last executing test programs: 4m9.104176162s ago: executing program 4 (id=692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x240000c0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x60080}, 0x40) (async) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff92) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc0060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) write$cgroup_pid(r6, 0x0, 0x0) (async) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$kcm(r1, 0x0, 0x24048800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) 4m9.103755002s ago: executing program 4 (id=693): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2000) 4m8.756398172s ago: executing program 4 (id=698): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x29, 0x6, 0x0, 0x0, 0x0, 0x7, 0x65ac0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8005}, 0x844, 0x35, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, 0x4000000000002009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1}, 0x400c010) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 4m8.440764841s ago: executing program 4 (id=700): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) geteuid() r5 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r5, 0x0) read(r5, &(0x7f0000000000)=""/269, 0xfffffdef) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4m7.602198265s ago: executing program 4 (id=710): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x29, 0x6, 0x0, 0x0, 0x0, 0x7, 0x65ac0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8005}, 0x844, 0x35, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x9, 0x0, 0x4000000000002009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)='`\x00\x00\x00.\x00\r', 0x7}], 0x1}, 0x400c010) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 4m7.308364821s ago: executing program 4 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="21000000000000000000000000010000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m7.308066551s ago: executing program 32 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="21000000000000000000000000010000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m22.417995064s ago: executing program 2 (id=1501): socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socket$inet_smc(0x2b, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m21.90033565s ago: executing program 2 (id=1503): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, &(0x7f0000032580)=""/102376, &(0x7f0000000100)=0x18fe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x0, 0x790, &(0x7f0000000600)="$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") file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x400}, @ib={0x1b, 0x0, 0x1, {"be9c1e647baa15530e47b49a285fb144"}, 0x1, 0x147f, 0xa}}}, 0x118) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r3, 0x400454de, 0x0) getresgid(0x0, 0x0, 0x0) 2m21.688025258s ago: executing program 2 (id=1507): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000180)=0x4) 2m21.67612734s ago: executing program 2 (id=1508): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000010c0)) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="150615ed", @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf25000000000c0003000100000000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = timerfd_create(0x0, 0x800) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x80, 0x2, 0x1}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r10 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, r10) open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r8], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) 2m21.428319791s ago: executing program 2 (id=1511): bpf$MAP_CREATE(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2m21.064233244s ago: executing program 2 (id=1514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2m21.063920104s ago: executing program 33 (id=1514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.15635931s ago: executing program 3 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66) 1.960398207s ago: executing program 3 (id=3239): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0xffff, 0x0, 0x5}}}}]}, 0x48}}, 0x24000890) 1.631583226s ago: executing program 3 (id=3241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x8, 0x1, 0x5, {0xb, 0x0, 0x4, 0x300, 0xc}, {0x4, 0x1, 0x0, 0x0, 0x2, 0x80000000}, 0x8, 0x229b, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1.47457269s ago: executing program 3 (id=3244): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00840000000004000c001a800800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 1.438912083s ago: executing program 3 (id=3245): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x37}, 0x8) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000280)}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000040)={0x239, 0x0, 0xfffffeff}) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000002e80), 0x88, 0x1) ppoll(&(0x7f00000032c0)=[{r6, 0x8080}], 0x1, 0x0, 0x0, 0x0) getpgrp(0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000001c0)=0x5, 0x4) 1.193802875s ago: executing program 5 (id=3252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r0, 0x0, 0xfdef) 985.709053ms ago: executing program 5 (id=3257): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000000000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000400000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x1886, &(0x7f0000003580)=ANY=[], 0x0) 966.556155ms ago: executing program 0 (id=3259): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080006000900000014000000451a00142c9c6f"], 0xfce) 964.645105ms ago: executing program 5 (id=3260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 888.239922ms ago: executing program 5 (id=3262): socket$inet(0x2, 0xa, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 879.043313ms ago: executing program 0 (id=3263): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@null, 0xe, 'wlan1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0x27, 0xa, 0x20134) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e24, 0x3, 'lblc\x00', 0x24, 0x0, 0x7b}, 0x2c) socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0xb}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 842.781456ms ago: executing program 0 (id=3265): prlimit64(0x0, 0x15, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40000) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000000c0)=0x400000000) 732.966756ms ago: executing program 5 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 676.383791ms ago: executing program 1 (id=3271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x8, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 676.25514ms ago: executing program 5 (id=3272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 672.4504ms ago: executing program 1 (id=3273): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 640.387724ms ago: executing program 1 (id=3274): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0xef}, 0x8) 579.696129ms ago: executing program 6 (id=3275): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@null, 0xe, 'wlan1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket(0x27, 0xa, 0x20134) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x4e24, 0x3, 'lblc\x00', 0x24, 0x0, 0x7b}, 0x2c) socket(0x2, 0x80805, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0xb}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 548.731432ms ago: executing program 3 (id=3276): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8000000000000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x1048a, 0x4000, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x400000, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000894) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 520.728564ms ago: executing program 6 (id=3277): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24000890) 439.208461ms ago: executing program 0 (id=3278): r0 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@errors_remount}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) io_uring_enter(0xffffffffffffffff, 0xe63, 0x0, 0x4, 0x0, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r6, 0x1, 0x70bd2d, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) msgget$private(0x0, 0x20) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 223.483671ms ago: executing program 6 (id=3279): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) 222.937471ms ago: executing program 0 (id=3280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x48084) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 181.998684ms ago: executing program 1 (id=3281): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "75cc31"}]}}}}}}}}, 0x0) 181.719444ms ago: executing program 6 (id=3282): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 142.977418ms ago: executing program 1 (id=3283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x8, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 133.276389ms ago: executing program 6 (id=3284): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 124.417729ms ago: executing program 1 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) pread64(r1, 0x0, 0x0, 0x5f8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x48084) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 315.75µs ago: executing program 0 (id=3286): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 0s ago: executing program 6 (id=3287): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x37}, 0x8) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x80, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x0, &(0x7f0000000280)}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000040)={0x239, 0x0, 0xfffffeff}) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000002e80), 0x88, 0x1) ppoll(&(0x7f00000032c0)=[{r6, 0x8080}], 0x1, 0x0, 0x0, 0x0) getpgrp(0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000001c0)=0x5, 0x4) kernel console output (not intermixed with test programs): p2 start 16908800 is beyond EOD, truncated [ 303.226636][T10076] loop5: p5 start 16908800 is beyond EOD, truncated [ 303.303675][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 303.326812][T10076] netlink: 'syz.5.1803': attribute type 30 has an invalid length. [ 303.366569][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.398060][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.416343][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.425744][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.448260][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.471287][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.562430][ T23] usb usb6-port1: unable to enumerate USB device [ 303.696227][T10096] loop5: detected capacity change from 0 to 512 [ 303.713953][T10096] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.726503][T10096] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 304.043666][T10104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10104 comm=syz.0.1811 [ 304.331649][T10106] loop3: detected capacity change from 0 to 512 [ 304.381085][T10106] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1812: inode has both inline data and extents flags [ 304.467338][T10106] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.469438][T10106] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1812: couldn't read orphan inode 15 (err -117) [ 304.478658][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 304.478673][ C1] EXT4-fs (loop3): initial error at time 304: ext4_orphan_get:1391: inode 15 [ 304.478696][ C1] EXT4-fs (loop3): last error at time 304: ext4_orphan_get:1391: inode 15 [ 304.848100][T10106] loop3: lost filesystem error report for type 5 error -117 [ 304.857317][T10106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.891698][T10106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1812'. [ 304.913315][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.955428][T10119] loop6: detected capacity change from 0 to 2048 [ 306.043085][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 306.043099][ T28] audit: type=1400 audit(306.017:2124): avc: denied { name_connect } for pid=10125 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 306.087334][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 306.128344][T10119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.172520][T10137] loop3: detected capacity change from 0 to 512 [ 306.172784][T10137] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 306.206840][ T9007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.278261][T10142] loop6: detected capacity change from 0 to 1024 [ 306.308973][T10142] EXT4-fs: Ignoring removed orlov option [ 306.318089][ T28] audit: type=1400 audit(306.287:2125): avc: denied { mounton } for pid=10141 comm="syz.6.1822" path="/50/file1" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 306.387575][ T28] audit: type=1400 audit(306.317:2126): avc: denied { open } for pid=10125 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.408637][T10142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.418228][T10145] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.478253][ T28] audit: type=1400 audit(306.317:2127): avc: denied { perfmon } for pid=10125 comm="syz.0.1819" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.538436][ T9007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 306.553620][ T28] audit: type=1400 audit(306.317:2128): avc: denied { kernel } for pid=10125 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.565683][ T9007] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 306.572594][ T28] audit: type=1400 audit(306.317:2129): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.604500][ T28] audit: type=1400 audit(306.317:2130): avc: denied { open } for pid=3326 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.607905][ T9007] audit: backlog limit exceeded [ 306.655070][ T9007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.733104][T10160] bridge_slave_0: left allmulticast mode [ 306.744439][T10160] bridge_slave_0: left promiscuous mode [ 306.758555][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.778303][T10160] bridge_slave_1: left allmulticast mode [ 306.796277][T10160] bridge_slave_1: left promiscuous mode [ 306.806690][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.834519][T10160] bond0: (slave bond_slave_0): Releasing backup interface [ 306.924339][T10160] bond0: (slave bond_slave_1): Releasing backup interface [ 306.948387][T10160] team0: Port device team_slave_0 removed [ 307.002032][T10160] team0: Port device team_slave_1 removed [ 