last executing test programs: 7m28.961152688s ago: executing program 32 (id=242): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000060) 7m24.520037504s ago: executing program 33 (id=348): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x8, 0x1, 0xfd, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10880) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r2}, 0x14) 6m59.129230951s ago: executing program 34 (id=837): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5m36.551541109s ago: executing program 35 (id=2351): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410301c0"], 0x4) 5m35.403879686s ago: executing program 36 (id=2370): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x9, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x10001, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x4, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x7fffffff, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x37ffff, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x4006a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0x1ff, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x2, 0x2, 0x401, 0x3, 0xffffffff, 0x7a01}, {0xa, 0x1611c00, 0xfffffff5, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x8}, {0x6, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x4000009, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x7, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x1, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x6}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x25, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7f, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x7ff, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x1d, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000005, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x5, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x9, 0x1, 0x400, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7ffffbff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x6c4, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0x8, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x4, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0x5, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x61, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x80006, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x1, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1, 0x66}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x40008}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x8009, 0x8211, 0x800, 0xad0, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1}, {0x4}, {0x1}, {0x3}, {0x5}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x50048800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) 5m29.628620811s ago: executing program 37 (id=2436): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 5m9.162283625s ago: executing program 38 (id=2727): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 5m4.685606951s ago: executing program 39 (id=2778): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="23890c", 0x3}], 0x1}}], 0x1, 0x4040040) 4m50.974117415s ago: executing program 40 (id=2993): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, 0x0, 0x40044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1, 0x100000}, {0x6c, 0x0, 0x0, 0x10000000}, {0x6}]}) 3m34.907413286s ago: executing program 41 (id=4263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m21.270668209s ago: executing program 42 (id=4446): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x804) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x7) 3m12.635605557s ago: executing program 43 (id=4563): r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 2m33.42763307s ago: executing program 44 (id=5145): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x3, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m27.929712132s ago: executing program 9 (id=5196): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), 0x0}, 0x20) 2m27.881675682s ago: executing program 9 (id=5198): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m27.813035243s ago: executing program 9 (id=5200): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 2m26.804775418s ago: executing program 9 (id=5216): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) 2m26.6893262s ago: executing program 9 (id=5219): bpf$MAP_CREATE(0x0, 0x0, 0x50) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000009dd2e12a04000c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2m26.311447186s ago: executing program 9 (id=5223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 2m26.269333586s ago: executing program 45 (id=5223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 2m8.071686737s ago: executing program 8 (id=5545): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0) symlink(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m7.837514171s ago: executing program 8 (id=5546): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 