) exit(0x80000000) syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.768915919s ago: executing program 3 (id=720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x110, 0x130, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@unspec=@cluster={{0x30}, {0x7, 0xb, 0xf}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000380)=[{{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1}}], 0x8) mkdir(&(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/kmsg\x00', 0x1, 0x0) 2.396406309s ago: executing program 1 (id=721): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2040400) syz_open_procfs(0x0, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 2.396115889s ago: executing program 3 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket(0x11, 0x3, 0xff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) 2.36917793s ago: executing program 3 (id=723): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0xda90) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x38e) 2.34876834s ago: executing program 3 (id=725): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x1000, 0x0, 0xbd4c3b8bc89fc43c, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x3, r1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) 1.9639395s ago: executing program 0 (id=726): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0x4000ff, 0x4160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES64=r0], 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000500)={0x40a, 0x53f, 0x5, 0x4000007, 0x401, 0x40}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) 1.298822997s ago: executing program 1 (id=739): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000000000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r0, 0x200000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0) 1.237467189s ago: executing program 0 (id=730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcd83, 0xfffffffffffffec0, &(0x7f0000000140)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x20e6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 1.18027124s ago: executing program 5 (id=731): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket(0x2, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200450, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x609f, &(0x7f0000000100)={[{@journal_async_commit}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x40}}, {@noquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') close(0x3) 1.1783694s ago: executing program 1 (id=742): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0x4000ff, 0x4160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES64=r0], 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000500)={0x40a, 0x53f, 0x5, 0x4000007, 0x401, 0x40}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) 1.027856384s ago: executing program 5 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) 1.022979504s ago: executing program 0 (id=733): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x2, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 951.930116ms ago: executing program 0 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000600)=0x6, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 694.428832ms ago: executing program 5 (id=735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 634.489834ms ago: executing program 1 (id=736): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x8000080000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048880}, 0x4000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20048841}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x80) 483.594298ms ago: executing program 5 (id=737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x1b}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x6674ad706e0fb842}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 260.673503ms ago: executing program 5 (id=738): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0xda90) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x38e) 238.803574ms ago: executing program 5 (id=740): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x390587b, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x87b06967fdc306a4, 0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=741): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) kernel console output (not intermixed with test programs): type=1400 audit(1785794395.249:248): avc: denied { create } for pid=3655 comm="syz.3.48" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.337714][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.379929][ T28] audit: type=1400 audit(1785794395.309:249): avc: denied { connect } for pid=3639 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.440546][ T3625] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.40: invalid block [ 41.470599][ T3664] loop0: detected capacity change from 0 to 2048 [ 41.485687][ T3625] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.490003][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 41.512137][ C0] EXT4-fs (loop1): initial error at time 1785794395: ext4_get_branch:178: inode 11: block 4294967295 [ 41.529977][ C0] EXT4-fs (loop1): last error at time 1785794395: ext4_get_branch:178: inode 11: block 4294967295 [ 41.594304][ T3625] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.40: invalid indirect mapped block 4294967295 (level 1) [ 41.610093][ T3625] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.627181][ T3625] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.40: invalid indirect mapped block 4294967295 (level 1) [ 41.663872][ T3625] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.674152][ T3664] Alternate GPT is invalid, using primary GPT. [ 41.693997][ T3625] EXT4-fs (loop1): 2 truncates cleaned up [ 41.694978][ T3664] loop0: p2 p3 p7 [ 41.788931][ T3625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.835925][ T3670] netlink: 'syz.4.51': attribute type 11 has an invalid length. [ 41.843910][ T3670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.51'. [ 41.877963][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 41.903069][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 42.186910][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.305999][ T3698] syzkaller0: entered promiscuous mode [ 42.311633][ T3698] syzkaller0: entered allmulticast mode [ 42.321538][ T3698] tipc: Started in network mode [ 42.326539][ T3698] tipc: Node identity f677f0b085b9, cluster identity 4711 [ 42.334555][ T3698] tipc: Enabled bearer , priority 0 [ 42.871953][ T3693] tipc: Resetting bearer [ 42.910216][ T3693] tipc: Disabling bearer [ 42.956541][ T3707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 43.583378][ T3729] Zero length message leads to an empty skb [ 43.689831][ T3730] hsr0 speed is unknown, defaulting to 1000 [ 44.244872][ T3738] infiniband syz0: set active [ 44.258587][ T3738] infiniband syz0: added batadv_slave_1 [ 44.289014][ T3738] RDS/IB: syz0: added [ 44.298539][ T3738] smc: adding ib device syz0 with port count 1 [ 44.309724][ T3742] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 44.333060][ T3738] smc: ib device syz0 port 1 has no pnetid [ 44.364168][ T3742] bond1 (unregistering): Released all slaves [ 44.901913][ T3708] syz.1.64 (3708) used greatest stack depth: 8560 bytes left [ 45.744136][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 45.744153][ T28] audit: type=1400 audit(1785794399.889:289): avc: denied { listen } for pid=3791 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.852351][ T28] audit: type=1400 audit(1785794399.989:290): avc: denied { mount } for pid=3795 comm="syz.0.93" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 45.889433][ T28] audit: type=1400 audit(1785794400.029:291): avc: denied { kexec_image_load } for pid=3795 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 45.925936][ T28] audit: type=1400 audit(1785794400.069:292): avc: denied { write } for pid=3801 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.939477][ T3804] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 45.994973][ T3807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 46.017466][ T3804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.049688][ T3809] bond1: (slave veth0_to_bond): making interface the new active one [ 46.069094][ T3810] ======================================================= [ 46.069094][ T3810] WARNING: The mand mount option has been deprecated and [ 46.069094][ T3810] and is ignored by this kernel. Remove the mand [ 46.069094][ T3810] option from the mount to silence this warning. [ 46.069094][ T3810] ======================================================= [ 46.112282][ T28] audit: type=1400 audit(1785794400.209:293): avc: denied { remount } for pid=3806 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.133605][ T3809] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 46.133726][ T3810] tmpfs: Cannot disable swap on remount [ 46.149250][ T3804] bond1: entered promiscuous mode [ 46.154419][ T3804] veth0_to_bond: entered promiscuous mode [ 46.161216][ T3804] bond1: entered allmulticast mode [ 46.166939][ T3804] veth0_to_bond: entered allmulticast mode [ 46.175499][ T3807] netlink: 'syz.3.98': attribute type 6 has an invalid length. [ 46.190680][ T3807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.98'. [ 46.203773][ T3804] macvlan2: entered promiscuous mode [ 46.210505][ T3804] macvlan2: entered allmulticast mode [ 46.216795][ T3804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.218767][ T28] audit: type=1400 audit(1785794400.359:294): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.246683][ T3804] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 46.954817][ T28] audit: type=1400 audit(1785794401.099:295): avc: denied { setopt } for pid=3833 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.054486][ T28] audit: type=1400 audit(1785794401.199:296): avc: denied { create } for pid=3835 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 47.810143][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 47.849787][ T3848] syzkaller0: entered promiscuous mode [ 47.856665][ T3850] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 47.864948][ T3848] syzkaller0: entered allmulticast mode [ 47.881197][ T3850] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 47.894641][ T3850] bond1 (unregistering): Released all slaves [ 47.939175][ T28] audit: type=1400 audit(1785794402.079:297): avc: denied { write } for pid=3853 comm="syz.3.114" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 47.939320][ T3852] bridge1: entered promiscuous mode [ 48.030771][ T3855] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 48.219080][ T28] audit: type=1400 audit(1785794402.359:298): avc: denied { create } for pid=3863 comm="syz.4.118" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.416956][ T3855] Process accounting resumed [ 48.661502][ T3870] netlink: 'syz.2.120': attribute type 13 has an invalid length. [ 48.997086][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.005100][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.124865][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.138128][ T3870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.209094][ T3875] team0: Port device vlan2 added [ 49.218983][ T3410] hsr0 speed is unknown, defaulting to 1000 [ 49.220222][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.229630][ T3410] syz2: Port: 1 Link DOWN [ 49.251662][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.263805][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.300359][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.318722][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.346952][ T3892] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 49.362857][ T3895] loop3: detected capacity change from 0 to 512 [ 49.419645][ T3901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 49.664485][ T3914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 49.731630][ T3918] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 49.764962][ T3918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.798065][ T3918] bond1: (slave veth3): Enslaving as an active interface with a down link [ 49.855336][ T3918] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 49.872744][ T3918] bond1: (slave batadv1): making interface the new active one [ 49.881954][ T3918] batadv1: entered promiscuous mode [ 49.887487][ T3918] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 49.900170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.910196][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.913210][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 49.938028][ T3924] netlink: 7 bytes leftover after parsing attributes in process `syz.4.140'. [ 49.966079][ T3918] bond1 (unregistering): (slave veth3): Releasing active interface [ 49.991949][ T3918] bond1 (unregistering): (slave batadv1): Releasing active interface [ 50.030357][ T3918] bond1 (unregistering): Released all slaves [ 50.116478][ T3932] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 50.163461][ T3932] bond1: (slave veth0_to_bond): making interface the new active one [ 50.187820][ T3932] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 50.244521][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.256827][ T3932] macvlan2: entered promiscuous mode [ 50.262835][ T3932] macvlan2: entered allmulticast mode [ 50.270245][ T3932] bond1: entered promiscuous mode [ 50.281378][ T3932] veth0_to_bond: entered promiscuous mode [ 50.296480][ T3932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.328557][ T3932] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 50.351472][ T3932] bond1: left promiscuous mode [ 50.357060][ T3932] veth0_to_bond: left promiscuous mode [ 50.407006][ T3941] veth3: entered allmulticast mode [ 50.423764][ T3941] bond2: (slave veth3): Enslaving as an active interface with an up link [ 50.611227][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 50.963411][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.041326][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 51.041355][ T28] audit: type=1400 audit(1785794405.189:350): avc: denied { bind } for pid=3965 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.087419][ T3968] loop3: detected capacity change from 0 to 512 [ 51.127641][ T3967] tipc: Failed to remove unknown binding: 66,0,0/0:709713720/709713721 [ 51.185203][ T3968] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 51.195547][ T3968] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.205662][ T3968] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 51.216978][ T3968] loop3: lost filesystem error report for type 5 error -117 [ 51.220182][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.238872][ C1] EXT4-fs (loop3): last error at time 1785794405: ext4_acquire_dquot:7041 [ 51.278528][ T3968] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 51.289069][ T3968] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.299229][ T3968] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 51.310771][ T3968] loop3: lost filesystem error report for type 5 error -117 [ 51.324213][ T3968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.150: bg 0: block 248: padding at end of block bitmap is not set [ 51.346168][ T3968] loop3: lost filesystem error report for type 5 error -117 [ 51.346575][ T3968] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 51.363480][ T3968] loop3: lost filesystem error report for type 5 error -117 [ 51.372360][ T3968] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 51.393061][ T3968] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 51.403767][ T3968] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.150: Failed to acquire dquot type 1 [ 51.415830][ T3968] loop3: lost filesystem error report for type 5 error -117 [ 51.417629][ T3968] EXT4-fs (loop3): 1 orphan inode deleted [ 51.433609][ T3968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.446508][ T3968] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.483548][ T3970] tipc: Failed to remove unknown binding: 66,0,0/0:2282744478/2282744480 [ 51.531990][ T28] audit: type=1400 audit(1785794405.219:351): avc: denied { setopt } for pid=3965 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.581674][ T3967] tipc: Failed to remove unknown binding: 66,0,0/0:709713720/709713721 [ 51.847434][ T28] audit: type=1400 audit(1785794405.219:352): avc: denied { write } for pid=3965 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.964228][ T3978] tap0: tun_chr_ioctl cmd 1074025677 [ 51.970168][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.970357][ T28] audit: type=1400 audit(1785794405.969:353): avc: denied { execute } for pid=3964 comm="syz.0.153" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaasyzkaller" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.018586][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.051697][ T3978] tap0: linktype set to 768 [ 52.076055][ T3979] tap0: tun_chr_ioctl cmd 1074025672 [ 52.081789][ T3979] tap0: ignored: set checksum disabled [ 52.241821][ T3978] hsr0 speed is unknown, defaulting to 1000 [ 52.566448][ T3981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.775726][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.817682][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.836329][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.916771][ T3992] loop4: detected capacity change from 0 to 764 [ 52.935560][ T3992] rock: directory entry would overflow storage [ 52.946446][ T3992] rock: sig=0x5245, size=8, remaining=5 [ 53.020424][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.063428][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.076670][ T4015] loop0: detected capacity change from 0 to 164 [ 54.128981][ T4015] rock: directory entry would overflow storage [ 54.149841][ T4015] rock: sig=0x5252, size=5, remaining=3 [ 54.398314][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.424426][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.437389][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.476349][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.478690][ T3998] process 'syz.2.163' launched './file0' with NULL argv: empty string added [ 54.487825][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.532208][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.597173][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.606146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.615309][ T4017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.624459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.798829][ T4031] macsec0: entered promiscuous mode [ 54.815585][ T4028] macsec0: left promiscuous mode [ 55.273003][ T4045] loop1: detected capacity change from 0 to 1024 [ 55.281859][ T4045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.433111][ T4042] kernel profiling enabled (shift: 0) [ 55.446635][ T4045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 55.477276][ T4045] System zones: 0-1, 3-12 [ 55.513429][ T4058] syzkaller0: entered promiscuous mode [ 55.523892][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.644398][ T4058] syzkaller0: entered allmulticast mode [ 55.928427][ T4045] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.981706][ T4053] loop4: detected capacity change from 0 to 128 [ 56.172256][ T4053] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.190421][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 56.190444][ T28] audit: type=1400 audit(1785794410.329:372): avc: denied { read } for pid=4065 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.259769][ T28] audit: type=1400 audit(1785794410.399:373): avc: denied { mount } for pid=4052 comm="syz.4.182" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.536085][ T297] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.536766][ T28] audit: type=1400 audit(1785794410.679:374): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.607223][ T28] audit: type=1400 audit(1785794410.739:375): avc: denied { read write } for pid=4079 comm="syz.0.189" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.678251][ T28] audit: type=1400 audit(1785794410.739:376): avc: denied { open } for pid=4079 comm="syz.0.189" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.709268][ T28] audit: type=1400 audit(1785794410.749:377): avc: denied { write } for pid=4079 comm="syz.0.189" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.013239][ T4105] loop3: detected capacity change from 0 to 128 [ 57.055724][ T4105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.132527][ T4105] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.161629][ T4114] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 57.185939][ T28] audit: type=1400 audit(1785794411.319:378): avc: denied { write } for pid=4102 comm="syz.3.194" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.234716][ T28] audit: type=1400 audit(1785794411.319:379): avc: denied { add_name } for pid=4102 comm="syz.3.194" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.288187][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.293004][ T28] audit: type=1400 audit(1785794411.329:380): avc: denied { ioctl } for pid=4102 comm="syz.3.194" path="/34/mnt/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.323957][ T4118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4118 comm=syz.4.198 [ 57.324553][ T4120] hsr0 speed is unknown, defaulting to 1000 [ 57.375462][ T28] audit: type=1400 audit(1785794411.329:381): avc: denied { write } for pid=4102 comm="syz.3.194" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.397286][ T4152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4152 comm=syz.2.209 [ 58.516216][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 58.595948][ T4145] IPVS: Error connecting to the multicast addr [ 58.681222][ T4166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4166 comm=syz.3.214 [ 59.186774][ T4157] loop2: detected capacity change from 0 to 512 [ 59.240244][ T4157] EXT4-fs: Ignoring removed nobh option [ 59.903101][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.947061][ T4157] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.103806][ T4204] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 60.124209][ T4205] xt_hl: Unknown Hop Limit match mode: 221 [ 60.587828][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.612982][ T855] net_ratelimit: 20 callbacks suppressed [ 60.613001][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.687633][ T4212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 60.723184][ T4212] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 60.739020][ T4216] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 60.763018][ T4216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.786674][ T4216] bond1: entered allmulticast mode [ 60.800596][ T4216] bond1: (slave ip6gretap1): making interface the new active one [ 60.809293][ T4216] ip6gretap1: entered allmulticast mode [ 60.820501][ T4216] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 60.937886][ T4222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 60.983217][ T4222] bond0: (slave bond_slave_0): Releasing backup interface [ 61.046931][ T4222] bond_slave_0: entered promiscuous mode [ 61.054003][ T4222] bond_slave_0: entered allmulticast mode [ 61.261180][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.280429][ T28] kauditd_printk_skb: 1066 callbacks suppressed [ 61.280447][ T28] audit: type=1400 audit(1785794415.429:1448): avc: denied { read } for pid=4244 comm="syz.2.237" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.329368][ T28] audit: type=1400 audit(1785794415.429:1449): avc: denied { open } for pid=4244 comm="syz.2.237" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.407196][ T28] audit: type=1400 audit(1785794415.469:1450): avc: denied { ioctl } for pid=4244 comm="syz.2.237" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.520519][ T4263] loop2: detected capacity change from 0 to 128 [ 61.527153][ T28] audit: type=1400 audit(1785794415.649:1451): avc: denied { write } for pid=4243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.618294][ T4263] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 61.629443][ T28] audit: type=1400 audit(1785794415.649:1452): avc: denied { create } for pid=4243 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.653074][ T4263] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 61.665337][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.676684][ T4263] FAT-fs (loop2): Can't find a valid FAT filesystem [ 61.714565][ T28] audit: type=1400 audit(1785794415.649:1453): avc: denied { write } for pid=4243 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bond_slave_0.link" dev="tmpfs" ino=1656 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.830599][ T28] audit: type=1400 audit(1785794415.649:1454): avc: denied { append } for pid=4243 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.link" dev="tmpfs" ino=1656 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.929762][ T28] audit: type=1400 audit(1785794415.689:1455): avc: denied { name_bind } for pid=4251 comm="syz.1.239" src=8422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.006868][ T4239] loop3: detected capacity change from 0 to 512 [ 62.017331][ T28] audit: type=1400 audit(1785794415.789:1456): avc: denied { write } for pid=4266 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.102205][ T28] audit: type=1400 audit(1785794415.789:1457): avc: denied { unlink } for pid=4266 comm="rm" name="resolv.conf.bond_slave_0.link" dev="tmpfs" ino=1656 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.367809][ T4239] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.528010][ T4239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 62.669291][ T4239] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.745407][ T4239] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.236: bad orphan inode 3 [ 62.748659][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.790867][ T4239] loop3: lost filesystem error report for type 5 error -117 [ 62.809980][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.824031][ C0] EXT4-fs (loop3): initial error at time 1785794416: ext4_orphan_get:1425 [ 62.832739][ C0] EXT4-fs (loop3): last error at time 1785794416: ext4_orphan_get:1425 [ 62.843665][ T4239] EXT4-fs (loop3): Remounting filesystem read-only [ 62.876523][ T4297] loop4: detected capacity change from 0 to 128 [ 62.913175][ T4297] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.978756][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 