307.026228][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.182037][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.378815][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.461793][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.535026][T10171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=10171 comm=syz.5.1830 [ 307.537345][T10160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.598351][T10174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10174 comm=syz.1.1832 [ 307.640652][T10176] loop1: detected capacity change from 0 to 2048 [ 307.666561][T10176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.768286][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.789348][T10187] batadv_slave_1: entered promiscuous mode [ 307.825410][T10186] batadv_slave_1: left promiscuous mode [ 307.844582][T10184] loop5: detected capacity change from 0 to 128 [ 307.851604][T10184] msdos: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿ0x0000000000000003' [ 308.094451][T10197] FAULT_INJECTION: forcing a failure. [ 308.094451][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.112330][T10197] CPU: 1 UID: 0 PID: 10197 Comm: syz.1.1839 Tainted: G W syzkaller #0 PREEMPT(full) [ 308.112360][T10197] Tainted: [W]=WARN [ 308.112367][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.112414][T10197] Call Trace: [ 308.112421][T10197] [ 308.112430][T10197] __dump_stack+0x1d/0x30 [ 308.112456][T10197] dump_stack_lvl+0x95/0xd0 [ 308.112475][T10197] dump_stack+0x15/0x1b [ 308.112510][T10197] should_fail_ex+0x263/0x280 [ 308.112528][T10197] should_fail+0xb/0x20 [ 308.112544][T10197] should_fail_usercopy+0x1a/0x20 [ 308.112565][T10197] _copy_to_user+0x20/0xa0 [ 308.112742][T10197] simple_read_from_buffer+0xb5/0x130 [ 308.112770][T10197] proc_fail_nth_read+0x10e/0x150 [ 308.112799][T10197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.112828][T10197] vfs_read+0x1ab/0x7f0 [ 308.112914][T10197] ? __rcu_read_unlock+0x4e/0x70 [ 308.112931][T10197] ? __fget_files+0x184/0x1c0 [ 308.112950][T10197] ? mutex_lock+0x57/0x90 [ 308.113030][T10197] ksys_read+0xdc/0x1a0 [ 308.113061][T10197] __x64_sys_read+0x40/0x50 [ 308.113151][T10197] x64_sys_call+0x2886/0x3020 [ 308.113172][T10197] do_syscall_64+0x12c/0x370 [ 308.113204][T10197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.113274][T10197] RIP: 0033:0x7fd06b4fcece [ 308.113288][T10197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.113304][T10197] RSP: 002b:00007fd069f75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.113343][T10197] RAX: ffffffffffffffda RBX: 00007fd069f766c0 RCX: 00007fd06b4fcece [ 308.113357][T10197] RDX: 000000000000000f RSI: 00007fd069f760a0 RDI: 0000000000000004 [ 308.113368][T10197] RBP: 00007fd069f76090 R08: 0000000000000000 R09: 0000000000000000 [ 308.113428][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.113452][T10197] R13: 00007fd06b7b6128 R14: 00007fd06b7b6090 R15: 00007ffdfc656158 [ 308.113544][T10197] [ 308.321719][T10198] bridge2: entered promiscuous mode [ 308.327005][T10198] bridge2: entered allmulticast mode [ 309.379827][T10212] loop3: detected capacity change from 0 to 256 [ 309.641145][T10220] loop5: detected capacity change from 0 to 164 [ 309.701037][T10220] iso9660: Unknown parameter 'smackfsroot' [ 309.726810][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1845'. [ 309.770882][T10224] loop1: detected capacity change from 0 to 2048 [ 309.776209][T10226] xfrm0 speed is unknown, defaulting to 1000 [ 309.795343][T10224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.826808][T10226] lo speed is unknown, defaulting to 1000 [ 309.853485][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.885160][T10217] cgroup: fork rejected by pids controller in /syz6 [ 311.622254][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 311.622270][ T28] audit: type=1400 audit(310.867:2257): avc: denied { create } for pid=10349 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 311.716244][ T28] audit: type=1400 audit(310.867:2258): avc: denied { create } for pid=10352 comm="syz.5.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 311.761445][ T28] audit: type=1400 audit(311.627:2259): avc: denied { write } for pid=10349 comm="syz.0.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 311.922208][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.995622][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.085942][ T28] audit: type=1400 audit(312.057:2260): avc: denied { mounton } for pid=10362 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 312.121928][T10358] loop1: detected capacity change from 0 to 1024 [ 312.139403][T10358] EXT4-fs: inline encryption not supported [ 312.175047][T10358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.175855][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.211769][T10358] sctp: [Deprecated]: syz.1.1858 (pid 10358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.211769][T10358] Use struct sctp_sack_info instead [ 312.249243][T10373] IPVS: set_ctl: invalid protocol: 229 172.20.20.67:20004 [ 312.293545][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.307164][T10378] loop3: detected capacity change from 0 to 512 [ 312.346405][T10378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.370795][ T28] audit: type=1400 audit(312.347:2261): avc: denied { remove_name } for pid=10377 comm="syz.3.1863" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.393926][T10380] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1858'. [ 312.404307][T10378] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.1863: directory missing '.' [ 312.428334][T10378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1863'. [ 312.439765][T10362] xfrm0 speed is unknown, defaulting to 1000 [ 312.447621][T10392] xt_hashlimit: size too large, truncated to 1048576 [ 312.457235][ T28] audit: type=1400 audit(312.347:2262): avc: denied { rename } for pid=10377 comm="syz.3.1863" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.579847][ T28] audit: type=1400 audit(312.347:2263): avc: denied { reparent } for pid=10377 comm="syz.3.1863" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.658479][ T28] audit: type=1400 audit(312.347:2264): avc: denied { add_name } for pid=10377 comm="syz.3.1863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 312.698503][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.708090][ T28] audit: type=1400 audit(312.397:2265): avc: denied { write } for pid=10357 comm="syz.1.1858" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.709271][T10410] 9p: Bad value for 'rfdno' [ 312.766746][ T28] audit: type=1400 audit(312.397:2266): avc: denied { open } for pid=10357 comm="syz.1.1858" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.863431][ T30] bond0 (unregistering): Released all slaves [ 312.874644][T10362] lo speed is unknown, defaulting to 1000 [ 312.977132][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.147130][T10362] chnl_net:caif_netlink_parms(): no params data found [ 313.236240][ T30] hsr_slave_0: left promiscuous mode [ 313.463643][ T30] hsr_slave_1: left promiscuous mode [ 314.221184][ T30] veth1_macvtap: left promiscuous mode [ 314.226717][ T30] veth0_macvtap: left promiscuous mode [ 314.238369][ T30] veth1_vlan: left promiscuous mode [ 314.243595][ T30] veth0_vlan: left promiscuous mode [ 315.285298][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1868'. [ 315.791437][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.798797][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.806626][T10362] bridge_slave_0: entered allmulticast mode [ 315.813261][T10362] bridge_slave_0: entered promiscuous mode [ 315.821326][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.828497][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.835626][T10362] bridge_slave_1: entered allmulticast mode [ 315.842301][T10362] bridge_slave_1: entered promiscuous mode [ 315.852509][T10473] delete_channel: no stack [ 315.872476][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.883152][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.914931][T10362] team0: Port device team_slave_0 added [ 315.935416][T10465] loop5: detected capacity change from 0 to 512 [ 315.936740][T10362] team0: Port device team_slave_1 added [ 316.000524][T10465] EXT4-fs (loop5): 1 truncate cleaned up [ 316.039243][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.046205][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.083848][T10465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.108117][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.119641][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.126581][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.154119][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.182789][T10362] hsr_slave_0: entered promiscuous mode [ 316.189398][T10362] hsr_slave_1: entered promiscuous mode [ 316.195323][T10362] debugfs: 'hsr0' already exists in 'hsr' [ 316.201105][T10362] Cannot create hsr debugfs directory [ 316.209421][T10485] batman_adv: batadv0: Interface deactivated: dummy0 [ 316.279691][T10485] batadv0: left promiscuous mode [ 316.326133][T10485] SELinux: failed to load policy [ 316.345006][T10495] xt_hashlimit: size too large, truncated to 1048576 [ 316.396148][T10499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1880'. [ 316.407415][T10499] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1880'. [ 316.422629][T10499] netlink: 'syz.0.1880': attribute type 5 has an invalid length. [ 316.434933][T10499] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1880'. [ 316.627347][T10520] loop3: detected capacity change from 0 to 8192 [ 316.721287][T10362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.740243][T10362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.749092][T10362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.761118][T10362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.782825][ T50] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 316.814004][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 316.858094][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 316.858094][ T50] [ 316.867751][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 316.884113][ T50] EXT4-fs (loop5): Free/Dirty block details [ 316.904892][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.918877][ T50] EXT4-fs (loop5): free_blocks=0 [ 316.924558][ T50] EXT4-fs (loop5): dirty_blocks=2 [ 316.925077][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.934495][ T50] EXT4-fs (loop5): Block reservation details [ 316.948536][ T50] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 316.961936][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.969096][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.977618][ T6091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.991877][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 316.991889][ T28] audit: type=1400 audit(316.967:2308): avc: denied { nlmsg_write } for pid=10519 comm="syz.3.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 317.168138][T10362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.129229][ T28] audit: type=1400 audit(317.967:2309): avc: denied { bind } for pid=10577 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.149258][T10362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.160546][ T28] audit: type=1400 audit(318.107:2310): avc: denied { cpu } for pid=10567 comm="syz.5.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 318.164246][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.186328][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.388428][T10362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.555335][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1889'. [ 318.711832][T10362] veth0_vlan: entered promiscuous mode [ 318.730253][T10362] veth1_vlan: entered promiscuous mode [ 318.761606][T10362] veth0_macvtap: entered promiscuous mode [ 318.779737][T10362] veth1_macvtap: entered promiscuous mode [ 318.803911][T10362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.826991][T10362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.853076][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.877766][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.891811][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.929270][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.943563][ T28] audit: type=1400 audit(318.917:2311): avc: denied { mounton } for pid=10362 comm="syz-executor" path="/root/syzkaller.rPQfBC/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 318.968860][ T28] audit: type=1400 audit(318.917:2312): avc: denied { mount } for pid=10362 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 319.011954][ T28] audit: type=1400 audit(318.917:2313): avc: denied { mount } for pid=10362 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 319.035821][T10642] sctp: [Deprecated]: syz.3.1890 (pid 10642) Use of int in max_burst socket option deprecated. [ 319.035821][T10642] Use struct sctp_assoc_value instead [ 319.072226][ T28] audit: type=1400 audit(318.917:2314): avc: denied { mounton } for pid=10362 comm="syz-executor" path="/root/syzkaller.rPQfBC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 319.113129][T10651] loop3: detected capacity change from 0 to 128 [ 319.120929][T10642] xt_CT: No such helper "snmp" [ 319.127499][ T28] audit: type=1400 audit(318.917:2315): avc: denied { mounton } for pid=10362 comm="syz-executor" path="/root/syzkaller.rPQfBC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 319.159376][T10656] batadv0: entered promiscuous mode [ 319.167580][T10651] FAT-fs (loop3): bogus logical sector size 759 [ 319.174099][T10651] FAT-fs (loop3): Can't find a valid FAT filesystem [ 319.177763][T10656] macsec1: entered promiscuous mode [ 319.206563][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 319.211021][ T28] audit: type=1400 audit(318.967:2316): avc: denied { mounton } for pid=10362 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 319.247715][ T28] audit: type=1400 audit(318.967:2317): avc: denied { mount } for pid=10362 comm="syz-executor" name="/" dev="gadgetfs" ino=4585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 319.351002][T10642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10642 comm=syz.3.1890 [ 321.454402][T10680] sctp: [Deprecated]: syz.1.1900 (pid 10680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.454402][T10680] Use struct sctp_sack_info instead [ 324.829746][T10696] loop6: detected capacity change from 0 to 256 [ 324.836039][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 324.836050][ T28] audit: type=1400 audit(324.807:2330): avc: denied { listen } for pid=10695 comm="syz.6.