2m7.665616913s ago: executing program 8 (id=5547): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x449) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 2m7.665428863s ago: executing program 8 (id=5548): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m7.549893985s ago: executing program 8 (id=5551): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 2m7.322851148s ago: executing program 8 (id=5553): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0a"], 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 2m7.322728888s ago: executing program 46 (id=5553): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0a"], 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 1m51.868291378s ago: executing program 1 (id=5750): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000280)="64e919", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 1m51.622378681s ago: executing program 1 (id=5755): inotify_init1(0x0) inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x6, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m51.574337462s ago: executing program 1 (id=5758): sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4) 1m48.526321268s ago: executing program 1 (id=5813): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$eJzs3E1oXEUcAPD/2yRN0g8ba622Vk2tYrCYtGm1PQhSUfCgIFZQjyEfJTZtpEnBlipbkHqUonfx6NWDV/VSxJPgtR4FKRTppa0grrzdt5/d3aTJJmvs7webnXnz3puZnTcv82aSDeC+NZz+SErhaxGxPSJyjTsMl95u37w4eefmxcnIFwon/kyKh91K45nsNLEli4zkInKfJtWEGgvnL5yamJubPpvFxxZPfzi2cP7C87MD2ZZjx44cPnT0xfEX7r1STfJL63Vrzyfze3e//v6VNyd7y9vLudXWo1OGY7hZUYqe6XRmXbatJpz0ttqrPmHzWhaIZRnIWqWv2P+3R0+0bLyIyK9jyYC1VigUCv2tk/OFRpfu2gJsWEl0uwRAd5R/0afPv+VXs4HAptrI9o4OQbrqxvHSA1Ba79vZK+LJ4sbyPEhfw/NtJw1HxHv5v75KX7FG8xAAALV+OF6Z/qkf/w2VVkb+Pnf15fT9gWzYNxQRD0bEjoh4KCJ2RsTDEbErIh6JiEcbzt8TEYU2+Q83xCv5Vxahctc7UM2WbhwfjJeyta3q+K+uAEM9WWxbRHnAPH0w+0xGoq9/ZnZu+lCbPH589dfPW6XVjv/SV5p/eSyYleN6b8ME3dTE4sSKK9zgxqWIPb2N9U96I5LKSkASEbsjYs8yzvdF9j5Us232uW/2ViJ99fsvXf+iQtN1tHZLFctU+Dri2VL756Ou/as5JnXrk6cnTk6fnD4zXlmfHBuIuemDYzMtS/PzL5ffapW2ZP2/+73xkNeOfn8i61mrl7b/5prrP8rrt9X6DyURSWW9dqHZWQba5nH5t89aPtOs9PrflLxTDJefSz+aWFw8eyhiU/LG3dvHq8eW4+l75Ev1H9nfvP/vyI5JP4nHIiK9iB+PiCei9ISYln1fRDwVEfvb1P+nV57+YOX1X1tp/aca7n+llq9r/+p6fatAkq0NNknqObXv2p0WN4/ltf+RYmgk2zJ1tdmZkrpbRKuSluc90i3/rPKzAwAAgI0iFxFba+aStkYuNzpamgPaGZtzc/MLiwdm5s+dmUrTIoaiLzczO1ec/yzNB/cl5fnPoZr4eEP8cDZv/GXPYDE+Ojk/N9XVmgNbin0+yY1GvNtT0/9Tf3Rmihn4L+vAOhqwQbXr/+kgfteVdSwMsK6W//v/6sdrWhBg3dX0/1b/4Z9v+ndfwIbn+R+oWvqLftwzYOMr6MtwX7un/n/AlwDC/0lvvF0J57paEmC9Gf/DfWnJ/+tfVaDQ3zxpIO7eOQban7AnVlaMwSZ5dSWQjqy6kvvgSo4qf5tCy30id28n7I/OtOnMKj+N/NmFk7s6fvEXsr+V73QLfrsu/bRZoCu3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI77NwAA///sotgS") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m48.318005361s ago: executing program 1 (id=5817): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000011c0)=[{0x6}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m47.994704975s ago: executing program 1 (id=5823): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}, {&(0x7f0000001340)=""/27, 0x1b}], 0x2) 1m47.970052446s ago: executing program 47 (id=5823): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000006d80)=""/4082, 0xff2}, {&(0x7f0000001340)=""/27, 0x1b}], 0x2) 1m3.973830649s ago: executing program 6 (id=6444): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4042040}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101d088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c942074b984aa324c9a6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b202d011cb0f0cedb0cef9f66c5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e"], 0x6, 0x2c3, &(0x7f0000000900)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x600) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) listen(r0, 0x3) 1m3.595543566s ago: executing program 6 (id=6452): socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m3.411463178s ago: executing program 6 (id=6468): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1m3.29870868s ago: executing program 6 (id=6460): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m3.164136892s ago: executing program 6 (id=6463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 1m2.072425468s ago: executing program 6 (id=6470): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) 1m2.058795918s ago: executing program 48 (id=6470): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) 24.765162063s ago: executing program 2 (id=7014): socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x24) 24.683792884s ago: executing program 2 (id=7006): epoll_create1(0x80000) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x100361c, 0x1, 0x2, 0x1bf}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 23.678896329s ago: executing program 2 (id=7023): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$eJzs3cFvI1cZAPBvvJu1dzfb3UIPBQFdSmFBq7UTbxtVvVAuSKiqilQ4IbSNEm8UxY6j2ClNiER65opEJU7wJ3BA4oC0J+7c4MalHJAKrEANAiGjGY+ziRMnVjaO2/j3k0Z+783E33uW5j37TWZeABPrdkTsRMSViHgnIm7m5Um+xevdLT3u48fbC7uPtxeS6HTe/vvl/Mjthd7xPdfz9yxFvJXmi0fEbW1urczX67X1PF9pN9Yqrc2te8uN+aXaUm21Wp2bnZt59f4r1TNr6wuNX3/07eU3vv+7337xwz/sfOPHaZ2/me9L23Zmgfbpfi5TMb2vLP3k3hhFsDG4lLfnyrgrwqkUIuIzEfFint5TGl+dAIDR6nRuRufm/vxgyRDHAACffOlv/ulICuX89/90FArlcjaHV3ourhXqzVb77sPmxupiZHNYt2Kq8HC5XpvJ5wpvxVSS5mez9JN8tS9/PyKejYifFa9m+fJCs744ri89ADDhrveN//8qdsf/IbhCAACfZkZyAJg8h8f/qbHUAwA4P37/A8Dk2Tf+H3WvLgBwAZX67v3PHC4BAC6QE+f/n4+f/PB8qgIAnBPX/wFgonz3zTfTrbObP/968d3NjZXmu/cWa62VcmNjobzQXF8rLzWbS9kzexonvV+92VybfTk23qu0a612pbW59aDR3FhtP8ie6/2g5sYCABi/Z1949KckInZeu5pt0VvLweV/uPCc5jC5Lo27AsDYXB53BYCxMR8PJCfsH/gvQh8M/purT1EfYPTufG7A/P/x3w3+1zmf6gEjZP4fJteT+f/T9ASPfA2ATzHz/zC5Op3Eev4AMGGGuP7vXwThgjv19X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYYNPZlhTK+QrA01EolMsRNyLiVkwlD5frtZmIeCYi/licKqb52XFXGgB4SoW/Jvn6X3duvjTdv/dK8u9i9hoRP/rF2z9/b77dXp9Ny/+xV97+IC+vHhmgOPo2AAD7XO4v6I3TvXG8t77vx4+3F3rbeVbwo291FxdN4+7mW6/q3cqXYioirv0zOdCY5IwWJt55PyKe729/YW//rXzl0/74aewbI4sfWQunD8QvHIhfyPZ1X9PP4rNnUBeYNI/S/uf1o86/QtzOXvPzLznYmZbip4c711Po9X+7nf7+r3u+v3WjlPU1R/V/t4eN8fLvvzNw3/uXOp+/HLF7qP/trQhdylJHxX9pyPh//sKXXhy0r/PLiDtxXPxuqtJurFVam1v3lhvzS7Wl2mq1Ojc7N/Pq/VeqlWyOutKbqT7sb6/dfWZw+yOuDYhfOqH9Xx2y/b/67zs/+PIx8b/+laPiF+K5Y+LvRMTXhow/f+03A5fvTuMvHmr/fzqdTrI3/nbjXznwd2nZ3SHjf/iXrcUhDwUAzkFrc2tlvl6vrUs8baI0qne+/glpoMQxiUtR781HjThWcfQh0sSYOyZg5J6c9OOuCQAAAAAAAAAAAAAAMEjre/kj/0Z4M9y42wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9f8AAAD//z4Ozi4=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000740)={{0xa, 0x80}, 'port1\x00', 0x35, 0x1, 0x12c, 0x5, 0x1, 0x401, 0x0, 0x0, 0x5, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x8040) 23.366576163s ago: executing program 2 (id=7028): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 23.304832214s ago: executing program 2 (id=7031): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xe, @mcast1, 0x1}, {0xa, 0x4e21, 0x4, @mcast2, 0x3}, 0xffffffffffffffff, 0x8d72}}, 0x48) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 23.062711928s ago: executing program 2 (id=7038): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x3d, 0x3, 0x3}, @TCA_CAKE_MPU={0x0, 0xe, 0xa8}]}}]}, 0x50}}, 0x0) 23.062373448s ago: executing program 49 (id=7038): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x3d, 0x3, 0x3}, @TCA_CAKE_MPU={0x0, 0xe, 0xa8}]}}]}, 0x50}}, 0x0) 3.43209068s ago: executing program 0 (id=7326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.4060587s ago: executing program 0 (id=7327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x3022, 0x32, 0x43a1bd52, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000001, 0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x400c001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 3.358398721s ago: executing program 0 (id=7333): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'ext4\x00'}]}, 0x11) close(r1) unshare(0xc000400) syz_open_procfs(0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 3.287081702s ago: executing program 0 (id=7334): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fcntl$setown(r0, 0x8, r3) 2.436183695s ago: executing program 0 (id=7352): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0xc, 0x1ff}) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 2.381642525s ago: executing program 7 (id=7353): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ftruncate(r0, 0x80000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x90) 1.733791625s ago: executing program 7 (id=7358): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000001240)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x20000886) 1.556617408s ago: executing program 3 (id=7367): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x40000000, 0x8c, "00080000000000000000000cadf100004000"}) r2 = syz_open_pts(r1, 0x141401) fcntl$setstatus(r2, 0x4, 0x2000) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) close_range(r0, 0xffffffffffffffff, 0x0) 1.533758988s ago: executing program 3 (id=7368): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r3, 0x0, 0x0) 1.517984678s ago: executing program 7 (id=7369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x4e) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.484850189s ago: executing program 3 (id=7370): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4020}], 0x1, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff05000000fe08000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a00000000000000ffffffff0000000000000000000000000003"]) 1.349460611s ago: executing program 7 (id=7373): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x81, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.329317911s ago: executing program 3 (id=7374): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.284273382s ago: executing program 3 (id=7376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x3, @remote, 0x6}}, 0x0, 0x0, 0xc, 0x0, "85ecfdf8a7466c329fb840a7de74954aa4aa71b0d21222d1888e4d161c1242dffb69047af8fba8ace393c8524810eccead8ec22b593d2f04c92e193c9ae2ec150feb9d129b21bafa662635d9592f141f"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) 