63.360513][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.821825][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.311527][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.621168][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.784003][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 64.817807][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.860890][ T3383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.881697][ T4316] syz_tun: entered allmulticast mode [ 65.903104][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.232800][ T4339] loop2: detected capacity change from 0 to 1024 [ 66.251672][ T4339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.287992][ T4339] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.328181][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 66.328200][ T28] audit: type=1400 audit(1785794420.469:1468): avc: denied { mounton } for pid=4338 comm="syz.2.258" path="/48/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.376532][ T4345] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 66.379652][ T4346] tipc: Failed to remove unknown binding: 66,1,1/0:3232269885/3232269887 [ 66.386332][ T4339] EXT4-fs (loop2): re-mounted 00000000-0500-0000-0000-000000000000. [ 66.414711][ T4346] tipc: Failed to remove unknown binding: 66,1,1/0:3232269885/3232269887 [ 66.425204][ T28] audit: type=1400 audit(1785794420.499:1469): avc: denied { remount } for pid=4338 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.459768][ T4345] bond1: entered promiscuous mode [ 66.476695][ T4345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.500411][ T28] audit: type=1400 audit(1785794420.649:1470): avc: denied { connect } for pid=4350 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.500943][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 66.540260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.552980][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.567535][ T3300] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /48/file1: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 66.604562][ T4345] vlan2: entered allmulticast mode [ 66.611739][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 66.621295][ T4345] bond1: entered allmulticast mode [ 66.629376][ T3300] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 66.642829][ T28] audit: type=1400 audit(1785794420.769:1471): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.680068][ T3410] IPVS: starting estimator thread 0... [ 66.680306][ T28] audit: type=1400 audit(1785794420.769:1472): avc: denied { remove_name } for pid=3300 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.713755][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 66.723135][ T4345] bond1: (slave bridge2): making interface the new active one [ 66.736650][ T4345] bridge2: entered promiscuous mode [ 66.746038][ T28] audit: type=1400 audit(1785794420.769:1473): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.771688][ T4345] bridge2: entered allmulticast mode [ 66.783682][ T4345] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 66.793542][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 66.795483][ T28] audit: type=1400 audit(1785794420.859:1474): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.825269][ T4356] IPVS: using max 2592 ests per chain, 129600 per kthread [ 66.834619][ T4358] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 66.861241][ T28] audit: type=1400 audit(1785794420.859:1475): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.884228][ T28] audit: type=1400 audit(1785794420.859:1476): avc: denied { write } for pid=3300 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.915735][ T4360] veth3: entered allmulticast mode [ 66.927669][ T4360] bond1: (slave veth3): Enslaving as an active interface with an up link [ 66.940684][ T3410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.948970][ T28] audit: type=1400 audit(1785794420.859:1477): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.985829][ T4358] bond1: (slave veth0_to_bond): Releasing active interface [ 66.993965][ T4358] veth0_to_bond: left promiscuous mode [ 66.999591][ T4358] veth0_to_bond: left allmulticast mode [ 67.023799][ T4371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 67.032760][ T4358] bond3: (slave veth0_to_bond): making interface the new active one [ 67.051912][ T4358] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 67.079008][ T4361] macvlan2: entered promiscuous mode [ 67.084797][ T4361] macvlan2: entered allmulticast mode [ 67.090929][ T4361] bond3: entered promiscuous mode [ 67.096419][ T4361] veth0_to_bond: entered promiscuous mode [ 67.102770][ T4361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.111081][ T4361] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 67.112135][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 67.127381][ T4361] bond3: left promiscuous mode [ 67.141528][ T4361] veth0_to_bond: left promiscuous mode [ 67.183270][ T4371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4371 comm=syz.2.267 [ 67.230246][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.239193][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.251572][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.293139][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.526788][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.538421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.565174][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.577500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.584212][ T4401] syzkaller0: entered promiscuous mode [ 67.594211][ T4401] syzkaller0: entered allmulticast mode [ 67.619112][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.627436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.670151][ T4403] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 67.680177][ T4403] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 67.731111][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 67.777194][ T4408] vlan2: entered allmulticast mode [ 67.789749][ T4408] bridge1: entered allmulticast mode [ 67.828127][ T4412] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 67.842527][ T4408] bridge1: port 1(erspan0) entered blocking state [ 67.854203][ T4408] bridge1: port 1(erspan0) entered disabled state [ 67.869358][ T4408] erspan0: entered allmulticast mode [ 67.882757][ T4408] erspan0: entered promiscuous mode [ 67.894837][ T4408] bridge1: port 1(erspan0) entered blocking state [ 67.901626][ T4408] bridge1: port 1(erspan0) entered forwarding state [ 67.912068][ T4416] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 68.126426][ T4419] syzkaller0: entered promiscuous mode [ 68.148865][ T4419] syzkaller0: entered allmulticast mode [ 68.156418][ T4384] loop2: detected capacity change from 0 to 1024 [ 68.176553][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 68.191112][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 68.201505][ T4424] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 68.275179][ T4424] bond2: (slave veth0_to_bond): making interface the new active one [ 68.297594][ T4424] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 68.392768][ T4435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.415503][ T4426] macvlan2: entered promiscuous mode [ 68.425843][ T4426] macvlan2: entered allmulticast mode [ 68.432127][ T4426] bond2: entered promiscuous mode [ 68.438036][ T4426] veth0_to_bond: entered promiscuous mode [ 68.445281][ T4426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.464064][ T4426] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 68.477526][ T4384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.493852][ T4426] bond2: left promiscuous mode [ 68.493903][ T4426] veth0_to_bond: left promiscuous mode [ 68.517025][ T4438] bridge0: port 3(syz_tun) entered blocking state [ 68.530099][ T4438] bridge0: port 3(syz_tun) entered disabled state [ 68.557510][ T4438] syz_tun: entered allmulticast mode [ 68.569187][ T4438] syz_tun: entered promiscuous mode [ 68.579869][ T4438] bridge0: port 3(syz_tun) entered blocking state [ 68.586706][ T4438] bridge0: port 3(syz_tun) entered forwarding state [ 68.755668][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.783500][ T4453] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 68.819413][ T4456] netlink: 'syz.3.292': attribute type 12 has an invalid length. [ 68.838363][ T4456] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 68.846538][ T4456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.292'. [ 68.894061][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 68.908744][ T4464] syzkaller0: entered promiscuous mode [ 68.914846][ T4464] syzkaller0: entered allmulticast mode [ 68.926945][ T3383] IPVS: starting estimator thread 0... [ 69.047025][ T4465] IPVS: using max 2688 ests per chain, 134400 per kthread [ 69.150424][ T4470] loop2: detected capacity change from 0 to 1024 [ 69.237795][ T4470] ext4: Unknown parameter 'fowner' [ 70.085788][ T4500] bond2: entered promiscuous mode [ 70.091559][ T4500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.114121][ T4500] vlan3: entered allmulticast mode [ 70.119559][ T4500] bond2: entered allmulticast mode [ 70.134631][ T4500] bond2: (slave bridge2): making interface the new active one [ 70.142583][ T4500] bridge2: entered promiscuous mode [ 70.147915][ T4500] bridge2: entered allmulticast mode [ 70.155431][ T4500] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 70.358235][ T4511] bridge_slave_0: left allmulticast mode [ 70.364199][ T4511] bridge_slave_0: left promiscuous mode [ 70.370348][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.384106][ T4511] bridge_slave_1: left allmulticast mode [ 70.390266][ T4511] bridge_slave_1: left promiscuous mode [ 70.396403][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.407137][ T4511] bond0: (slave bond_slave_0): Releasing backup interface [ 70.425128][ T4511] bond0: (slave bond_slave_1): Releasing backup interface [ 70.436755][ T4511] team0: Port device team_slave_0 removed [ 70.443744][ T4511] team0: Port device team_slave_1 removed [ 70.451014][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.461093][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.502014][ T4512] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.527050][ T4515] bond0: (slave bridge0): Releasing backup interface [ 70.676430][ T4517] loop3: detected capacity change from 0 to 512 [ 70.757116][ T4517] EXT4-fs: Ignoring removed nobh option [ 70.888394][ T4517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.915678][ T4517] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.079055][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.198064][ T4538] loop2: detected capacity change from 0 to 128 [ 72.145130][ T4552] loop3: detected capacity change from 0 to 1024 [ 72.162533][ T4552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.204150][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 72.204165][ T28] audit: type=1400 audit(1785794426.349:2092): avc: denied { write } for pid=4525 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.256952][ T4552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 72.275453][ T4552] System zones: 0-1, 3-12 [ 72.281997][ T4552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.308639][ T28] audit: type=1400 audit(1785794426.449:2093): avc: denied { write } for pid=4551 comm="syz.3.326" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.386624][ T4552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.291232][ T4581] loop2: detected capacity change from 0 to 512 [ 73.323725][ T4581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.374534][ T4581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.390328][ T4581] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.417182][ T28] audit: type=1400 audit(1785794427.559:2094): avc: denied { write } for pid=4580 comm="syz.2.335" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.440777][ T28] audit: type=1400 audit(1785794427.559:2095): avc: denied { create } for pid=4580 comm="syz.2.335" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.494246][ T4568] loop4: detected capacity change from 0 to 512 [ 73.522587][ T4590] syz.3.338 uses obsolete (PF_INET,SOCK_PACKET) [ 73.597843][ T4593] __nla_validate_parse: 6 callbacks suppressed [ 73.597863][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 73.676443][ T4594] hsr0 speed is unknown, defaulting to 1000 [ 73.710009][ T4568] EXT4-fs: Ignoring removed nobh option [ 73.828525][ T4596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 73.923048][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.016924][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.019375][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.064146][ T3300] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 74.088205][ T28] audit: type=1400 audit(1785794428.209:2096): avc: denied { write } for pid=3300 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.108231][ T3300] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 74.114050][ T4568] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.142861][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.290036][ T28] audit: type=1400 audit(1785794428.429:2097): avc: denied { write } for pid=4567 