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.878842][T10696] FAT-fs (loop6): count of clusters too big (178174) [ 324.892987][ T28] audit: type=1400 audit(324.867:2331): avc: denied { connect } for pid=10698 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 324.899485][T10696] FAT-fs (loop6): Can't find a valid FAT filesystem [ 324.912805][ T28] audit: type=1400 audit(324.867:2332): avc: denied { ioctl } for pid=10698 comm="syz.3.1904" path="socket:[28275]" dev="sockfs" ino=28275 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 324.943995][ T28] audit: type=1400 audit(324.867:2333): avc: denied { write } for pid=10698 comm="syz.3.1904" path="socket:[28276]" dev="sockfs" ino=28276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.007618][T10694] loop1: detected capacity change from 0 to 512 [ 325.145441][T10694] EXT4-fs (loop1): 1 truncate cleaned up [ 325.172522][T10694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.244374][ T28] audit: type=1400 audit(325.217:2334): avc: denied { write } for pid=10716 comm="syz.6.1908" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 325.282561][T10717] SELinux: Context system_u:object_r:random_device_t:s0 is not valid (left unmapped). [ 325.368131][ T28] audit: type=1400 audit(325.257:2335): avc: denied { bind } for pid=10716 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.434513][ T28] audit: type=1400 audit(325.257:2336): avc: denied { write } for pid=10716 comm="syz.6.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.465339][ T28] audit: type=1400 audit(325.257:2337): avc: denied { mac_admin } for pid=10716 comm="syz.6.1908" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.492197][T10733] xt_hashlimit: size too large, truncated to 1048576 [ 325.513106][ T28] audit: type=1400 audit(325.267:2338): avc: denied { relabelto } for pid=10716 comm="syz.6.1908" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:random_device_t:s0" [ 325.513146][ T28] audit: type=1400 audit(325.267:2339): avc: denied { associate } for pid=10716 comm="syz.6.1908" name="virtual_nci" dev="devtmpfs" ino=132 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:random_device_t:s0" [ 325.570350][T10734] loop6: detected capacity change from 0 to 128 [ 325.575166][T10734] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.640826][T10734] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.678253][T10709] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 326.353115][T10744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.356320][T10744] 9p: Bad value for 'wfdno' [ 326.370485][ T9286] lo speed is unknown, defaulting to 1000 [ 326.417513][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 326.417544][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.417544][ T40] [ 326.417558][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 326.417572][ T40] EXT4-fs (loop1): Free/Dirty block details [ 326.417584][ T40] EXT4-fs (loop1): free_blocks=0 [ 326.417678][ T40] EXT4-fs (loop1): dirty_blocks=2 [ 326.417691][ T40] EXT4-fs (loop1): Block reservation details [ 326.417704][ T40] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 326.427507][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.444896][T10737] loop5: detected capacity change from 0 to 1024 [ 326.454444][T10737] EXT4-fs: inline encryption not supported [ 326.509849][T10751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1915'. [ 326.574258][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 326.574783][T10751] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1915'. [ 326.579682][T10751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10751 comm=syz.3.1915 [ 326.596903][T10737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.693237][T10737] sctp: [Deprecated]: syz.5.1911 (pid 10737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.693237][T10737] Use struct sctp_sack_info instead [ 326.802020][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1920'. [ 326.804960][T10765] loop3: detected capacity change from 0 to 512 [ 326.860350][T10765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.989612][T10767] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1911'. [ 327.273688][ T6091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.409433][T10797] loop6: detected capacity change from 0 to 512 [ 328.463977][T10797] EXT4-fs (loop6): 1 truncate cleaned up [ 328.490725][T10797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.616875][T10798] loop5: detected capacity change from 0 to 8192 [ 328.642797][T10802] xt_hashlimit: size too large, truncated to 1048576 [ 328.729381][ T3306] loop5: p1 < > p2 p4 < p5 > [ 328.734084][ T3306] loop5: partition table partially beyond EOD, truncated [ 328.790128][T10814] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 328.984861][T10814] bond2 (unregistering): Released all slaves [ 329.066353][ T3306] loop5: p1 start 134217728 is beyond EOD, truncated [ 329.099159][ T3306] loop5: p2 size 591360 extends beyond EOD, truncated [ 329.125369][ T50] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 329.174601][ T3306] loop5: p5 size 591360 extends beyond EOD, truncated [ 329.182477][ T50] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 329.215569][T10798] loop5: p1 < > p2 p4 < p5 > [ 329.235138][ T50] EXT4-fs (loop6): This should not happen!! Data will be lost [ 329.235138][ T50] [ 329.258042][T10798] loop5: partition table partially beyond EOD, truncated [ 329.265311][T10798] loop5: p1 start 134217728 is beyond EOD, truncated [ 329.271848][ T50] EXT4-fs (loop6): Total free blocks count 0 [ 329.308638][ T50] EXT4-fs (loop6): Free/Dirty block details [ 329.314627][ T50] EXT4-fs (loop6): free_blocks=0 [ 329.324557][T10810] syz.0.1931 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 329.346089][ T50] EXT4-fs (loop6): dirty_blocks=2 [ 329.351330][ T50] EXT4-fs (loop6): Block reservation details [ 329.367512][ T50] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 329.387786][T10798] loop5: p2 size 591360 extends beyond EOD, truncated [ 329.416766][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.0.1931 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.416837][T10810] Tainted: [W]=WARN [ 329.416845][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.416859][T10810] Call Trace: [ 329.416868][T10810] [ 329.416877][T10810] __dump_stack+0x1d/0x30 [ 329.416953][T10810] dump_stack_lvl+0x95/0xd0 [ 329.416978][T10810] dump_stack+0x15/0x1b [ 329.417079][T10810] dump_header+0x80/0x240 [ 329.417131][T10810] oom_kill_process+0x295/0x350 [ 329.417211][T10810] out_of_memory+0x97d/0xb80 [ 329.417229][T10810] try_charge_memcg+0x62e/0xa10 [ 329.417270][T10810] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 329.417296][T10810] __swap_cache_prepare_and_add+0x386/0x530 [ 329.417339][T10810] swap_cache_alloc_folio+0xa2/0x120 [ 329.417365][T10810] swap_cluster_readahead+0x26e/0x3d0 [ 329.417435][T10810] swapin_readahead+0xde/0x840 [ 329.417532][T10810] ? _raw_spin_unlock+0x9/0x30 [ 329.417550][T10810] ? swap_put_entries_cluster+0x385/0x3a0 [ 329.417575][T10810] ? swap_put_entries_cluster+0xa1/0x3a0 [ 329.417624][T10810] ? __rcu_read_unlock+0x4e/0x70 [ 329.417791][T10810] ? swap_cache_get_folio+0x26f/0x280 [ 329.417814][T10810] do_swap_page+0x309/0x2210 [ 329.417868][T10810] ? css_rstat_updated+0xbb/0x280 [ 329.417890][T10810] ? __rcu_read_lock+0x36/0x50 [ 329.417912][T10810] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 329.417967][T10810] handle_mm_fault+0xb40/0x3020 [ 329.417994][T10810] ? vma_start_read+0x1c7/0x2c0 [ 329.418046][T10810] do_user_addr_fault+0x62f/0x1050 [ 329.418126][T10810] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 329.418151][T10810] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 329.418173][T10810] ? trace_page_fault_user+0x1f/0xe0 [ 329.418209][T10810] exc_page_fault+0x62/0xa0 [ 329.418342][T10810] asm_exc_page_fault+0x26/0x30 [ 329.418361][T10810] RIP: 0033:0x7f09f75277f8 [ 329.418375][T10810] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 329.418394][T10810] RSP: 002b:00007ffde1566300 EFLAGS: 00010246 [ 329.418413][T10810] RAX: 0000000000000000 RBX: 00005555728c9500 RCX: 00007f09f752cece [ 329.418429][T10810] RDX: 00007ffde1566350 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.418504][T10810] RBP: 00007f09f77e7da0 R08: 0000000000000000 R09: 0000000000000000 [ 329.418517][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000050747 [ 329.418528][T10810] R13: 00007f09f77e618c R14: 000000000005055d R15: 00007f09f77e6180 [ 329.418577][T10810] [ 329.478413][ T9] usb usb6-port1: attempt power cycle [ 329.510554][T10798] loop5: p5 size 591360 extends beyond EOD, [ 329.609090][T10810] memory: usage 257540kB, limit 307200kB, failcnt 1847 [ 329.648065][T10798] truncated [ 329.691535][T10810] memory+swap: usage 205784kB, limit 9007199254740988kB, failcnt 0 [ 329.708326][T10810] kmem: usage 203948kB, limit 9007199254740988kB, failcnt 0 [ 329.723756][T10810] Memory cgroup stats for /syz0: [ 329.723895][T10810] cache 0 [ 329.748491][T10810] rss 4096 [ 329.751561][T10810] shmem 0 [ 329.754566][T10810] mapped_file 0 [ 329.784604][T10810] dirty 0 [ 329.788582][T10810] writeback 0 [ 329.825771][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 329.825771][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 329.847220][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 329.857040][T10810] workingset_refault_anon 784 [ 329.868217][T10810] workingset_refault_file 5833 [ 329.873000][T10810] swap 782336 [ 329.876276][T10810] swapcached 2691072 [ 329.887134][T10810] pgpgin 415235 [ 329.891310][T10810] pgpgout 415231 [ 329.895374][T10810] pgfault 417817 [ 329.898117][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 329.909905][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 329.921712][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 329.931750][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.958061][T10810] pgmajfault 553 [ 329.961843][T10810] inactive_anon 0 [ 329.965472][T10810] active_anon 16384 [ 329.977997][T10810] inactive_file 0 [ 329.985348][T10810] active_file 0 [ 329.996737][T10810] unevictable 0 [ 330.006904][T10810] hierarchical_memory_limit 314572800 [ 330.016985][T10810] hierarchical_memsw_limit 9223372036854771712 [ 330.033405][T10810] total_cache 0 [ 330.036892][T10810] total_rss 4096 [ 330.040860][T10810] total_shmem 0 [ 330.044423][T10810] total_mapped_file 0 [ 330.048580][T10810] total_dirty 0 [ 330.052051][T10810] total_writeback 0 [ 330.057444][T10810] total_workingset_refault_anon 784 [ 330.062733][T10810] total_workingset_refault_file 5833 [ 330.068197][T10810] total_swap 782336 [ 330.072027][T10810] total_swapcached 2691072 [ 330.076525][T10810] total_pgpgin 415235 [ 330.080593][T10810] total_pgpgout 415231 [ 330.084653][T10810] total_pgfault 417817 [ 330.088741][T10810] total_pgmajfault 553 [ 330.092928][T10810] total_inactive_anon 0 [ 330.097136][T10810] total_active_anon 16384 [ 330.106811][T10810] total_inactive_file 0 [ 330.129453][T10810] total_active_file 0 [ 330.389284][T10810] total_unevictable 0 [ 330.448508][T10810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1931,pid=10810,uid=0 [ 330.607774][T10810] Memory cgroup out of memory: Killed process 10810 (syz.0.1931) total-vm:96340kB, anon-rss:1228kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 331.188595][T10827] xfrm0 speed is unknown, defaulting to 1000 [ 331.456023][T10827] lo speed is unknown, defaulting to 1000 [ 332.298902][T10362] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 332.348059][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 332.348093][T10362] Tainted: [W]=WARN [ 332.348100][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.348150][T10362] Call Trace: [ 332.348157][T10362] [ 332.348166][T10362] __dump_stack+0x1d/0x30 [ 332.348195][T10362] dump_stack_lvl+0x95/0xd0 [ 332.348221][T10362] dump_stack+0x15/0x1b [ 332.348319][T10362] dump_header+0x80/0x240 [ 332.348395][T10362] oom_kill_process+0x295/0x350 [ 332.348416][T10362] out_of_memory+0x97d/0xb80 [ 332.348440][T10362] try_charge_memcg+0x62e/0xa10 [ 332.348504][T10362] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 332.348538][T10362] __swap_cache_prepare_and_add+0x386/0x530 [ 332.348582][T10362] swap_cache_alloc_folio+0xa2/0x120 [ 332.348691][T10362] swap_cluster_readahead+0x26e/0x3d0 [ 332.348724][T10362] swapin_readahead+0xde/0x840 [ 332.348787][T10362] ? __rcu_read_unlock+0x4e/0x70 [ 332.348810][T10362] ? __perf_event_task_sched_in+0xa65/0xad0 [ 332.348843][T10362] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 332.348872][T10362] ? __rcu_read_unlock+0x4e/0x70 [ 332.348942][T10362] ? swap_cache_get_folio+0x26f/0x280 [ 332.348972][T10362] do_swap_page+0x309/0x2210 [ 332.349001][T10362] ? __schedule+0x85a/0xd40 [ 332.349046][T10362] ? __rcu_read_lock+0x36/0x50 [ 332.349126][T10362] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 332.349153][T10362] handle_mm_fault+0xb40/0x3020 [ 332.349182][T10362] ? vma_start_read+0x1c7/0x2c0 [ 332.349275][T10362] do_user_addr_fault+0x62f/0x1050 [ 332.349309][T10362] ? trace_page_fault_user+0x1f/0xe0 [ 332.349411][T10362] exc_page_fault+0x62/0xa0 [ 332.349437][T10362] asm_exc_page_fault+0x26/0x30 [ 332.349461][T10362] RIP: 0033:0x7facd88f7817 [ 332.349478][T10362] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 332.349497][T10362] RSP: 002b:00007ffca53c2c10 EFLAGS: 00010202 [ 332.349515][T10362] RAX: 0000000000000000 RBX: 000055555e824500 RCX: 00007facd88f7817 [ 332.349609][T10362] RDX: 00007ffca53c2c50 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.349623][T10362] RBP: 00007ffca53c2cbc R08: 0000000000000000 R09: 0000000000000000 [ 332.349637][T10362] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 332.349651][T10362] R13: 00000000000927c0 R14: 0000000000051199 R15: 00007ffca53c2d10 [ 332.349671][T10362] [ 332.349714][T10362] memory: usage 254360kB, limit 307200kB, failcnt 239 [ 332.467307][T10858] loop1: detected capacity change from 0 to 512 [ 332.535267][T10851] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 332.578311][T10362] memory+swap: usage 172568kB, limit 9007199254740988kB, failcnt 0 [ 332.633097][T10851] bond2 (unregistering): Released all slaves [ 332.658181][T10362] kmem: usage 69124kB, limit 9007199254740988kB, failcnt 0 [ 332.728250][ T9] usb usb6-port1: unable to enumerate USB device [ 332.787933][T10362] Memory cgroup stats for /syz6: [ 332.788397][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.806110][T10858] EXT4-fs (loop1): 1 truncate cleaned up [ 332.826163][T10858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.859125][T10362] cache 