1.246769452s ago: executing program 7 (id=7378): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000001}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.231850982s ago: executing program 5 (id=7379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x80) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x60880, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 1.218503913s ago: executing program 3 (id=7380): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffe3e) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="1d", 0x1}], 0x1}}], 0x1, 0x40003) 1.143494454s ago: executing program 5 (id=7382): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r1, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000000)=0x5e) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 677.80845ms ago: executing program 7 (id=7386): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20010) close(r0) 666.302751ms ago: executing program 4 (id=7387): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x8000002e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 620.872382ms ago: executing program 4 (id=7388): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 546.678223ms ago: executing program 4 (id=7389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 546.418813ms ago: executing program 4 (id=7390): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 277.455427ms ago: executing program 0 (id=7391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000000)={0x80, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 230.968427ms ago: executing program 4 (id=7392): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) ioctl$FIONREAD(r3, 0x541b, 0x0) 202.993848ms ago: executing program 4 (id=7393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) 196.917828ms ago: executing program 5 (id=7394): socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 79.77474ms ago: executing program 5 (id=7395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4a24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0x15, 0x0, 0x4}, 0x9c) 48.27554ms ago: executing program 5 (id=7396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 5 (id=7397): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 95.366109][T21541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.453782][T23290] vlan3: entered allmulticast mode [ 395.470536][T23290] bond0: entered allmulticast mode [ 395.476582][T23290] bridge0: port 1(vlan3) entered blocking state [ 395.483045][T23290] bridge0: port 1(vlan3) entered disabled state [ 395.490942][T23290] vlan3: entered promiscuous mode [ 395.496146][T23290] bond0: entered promiscuous mode [ 395.532902][T23296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.665913][T23293] syzkaller0: entered promiscuous mode [ 395.673272][T23293] syzkaller0: entered allmulticast mode [ 395.932781][T23310] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 395.939425][T23310] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.947803][T23310] vhci_hcd vhci_hcd.0: Device attached [ 395.986831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.068364][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 396.079948][T16199] EXT4-fs error (device loop4): kmmpd:181: comm kmmpd-loop4: Error writing to MMP block [ 396.090311][T16199] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 396.098715][T16199] EXT4-fs (loop4): I/O error while writing superblock [ 396.111905][T23311] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 396.114971][ T8082] vhci_hcd vhci_hcd.5: stop threads [ 396.114991][ T8082] vhci_hcd vhci_hcd.5: release socket [ 396.115017][ T8082] vhci_hcd vhci_hcd.5: disconnect device [ 396.127717][ T4976] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 396.309329][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.454324][T23324] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 396.509903][T23324] bond2 (unregistering): Released all slaves [ 396.534739][ T28] audit: type=1400 audit(1782544906.847:2594): avc: denied { ioctl } for pid=23331 comm="syz.4.5982" path="socket:[71928]" dev="sockfs" ino=71928 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 396.686478][ T28] audit: type=1326 audit(1782544906.997:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.761884][ T28] audit: type=1326 audit(1782544907.037:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.807095][ T28] audit: type=1326 audit(1782544907.037:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.845185][ T28] audit: type=1326 audit(1782544907.037:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.875466][ T28] audit: type=1326 audit(1782544907.067:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.901554][ T28] audit: type=1326 audit(1782544907.077:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 396.936562][ T28] audit: type=1326 audit(1782544907.077:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23337 