comm="syz.4.331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.298475][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.502113][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.520685][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.532474][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.542975][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.340'. [ 74.553570][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.703964][ T28] audit: type=1400 audit(1785794428.849:2098): avc: denied { connect } for pid=4616 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.866760][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.875355][ T28] audit: type=1400 audit(1785794428.849:2099): avc: denied { write } for pid=4616 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.933036][ T28] audit: type=1400 audit(1785794428.989:2100): avc: denied { write } for pid=4607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.998005][ T28] audit: type=1400 audit(1785794429.089:2101): avc: denied { write } for pid=4629 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.240882][ T4650] validate_nla: 3 callbacks suppressed [ 75.240925][ T4650] netlink: 'syz.1.351': attribute type 8 has an invalid length. [ 75.272614][ T4650] sch_fq: defrate 0 ignored. [ 75.314644][ T4637] hsr0 speed is unknown, defaulting to 1000 [ 75.341373][ T4664] syzkaller0: entered promiscuous mode [ 75.366780][ T4664] syzkaller0: entered allmulticast mode [ 75.721273][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.746528][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.769607][ T4637] bridge_slave_0: entered allmulticast mode [ 75.790156][ T4637] bridge_slave_0: entered promiscuous mode [ 75.795829][ T4670] loop0: detected capacity change from 0 to 512 [ 75.824129][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.824271][ T4670] EXT4-fs: Ignoring removed nobh option [ 75.844907][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.845025][ T4637] bridge_slave_1: entered allmulticast mode [ 75.845650][ T4637] bridge_slave_1: entered promiscuous mode [ 75.893133][ T4637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.927479][ T4637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.992413][ T4637] team0: Port device team_slave_0 added [ 76.012487][ T4637] team0: Port device team_slave_1 added [ 76.065179][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.072298][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.133077][ T4670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.225751][ T4637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.237201][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.242173][ T4670] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.244245][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.244278][ T4637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.261531][ T4637] hsr_slave_0: entered promiscuous mode [ 76.262106][ T4637] hsr_slave_1: entered promiscuous mode [ 76.311519][ T4637] debugfs: 'hsr0' already exists in 'hsr' [ 76.317346][ T4637] Cannot create hsr debugfs directory [ 76.461054][ T4637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.481034][ T4637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.491059][ T4637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.517744][ T4637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.535934][ T4637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.554344][ T4637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.581479][ T4637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.608236][ T4637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.661924][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.669148][ T4637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.676646][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.683853][ T4637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.762608][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.770965][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.825616][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.847323][ T4637] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.862300][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.869426][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.900503][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.907675][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.916870][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.133435][ T4702] loop0: detected capacity change from 0 to 512 [ 77.160860][ T4702] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.200996][ T4702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.244694][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 77.244712][ T28] audit: type=1400 audit(1785794431.329:2109): avc: denied { name_bind } for pid=4714 comm="syz.1.361" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.276055][ T4702] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 77.299969][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.306475][ C0] EXT4-fs (loop0): initial error at time 1785794431: ext4_mb_generate_buddy:1317 [ 77.315734][ C0] EXT4-fs (loop0): last error at time 1785794431: ext4_mb_generate_buddy:1317 [ 77.333052][ T4702] EXT4-fs (loop0): 1 truncate cleaned up [ 77.342794][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.360558][ T4637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.430048][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.614474][ T4637] veth0_vlan: entered promiscuous mode [ 77.632319][ T4637] veth1_vlan: entered promiscuous mode [ 77.669005][ T4637] veth0_macvtap: entered promiscuous mode [ 77.678467][ T4637] veth1_macvtap: entered promiscuous mode [ 77.724036][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.736628][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.770998][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.806280][ T28] audit: type=1400 audit(1785794431.949:2110): avc: denied { mounton } for pid=4637 comm="syz-executor" path="/root/syzkaller.dyU1W6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.834500][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.853514][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.890121][ T297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.936089][ T4749] loop4: detected capacity change from 0 to 1024 [ 77.953612][ T4749] EXT4-fs: Ignoring removed bh option [ 78.016879][ T4746] loop0: detected capacity change from 0 to 512 [ 78.017031][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.068867][ T4750] syzkaller0: entered promiscuous mode [ 78.077857][ T4750] syzkaller0: entered allmulticast mode [ 78.175323][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.232012][ T28] audit: type=1400 audit(1785794432.369:2111): avc: denied { accept } for pid=4756 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.312241][ T4759] capability: warning: `syz.4.369' uses 32-bit capabilities (legacy support in use) [ 78.800082][ T4746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.827840][ T4746] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.978498][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.046675][ T4772] tipc: Enabling of bearer rejected, failed to enable media [ 79.134705][ T4779] __nla_validate_parse: 69 callbacks suppressed [ 79.134752][ T4779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 79.156943][ T4780] loop0: detected capacity change from 0 to 128 [ 79.164329][ T4780] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.229439][ T4785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.238754][ T4785] IPv6: NLM_F_CREATE should be set when creating new route [ 79.294907][ T28] audit: type=1400 audit(1785794433.439:2112): avc: denied { read write } for pid=4786 comm="syz.4.378" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.356633][ T28] audit: type=1400 audit(1785794433.439:2113): avc: denied { open } for pid=4786 comm="syz.4.378" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.407088][ T68] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.444914][ T28] audit: type=1400 audit(1785794433.589:2114): avc: denied { getopt } for pid=4791 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.513734][ T28] audit: type=1400 audit(1785794433.619:2115): avc: denied { bind } for pid=4782 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.576282][ T28] audit: type=1400 audit(1785794433.659:2116): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.946331][ T4798] loop4: detected capacity change from 0 to 764 [ 80.456974][ T4802] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 80.538206][ T28] audit: type=1400 audit(1785794434.679:2117): avc: denied { mounton } for pid=4805 comm="syz.1.384" path="/file0" dev="autofs" ino=8965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 80.547149][ T4804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 80.584288][ T4804] bond4: (slave bond5): making interface the new active one [ 80.616511][ T4804] bond4: (slave bond5): Enslaving as an active interface with an up link [ 80.660266][ T28] audit: type=1400 audit(1785794434.809:2118): avc: denied { read write } for pid=4810 comm="syz.5.386" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 80.713488][ T4811] netlink: 'syz.5.386': attribute type 1 has an invalid length. [ 80.736657][ T4802] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 80.808627][ T4814] netlink: 'syz.5.386': attribute type 10 has an invalid length. [ 80.820021][ T4814] netlink: 40 bytes leftover after parsing attributes in process `syz.5.386'. [ 80.839446][ T4814] dummy0: entered promiscuous mode [ 81.108033][ T4822] syzkaller0: entered promiscuous mode [ 81.119006][ T4822] syzkaller0: entered allmulticast mode [ 81.415789][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 81.498723][ T4839] netlink: 'syz.4.395': attribute type 13 has an invalid length. [ 81.585247][ T4840] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 81.616343][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 81.685686][ T4840] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 81.702461][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 81.739501][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 82.458822][ T4857] loop0: detected capacity change from 0 to 764 [ 82.476633][ T4863] loop5: detected capacity change from 0 to 512 [ 82.485149][ T4863] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 82.510095][ T4863] FAT-fs (loop5): Filesystem has been set read-only [ 82.590351][ T4855] loop4: detected capacity change from 0 to 1024 [ 82.678930][ T4867] netlink: 'syz.4.400': attribute type 12 has an invalid length. [ 82.696314][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 82.761172][ T4867] netlink: 'syz.4.400': attribute type 12 has an invalid length. [ 82.770195][ T297] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.799927][ T297] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.815370][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 82.832326][ T297] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.856954][ T297] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.208873][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 83.208893][ T28] audit: type=1400 audit(1785794437.329:2121): avc: denied { ioctl } for pid=4873 comm="syz.4.408" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.308973][ T28] audit: type=1400 audit(1785794437.409:2122): avc: denied { getopt } for pid=4873 comm="syz.4.408" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.409773][ T4880] loop5: detected capacity change from 0 to 256 [ 83.442652][ T4880] FAT-fs (loop5): data area starts beyond volume (274 > 64) [ 83.455150][ T4880] FAT-fs (loop5): Can't find a valid FAT filesystem [ 83.479199][ T4880] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 83.547312][ T4888] loop4: detected capacity change from 0 to 128 [ 83.577562][ T4888] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.591318][ T4886] hsr0 speed is unknown, defaulting to 1000 [ 83.628334][ T4888] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.665231][ T28] audit: type=1400 audit(1785794437.809:2123): avc: denied { write } for pid=4887 comm="syz.4.412" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.764806][ T28] audit: type=1400 audit(1785794437.849:2124): avc: denied { write } for pid=4887 comm="syz.4.412" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.815434][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.966035][ T4899] loop5: detected capacity change from 0 to 128 [ 83.977283][ T4900] lo: Caught tx_queue_len zero misconfig [ 84.025517][ T4899] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.195404][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 84.610780][ T4913] loop4: detected capacity change from 0 to 512 [ 84.678329][ T4913] EXT4-fs: Ignoring removed orlov option [ 84.931177][ T4853] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.004114][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.338253][ T4938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.430'. [ 85.350264][ T4939] loop0: detected capacity change from 0 to 256 [ 85.360927][ T4913] IPVS: Error connecting to the multicast addr [ 85.372355][ T4939] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 85.388323][ T28] audit: type=1326 audit(1785794439.529:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.420902][ T4939] FAT-fs (loop0): Can't find a valid FAT filesystem [ 85.437861][ T4936] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 85.446437][ T28] audit: type=1326 audit(1785794439.529:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.484203][ T28] audit: type=1326 audit(1785794439.529:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.546603][ T28] audit: type=1326 audit(1785794439.529:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.577503][ T4939] hsr0 speed is unknown, defaulting to 1000 [ 85.601560][ T28] audit: type=1326 audit(1785794439.529:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.640628][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.683296][ T28] audit: type=1326 audit(1785794439.529:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 85.904830][ T4957] loop4: detected capacity change from 0 to 512 [ 86.003261][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.018105][ T4960] loop0: detected capacity change from 0 to 128 [ 86.037114][ T4957] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.054204][ T4960] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.233007][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.352046][ T4978] loop4: detected capacity change from 0 to 1024 [ 86.361810][ T4978] ext4: Unknown parameter 'fowner' [ 86.890443][ T297] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.905691][ T4986] macsec0: entered promiscuous mode [ 86.959560][ T4985] macsec0: left promiscuous mode [ 87.013333][ T4990] loop0: detected capacity change from 0 to 512 [ 87.161778][ T4990] EXT4-fs: Ignoring removed orlov option [ 87.476430][ T4996] loop4: detected capacity change from 0 to 128 [ 87.601515][ T4990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.618935][ T4996] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.735832][ T4990] IPVS: Error connecting to the multicast addr [ 87.783197][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.962071][ T4853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.312708][ T5011] loop5: detected capacity change from 0 to 512 [ 88.353219][ T5011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.383463][ T5011] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.763879][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.321576][ T5032] loop5: detected capacity change from 0 to 1024 [ 89.334902][ T5032] ext4: Unknown parameter 'fowner' [ 89.536525][ T5040] loop4: detected capacity change from 0 to 512 [ 89.549639][ T5040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.568602][ T5040] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.590021][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 89.596590][ C0] EXT4-fs (loop4): initial error at time 1785794443: ext4_mb_generate_buddy:1317 [ 89.605741][ C0] EXT4-fs (loop4): last error at time 1785794443: ext4_mb_generate_buddy:1317 [ 89.635961][ T5040] EXT4-fs (loop4): 1 truncate cleaned up [ 89.649827][ T5040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.665322][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 89.665340][ T28] audit: type=1400 audit(1785794443.819:2147): avc: denied { mount } for pid=5044 comm="syz.1.462" name="/" dev="ramfs" ino=10368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.696974][ T5047] loop0: detected capacity change from 0 to 512 [ 89.718456][ T5047] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.461: invalid indirect mapped block 4294967295 (level 1) [ 89.757860][ T5047] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.759978][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 89.760911][ T5047] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.461: invalid indirect mapped block 4294967295 (level 1) [ 89.769293][ C1] EXT4-fs (loop0): initial error at time 1785794443: ext4_free_branches:1023: inode 11 [ 89.799851][ C1] EXT4-fs (loop0): last error at time 1785794443: ext4_free_branches:1023: inode 11 [ 89.806695][ T5047] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.814699][ T5047] EXT4-fs (loop0): 2 truncates cleaned up [ 89.830987][ T5047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.035294][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.104690][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.135307][ T5057] loop5: detected capacity change from 0 to 512 [ 91.403706][ T5063] loop0: detected capacity change from 0 to 512 [ 91.445550][ T5057] EXT4-fs: Ignoring removed orlov option [ 91.462909][ T5078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.472'. [ 91.574007][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.605917][ T5076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5076 comm=syz.4.472 [ 91.821794][ T5063] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.937686][ T5057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.083816][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.228506][ T5057] IPVS: Error connecting to the multicast addr [ 92.311909][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 92.351653][ T28] audit: type=1326 audit(1785794446.499:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 92.377710][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.451892][ T28] audit: type=1400 audit(1785794446.479:2148): avc: denied { append } for pid=5089 comm="syz.0.474" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.641712][ T28] audit: type=1326 audit(1785794446.499:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 92.686883][ T28] audit: type=1326 audit(1785794446.499:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 92.731045][ T28] audit: type=1326 audit(1785794446.499:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 92.778017][ T28] audit: type=1326 audit(1785794446.499:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4e170de019 code=0x7ffc0000 [ 92.822275][ T28] audit: type=1326 audit(1785794446.569:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e1709e84e code=0x7ffc0000 [ 92.848941][ T28] audit: type=1326 audit(1785794446.579:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e1709e84e code=0x7ffc0000 [ 92.875613][ T28] audit: type=1326 audit(1785794446.589:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5093 comm="syz.3.476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4e1709e84e code=0x7ffc0000 [ 92.876066][ T5114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 93.130423][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 93.178076][ T5122] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 93.383835][ T5122] bond6: entered promiscuous mode [ 93.402576][ T5122] 8021q: adding VLAN 0 to HW filter on device bond6 [ 93.479460][ T5135] xt_hl: Unknown Hop Limit match mode: 221 [ 93.616622][ T5128] bond6: (slave bridge1): making interface the new active one [ 93.698044][ T5128] bridge1: entered promiscuous mode [ 93.704813][ T5128] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 93.979115][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 94.012204][ T5150] bridge0: port 3(syz_tun) entered disabled state [ 94.056693][ T5150] syz_tun (unregistering): left allmulticast mode [ 94.065243][ T5150] syz_tun (unregistering): left promiscuous mode [ 94.072115][ T5150] bridge0: port 3(syz_tun) entered disabled state [ 94.264672][ T5155] macsec0: entered promiscuous mode [ 94.292136][ T5154] macsec0: left promiscuous mode [ 94.332928][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 94.391767][ T5159] syz_tun (unregistering): left allmulticast mode [ 94.779291][ T5168] loop4: detected capacity change from 0 to 512 [ 94.831579][ T5168] EXT4-fs: Ignoring removed i_version option [ 94.861980][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.005050][ T5168] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.497: invalid block [ 95.032856][ T5168] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.036238][ T5168] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.497: invalid indirect mapped block 4294967295 (level 1) [ 95.049968][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 95.049988][ C0] EXT4-fs (loop4): initial error at time 1785794449: ext4_get_branch:178: inode 11: block 4294967295 [ 95.050027][ C0] EXT4-fs (loop4): last error at time 1785794449: ext4_get_branch:178: inode 11: block 4294967295 [ 95.121263][ T5168] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.129805][ T5168] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.497: invalid indirect mapped block 4294967295 (level 1) [ 95.166794][ T5168] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.168078][ T5168] EXT4-fs (loop4): 2 truncates cleaned up [ 95.228590][ T5168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.289900][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 95.289917][ T28] audit: type=1400 audit(1785794449.429:2189): avc: denied { setattr } for pid=5167 comm="syz.4.497" path="/114/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.363481][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.722152][ T5205] macsec0: entered promiscuous mode [ 95.738662][ T5204] macsec0: left promiscuous mode [ 95.823040][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.511'. [ 96.149270][ T5212] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 96.172255][ T5216] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 96.214346][ T5216] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 96.267366][ T5216] bond3 (unregistering): Released all slaves [ 96.286639][ T5219] bridge4: entered promiscuous mode [ 96.295042][ T5219] bond2: (slave bridge4): making interface the new active one [ 96.309194][ T5219] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 96.328730][ T5212] Process accounting resumed [ 96.518929][ T28] audit: type=1400 audit(1785794450.659:2190): avc: denied { mount } for pid=5221 comm="syz.1.527" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.864670][ T5243] macsec0: entered promiscuous mode [ 97.884373][ T5247] netlink: 'syz.5.524': attribute type 13 has an invalid length. [ 97.923496][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.930802][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.979326][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.991723][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.058620][ T5242] macsec0: left promiscuous mode [ 98.079995][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.089999][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.114436][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.132773][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.234214][ T28] audit: type=1400 audit(1785794452.379:2191): avc: denied { create } for pid=5257 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 98.362219][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 98.377800][ T5265] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 98.392443][ T5263] netlink: 7 bytes leftover after parsing attributes in process `syz.1.530'. [ 98.421538][ T5265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.458928][ T5265] bond3: (slave veth5): Enslaving as an active interface with a down link [ 98.495722][ T5272] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 98.555202][ T5265] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.574471][ T5265] bond3: (slave batadv1): making interface the new active one [ 98.594000][ T5265] batadv1: entered promiscuous mode [ 98.607982][ T5265] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 98.799601][ T5276] bond3 (unregistering): (slave veth5): Releasing active interface [ 98.887837][ T5276] bond3 (unregistering): (slave batadv1): Releasing active interface [ 98.957445][ T5276] bond3 (unregistering): Released all slaves [ 98.981574][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 99.154253][ T5289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5289 comm=syz.1.539 [ 99.173896][ T5288] macsec0: entered promiscuous mode [ 99.185723][ T5287] macsec0: left promiscuous mode [ 99.220742][ T4637] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 99.243275][ T4637] CPU: 0 UID: 0 PID: 4637 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 99.243368][ T4637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.243382][ T4637] Call Trace: [ 99.243388][ T4637] [ 99.243397][ T4637] __dump_stack+0x1d/0x30 [ 99.243458][ T4637] dump_stack_lvl+0x95/0xd0 [ 99.243483][ T4637] dump_stack+0x15/0x1b [ 99.243504][ T4637] dump_header+0x80/0x240 [ 99.243553][ T4637] oom_kill_process+0x295/0x350 [ 99.243591][ T4637] out_of_memory+0x981/0xbc0 [ 99.243660][ T4637] try_charge_memcg+0x621/0xa00 [ 99.243690][ T4637] charge_memcg+0x6d/0x120 [ 99.243724][ T4637] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 99.243808][ T4637] swap_cache_alloc_folio+0x47b/0x5e0 [ 99.243843][ T4637] swap_cluster_readahead+0x3d2/0x460 [ 99.243876][ T4637] swapin_readahead+0xd8/0x8a0 [ 99.243962][ T4637] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 99.243995][ T4637] ? hrtimer_start_range_ns+0x108/0x120 [ 99.244118][ T4637] ? __rcu_read_unlock+0x4e/0x70 [ 99.244148][ T4637] ? swap_cache_get_folio+0x1f7/0x200 [ 99.244181][ T4637] do_swap_page+0x2a2/0x1ec0 [ 99.244254][ T4637] ? __schedule+0x799/0xd10 [ 99.244287][ T4637] ? __rcu_read_lock+0x36/0x50 [ 99.244423][ T4637] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 99.244516][ T4637] handle_mm_fault+0xb3c/0x2da0 [ 99.244617][ T4637] do_user_addr_fault+0x634/0x1060 [ 99.244670][ T4637] ? trace_page_fault_user+0x1f/0xa0 [ 99.244705][ T4637] exc_page_fault+0x62/0xa0 [ 99.244732][ T4637] asm_exc_page_fault+0x26/0x30 [ 99.244796][ T4637] RIP: 0033:0x7ff5bc349197 [ 99.244828][ T4637] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 99.244909][ T4637] RSP: 002b:00007fff82b6b780 EFLAGS: 00010202 [ 99.244931][ T4637] RAX: 0000000000000000 RBX: 0000555566e18500 RCX: 00007ff5bc349197 [ 99.244947][ T4637] RDX: 00007fff82b6b7c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.244962][ T4637] RBP: 00007fff82b6b82c R08: 0000000000000000 R09: 0000000000000000 [ 99.245013][ T4637] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 99.245029][ T4637] R13: 00000000000927c0 R14: 000000000001811b R15: 00007fff82b6b880 [ 99.245052][ T4637] [ 99.245082][ T4637] memory: usage 307200kB, limit 307200kB, failcnt 2308 [ 99.482940][ T5296] netlink: 'syz.3.543': attribute type 13 has an invalid length. [ 99.500033][ T4637] memory+swap: usage 126644kB, limit 9007199254740988kB, failcnt 0 [ 99.508040][ T4637] kmem: usage 106236kB, limit 9007199254740988kB, failcnt 0 [ 99.515769][ T4637] Memory cgroup stats for /syz5: [ 99.516156][ T4637] cache 0 [ 99.524591][ T4637] rss 3108864 [ 99.528103][ T4637] shmem 0 [ 99.533267][ T4637] mapped_file 0 [ 99.616539][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.624023][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.634626][ T4637] dirty 0 [ 99.638509][ T4637] writeback 0 [ 99.641982][ T4637] workingset_refault_anon 23 [ 99.648924][ T4637] workingset_refault_file 0 [ 99.654581][ T4637] swap 11890688 [ 99.663635][ T4637] swapcached 11984896 [ 99.672113][ T4637] pgpgin 19702 [ 99.677477][ T4637] pgpgout 18943 [ 99.681190][ T4637] pgfault 29705 [ 99.684978][ T4637] pgmajfault 17 [ 99.688841][ T4637] inactive_anon 0 [ 99.692806][ T4637] active_anon 3014656 [ 99.698348][ T4637] inactive_file 0 [ 99.702245][ T4637] active_file 0 [ 99.705916][ T4637] unevictable 0 [ 99.709598][ T4637] hierarchical_memory_limit 314572800 [ 99.714097][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.715303][ T4637] hierarchical_memsw_limit 9223372036854771712 [ 99.736675][ T4637] total_cache 0 [ 99.737734][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.741798][ T4637] total_rss 3108864 [ 99.751703][ T4637] total_shmem 0 [ 99.755602][ T4637] total_mapped_file 0 [ 99.759662][ T4637] total_dirty 0 [ 99.767044][ T4637] total_writeback 0 [ 99.775050][ T4637] total_workingset_refault_anon 23 [ 99.780570][ T4637] total_workingset_refault_file 0 [ 99.786009][ T4637] total_swap 11890688 [ 99.790376][ T4637] total_swapcached 11984896 [ 99.797705][ T4637] total_pgpgin 19702 [ 99.801969][ T4637] total_pgpgout 18943 [ 99.806264][ T4637] total_pgfault 29705 [ 99.810790][ T4637] total_pgmajfault 17 [ 99.815810][ T4637] total_inactive_anon 0 [ 99.823943][ T4637] total_active_anon 3014656 [ 99.828779][ T4637] total_inactive_file 0 [ 99.839370][ T4637] total_active_file 0 [ 99.843875][ T4637] total_unevictable 0 [ 99.849258][ T4637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.537,pid=5273,uid=0 [ 99.868555][ T4637] Memory cgroup out of memory: Killed process 5273 (syz.5.537) total-vm:96368kB, anon-rss:6396kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 99.920502][ T5021] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.950146][ T5021] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.959918][ T5021] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.970570][ T5021] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.010102][ T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.033282][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.048969][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.059187][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.095023][ T5317] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 100.101896][ T5318] syz.5.546: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 100.107934][ T11] syz0: Port: 1 Link DOWN [ 100.120118][ T5318] CPU: 1 UID: 0 PID: 5318 Comm: syz.5.546 Not tainted syzkaller #0 PREEMPT(lazy) [ 100.120148][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.120210][ T5318] Call Trace: [ 100.120218][ T5318] [ 100.120227][ T5318] __dump_stack+0x1d/0x30 [ 100.120293][ T5318] dump_stack_lvl+0x95/0xd0 [ 100.120315][ T5318] dump_stack+0x15/0x1b [ 100.120413][ T5318] warn_alloc+0x145/0x1c0 [ 100.120438][ T5318] ? kvm_sched_clock_read+0x11/0x20 [ 100.120497][ T5318] ? lapic_next_event+0x11/0x20 [ 100.120577][ T5318] ? clockevents_program_event+0x2fd/0x340 [ 100.120605][ T5318] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 100.120639][ T5318] ? tick_program_event+0x79/0xc0 [ 100.120687][ T5318] ? __hrtimer_rearm_deferred+0x571/0x650 [ 100.120721][ T5318] ? should_fail_ex+0x30/0x270 [ 100.120750][ T5318] ? xskq_create+0x36/0xe0 [ 100.120778][ T5318] ? should_failslab+0x8c/0xb0 [ 100.120871][ T5318] vmalloc_user_noprof+0x7d/0xb0 [ 100.120898][ T5318] ? xskq_create+0x80/0xe0 [ 100.120925][ T5318] xskq_create+0x80/0xe0 [ 100.121065][ T5318] xsk_init_queue+0x70/0xb0 [ 100.121092][ T5318] xsk_setsockopt+0x471/0x640 [ 100.121118][ T5318] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.121144][ T5318] __sys_setsockopt+0x184/0x200 [ 100.121276][ T5318] __x64_sys_setsockopt+0x64/0x80 [ 100.121308][ T5318] x64_sys_call+0x2327/0x3020 [ 100.121343][ T5318] do_syscall_64+0x136/0x3c0 [ 100.121370][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.121473][ T5318] RIP: 0033:0x7ff5bc38e019 [ 100.121490][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.121547][ T5318] RSP: 002b:00007ff5badc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.121598][ T5318] RAX: ffffffffffffffda RBX: 00007ff5bc616090 RCX: 00007ff5bc38e019 [ 100.121613][ T5318] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 100.121627][ T5318] RBP: 00007ff5bc42500c R08: 0000000000000004 R09: 0000000000000000 [ 100.121690][ T5318] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 100.121704][ T5318] R13: 00007ff5bc616128 R14: 00007ff5bc616090 R15: 00007fff82b6b488 [ 100.121723][ T5318] [ 100.124168][ T5318] Mem-Info: [ 100.290644][ T28] audit: type=1400 audit(1785794454.429:2192): avc: denied { write } for pid=5306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.294475][ T5318] active_anon:14253 inactive_anon:8 isolated_anon:0 [ 100.294475][ T5318] active_file:65 inactive_file:22990 isolated_file:0 [ 100.294475][ T5318] unevictable:0 dirty:209 writeback:0 [ 100.294475][ T5318] slab_reclaimable:3415 slab_unreclaimable:111764 [ 100.294475][ T5318] mapped:29320 shmem:498 pagetables:1556 [ 100.294475][ T5318] sec_pagetables:0 bounce:0 [ 100.294475][ T5318] kernel_misc_reclaimable:0 [ 100.294475][ T5318] free:1707174 free_pcp:5146 free_cma:0 [ 100.312632][ T5323] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 100.319059][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 100.356844][ T28] audit: type=1400 audit(1785794454.499:2193): avc: denied { write } for pid=5331 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.374033][ T5318] Node 0 active_anon:57012kB inactive_anon:32kB active_file:260kB inactive_file:91960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117280kB dirty:836kB writeback:0kB shmem:1992kB kernel_stack:4176kB pagetables:5992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 100.476637][ T5317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 100.491198][ T5318] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.536923][ T5318] lowmem_reserve[]: 0 2878 7857 7857 [ 100.543185][ T5318] Node 0 DMA32 free:2944004kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947632kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 100.578922][ T49] net_ratelimit: 3 callbacks suppressed [ 100.578938][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.579156][ T5317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.649808][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 100.660418][ T5318] lowmem_reserve[]: 0 0 4978 4978 [ 100.666406][ T5318] Node 0 Normal free:3870100kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56780kB inactive_anon:32kB active_file:260kB inactive_file:91960kB unevictable:0kB writepending:836kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:17588kB local_pcp:10920kB free_cma:0kB [ 100.678155][ T5336] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 100.712484][ T5318] lowmem_reserve[]: 0 0 0 0 [ 100.713895][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.725501][ T5318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.759505][ T5340] vlan2: entered allmulticast mode [ 100.766201][ T5318] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944004kB [ 100.779843][ T5340] bridge1: entered allmulticast mode [ 100.807315][ T5318] Node 0 Normal: 77*4kB (UM) 214*8kB (UME) 251*16kB (UME) 176*32kB (UME) 218*64kB (UME) 169*128kB (UME) 131*256kB (UM) 65*512kB (UM) 36*1024kB (UM) 22*2048kB (UME) 897*4096kB (UM) = 3870100kB [ 100.837004][ T5318] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 100.837228][ T5340] bridge1: port 1(erspan0) entered blocking state [ 100.855361][ T28] audit: type=1400 audit(1785794455.009:2194): avc: denied { write } for pid=5334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.886638][ T5340] bridge1: port 1(erspan0) entered disabled state [ 100.897546][ T5340] erspan0: entered allmulticast mode [ 100.908225][ T5340] erspan0: entered promiscuous mode [ 100.921959][ T5340] bridge1: port 1(erspan0) entered blocking state [ 100.927355][ T28] audit: type=1400 audit(1785794455.069:2195): avc: denied { write } for pid=5349 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.928494][ T5340] bridge1: port 1(erspan0) entered forwarding state [ 100.952652][ T5318] 23570 total pagecache pages [ 100.971503][ T5318] 4 pages in swap cache [ 100.995945][ T5318] Free swap = 124464kB [ 101.007817][ T5318] Total swap = 124996kB [ 101.021577][ T5318] 2097051 pages RAM [ 101.032729][ T5318] 0 pages HighMem/MovableOnly [ 101.038988][ T5336] Process accounting resumed [ 101.043071][ T5318] 81744 pages reserved [ 101.076604][ T49] bond3: (slave ip6gretap1): link status up again after 0 ms [ 101.087524][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.117803][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 101.250125][ T5021] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.370085][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.387747][ T5367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5367 comm=syz.3.555 [ 101.532870][ T28] audit: type=1400 audit(1785794455.679:2196): avc: denied { write } for pid=5353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.557226][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.702451][ T5021] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.765895][ T28] audit: type=1400 audit(1785794455.899:2197): avc: denied { write } for pid=5383 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.822951][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 101.839054][ T28] audit: type=1400 audit(1785794455.939:2198): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 101.909795][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.917172][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.032174][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.078828][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.263450][ T5398] loop5: detected capacity change from 0 to 512 [ 102.288994][ T5398] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 102.299370][ T5398] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 102.309472][ T5398] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.561: Failed to acquire dquot type 1 [ 102.320794][ T5398] loop5: lost filesystem error report for type 5 error -117 [ 102.321330][ T5398] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 102.339022][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 102.339049][ C0] EXT4-fs (loop5): last error at time 1785794456: ext4_acquire_dquot:7041 [ 102.354296][ T5398] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 102.364448][ T5398] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.561: Failed to acquire dquot type 1 [ 102.375646][ T5398] loop5: lost filesystem error report for type 5 error -117 [ 102.377154][ T5398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.561: bg 0: block 248: padding at end of block bitmap is not set [ 102.399210][ T5398] loop5: lost filesystem error report for type 5 error -117 [ 102.409469][ T5398] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 102.426586][ T5398] loop5: lost filesystem error report for type 5 error -117 [ 102.426981][ T5398] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.561: Failed to acquire dquot type 1 [ 102.446374][ T5398] loop5: lost filesystem error report for type 5 error -117 [ 102.446728][ T5398] EXT4-fs (loop5): 1 orphan inode deleted [ 102.447311][ T5387] bond1: left promiscuous mode [ 102.454512][ T5398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.477537][ T5398] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.478385][ T5387] bond1: left allmulticast mode [ 102.501734][ T5387] veth3: left allmulticast mode [ 102.509150][ T5387] syzkaller0: left promiscuous mode [ 102.516039][ T5387] syzkaller0: left allmulticast mode [ 102.629210][ T5387] bond6: left promiscuous mode [ 102.634332][ T5387] bridge1: left promiscuous mode [ 102.660041][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.669233][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.681116][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.694222][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.710425][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 102.853530][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.876728][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 102.950646][ T5407] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 103.176518][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 103.658884][ T5407] Process accounting resumed [ 103.835285][ T5436] netlink: 'syz.0.574': attribute type 12 has an invalid length. [ 103.844628][ T5436] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 104.872983][ T5442] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 104.958476][ T5442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.969278][ T5442] bond3: (slave bond4): making interface the new active one [ 104.977780][ T5442] bond3: (slave bond4): Enslaving as an active interface with an up link [ 105.014170][ T5442] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 105.237528][ T5457] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 105.399706][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 105.480352][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 105.562312][ T5464] veth5: entered allmulticast mode [ 105.575566][ T5464] bond7: (slave veth5): Enslaving as an active interface with an up link [ 105.652512][ T36] net_ratelimit: 14 callbacks suppressed [ 105.652545][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 105.712603][ T5470] loop5: detected capacity change from 0 to 512 [ 105.730589][ T5470] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.745147][ T5470] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 105.759956][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 105.766418][ C1] EXT4-fs (loop5): initial error at time 1785794459: ext4_mb_generate_buddy:1317 [ 105.775719][ C1] EXT4-fs (loop5): last error at time 1785794459: ext4_mb_generate_buddy:1317 [ 105.778882][ T5470] EXT4-fs (loop5): 1 truncate cleaned up [ 105.792212][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 105.793103][ T5470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.829770][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 105.829799][ T28] audit: type=1400 audit(1785794459.969:2199): avc: denied { create } for pid=5478 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.848427][ T5479] siw: device registration error -23 [ 105.856578][ T28] audit: type=1400 audit(1785794459.989:2200): avc: denied { write } for pid=5478 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.895143][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.935824][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 105.961592][ T5481] loop5: detected capacity change from 0 to 764 [ 106.052964][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.170877][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.299999][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.410004][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.520014][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.630014][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.739994][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 106.822818][ T5488] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 106.849417][ T5494] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 106.873215][ T5488] 8021q: adding VLAN 0 to HW filter on device bond8 [ 106.927066][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.593'. [ 106.959276][ T5498] bond8: (slave veth7): Enslaving as an active interface with a down link [ 107.011131][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.040648][ T5488] bond8: (slave batadv1): making interface the new active one [ 107.057786][ T5488] batadv1: entered promiscuous mode [ 107.072186][ T5488] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 107.099631][ T5503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5503 comm=syz.5.593 [ 107.126168][ T5498] bond8 (unregistering): (slave veth7): Releasing active interface [ 107.140764][ T5498] bond8 (unregistering): (slave batadv1): Releasing active interface [ 107.159846][ T5498] bond8 (unregistering): Released all slaves [ 107.202156][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 107.338988][ T5520] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 107.693325][ T5520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.836921][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.872455][ T5527] bond3: (slave batadv1): making interface the new active one [ 107.882637][ T5527] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 107.965160][ T5525] bond3 (unregistering): (slave batadv1): Releasing active interface [ 107.994873][ T5525] bond3 (unregistering): Released all slaves [ 108.121469][ T5537] netlink: 'syz.5.600': attribute type 1 has an invalid length. [ 108.135990][ T5535] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 108.192113][ T5537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.215072][ T5537] bond1: (slave bond2): making interface the new active one [ 108.237602][ T5537] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.285454][ T5542] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 108.342500][ T5535] Process accounting resumed [ 108.790870][ T5549] loop5: detected capacity change from 0 to 1024 [ 109.079737][ T5549] netlink: 'syz.5.606': attribute type 12 has an invalid length. [ 109.110881][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 109.185087][ T28] audit: type=1400 audit(1785794463.249:2201): avc: denied { view } for pid=5547 comm="syz.5.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 109.291821][ T5549] netlink: 'syz.5.606': attribute type 12 has an invalid length. [ 109.291799][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.312708][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.606'. [ 109.323478][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.323550][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.323618][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.594235][ T5567] loop0: detected capacity change from 0 to 764 [ 109.949164][ T5582] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 110.717368][ T36] net_ratelimit: 26 callbacks suppressed [ 110.717455][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 110.871913][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 110.992643][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.120047][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.240007][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.390120][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.530911][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.680885][ T4853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.790246][ T4853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.820014][ T5608] netlink: 'syz.3.626': attribute type 12 has an invalid length. [ 111.972252][ T5604] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 111.999561][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 112.131783][ T5608] netlink: 'syz.3.626': attribute type 12 has an invalid length. [ 112.188850][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 112.773134][ T5628] : renamed from bond0 [ 112.965768][ T5633] loop4: detected capacity change from 0 to 512 [ 113.132963][ T5633] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 113.143715][ T5633] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.154037][ T5633] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.634: Failed to acquire dquot type 1 [ 113.165517][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.168054][ T5633] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 113.175756][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 113.175780][ C1] EXT4-fs (loop4): last error at time 1785794467: ext4_acquire_dquot:7041 [ 113.205369][ T5633] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.215767][ T5633] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.634: Failed to acquire dquot type 1 [ 113.228295][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.250797][ T5633] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.634: bg 0: block 248: padding at end of block bitmap is not set [ 113.272585][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.274401][ T5633] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 113.290552][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.291648][ T5633] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 113.309175][ T5633] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.319471][ T5633] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.634: Failed to acquire dquot type 1 [ 113.330865][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.331786][ T5633] EXT4-fs (loop4): 1 orphan inode deleted [ 113.346676][ T5633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.359750][ T5633] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.988973][ T5649] loop5: detected capacity change from 0 to 512 [ 114.639785][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.777547][ T5655] netlink: 'syz.4.641': attribute type 3 has an invalid length. [ 114.805272][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.826581][ T5655] netlink: 'syz.4.641': attribute type 3 has an invalid length. [ 114.842612][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.863386][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 114.997046][ T5658] syzkaller0: entered promiscuous mode [ 115.003077][ T5658] syzkaller0: entered allmulticast mode [ 115.040210][ T5661] syzkaller0: entered promiscuous mode [ 115.060297][ T5661] syzkaller0: entered allmulticast mode [ 115.790435][ T49] net_ratelimit: 32 callbacks suppressed [ 115.790456][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 115.910094][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.030001][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.140066][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.250025][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.360061][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.480032][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.589991][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.598787][ T28] audit: type=1400 audit(1785794470.739:2202): avc: denied { create } for pid=5670 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 116.720726][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 116.803105][ T5686] hsr0 speed is unknown, defaulting to 1000 [ 116.830030][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 117.398332][ T5697] loop5: detected capacity change from 0 to 512 [ 117.612428][ T5701] netlink: 'syz.3.659': attribute type 3 has an invalid length. [ 117.624090][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 117.633699][ T5701] netlink: 'syz.3.659': attribute type 3 has an invalid length. [ 117.646240][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 117.819832][ T5697] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.831229][ T5697] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 117.935965][ T5697] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 117.952775][ T5697] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 117.969921][ T5697] System zones: 0-2, 18-18, 34-35 [ 118.008007][ T5697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.331793][ T28] audit: type=1400 audit(1785794472.479:2203): avc: denied { write } for pid=5696 comm="syz.5.658" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.407223][ T5723] syzkaller0: entered promiscuous mode [ 118.417710][ T5723] syzkaller0: entered allmulticast mode [ 118.453669][ T28] audit: type=1400 audit(1785794472.569:2204): avc: denied { ioctl } for pid=5696 comm="syz.5.658" path="/56/file2/file2" dev="loop5" ino=16 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.491863][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 118.553490][ T5697] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.658: bg 0: block 353: padding at end of block bitmap is not set [ 118.590068][ T5697] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 118.718596][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.734284][ T5733] netlink: 'syz.3.668': attribute type 12 has an invalid length. [ 118.749024][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 118.759405][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.785292][ T5736] loop5: detected capacity change from 0 to 1024 [ 118.839625][ T5736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.851845][ T5738] netlink: 44 bytes leftover after parsing attributes in process `syz.3.669'. [ 118.881108][ T28] audit: type=1400 audit(1785794473.019:2205): avc: denied { write } for pid=5735 comm="syz.5.667" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.620256][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.375831][ T5771] netlink: 'syz.5.679': attribute type 3 has an invalid length. [ 120.384583][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.679'. [ 120.466136][ T5771] netlink: 'syz.5.679': attribute type 3 has an invalid length. [ 