0 [ 332.862110][T10362] rss 53248 [ 332.865217][T10362] shmem 0 [ 332.868803][T10362] mapped_file 0 [ 332.898162][T10362] dirty 0 [ 332.901258][T10362] writeback 0 [ 332.906690][T10362] workingset_refault_anon 85 [ 332.963315][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 332.963340][ T28] audit: type=1400 audit(332.937:2352): avc: denied { getopt } for pid=10868 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.000576][T10362] workingset_refault_file 0 [ 333.012653][T10362] swap 102400 [ 333.023321][T10362] swapcached 311296 [ 333.027240][ T28] audit: type=1400 audit(332.967:2353): avc: denied { write } for pid=10868 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 333.049798][T10870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1947'. [ 333.060552][T10362] pgpgin 53568 [ 333.074757][T10362] pgpgout 53544 [ 333.075089][T10871] xt_hashlimit: size too large, truncated to 1048576 [ 333.087725][ T28] audit: type=1400 audit(332.967:2354): avc: denied { ioctl } for pid=10868 comm="syz.3.1946" path="socket:[28520]" dev="sockfs" ino=28520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 333.118536][T10362] pgfault 74436 [ 333.131610][ T28] audit: type=1400 audit(332.967:2355): avc: denied { ioctl } for pid=10868 comm="syz.3.1946" path="socket:[28523]" dev="sockfs" ino=28523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.196287][T10362] pgmajfault 44 [ 333.199842][T10362] inactive_anon 16384 [ 333.204087][T10362] active_anon 81920 [ 333.211046][ T28] audit: type=1400 audit(332.967:2356): avc: denied { write } for pid=10868 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 333.252709][ T28] audit: type=1400 audit(332.987:2357): avc: denied { read } for pid=10868 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 333.275089][T10362] inactive_file 0 [ 333.282625][T10362] active_file 0 [ 333.290266][T10362] unevictable 0 [ 333.296973][T10362] hierarchical_memory_limit 314572800 [ 333.303298][ T40] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 465: padding at end of block bitmap is not set [ 333.306804][T10362] hierarchical_memsw_limit 9223372036854771712 [ 333.319350][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 333.324515][T10362] total_cache 0 [ 333.340158][T10362] total_rss 53248 [ 333.343821][T10362] total_shmem 0 [ 333.347426][T10362] total_mapped_file 0 [ 333.351615][T10362] total_dirty 0 [ 333.354524][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 333.354524][ T40] [ 333.355177][T10362] total_writeback 0 [ 333.368852][T10362] total_workingset_refault_anon 85 [ 333.374000][T10362] total_workingset_refault_file 0 [ 333.374852][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 333.379350][T10362] total_swap 102400 [ 333.389060][T10362] total_swapcached 311296 [ 333.393485][T10362] total_pgpgin 53568 [ 333.395812][ T40] EXT4-fs (loop1): Free/Dirty block details [ 333.397468][T10362] total_pgpgout 53544 [ 333.407710][T10362] total_pgfault 74436 [ 333.411897][T10362] total_pgmajfault 44 [ 333.412052][ T40] EXT4-fs (loop1): free_blocks=0 [ 333.415928][T10362] total_inactive_anon 16384 [ 333.425655][T10362] total_active_anon 81920 [ 333.430092][T10362] total_inactive_file 0 [ 333.430638][ T40] EXT4-fs (loop1): dirty_blocks=2 [ 333.434267][T10362] total_active_file 0 [ 333.443416][T10362] total_unevictable 0 [ 333.447424][T10362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1938,pid=10838,uid=0 [ 333.447938][ T40] EXT4-fs (loop1): Block reservation details [ 333.462478][T10362] Memory cgroup out of memory: OOM victim 10838 (syz.6.1938) is already exiting. Skip killing the task [ 333.477522][ T40] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 333.486804][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.533107][T10880] loop1: detected capacity change from 0 to 1024 [ 333.541790][T10880] EXT4-fs: inline encryption not supported [ 333.581540][T10880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.632448][T10880] sctp: [Deprecated]: syz.1.1948 (pid 10880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.632448][T10880] Use struct sctp_sack_info instead [ 333.673502][T10880] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 333.689368][T10880] EXT4-fs (loop1): Remounting filesystem read-only [ 333.715738][T10890] loop6: detected capacity change from 0 to 2048 [ 333.729850][T10890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.758169][T10893] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1948'. [ 334.758910][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.169769][T10905] FAULT_INJECTION: forcing a failure. [ 335.169769][T10905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.209197][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.283248][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.6.1955 Tainted: G W syzkaller #0 PREEMPT(full) [ 335.283278][T10905] Tainted: [W]=WARN [ 335.283284][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.283370][T10905] Call Trace: [ 335.283377][T10905] [ 335.283385][T10905] __dump_stack+0x1d/0x30 [ 335.283413][T10905] dump_stack_lvl+0x95/0xd0 [ 335.283434][T10905] dump_stack+0x15/0x1b [ 335.283508][T10905] should_fail_ex+0x263/0x280 [ 335.283537][T10905] should_fail+0xb/0x20 [ 335.283556][T10905] should_fail_usercopy+0x1a/0x20 [ 335.283580][T10905] _copy_to_user+0x20/0xa0 [ 335.283602][T10905] bpf_verifier_vlog+0x2c5/0x5a0 [ 335.283696][T10905] __btf_verifier_log+0x7f/0xb0 [ 335.283721][T10905] ? should_fail_ex+0xd9/0x280 [ 335.283738][T10905] ? btf_parse_hdr+0x202/0x3c0 [ 335.283775][T10905] btf_parse_hdr+0x214/0x3c0 [ 335.283806][T10905] btf_new_fd+0x25a/0x7d0 [ 335.283823][T10905] ? ns_capable+0x7c/0xb0 [ 335.283840][T10905] bpf_btf_load+0x112/0x130 [ 335.283861][T10905] __sys_bpf+0x3d8/0x7e0 [ 335.283918][T10905] __x64_sys_bpf+0x41/0x50 [ 335.283949][T10905] x64_sys_call+0x10cb/0x3020 [ 335.283976][T10905] do_syscall_64+0x12c/0x370 [ 335.284074][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.284097][T10905] RIP: 0033:0x7facd893c629 [ 335.284114][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.284131][T10905] RSP: 002b:00007facd738f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.284163][T10905] RAX: ffffffffffffffda RBX: 00007facd8bb5fa0 RCX: 00007facd893c629 [ 335.284176][T10905] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 335.284188][T10905] RBP: 00007facd738f090 R08: 0000000000000000 R09: 0000000000000000 [ 335.284200][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.284215][T10905] R13: 00007facd8bb6038 R14: 00007facd8bb5fa0 R15: 00007ffca53c2918 [ 335.284236][T10905] [ 336.801577][ T28] audit: type=1400 audit(336.777:2358): avc: denied { setopt } for pid=10925 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.857441][ T28] audit: type=1400 audit(336.827:2359): avc: denied { ioctl } for pid=10928 comm="syz.1.1964" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 336.995251][T10935] loop5: detected capacity change from 0 to 2048 [ 337.028303][T10939] bridge0: port 3(syz_tun) entered blocking state [ 337.035363][T10939] bridge0: port 3(syz_tun) entered disabled state [ 337.042307][T10939] syz_tun: entered allmulticast mode [ 337.048849][T10935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.064095][T10939] syz_tun: entered promiscuous mode [ 337.071778][T10939] bridge0: port 3(syz_tun) entered blocking state [ 337.073325][ T28] audit: type=1400 audit(337.047:2360): avc: denied { write } for pid=10928 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.078313][T10939] bridge0: port 3(syz_tun) entered forwarding state [ 337.148940][ T6091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.182906][ T28] audit: type=1400 audit(337.157:2361): avc: denied { ioctl } for pid=10950 comm="syz.5.1968" path="socket:[28649]" dev="sockfs" ino=28649 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.208355][T10951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.215929][T10951] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 337.236983][T10951] bond0: (slave gre0): Error -95 calling set_mac_address [ 337.250771][T10958] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1968'. [ 337.439093][T10984] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.694546][T11008] loop3: detected capacity change from 0 to 8192 [ 341.708023][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 341.708039][ T28] audit: type=1400 audit(341.677:2365): avc: denied { create } for pid=11016 comm="syz.1.1978" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 342.363634][T11017] loop1: detected capacity change from 0 to 1024 [ 342.689651][ T28] audit: type=1400 audit(341.677:2366): avc: denied { write } for pid=11016 comm="syz.1.1978" name="file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 342.712730][T11008] loop3: p1 < > p2 p4 < p5 > [ 342.722607][T11008] loop3: partition table partially beyond EOD, truncated [ 342.729955][ T28] audit: type=1400 audit(341.677:2367): avc: denied { open } for pid=11016 comm="syz.1.1978" path="/394/file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.297785][T11008] loop3: p1 start 134217728 is beyond EOD, truncated [ 343.340747][T11008] loop3: p2 size 591360 extends beyond EOD, truncated [ 343.350475][ T28] audit: type=1400 audit(342.367:2368): avc: denied { ioctl } for pid=10999 comm="syz.3.1975" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.423015][T11017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 343.457369][T11008] loop3: p5 size 591360 extends beyond EOD, truncated [ 343.553151][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.612749][T11022] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 343.629461][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.643304][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 343.706690][ T28] audit: type=1400 audit(343.677:2369): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.860339][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 343.865873][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 343.871401][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 343.971127][T11056] loop6: detected capacity change from 0 to 512 [ 343.993016][T11052] loop3: detected capacity change from 0 to 8192 [ 344.362497][ T28] audit: type=1400 audit(343.887:2370): avc: denied { write } for pid=11051 comm="syz.0.1987" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 344.423754][ T28] audit: type=1400 audit(343.887:2371): avc: denied { open } for pid=11051 comm="syz.0.1987" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 344.454419][T11052] loop3: p1 < > p2 p4 < p5 > [ 344.459288][ T28] audit: type=1400 audit(344.367:2372): avc: denied { read } for pid=11060 comm="syz.0.1989" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 344.487461][T11059] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 344.497882][ T28] audit: type=1400 audit(344.367:2373): avc: denied { open } for pid=11060 comm="syz.0.1989" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 344.865311][T11052] loop3: partition table partially beyond EOD, truncated [ 344.872544][T11052] loop3: p1 start 134217728 is beyond EOD, truncated [ 344.925134][T11052] loop3: p2 size 591360 extends beyond EOD, truncated [ 344.940738][T11059] bond3 (unregistering): Released all slaves [ 346.451643][T11056] EXT4-fs (loop6): 1 truncate cleaned up [ 346.496883][T11052] loop3: p5 size 591360 extends beyond EOD, truncated [ 346.532318][T11056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.556388][T11072] loop1: detected capacity change from 0 to 512 [ 346.839559][T11072] EXT4-fs (loop1): 1 truncate cleaned up [ 346.876501][T11072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.805918][T11080] xt_hashlimit: size too large, truncated to 1048576 [ 347.913967][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 347.925349][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 347.936368][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 347.982253][ T5418] usb usb6-port1: attempt power cycle [ 348.597699][T11091] xt_hashlimit: size too large, truncated to 1048576 [ 349.038613][T10426] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 465: padding at end of block bitmap is not set [ 349.121017][ T40] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 465: padding at end of block bitmap is not set [ 349.143103][T10426] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 349.156531][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 349.169287][T10426] EXT4-fs (loop6): This should not happen!! Data will be lost [ 349.169287][T10426] [ 349.179219][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 349.179219][ T40] [ 349.189279][T10426] EXT4-fs (loop6): Total free blocks count 0 [ 349.195243][T10426] EXT4-fs (loop6): Free/Dirty block details [ 349.201315][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 349.207291][ T40] EXT4-fs (loop1): Free/Dirty block details [ 349.213539][T10426] EXT4-fs (loop6): free_blocks=0 [ 349.218614][ T40] EXT4-fs (loop1): free_blocks=0 [ 349.223639][T10426] EXT4-fs (loop6): dirty_blocks=2 [ 349.230364][ T40] EXT4-fs (loop1): dirty_blocks=2 [ 349.235502][T10426] EXT4-fs (loop6): Block reservation details [ 349.241698][ T40] EXT4-fs (loop1): Block reservation details [ 349.247754][T10426] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 349.253876][ T40] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 349.261062][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.271781][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.736801][T11115] loop6: detected capacity change from 0 to 8192 [ 349.792733][ T28] audit: type=1400 audit(349.767:2374): avc: denied { create } for pid=11114 comm="syz.6.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 349.914910][ T28] audit: type=1400 audit(349.887:2375): avc: denied { read } for pid=11114 comm="syz.6.2000" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 350.029827][T11128] loop6: detected capacity change from 0 to 512 [ 350.063660][T11128] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 350.139663][T11128] EXT4-fs (loop6): 1 truncate cleaned up [ 350.156739][T11128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.245371][ T28] audit: type=1400 audit(350.217:2376): avc: denied { ioctl } for pid=11127 comm="syz.6.2005" path="/28/file0/file0/file0" dev="loop6" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.274563][T11128] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2005: invalid indirect mapped block 4294901760 (level 0) [ 350.318217][T11133] xfrm0 speed is unknown, defaulting to 1000 [ 350.325132][T11128] EXT4-fs (loop6): Remounting filesystem read-only [ 350.358054][ T5418] usb usb6-port1: unable to enumerate USB device [ 350.378171][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.588678][T11133] lo speed is unknown, defaulting to 1000 [ 350.782030][T11157] IPv6: Can't replace route, no match found [ 350.790509][T11157] IPv6: Can't replace route, no match found [ 350.813340][ T28] audit: type=1400 audit(350.787:2377): avc: denied { create } for pid=11149 comm="syz.6.