comm="syz.4.5985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 397.028201][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.347706][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.428768][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.947842][T23383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6004'. [ 398.010088][T23384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6004'. [ 398.131175][T23310] syz.5.5977 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 398.167664][T23310] CPU: 1 UID: 0 PID: 23310 Comm: syz.5.5977 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 398.167729][T23310] Tainted: [W]=WARN [ 398.167736][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.167757][T23310] Call Trace: [ 398.167764][T23310] [ 398.167835][T23310] __dump_stack+0x1d/0x30 [ 398.167931][T23310] dump_stack_lvl+0x95/0xd0 [ 398.167961][T23310] dump_stack+0x15/0x1b [ 398.167984][T23310] dump_header+0x80/0x240 [ 398.168007][T23310] oom_kill_process+0x295/0x350 [ 398.168101][T23310] out_of_memory+0x981/0xbc0 [ 398.168141][T23310] try_charge_memcg+0x621/0xa00 [ 398.168201][T23310] ? __rcu_read_unlock+0x4e/0x70 [ 398.168247][T23310] __memcg_kmem_charge_page+0x199/0x3a0 [ 398.168325][T23310] __alloc_frozen_pages_noprof+0x18a/0x350 [ 398.168407][T23310] alloc_pages_mpol+0xa9/0x1d0 [ 398.168446][T23310] alloc_pages_noprof+0x8f/0x140 [ 398.168481][T23310] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 398.168559][T23310] __kvmalloc_node_noprof+0x3a0/0x590 [ 398.168630][T23310] ? futex_hash_allocate+0x192/0x920 [ 398.168651][T23310] ? futex_hash_allocate+0x192/0x920 [ 398.168707][T23310] ? futex_hash_allocate+0x192/0x920 [ 398.168802][T23310] futex_hash_allocate+0x192/0x920 [ 398.168823][T23310] ? cap_task_prctl+0x13f/0x6b0 [ 398.168858][T23310] futex_hash_prctl+0xd8/0xf0 [ 398.168878][T23310] __se_sys_prctl+0x4f4/0x13b0 [ 398.168932][T23310] __x64_sys_prctl+0x67/0x80 [ 398.168964][T23310] x64_sys_call+0x2533/0x3020 [ 398.168996][T23310] do_syscall_64+0x136/0x3c0 [ 398.169047][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.169075][T23310] RIP: 0033:0x7f43d8f6ce59 [ 398.169096][T23310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.169122][T23310] RSP: 002b:00007f43d79c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 398.169188][T23310] RAX: ffffffffffffffda RBX: 00007f43d91e5fa0 RCX: 00007f43d8f6ce59 [ 398.169207][T23310] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 398.169297][T23310] RBP: 00007f43d9002e6f R08: 0000000000000000 R09: 0000000000000000 [ 398.169311][T23310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.169324][T23310] R13: 00007f43d91e6038 R14: 00007f43d91e5fa0 R15: 00007fff2123db98 [ 398.169352][T23310] [ 398.171557][T23310] memory: usage 307200kB, limit 307200kB, failcnt 1514 [ 398.416141][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.427455][T23310] memory+swap: usage 298984kB, limit 9007199254740988kB, failcnt 0 [ 398.442060][T23310] kmem: usage 198004kB, limit 9007199254740988kB, failcnt 0 [ 398.458259][T23310] Memory cgroup stats for /syz5: [ 398.458559][T23310] cache 524288 [ 398.470016][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.483532][T23310] rss 4096 [ 398.491867][T23386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6005'. [ 398.505117][T23310] shmem 0 [ 398.511474][T23310] mapped_file 65536 [ 398.520071][T23310] dirty 0 [ 398.527563][T23310] writeback 0 [ 398.539554][T23310] workingset_refault_anon 2851 [ 398.553768][T23310] workingset_refault_file 553 [ 398.573351][T23310] swap 81588224 [ 398.582302][T23310] swapcached 98029568 [ 398.592069][T23310] pgpgin 231284 [ 398.599063][T23310] pgpgout 231154 [ 398.607007][T23310] pgfault 209392 [ 398.613176][T23310] pgmajfault 398 [ 398.617530][T23310] inactive_anon 8192 [ 398.621460][T23310] active_anon 0 [ 398.624980][T23310] inactive_file 0 [ 398.629766][T23310] active_file 524288 [ 398.633791][T23310] unevictable 0 [ 398.646437][T23310] hierarchical_memory_limit 314572800 [ 398.659080][T23310] hierarchical_memsw_limit 9223372036854771712 [ 398.665460][T23310] total_cache 524288 [ 398.671534][T23310] total_rss 4096 [ 398.675179][T23310] total_shmem 0 [ 398.679669][T23310] total_mapped_file 65536 [ 398.684243][T23310] total_dirty 0 [ 398.690916][T23310] total_writeback 0 [ 398.694943][T23310] total_workingset_refault_anon 2851 [ 398.700565][T23310] total_workingset_refault_file 553 [ 398.705916][T23310] total_swap 81588224 [ 398.763102][T23310] total_swapcached 98029568 [ 398.804688][T23310] total_pgpgin 231284 [ 398.808798][T23310] total_pgpgout 231154 [ 398.814499][T23310] total_pgfault 209392 [ 398.818762][T23310] total_pgmajfault 398 [ 398.823608][T23310] total_inactive_anon 8192 [ 398.828802][T23310] total_active_anon 0 [ 398.832809][T23310] total_inactive_file 0 [ 398.838428][T23310] total_active_file 524288 [ 398.842992][T23310] total_unevictable 0 [ 398.847527][T23310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5977,pid=23309,uid=0 [ 398.863606][T23310] Memory cgroup out of memory: Killed process 23309 (syz.5.5977) total-vm:96348kB, anon-rss:1228kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 398.968405][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6013'. [ 399.373051][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6021'. [ 399.398290][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6021'. [ 399.416238][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6021'. [ 399.435816][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6021'. [ 399.486248][T23425] loop5: detected capacity change from 0 to 512 [ 399.512757][T23427] netlink: 'syz.3.6024': attribute type 8 has an invalid length. [ 399.541175][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6024'. [ 399.552936][T23427] veth1_to_team: entered promiscuous mode [ 399.560998][T23427] gretap0: entered promiscuous mode [ 399.570237][T23427] veth1_to_team: left promiscuous mode [ 399.577593][T23427] gretap0: left promiscuous mode [ 399.599135][T23425] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.6023: error while reading EA inode 32 err=-116 [ 399.617105][T23425] loop5: lost filesystem error report for type 5 error -117 [ 399.617376][T23425] EXT4-fs (loop5): 1 orphan inode deleted [ 399.630579][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 399.630597][ C0] EXT4-fs (loop5): initial error at time 1782544909: ext4_xattr_inode_iget:446 [ 399.630624][ C0] EXT4-fs (loop5): last error at time 1782544909: ext4_xattr_inode_iget:446 [ 399.676485][ T8082] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.745585][T23425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.768556][T23425] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.6023: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 399.800089][ T9628] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 399.829029][T23425] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.6023: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 399.922059][T19912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.011072][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.467215][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.899802][T23451] vlan2: entered allmulticast mode [ 400.905008][T23451] bond0: entered allmulticast mode [ 400.910346][T23451] bond_slave_0: entered allmulticast mode [ 400.916113][T23451] bond_slave_1: entered allmulticast mode [ 400.923651][T23451] bridge0: port 3(vlan2) entered blocking state [ 400.930765][T23451] bridge0: port 3(vlan2) entered disabled state [ 400.938409][T23451] vlan2: entered promiscuous mode [ 400.943513][T23451] bond0: entered promiscuous mode [ 400.948850][T23451] bond_slave_0: entered promiscuous mode [ 400.955037][T23451] bond_slave_1: entered promiscuous mode [ 400.961228][T23451] bridge0: port 3(vlan2) entered blocking state [ 400.967640][T23451] bridge0: port 3(vlan2) entered forwarding state [ 400.974305][ T28] audit: type=1326 audit(1782544911.287:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.010223][ T28] audit: type=1326 audit(1782544911.287:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.036932][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.045714][ T28] audit: type=1326 audit(1782544911.287:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.064000][T23452] bridge_slave_0: left allmulticast mode [ 401.075528][ T28] audit: type=1326 audit(1782544911.287:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.079722][T23452] bridge_slave_0: left promiscuous mode [ 401.105696][ T28] audit: type=1326 audit(1782544911.287:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.112184][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 401.138064][ T28] audit: type=1326 audit(1782544911.287:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.145439][T23458] netlink: 'syz.4.6032': attribute type 3 has an invalid length. [ 401.170237][ T28] audit: type=1326 audit(1782544911.287:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.181540][T23452] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.204283][ T28] audit: type=1326 audit(1782544911.287:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.209118][T23458] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.6032'. [ 401.238425][ T28] audit: type=1326 audit(1782544911.287:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.269807][ T28] audit: type=1326 audit(1782544911.287:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23453 comm="syz.4.