120.582680][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.679'. [ 120.853428][ T36] net_ratelimit: 34 callbacks suppressed [ 120.853448][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 120.981328][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.101250][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.217654][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.304848][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'. [ 121.331474][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.401415][ T5777] loop4: detected capacity change from 0 to 512 [ 121.450245][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.575548][ T5789] loop0: detected capacity change from 0 to 1024 [ 121.591122][ T5791] syzkaller0: entered promiscuous mode [ 121.602537][ T5791] syzkaller0: entered allmulticast mode [ 121.612548][ T5789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.623373][ T5777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.649399][ T5777] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 121.671234][ T28] audit: type=1400 audit(1785794475.769:2206): avc: denied { write } for pid=5787 comm="syz.0.683" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.697591][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 121.713575][ T28] audit: type=1400 audit(1785794475.839:2207): avc: denied { read write } for pid=5787 comm="syz.0.683" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.737816][ T28] audit: type=1400 audit(1785794475.839:2208): avc: denied { open } for pid=5787 comm="syz.0.683" path="/141/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.760057][ T5777] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 121.783746][ T28] audit: type=1400 audit(1785794475.879:2209): avc: denied { append } for pid=5787 comm="syz.0.683" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.051804][ T28] audit: type=1400 audit(1785794476.199:2210): avc: denied { map } for pid=5787 comm="syz.0.683" path="/141/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.137558][ T28] audit: type=1400 audit(1785794476.199:2211): avc: denied { execute } for pid=5787 comm="syz.0.683" path="/141/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.163574][ T5777] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 122.211251][ T5777] System zones: 0-2, 18-18 [ 122.231660][ T5604] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 122.243844][ T28] audit: type=1400 audit(1785794476.379:2212): avc: denied { create } for pid=5804 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.264625][ T5777] , 34-35 [ 122.310587][ T5777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.398560][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 122.439816][ T5789] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 122.469697][ T5789] File: /141/file1/file1 PID: 5789 Comm: syz.0.683 [ 122.493077][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.524111][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 122.679886][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.806001][ T5833] tipc: Failed to remove unknown binding: 66,1,1/0:336547602/336547604 [ 122.825838][ T5833] tipc: Failed to remove unknown binding: 66,1,1/0:336547602/336547604 [ 122.996915][ T5854] loop5: detected capacity change from 0 to 512 [ 123.026396][ T5854] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.703: iget: bad i_size value: 38620345925642 [ 123.048262][ T5858] netlink: 'syz.1.706': attribute type 11 has an invalid length. [ 123.071230][ T5835] loop4: detected capacity change from 0 to 1024 [ 123.079725][ T5854] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.079959][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 123.095996][ C1] EXT4-fs (loop5): initial error at time 1785794477: ext4_orphan_get:1399: inode 15 [ 123.105639][ C1] EXT4-fs (loop5): last error at time 1785794477: ext4_orphan_get:1399: inode 15 [ 123.108902][ T5858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.706'. [ 123.122358][ T5854] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.703: couldn't read orphan inode 15 (err -117) [ 123.148526][ T5854] loop5: lost filesystem error report for type 5 error -117 [ 123.154975][ T5854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.389985][ T5835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.443298][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 123.443318][ T28] audit: type=1400 audit(1785794477.569:2219): avc: denied { write } for pid=5852 comm="syz.5.703" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.480316][ T28] audit: type=1400 audit(1785794477.569:2220): avc: denied { append } for pid=5852 comm="syz.5.703" path="/68/file0/cpuset.effective_mems" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.506785][ T28] audit: type=1400 audit(1785794477.589:2221): avc: denied { create } for pid=5852 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.533300][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.587972][ T5883] netlink: 'syz.1.711': attribute type 12 has an invalid length. [ 123.615467][ T5883] netlink: 'syz.1.711': attribute type 29 has an invalid length. [ 123.630351][ T5883] netlink: 148 bytes leftover after parsing attributes in process `syz.1.711'. [ 123.643277][ T5883] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 123.701813][ T5890] netlink: 'syz.3.724': attribute type 11 has an invalid length. [ 123.710368][ T5890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.724'. [ 124.012926][ T28] audit: type=1400 audit(1785794478.159:2222): avc: denied { create } for pid=5904 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.069006][ T5912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.199714][ T5604] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 124.213907][ T5604] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 124.227819][ T5604] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.227819][ T5604] [ 124.238157][ T5604] EXT4-fs (loop5): Total free blocks count 0 [ 124.244396][ T5604] EXT4-fs (loop5): Free/Dirty block details [ 124.250622][ T5604] EXT4-fs (loop5): free_blocks=0 [ 124.255793][ T5604] EXT4-fs (loop5): dirty_blocks=16016 [ 124.261600][ T5604] EXT4-fs (loop5): Block reservation details [ 124.267995][ T5604] EXT4-fs (loop5): i_reserved_data_blocks=16016 [ 124.283747][ T5604] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 124.924487][ T4637] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 125.068962][ T5930] loop5: detected capacity change from 0 to 512 [ 125.095742][ T5930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.119343][ T5930] EXT4-fs (loop5): 1 truncate cleaned up [ 125.127299][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.284911][ T5926] loop0: detected capacity change from 0 to 2048 [ 125.450392][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.514346][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.552753][ T5938] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 125.585968][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.681589][ T5944] loop5: detected capacity change from 0 to 1024 [ 125.688969][ T5944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.733238][ T5944] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.756095][ T5944] EXT4-fs (loop5): re-mounted 00000000-0500-0000-0000-000000000000. [ 125.764930][ T5944] tipc: Failed to remove unknown binding: 66,1,1/0:2456343507/2456343509 [ 125.774291][ T5944] tipc: Failed to remove unknown binding: 66,1,1/0:2456343507/2456343509 [ 125.793399][ T4637] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /72/file1: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 125.826409][ T28] audit: type=1400 audit(1785794479.969:2223): avc: denied { write } for pid=4637 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.849014][ T28] audit: type=1400 audit(1785794479.989:2224): avc: denied { write } for pid=4637 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.871753][ T28] audit: type=1400 audit(1785794479.989:2225): avc: denied { unlink } for pid=4637 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.891270][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 125.904063][ T68] net_ratelimit: 29 callbacks suppressed [ 125.904080][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 125.930228][ T28] audit: type=1400 audit(1785794479.989:2226): avc: denied { write } for pid=4637 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.961476][ T28] audit: type=1400 audit(1785794479.989:2227): avc: denied { write } for pid=4637 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.050884][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.210173][ T5604] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.320088][ T5604] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.333485][ T5961] Process accounting paused [ 126.387736][ T5964] loop5: detected capacity change from 0 to 128 [ 126.450252][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.590078][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.700338][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.811751][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.841356][ T5968] loop5: detected capacity change from 0 to 512 [ 126.852575][ T3287] ================================================================== [ 126.860817][ T3287] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 126.867353][ T3287] [ 126.869698][ T3287] write to 0xffff88811b109310 of 8 bytes by task 2980 on cpu 1: [ 126.877350][ T3287] dentry_kill+0x139/0x500 [ 126.881793][ T3287] finish_dput+0x16/0x1d0 [ 126.886171][ T3287] dput+0x48/0x50 [ 126.889860][ T3287] step_into_slowpath+0x38c/0x4c0 [ 126.895108][ T3287] path_lookupat+0x2eb/0x4c0 [ 126.899737][ T3287] filename_lookup+0x329/0x390 [ 126.904542][ T3287] do_readlinkat+0x74/0x2f0 [ 126.906492][ T5968] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.740: inode has both inline data and extents flags [ 126.909098][ T3287] __x64_sys_readlink+0x47/0x60 [ 126.909140][ T3287] x64_sys_call+0x2b51/0x3020 [ 126.909164][ T3287] do_syscall_64+0x136/0x3c0 [ 126.909189][ T3287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.909213][ T3287] [ 126.909222][ T3287] read to 0xffff88811b109310 of 8 bytes by task 3287 on cpu 0: [ 126.909241][ T3287] fast_dput+0x64/0x2e0 [ 126.909268][ T3287] dput+0x1f/0x50 [ 126.909292][ T3287] filename_unlinkat+0x217/0x410 [ 126.909316][ T3287] __se_sys_unlink+0x2b/0xe0 [ 126.909339][ T3287] __x64_sys_unlink+0x1f/0x30 [ 126.909362][ T3287] x64_sys_call+0x2eb6/0x3020 [ 126.909387][ T3287] do_syscall_64+0x136/0x3c0 [ 126.909412][ T3287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.909435][ T3287] [ 126.909440][ T3287] value changed: 0xffff8882374ec1c0 -> 0x0000000000000000 [ 126.909454][ T3287] [ 126.909458][ T3287] Reported by Kernel Concurrency Sanitizer on: [ 126.909469][ T3287] CPU: 0 UID: 0 PID: 3287 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 126.909511][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.909522][ T3287] ================================================================== [ 126.932828][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 126.957006][ T5905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.962516][ T5968] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.050413][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 127.056806][ T5968] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.740: couldn't read orphan inode 15 (err -117) [ 127.060357][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 127.060556][ C1] EXT4-fs (loop5): initial error at time 1785794481: ext4_orphan_get:1399: inode 15 [ 127.060628][ C1] EXT4-fs (loop5): last error at time 1785794481: ext4_orphan_get:1399: inode 15 [ 127.135485][ T5968] loop5: lost filesystem error report for type 5 error -117 [ 127.156791][ T5968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.220559][ T28] audit: type=1400 audit(1785794481.369:2228): avc: denied { write } for pid=5967 comm="syz.5.740" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.273691][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.960125][ T68] net_ratelimit: 34 callbacks suppressed [ 130.960145][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.080130][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.200113][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.310067][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.420115][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.530075][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.650080][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.760094][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.880058][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 131.990066][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.020049][ T68] net_ratelimit: 35 callbacks suppressed [ 136.020070][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.140170][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.250142][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.360046][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.470044][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.580061][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.690032][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 136.800075][ T297] bond3: (slave ip6gretap1): failed to get link speed/duplex