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.877757][ T28] audit: type=1400 audit(350.817:2378): avc: denied { bind } for pid=11149 comm="syz.6.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.897311][ T28] audit: type=1400 audit(350.817:2379): avc: denied { shutdown } for pid=11149 comm="syz.6.2010" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.941761][ T28] audit: type=1400 audit(350.827:2380): avc: denied { connect } for pid=11158 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.962531][ T28] audit: type=1400 audit(350.937:2381): avc: denied { bind } for pid=11164 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.982114][T11168] ipvlan0: entered promiscuous mode [ 351.078660][T11173] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 351.113283][T11173] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 351.124591][T11173] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 351.160142][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2020'. [ 351.170236][T11176] syzkaller1: entered promiscuous mode [ 351.175776][T11176] syzkaller1: entered allmulticast mode [ 351.241953][T11173] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 351.253834][T11185] bridge1: entered promiscuous mode [ 351.260049][T11185] bridge1: entered allmulticast mode [ 351.267314][T11185] team0: Port device bridge1 added [ 351.269525][T11188] ieee802154 phy0 wpan0: encryption failed: -22 [ 351.274029][T11185] bridge0: port 4(team0) entered blocking state [ 351.285190][T11185] bridge0: port 4(team0) entered disabled state [ 351.292319][T11185] team0: entered allmulticast mode [ 351.297588][T11185] team_slave_0: entered allmulticast mode [ 351.311827][ T28] audit: type=1400 audit(351.287:2382): avc: denied { read } for pid=11190 comm="syz.5.2027" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.315978][T11185] team_slave_1: entered allmulticast mode [ 351.353924][T11185] team0: entered promiscuous mode [ 351.360771][T11185] team_slave_0: entered promiscuous mode [ 351.366617][T11185] team_slave_1: entered promiscuous mode [ 351.373016][T11185] bridge0: port 4(team0) entered blocking state [ 351.379321][T11185] bridge0: port 4(team0) entered forwarding state [ 351.390606][T11181] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 351.408944][T11194] syzkaller0: entered promiscuous mode [ 351.414458][T11194] syzkaller0: entered allmulticast mode [ 351.440009][T11196] xfrm0 speed is unknown, defaulting to 1000 [ 351.456203][ T28] audit: type=1400 audit(351.427:2383): avc: denied { name_bind } for pid=11200 comm="syz.1.2030" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 351.480136][T11202] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2031'. [ 351.484030][T11196] lo speed is unknown, defaulting to 1000 [ 351.489406][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2031'. [ 351.632782][T11216] syzkaller0: entered promiscuous mode [ 351.659491][T11216] syzkaller0: entered allmulticast mode [ 351.823748][T11236] ieee802154 phy0 wpan0: encryption failed: -22 [ 351.863784][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2046'. [ 351.899411][T11246] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 351.948789][T11255] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.2052'. [ 352.000066][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2054'. [ 352.015501][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2052'. [ 352.091811][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 352.153597][T11280] syzkaller0: entered promiscuous mode [ 352.159787][T11280] syzkaller0: entered allmulticast mode [ 352.268282][ T5418] usb usb6-port1: attempt power cycle [ 352.741090][T11317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2077'. [ 353.420036][T11327] syzkaller0: entered promiscuous mode [ 353.425675][T11327] syzkaller0: entered allmulticast mode [ 353.524075][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2083'. [ 353.542750][T11331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11331 comm=syz.1.2083 [ 353.577685][T11333] netdevsim0: mtu less than device minimum [ 353.693541][T11345] geneve2: entered promiscuous mode [ 353.706259][T11345] geneve2: entered allmulticast mode [ 353.751970][T11347] team_slave_0: entered promiscuous mode [ 353.757724][T11347] team_slave_1: entered promiscuous mode [ 353.767390][T11347] vlan0: entered promiscuous mode [ 353.773042][T11347] team0: entered promiscuous mode [ 354.022089][T11389] syzkaller0: entered promiscuous mode [ 354.030448][T11389] syzkaller0: entered allmulticast mode [ 354.102238][T11387] syzkaller0: entered promiscuous mode [ 354.107843][T11387] syzkaller0: entered allmulticast mode [ 354.118261][ T5418] usb usb6-port1: unable to enumerate USB device [ 354.330296][T11400] team0 (unregistering): Port device team_slave_0 removed [ 354.346392][T11400] team0 (unregistering): Port device team_slave_1 removed [ 354.373251][T11412] xfrm0 speed is unknown, defaulting to 1000 [ 354.439589][T11412] lo speed is unknown, defaulting to 1000 [ 354.450554][T11419] xfrm0 speed is unknown, defaulting to 1000 [ 354.514943][T11419] lo speed is unknown, defaulting to 1000 [ 354.551031][T11432] syzkaller1: entered promiscuous mode [ 354.561714][T11432] syzkaller1: entered allmulticast mode [ 354.643821][T11439] syzkaller0: entered promiscuous mode [ 354.649375][T11439] syzkaller0: entered allmulticast mode [ 354.785541][T11452] xfrm0 speed is unknown, defaulting to 1000 [ 354.786392][T11454] syzkaller0: entered promiscuous mode [ 354.797767][T11454] syzkaller0: entered allmulticast mode [ 354.837426][T11452] lo speed is unknown, defaulting to 1000 [ 355.133760][T11485] syzkaller0: entered promiscuous mode [ 355.148251][T11485] syzkaller0: entered allmulticast mode [ 355.191387][T11490] vlan0: entered promiscuous mode [ 355.278228][T11495] xfrm0 speed is unknown, defaulting to 1000 [ 355.397136][T11495] lo speed is unknown, defaulting to 1000 [ 355.497511][T11531] syzkaller0: entered promiscuous mode [ 355.512798][T11531] syzkaller0: entered allmulticast mode [ 355.566313][T11546] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.709278][T11572] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.742466][T11575] syzkaller0: entered promiscuous mode [ 355.752820][T11575] syzkaller0: entered allmulticast mode [ 355.775744][T11585] tipc: Started in network mode [ 355.781242][T11585] tipc: Node identity 6ede2ab0f19b, cluster identity 4711 [ 355.788540][T11585] tipc: Enabled bearer , priority 0 [ 355.809069][T11577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11577 comm=syz.0.2181 [ 355.946880][T11605] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.971606][T11607] syzkaller0: entered promiscuous mode [ 355.971971][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 355.971984][ T28] audit: type=1400 audit(355.947:2399): avc: denied { ioctl } for pid=11598 comm="syz.1.2191" path="socket:[31930]" dev="sockfs" ino=31930 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.977181][T11607] syzkaller0: entered allmulticast mode [ 356.159920][T11627] Cannot find add_set index 0 as target [ 356.288155][ T28] audit: type=1400 audit(356.267:2400): avc: denied { write } for pid=11642 comm="syz.0.2212" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 356.361761][T11652] syzkaller1: entered promiscuous mode [ 356.371609][T11652] syzkaller1: entered allmulticast mode [ 356.387050][T11655] syzkaller1: entered promiscuous mode [ 356.392777][T11655] syzkaller1: entered allmulticast mode [ 356.453896][T11664] syzkaller0: left promiscuous mode [ 356.476072][T11664] syzkaller0: left allmulticast mode [ 356.612831][ T28] audit: type=1400 audit(356.587:2401): avc: denied { shutdown } for pid=11690 comm="syz.6.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.644767][ T28] audit: type=1400 audit(356.587:2402): avc: denied { read } for pid=11690 comm="syz.6.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.693541][ T28] audit: type=1400 audit(356.667:2403): avc: denied { block_suspend } for pid=11684 comm="syz.1.2231" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.721399][T11703] __nla_validate_parse: 7 callbacks suppressed [ 356.721417][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2237'. [ 356.798007][ T10] tipc: Node number set to 2672110256 [ 356.815565][ T28] audit: type=1400 audit(356.777:2404): avc: denied { accept } for pid=11684 comm="syz.1.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.865433][T11709] syzkaller0: entered promiscuous mode [ 356.898321][T11709] syzkaller0: entered allmulticast mode [ 356.921301][ T28] audit: type=1400 audit(356.847:2405): avc: denied { write } for pid=11690 comm="syz.6.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.968393][T11719] syzkaller0: entered promiscuous mode [ 356.973942][T11719] syzkaller0: entered allmulticast mode [ 357.222459][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 357.343065][T11748] xfrm0 speed is unknown, defaulting to 1000 [ 357.428600][T11748] lo speed is unknown, defaulting to 1000 [ 357.493496][T11755] syzkaller0: entered promiscuous mode [ 357.499734][T11755] syzkaller0: entered allmulticast mode [ 357.567056][T11758] syzkaller0: entered promiscuous mode [ 357.572816][T11758] syzkaller0: entered allmulticast mode [ 357.712614][T11771] syzkaller0: entered promiscuous mode [ 357.718749][T11771] syzkaller0: entered allmulticast mode [ 357.762542][T11779] syzkaller0: entered promiscuous mode [ 357.771479][T11779] syzkaller0: entered allmulticast mode [ 357.803059][T11783] ip6gretap0: entered promiscuous mode [ 357.809086][T11783] vlan0: entered promiscuous mode [ 357.878601][T11791] syzkaller0: entered promiscuous mode [ 357.898798][T11791] syzkaller0: entered allmulticast mode [ 357.919961][T11795] syzkaller0: entered promiscuous mode [ 357.925440][T11795] syzkaller0: entered allmulticast mode [ 357.931896][T11794] syzkaller0: entered promiscuous mode [ 357.937501][T11794] syzkaller0: entered allmulticast mode [ 358.079200][T11816] netlink: 'syz.3.2285': attribute type 3 has an invalid length. [ 358.143013][T11822] geneve2: entered promiscuous mode [ 358.150512][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2290'. [ 358.155824][T11822] geneve2: entered allmulticast mode [ 358.181801][T11825] syzkaller0: entered promiscuous mode [ 358.187645][T11825] syzkaller0: entered allmulticast mode [ 358.196038][T11826] syzkaller0: entered promiscuous mode [ 358.196071][T11828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11828 comm=syz.6.2290 [ 358.215670][T11826] syzkaller0: entered allmulticast mode [ 358.297392][T11842] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 358.327421][T11842] syzkaller1: left promiscuous mode [ 358.347066][T11842] syzkaller1: left allmulticast mode [ 358.365779][T11850] syzkaller1: entered promiscuous mode [ 358.371386][T11850] syzkaller1: entered allmulticast mode [ 358.414041][T11855] vlan0: entered promiscuous mode [ 358.467755][T11860] syzkaller0: entered promiscuous mode [ 358.479160][T11860] syzkaller0: entered allmulticast mode [ 358.556250][T11873] syzkaller0: entered promiscuous mode [ 358.564063][T11878] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.581266][T11873] syzkaller0: entered allmulticast mode [ 358.666614][T11893] tipc: Enabling of bearer rejected, already enabled [ 358.680293][T11894] syzkaller1: entered promiscuous mode [ 358.686317][T11894] syzkaller1: entered allmulticast mode [ 358.740167][T11896] syzkaller0: entered promiscuous mode [ 358.756887][T11896] syzkaller0: entered allmulticast mode [ 358.865865][T11924] tipc: Enabling of bearer rejected, already enabled [ 358.888457][T11926] syzkaller0: entered promiscuous mode [ 358.897475][T11926] syzkaller0: entered allmulticast mode [ 359.060222][T11947] xfrm0 speed is unknown, defaulting to 1000 [ 359.066456][T11954] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.144986][T11947] lo speed is unknown, defaulting to 1000 [ 359.233903][T11981] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.380174][T12001] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 359.387105][ T28] audit: type=1400 audit(359.357:2406): avc: denied { create } for pid=12000 comm="syz.0.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.387423][ T3409] IPVS: starting estimator thread 0... [ 359.435538][T12008] ieee802154 phy0 wpan0: encryption failed: -22 [ 359.510805][T12018] syzkaller0: entered promiscuous mode [ 359.516297][T12018] syzkaller0: entered allmulticast mode [ 359.538099][T12004] IPVS: using max 2304 ests per chain, 115200 per kthread [ 359.686309][T12048] ip6gretap0: entered promiscuous mode [ 359.697839][T12048] vlan0: entered promiscuous mode [ 359.700190][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2396'. [ 359.751133][T12053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12053 comm=syz.3.2396 [ 359.866992][T12070] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 359.876441][T12079] syzkaller1: entered promiscuous mode [ 359.885299][T12079] syzkaller1: entered allmulticast mode [ 359.917277][T12074] syzkaller0: entered promiscuous mode [ 359.925243][T12074] syzkaller0: entered allmulticast mode [ 359.961318][T12085] syzkaller0: entered promiscuous mode [ 359.976002][T12085] syzkaller0: entered allmulticast mode [ 360.069204][T12104] tipc: Enabling of bearer rejected, already enabled [ 360.107602][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 360.134629][T12114] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 360.203277][ T9286] IPVS: starting estimator thread 0... [ 360.231064][T12127] syzkaller0: entered promiscuous mode [ 360.247229][T12127] syzkaller0: entered allmulticast mode [ 360.308229][T12124] IPVS: using max 2640 ests per chain, 132000 per kthread [ 360.331982][T12145] syzkaller0: entered promiscuous mode [ 360.337547][T12145] syzkaller0: entered allmulticast mode [ 360.355139][T12147] x_tables: duplicate underflow at hook 1 [ 360.425982][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2441'. [ 360.457806][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 360.520367][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2444'. [ 360.612482][T12170] xfrm0 speed is unknown, defaulting to 1000 [ 360.673836][ T28] audit: type=1400 audit(360.647:2407): avc: denied { listen } for pid=12169 comm="syz.1.2448" lport=34361 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.689355][T12182] syzkaller0: entered promiscuous mode [ 360.701994][T12182] syzkaller0: entered allmulticast mode [ 360.719012][ T28] audit: type=1400 audit(360.647:2408): avc: denied { write } for pid=12169 comm="syz.1.2448" lport=34361 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 360.746627][T12170] lo speed is unknown, defaulting to 1000 [ 360.854798][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2454'. [ 360.938619][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2459'. [ 361.070443][T12212] syzkaller0: entered promiscuous mode [ 361.090502][T12212] syzkaller0: entered allmulticast mode [ 361.105169][T12212] tipc: Enabled bearer , priority 0 [ 361.116550][T12211] tipc: Resetting bearer [ 361.128714][T12211] tipc: Disabling bearer [ 361.311857][T12252] tipc: Enabling of bearer rejected, already enabled [ 361.328877][T12252] tipc: Resetting bearer [ 361.339943][T12252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.372462][T12258] syzkaller0: entered promiscuous mode [ 361.388779][T12258] syzkaller0: entered allmulticast mode [ 361.400869][T12258] tipc: Started in network mode [ 361.426474][T12258] tipc: Node identity de3fe6b616ad, cluster identity 4711 [ 361.437418][T12258] tipc: Enabled bearer , priority 0 [ 361.458162][T12257] tipc: Resetting bearer [ 361.493962][T12257] tipc: Disabling bearer [ 361.535515][T12282] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 361.582810][T12282] syzkaller1: left promiscuous mode [ 361.591749][T12282] syzkaller1: left allmulticast mode [ 361.804098][T12317] syzkaller0: entered promiscuous mode [ 361.828048][T12317] syzkaller0: entered allmulticast mode [ 361.920238][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 361.920254][ T28] audit: type=1400 audit(361.887:2410): avc: denied { connect } for pid=12339 comm="syz.5.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.094420][T12377] syzkaller0: entered promiscuous mode [ 362.099931][T12377] syzkaller0: entered allmulticast mode [ 362.291030][T12382] __nla_validate_parse: 7 callbacks suppressed [ 362.291047][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 362.383504][T12387] syzkaller0: entered promiscuous mode [ 362.389151][T12387] syzkaller0: entered allmulticast mode [ 364.909310][T12347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.961023][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2543'. [ 364.982904][T12394] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2547'. [ 365.022045][T12389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12389 comm=syz.1.2543 [ 365.088334][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 365.115344][T12414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2554'. [ 365.159912][T12420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2557'. [ 365.209425][T12424] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2559'. [ 365.219139][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'. [ 365.267989][ T28] audit: type=1400 audit(365.237:2411): avc: denied { bind } for pid=12409 comm="syz.5.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 365.270231][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2563'. [ 365.407276][T12434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12434 comm=syz.0.2563 [ 365.472050][T12463] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2570'. [ 365.523409][T12470] tipc: Enabling of bearer rejected, already enabled [ 365.624468][T12488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12488 comm=syz.1.2580 [ 365.795606][ T28] audit: type=1400 audit(365.767:2412): avc: denied { ioctl } for pid=12517 comm="syz.3.2590" path="socket:[35276]" dev="sockfs" ino=35276 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.937987][ T28] audit: type=1400 audit(365.907:2413): avc: denied { create } for pid=12476 comm="syz.5.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 366.053167][ T28] audit: type=1400 audit(366.027:2414): avc: denied { bind } for pid=12543 comm="syz.1.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.105933][T12544] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 366.272147][ T28] audit: type=1400 audit(366.247:2415): avc: denied { setopt } for pid=12576 comm="syz.0.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.367691][ T28] audit: type=1400 audit(366.337:2416): avc: denied { bind } for pid=12576 comm="syz.0.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.419679][T12599] xfrm0 speed is unknown, defaulting to 1000 [ 366.597472][T12599] lo speed is unknown, defaulting to 1000 [ 366.626366][T12609] syzkaller0: entered promiscuous mode [ 366.643108][T12609] syzkaller0: entered allmulticast mode [ 366.709538][T12633] tipc: Started in network mode [ 366.714469][T12633] tipc: Node identity 620e03fec1d9, cluster identity 4711 [ 366.721917][T12633] tipc: Enabled bearer , priority 0 [ 366.795068][T12633] syzkaller0: entered promiscuous mode [ 366.800918][T12633] syzkaller0: entered allmulticast mode [ 366.820094][T12632] tipc: Resetting bearer [ 366.837070][T12632] tipc: Disabling bearer [ 366.991137][T12674] vlan0: entered promiscuous mode [ 367.028554][T12676] syzkaller0: entered promiscuous mode [ 367.036138][T12676] syzkaller0: entered allmulticast mode [ 367.044768][T12678] netlink: 'syz.6.2633': attribute type 1 has an invalid length. [ 367.083206][T12678] bond1: (slave bridge2): making interface the new active one [ 367.091760][T12678] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 367.126373][T12678] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 367.186985][T12686] tipc: Enabling of bearer rejected, already enabled [ 367.228688][T12678] macvlan0: entered promiscuous mode [ 367.234251][T12678] macvlan0: entered allmulticast mode [ 367.264997][T12689] xfrm0 speed is unknown, defaulting to 1000 [ 367.297310][ T70] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 367.310708][T12689] lo speed is unknown, defaulting to 1000 [ 367.354115][T12714] __nla_validate_parse: 10 callbacks suppressed [ 367.354130][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'. [ 367.477988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.520527][T12730] syzkaller0: entered promiscuous mode [ 367.526037][T12730] syzkaller0: entered allmulticast mode [ 367.709982][T12739] xfrm0 speed is unknown, defaulting to 1000 [ 367.739849][T12739] lo speed is unknown, defaulting to 1000 [ 367.781575][T12742] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 368.527996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.558003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.223306][T12699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.293918][T12760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.404627][T12772] ip6gretap0: entered promiscuous mode [ 370.412138][T12772] vlan0: entered promiscuous mode [ 370.457823][T12766] xfrm0 speed is unknown, defaulting to 1000 [ 370.460034][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2673'. [ 370.498886][T12780] tipc: Started in network mode [ 370.512874][T12780] tipc: Node identity d6c766b3ffde, cluster identity 4711 [ 370.524621][T12780] tipc: Enabled bearer , priority 0 [ 370.538485][T12780] syzkaller0: entered promiscuous mode [ 370.553217][T12780] syzkaller0: entered allmulticast mode [ 370.568466][T12766] lo speed is unknown, defaulting to 1000 [ 370.584506][T12779] tipc: Resetting bearer [ 370.601182][T12779] tipc: Disabling bearer [ 370.833261][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2688'. [ 370.995184][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 371.005663][T12843] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 371.017370][T12847] vlan0: entered promiscuous mode [ 371.080794][T12856] syzkaller0: entered promiscuous mode [ 371.088431][T12856] syzkaller0: entered allmulticast mode [ 371.207878][ T28] audit: type=1400 audit(371.177:2417): avc: denied { bind } for pid=12874 comm="syz.5.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 371.238017][ T28] audit: type=1400 audit(371.177:2418): avc: denied { getopt } for pid=12857 comm="syz.1.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.242436][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 371.624284][ T28] audit: type=1400 audit(371.597:2419): avc: denied { setopt } for pid=12927 comm="syz.0.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.680230][T12938] ip6tnl1: left allmulticast mode [ 371.685520][ T9] IPVS: starting estimator thread 0... [ 371.685674][T12938] macsec1: left promiscuous mode [ 371.691827][T12940] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 371.696528][T12938] geneve2: left promiscuous mode [ 371.703781][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 371.712542][T12938] geneve2: left allmulticast mode [ 371.721431][T12940] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 371.729427][T12940] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2737'. [ 371.759487][T12940] tipc: Failed to remove unknown binding: 66,0,0/0:2591057248/2591057250 [ 371.768122][T12940] tipc: Failed to remove unknown binding: 66,0,0/0:2591057248/2591057249 [ 371.778050][T12941] IPVS: using max 2256 ests per chain, 112800 per kthread [ 371.793005][T12940] tipc: Failed to remove unknown binding: 66,0,0/0:2591057248/2591057250 [ 371.807787][T12940] tipc: Failed to remove unknown binding: 66,0,0/0:2591057248/2591057249 [ 372.655686][T13029] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.679675][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 372.890098][T13041] xfrm0 speed is unknown, defaulting to 1000 [ 372.946234][T13041] lo speed is unknown, defaulting to 1000 [ 373.094316][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 373.173840][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2787'. [ 373.269648][ T28] audit: type=1400 audit(373.247:2420): avc: denied { ioctl } for pid=13039 comm="syz.3.2774" path="socket:[36724]" dev="sockfs" ino=36724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.271785][T13041] IPVS: length: 132 != 8 [ 373.294570][ T28] audit: type=1400 audit(373.247:2421): avc: denied { getopt } for pid=13039 comm="syz.3.2774" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.335731][T13087] xfrm0 speed is unknown, defaulting to 1000 [ 373.371257][T13041] pimreg: entered allmulticast mode [ 373.394186][T13041] pimreg: left allmulticast mode [ 373.415895][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'. [ 373.440654][T13087] lo speed is unknown, defaulting to 1000 [ 373.562352][T13104] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2794'. [ 373.586316][T13104] tipc: Failed to remove unknown binding: 66,0,0/0:1101119788/1101119790 [ 373.628019][T13104] tipc: Failed to remove unknown binding: 66,0,0/0:1101119788/1101119789 [ 373.706934][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2805'. [ 373.809696][T13145] xt_connbytes: Forcing CT accounting to be enabled [ 373.824264][T13147] syzkaller0: entered promiscuous mode [ 373.838161][T13147] syzkaller0: entered allmulticast mode [ 373.874061][T13145] xt_hashlimit: size too large, truncated to 1048576 [ 373.891417][T13155] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 373.922668][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 373.954598][T13155] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 373.976436][T13155] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2815'. [ 373.989682][T13155] tipc: Failed to remove unknown binding: 66,0,0/0:735736148/735736150 [ 374.001414][T13155] tipc: Failed to remove unknown binding: 66,0,0/0:735736148/735736149 [ 374.091712][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2823'. [ 374.161964][T13195] netlink: 'syz.6.2828': attribute type 15 has an invalid length. [ 374.177465][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 374.522081][T13224] xfrm0 speed is unknown, defaulting to 1000 [ 374.580836][T10856] tipc: Resetting bearer [ 374.593004][T13259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 374.683636][T10856] tipc: Disabling bearer [ 374.690660][T13224] lo speed is unknown, defaulting to 1000 [ 374.769685][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.785320][T13273] syzkaller0: entered promiscuous mode [ 374.791730][T13273] syzkaller0: entered allmulticast mode [ 374.841668][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.861685][T13224] chnl_net:caif_netlink_parms(): no params data found [ 374.956020][ T70] bond0: (slave netdevsim1): Releasing backup interface [ 374.977569][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 374.987587][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 374.997828][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.015060][T13224] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.022435][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.036352][T13224] bridge_slave_0: entered allmulticast mode [ 375.042975][T13224] bridge_slave_0: entered promiscuous mode [ 375.054493][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.075196][T13224] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.087887][T13224] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.096487][T13224] bridge_slave_1: entered allmulticast mode [ 375.114890][T13224] bridge_slave_1: entered promiscuous mode [ 375.132998][T13224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.151210][T13224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.202492][T13224] team0: Port device team_slave_0 added [ 375.210865][T13224] team0: Port device team_slave_1 added [ 375.237303][T13326] syzkaller1: entered promiscuous mode [ 375.244155][T13326] syzkaller1: entered allmulticast mode [ 375.257756][ T70] team0: left allmulticast mode [ 375.262994][ T70] team_slave_0: left allmulticast mode [ 375.268779][ T70] team_slave_1: left allmulticast mode [ 375.274420][ T70] team0: left promiscuous mode [ 375.279649][ T70] team_slave_0: left promiscuous mode [ 375.285148][ T70] team_slave_1: left promiscuous mode [ 375.291457][ T70] bridge0: port 4(team0) entered disabled state [ 375.298871][ T70] bond0: left allmulticast mode [ 375.303734][ T70] bond_slave_0: left allmulticast mode [ 375.309688][ T70] bond_slave_1: left allmulticast mode [ 375.316331][ T70] bridge0: port 3(bond0) entered disabled state [ 375.335581][ T70] bridge_slave_1: left allmulticast mode [ 375.341514][ T70] bridge_slave_1: left promiscuous mode [ 375.347313][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.355352][ T70] bridge_slave_0: left allmulticast mode [ 375.361114][ T70] bridge_slave_0: left promiscuous mode [ 375.367133][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.415154][ T3856] smc: removing ib device syz1 [ 375.473975][ T70] team0: Port device bridge1 removed [ 375.549825][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.560111][ T70] bond_slave_0: left promiscuous mode [ 375.566730][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.575980][ T70] bond_slave_1: left promiscuous mode [ 375.581955][ T70] bond0 (unregistering): Released all slaves [ 375.589407][T13224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.596352][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.622558][T13224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.638357][T11144] xfrm0 speed is unknown, defaulting to 1000 [ 375.647035][T11144] syz1: Port: 1 Link DOWN [ 375.654818][T13353] tipc: Enabling of bearer rejected, failed to enable media [ 375.666786][T13224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.689815][T13224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.725304][T13224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.764025][ T70] tipc: Left network mode [ 375.771468][ T70] hsr_slave_0: left promiscuous mode [ 375.777463][ T70] hsr_slave_1: left promiscuous mode [ 375.785463][ T70] veth1_macvtap: left promiscuous mode [ 375.791227][ T70] veth0_macvtap: left promiscuous mode [ 375.828141][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2876'. [ 375.875181][ T70] team0 (unregistering): Port device team_slave_1 removed [ 375.885260][ T70] team0 (unregistering): Port device team_slave_0 removed [ 375.926079][T13365] syzkaller1: left promiscuous mode [ 375.939735][T13365] syzkaller1: left allmulticast mode [ 375.956323][T13224] hsr_slave_0: entered promiscuous mode [ 375.962800][T13224] hsr_slave_1: entered promiscuous mode [ 376.042543][T13390] syzkaller1: entered promiscuous mode [ 376.055089][T13390] syzkaller1: entered allmulticast mode [ 376.095593][ T70] IPVS: stop unused estimator thread 0... [ 376.362820][T13224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.378321][T13224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.391286][T13224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.403663][T13224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.469543][T13224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.488599][T13224] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.500499][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.507578][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.524357][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.531482][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.621650][T13489] lo speed is unknown, defaulting to 1000 [ 376.652755][T13224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.781670][T13224] veth0_vlan: entered promiscuous mode [ 376.800365][T13224] veth1_vlan: entered promiscuous mode [ 376.835320][T13529] syz_tun: entered allmulticast mode [ 376.847545][T13224] veth0_macvtap: entered promiscuous mode [ 376.864766][T13224] veth1_macvtap: entered promiscuous mode [ 376.888732][T13224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.910042][T13224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.924630][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.934885][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.944336][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.965957][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.012304][ T5418] IPVS: starting estimator thread 0... [ 377.025600][T13546] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 377.036144][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 377.038806][T13550] syzkaller0: entered promiscuous mode [ 377.048532][T13546] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 377.049089][T13550] syzkaller0: entered allmulticast mode [ 377.063626][T13546] tipc: Failed to remove unknown binding: 66,0,0/0:1221712789/1221712791 [ 377.072996][T13546] tipc: Failed to remove unknown binding: 66,0,0/0:1221712789/1221712790 [ 377.118425][T13547] IPVS: using max 2352 ests per chain, 117600 per kthread [ 377.127098][T13551] tipc: Enabling of bearer rejected, failed to enable media [ 377.368485][ T9180] bridge0: port 3(syz_tun) entered disabled state [ 377.394764][ T9180] syz_tun (unregistering): left allmulticast mode [ 377.408319][ T9180] syz_tun (unregistering): left promiscuous mode [ 377.415096][ T9180] bridge0: port 3(syz_tun) entered disabled state [ 377.461084][T13588] lo speed is unknown, defaulting to 1000 [ 377.533710][T13584] lo speed is unknown, defaulting to 1000 [ 377.543030][T13596] tipc: Enabling of bearer rejected, failed to enable media [ 377.633733][T10426] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.653890][T10426] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.702774][T10426] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.728058][T10426] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.812082][T10426] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.833403][T10426] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.911224][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.918465][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.027466][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.047805][T13621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.104705][T13621] macsec1: left promiscuous mode [ 378.116102][T13621] macvlan0: left promiscuous mode [ 378.123986][T13621] macvlan0: left allmulticast mode [ 378.141094][T10426] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.152536][T10426] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.166990][ T3856] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.176745][ T3856] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.214942][ T3856] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.237884][ T3856] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.252202][T13584] chnl_net:caif_netlink_parms(): no params data found [ 378.371209][T13682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13682 comm=syz.5.2930 [ 378.426070][T13684] lo speed is unknown, defaulting to 1000 [ 378.432757][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.444239][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.451953][T13584] bridge_slave_0: entered allmulticast mode [ 378.458842][T13584] bridge_slave_0: entered promiscuous mode [ 378.473862][T10426] bridge_slave_1: left allmulticast mode [ 378.487994][T10426] bridge_slave_1: left promiscuous mode [ 378.493818][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.508798][T10426] bridge_slave_0: left allmulticast mode [ 378.514526][T10426] bridge_slave_0: left promiscuous mode [ 378.520677][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.759584][T10426] bond3 (unregistering): (slave bridge3): Releasing active interface [ 378.809129][T10426] bond3 (unregistering): (slave bridge4): Releasing active interface [ 378.889990][T10426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.899721][T10426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.909210][T10426] bond0 (unregistering): Released all slaves [ 378.916866][T10426] bond1 (unregistering): Released all slaves [ 378.925409][T10426] bond2 (unregistering): Released all slaves [ 378.933585][T10426] bond3 (unregistering): Released all slaves [ 378.946301][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.953550][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.960853][T13584] bridge_slave_1: entered allmulticast mode [ 378.967381][T13584] bridge_slave_1: entered promiscuous mode [ 378.984257][T13706] syzkaller0: entered promiscuous mode [ 378.990083][T13706] syzkaller0: entered allmulticast mode [ 379.007494][T10426] tipc: Left network mode [ 379.008962][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.032505][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.051851][T13584] team0: Port device team_slave_0 added [ 379.060071][T10426] hsr_slave_0: left promiscuous mode [ 379.065849][T10426] hsr_slave_1: left promiscuous mode [ 379.071972][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.079823][T10426] batadv0: mtu less than device minimum [ 379.085907][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.096823][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.107873][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.118661][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.129376][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.140402][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.151161][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.161984][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.172735][T10426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.188678][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.196287][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.222557][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.230140][T10426] batman_adv: batadv0: Interface deactivated: dummy0 [ 379.236882][T10426] batman_adv: batadv0: Removing interface: dummy0 [ 379.245045][T10426] veth1_macvtap: left promiscuous mode [ 379.250860][T10426] veth0_macvtap: left promiscuous mode [ 379.320101][T13584] team0: Port device team_slave_1 added [ 379.339335][T11146] lo speed is unknown, defaulting to 1000 [ 379.362410][T11146] infiniband syz0: ib_query_port failed (-19) [ 379.383451][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.390488][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.418832][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.506302][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.513558][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.541572][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.618422][T13584] hsr_slave_0: entered promiscuous mode [ 379.624740][T13584] hsr_slave_1: entered promiscuous mode [ 379.634873][T13584] debugfs: 'hsr0' already exists in 'hsr' [ 379.640898][T13584] Cannot create hsr debugfs directory [ 379.647157][T13751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13751 comm=syz.5.2941 [ 379.730682][T10426] IPVS: stop unused estimator thread 0... [ 379.852428][ T40] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe [ 380.063592][T13807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13807 comm=syz.6.2951 [ 380.280303][T13584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.309107][T13584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.383960][T13584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.408043][T13584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.462976][T13877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13877 comm=syz.1.2963 [ 380.484126][T13584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.513124][T13584] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.550706][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.557839][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.604577][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.611743][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.801975][T13584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.867050][T13932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13932 comm=syz.1.2976 [ 380.925414][T13584] veth0_vlan: entered promiscuous mode [ 380.948565][T13584] veth1_vlan: entered promiscuous mode [ 381.001007][T13584] veth0_macvtap: entered promiscuous mode [ 381.024991][T13584] veth1_macvtap: entered promiscuous mode [ 381.045673][T13584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.061992][T13584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.096166][ T9873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.096736][T13964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13964 comm=syz.1.2988 [ 381.120375][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.141408][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.179125][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.354374][T14001] tipc: Enabling of bearer rejected, failed to enable media [ 381.436380][ T7947] syz_tun (unregistering): left allmulticast mode [ 381.499596][T14026] syzkaller0: entered promiscuous mode [ 381.507608][T14026] syzkaller0: entered allmulticast mode [ 381.539713][T14026] tipc: Started in network mode [ 381.545563][T14026] tipc: Node identity 367ed58729ed, cluster identity 4711 [ 381.559592][T14026] tipc: Enabled bearer , priority 0 [ 381.575058][T14025] tipc: Resetting bearer [ 381.583093][T14025] tipc: Disabling bearer [ 381.637112][T14008] chnl_net:caif_netlink_parms(): no params data found [ 381.679908][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.687092][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.694624][T14008] bridge_slave_0: entered allmulticast mode [ 381.701453][T14008] bridge_slave_0: entered promiscuous mode [ 381.709273][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.716770][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.724520][T14008] bridge_slave_1: entered allmulticast mode [ 381.731156][T14008] bridge_slave_1: entered promiscuous mode [ 381.755719][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.768655][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.779864][T14057] __nla_validate_parse: 3 callbacks suppressed [ 381.779935][T14057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3011'. [ 381.806502][T14008] team0: Port device team_slave_0 added [ 381.813686][T14008] team0: Port device team_slave_1 added [ 381.818891][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'. [ 381.829750][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.836837][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.863030][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.874510][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.882119][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.908902][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.946131][T14008] hsr_slave_0: entered promiscuous mode [ 381.952287][T14008] hsr_slave_1: entered promiscuous mode [ 381.958109][T14008] debugfs: 'hsr0' already exists in 'hsr' [ 381.963843][T14008] Cannot create hsr debugfs directory [ 382.085603][T14082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3019'. [ 382.153068][T14092] syzkaller0: entered promiscuous mode [ 382.158699][T14092] syzkaller0: entered allmulticast mode [ 382.233195][T14102] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3025'. [ 382.324612][T14008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.341826][T14008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.351223][T14008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.370960][T14008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.411498][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.423458][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.435381][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.442489][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.460502][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.467589][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.543511][T14135] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3034'. [ 382.553039][T14135] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3034'. [ 382.563169][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.571226][T14135] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3034'. [ 382.663315][T14008] veth0_vlan: entered promiscuous mode [ 382.671715][T14008] veth1_vlan: entered promiscuous mode [ 382.697004][T14008] veth0_macvtap: entered promiscuous mode [ 382.705212][T14008] veth1_macvtap: entered promiscuous mode [ 382.712344][T14151] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3038'. [ 382.717626][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.733559][T14151] tipc: Failed to remove unknown binding: 66,0,0/0:3657482419/3657482420 [ 382.738770][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.750991][T14151] tipc: Failed to remove unknown binding: 66,0,0/0:3657482419/3657482420 [ 382.763676][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.772630][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.795485][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.805957][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.840430][T14158] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.938593][T13635] IPVS: starting estimator thread 0... [ 382.954375][T14178] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3049'. [ 382.970589][T14178] tipc: Failed to remove unknown binding: 66,0,0/0:2158102696/2158102697 [ 382.985387][T14178] tipc: Failed to remove unknown binding: 66,0,0/0:2158102696/2158102697 [ 383.020593][T14189] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.038284][T14179] IPVS: using max 2064 ests per chain, 103200 per kthread [ 383.053339][T14192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14192 comm=syz.3.3054 [ 383.130254][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.137431][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.181788][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.190961][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.239540][T10426] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.254504][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.265188][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.274511][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.287705][T14221] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3064'. [ 383.308888][T14221] tipc: Failed to remove unknown binding: 66,0,0/0:2063420815/2063420816 [ 383.327063][T14221] tipc: Failed to remove unknown binding: 66,0,0/0:2063420815/2063420816 [ 383.528481][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.535712][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.548903][T14246] bond_slave_0: left promiscuous mode [ 383.559968][T14246] bond_slave_1: left promiscuous mode [ 383.604663][T14246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.613873][T14246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.639550][T14246] vcan1: left promiscuous mode [ 383.644364][T14246] vcan1: left allmulticast mode [ 383.666103][ T30] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.675787][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.684809][ T30] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.693697][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.706213][ T30] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.715637][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.724639][ T30] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.733577][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.761413][T14259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=14259 comm=syz.3.3079 [ 384.334114][T14289] vlan0: entered promiscuous mode [ 384.339518][T14289] bridge0: entered promiscuous mode [ 384.514249][T14301] netlink: 'syz.6.3097': attribute type 5 has an invalid length. [ 385.574710][T14362] net_ratelimit: 42 callbacks suppressed [ 385.574725][T14362] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 385.598774][T14362] tipc: Failed to remove unknown binding: 66,0,0/0:1318541674/1318541676 [ 385.607457][T14362] tipc: Failed to remove unknown binding: 66,0,0/0:1318541674/1318541675 [ 385.616965][T14362] tipc: Failed to remove unknown binding: 66,0,0/0:1318541674/1318541676 [ 385.626002][T14362] tipc: Failed to remove unknown binding: 66,0,0/0:1318541674/1318541675 [ 385.970376][T14407] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 386.000844][T14412] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.114025][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.121115][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.127545][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.140033][T14420] netlink: 'syz.6.3137': attribute type 12 has an invalid length. [ 386.191094][T14415] infiniband syz2: set down [ 386.195691][ T3430] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.202518][T14415] infiniband syz2: added ip6_vti0 [ 386.214754][T14415] RDS/IB: syz2: added [ 386.218928][T14415] smc: adding ib device syz2 with port count 1 [ 386.225192][T14415] smc: ib device syz2 port 1 has no pnetid [ 386.231600][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.238165][ T3430] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.276823][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.314311][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.352819][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.374422][T14389] Set syz1 is full, maxelem 65536 reached [ 386.390078][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.426725][T14427] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.467032][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.522027][T14415] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.649847][T14451] tipc: Failed to remove unknown binding: 66,0,0/0:469106736/469106738 [ 386.658270][ T9286] IPVS: starting estimator thread 0... [ 386.663808][T14451] tipc: Failed to remove unknown binding: 66,0,0/0:469106736/469106737 [ 386.672980][T14451] tipc: Failed to remove unknown binding: 66,0,0/0:469106736/469106738 [ 386.682447][T14451] tipc: Failed to remove unknown binding: 66,0,0/0:469106736/469106737 [ 386.758294][T14453] IPVS: using max 2688 ests per chain, 134400 per kthread [ 386.780569][T14462] syzkaller0: entered promiscuous mode [ 386.786154][T14462] syzkaller0: entered allmulticast mode [ 386.844156][T14468] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.961890][T14480] tipc: Failed to remove unknown binding: 66,0,0/0:849488895/849488897 [ 386.970381][T14480] tipc: Failed to remove unknown binding: 66,0,0/0:849488895/849488896 [ 386.979064][T14480] tipc: Failed to remove unknown binding: 66,0,0/0:849488895/849488897 [ 386.987606][T14480] tipc: Failed to remove unknown binding: 66,0,0/0:849488895/849488896 [ 387.039321][T14482] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.478555][T14525] syzkaller0: entered promiscuous mode [ 387.484159][T14525] syzkaller0: entered allmulticast mode [ 387.491644][T14525] tipc: Enabled bearer , priority 0 [ 387.499118][T14524] tipc: Resetting bearer [ 387.506277][T14524] tipc: Disabling bearer [ 387.613869][T14532] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.403902][T14588] syzkaller1: entered promiscuous mode [ 388.412267][T14588] syzkaller1: entered allmulticast mode [ 388.547453][T14601] __nla_validate_parse: 7 callbacks suppressed [ 388.547479][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3200'. [ 388.763509][T14615] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.258656][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 389.382469][T14649] syzkaller0: entered promiscuous mode [ 389.388132][T14649] syzkaller0: entered allmulticast mode [ 389.435335][T14651] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.518474][T14655] loop6: detected capacity change from 0 to 128 [ 389.527813][T14655] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.543382][T14655] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.925708][T14645] sctp: [Deprecated]: syz.0.3214 (pid 14645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.925708][T14645] Use struct sctp_sack_info instead [ 389.992187][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.999472][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.004843][T14669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3223'. [ 390.097429][T14673] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3214'. [ 390.117250][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.132048][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.183147][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.193393][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.239472][ T1698] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.261756][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3231'. [ 390.277580][ T1698] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.290807][T14693] vlan0: entered promiscuous mode [ 390.495255][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 390.973059][T14728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33792 sclass=netlink_route_socket pid=14728 comm=syz.3.3244 [ 391.171633][T14748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14748 comm=syz.5.3249 [ 391.173998][T14732] loop3: detected capacity change from 0 to 1024 [ 391.228617][T14732] EXT4-fs: inline encryption not supported [ 391.244110][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3251'. [ 391.305599][T14732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.340425][T14764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33792 sclass=netlink_route_socket pid=14764 comm=syz.1.3255 [ 391.353511][T14763] syzkaller0: entered promiscuous mode [ 391.368172][T14763] syzkaller0: entered allmulticast mode [ 391.373272][T14732] sctp: [Deprecated]: syz.3.3245 (pid 14732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.373272][T14732] Use struct sctp_sack_info instead [ 391.440014][T14732] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 391.465305][T14732] EXT4-fs (loop3): Remounting filesystem read-only [ 391.486610][T14774] syzkaller1: entered promiscuous mode [ 391.493486][T14774] syzkaller1: entered allmulticast mode [ 391.503213][T14777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14777 comm=syz.5.3260 [ 391.522501][T14732] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3245'. [ 391.565231][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3262'. [ 391.593823][T14781] vlan0: entered promiscuous mode [ 391.599133][T14781] bridge0: entered promiscuous mode [ 391.619708][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3264'. [ 391.716096][T14798] syzkaller0: entered promiscuous mode [ 391.726805][T14798] syzkaller0: entered allmulticast mode [ 391.778629][T14807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14807 comm=syz.1.3273 [ 391.870923][T14809] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.878205][T14809] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.898698][T13584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.975896][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.016030][T14809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.161630][ T40] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.193578][ T40] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.240735][ T40] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.266183][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.289736][T14832] loop3: detected capacity change from 0 to 128 [ 392.338254][T14840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14840 comm=syz.6.3284 [ 392.345036][T14832] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 392.352530][T14838] syzkaller0: entered promiscuous mode [ 392.371763][T14832] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 392.402050][T14838] syzkaller0: entered allmulticast mode [ 392.478219][T11146] ================================================================== [ 392.486317][T11146] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 392.493329][T11146] [ 392.495630][T11146] read-write to 0xffff888237c2a8a4 of 4 bytes by task 13651 on cpu 0: [ 392.503763][T11146] wq_worker_running+0x95/0x120 [ 392.508595][T11146] synchronize_rcu_expedited+0x5f8/0x770 [ 392.514205][T11146] synchronize_rcu+0x35/0x2e0 [ 392.518862][T11146] try_check_zero+0x182/0x260 [ 392.523515][T11146] process_srcu+0xd5/0xdc0 [ 392.527907][T11146] process_scheduled_works+0x4de/0x9e0 [ 392.533430][T11146] worker_thread+0x581/0x770 [ 392.537998][T11146] kthread+0x22a/0x280 [ 392.542039][T11146] ret_from_fork+0x150/0x360 [ 392.546607][T11146] ret_from_fork_asm+0x1a/0x30 [ 392.551348][T11146] [ 392.553664][T11146] read to 0xffff888237c2a8a4 of 4 bytes by task 11146 on cpu 1: [ 392.561266][T11146] kick_pool+0x49/0x2d0 [ 392.565402][T11146] __queue_work+0x896/0xaf0 [ 392.569899][T11146] queue_work_on+0xa9/0x140 [ 392.574381][T11146] process_srcu+0xa56/0xdc0 [ 392.578866][T11146] process_scheduled_works+0x4de/0x9e0 [ 392.584301][T11146] worker_thread+0x581/0x770 [ 392.588869][T11146] kthread+0x22a/0x280 [ 392.592910][T11146] ret_from_fork+0x150/0x360 [ 392.597514][T11146] ret_from_fork_asm+0x1a/0x30 [ 392.602256][T11146] [ 392.604553][T11146] value changed: 0x00000000 -> 0x00000001 [ 392.610238][T11146] [ 392.612541][T11146] Reported by Kernel Concurrency Sanitizer on: [ 392.618664][T11146] CPU: 1 UID: 0 PID: 11146 Comm: kworker/1:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 392.629658][T11146] Tainted: [W]=WARN [ 392.633472][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.643514][T11146] Workqueue: rcu_gp process_srcu [ 392.648466][T11146] ================================================================== [ 392.743983][T14846] loop6: detected capacity change from 0 to 1024 [ 392.773428][T14846] EXT4-fs: inline encryption not supported [ 392.811930][T14846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.853191][T14846] sctp: [Deprecated]: syz.6.3287 (pid 14846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.853191][T14846] Use struct sctp_sack_info instead [ 392.930005][T14846] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 392.947434][T14846] EXT4-fs (loop6): Remounting filesystem read-only [ 393.302018][T10362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.