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x7ffc0000 [ 401.298837][T23452] bridge_slave_1: left allmulticast mode [ 401.304496][T23452] bridge_slave_1: left promiscuous mode [ 401.310279][T23452] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.320291][T23452] bond0: (slave bond_slave_0): Releasing backup interface [ 401.329137][T23452] bond_slave_0: left promiscuous mode [ 401.334710][T23452] bond_slave_0: left allmulticast mode [ 401.342583][T23452] bond0: (slave bond_slave_1): Releasing backup interface [ 401.351620][T23452] bond_slave_1: left promiscuous mode [ 401.357198][T23452] bond_slave_1: left allmulticast mode [ 401.366342][T23452] team0: Port device team_slave_1 removed [ 401.377236][T23452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.403558][T16721] bridge0: port 3(vlan2) entered disabled state [ 401.668078][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 402.069100][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.307832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.705944][T23434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.908545][T23490] loop6: detected capacity change from 0 to 1024 [ 402.927385][T23490] EXT4-fs: inline encryption not supported [ 402.955908][T23490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.968703][T23490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 402.988279][T23490] System zones: 0-1, 3-36 [ 403.004907][T23490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.089136][T23506] netlink: 'syz.5.6050': attribute type 1 has an invalid length. [ 403.120873][T23506] bond3: entered promiscuous mode [ 403.122145][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.126597][T23506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.223822][T23506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.232223][T23506] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 403.249259][T22619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.261738][T23506] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 403.291724][T23506] bond3: (slave gre1): making interface the new active one [ 403.309457][T23506] gre1: entered promiscuous mode [ 403.322517][T23506] bond3: (slave gre1): Enslaving as an active interface with an up link [ 403.494811][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6059'. [ 403.506860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.510085][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6059'. [ 403.516126][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.532157][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6059'. [ 403.566200][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6059'. [ 403.894341][T23546] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 403.912546][T23546] bond2: entered promiscuous mode [ 403.919071][T23546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.935544][T23540] loop7: detected capacity change from 0 to 128 [ 403.985384][T23540] EXT4-fs: test_dummy_encryption option not supported [ 404.046181][T23546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.054535][T23546] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 404.065470][T23546] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 404.091008][T23546] bond2: (slave gre2): making interface the new active one [ 404.107551][T23546] gre2: entered promiscuous mode [ 404.120671][T23546] bond2: (slave gre2): Enslaving as an active interface with an up link [ 404.147482][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.476239][T23567] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6077'. [ 404.488176][T23570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23570 comm=syz.4.6076 [ 404.489614][T23569] loop5: detected capacity change from 0 to 256 [ 404.546835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.568934][T23569] xt_NFQUEUE: number of total queues is 0 [ 404.701069][T23579] loop5: detected capacity change from 0 to 512 [ 404.737933][T23579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.752571][T23579] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.805019][T19912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.188192][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.378547][T23598] tmpfs: Bad value for 'mpol' [ 405.408848][T23598] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 405.451687][T23600] xt_hashlimit: size too large, truncated to 1048576 [ 405.481134][ T3079] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 405.488869][T23602] gretap0: entered promiscuous mode [ 405.502485][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6091'. [ 405.535944][T23602] gretap0: left promiscuous mode [ 405.586831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.147298][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 406.210217][T23633] netlink: 'syz.6.6102': attribute type 1 has an invalid length. [ 406.229761][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.272423][T23633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.339591][T23641] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 406.347738][T23639] bond2: (slave veth3): Enslaving as an active interface with an up link [ 406.427521][T23646] loop3: detected capacity change from 0 to 512 [ 406.445303][T23646] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.6106: error while reading EA inode 32 err=-116 [ 406.458748][T23646] loop3: lost filesystem error report for type 5 error -117 [ 406.459053][T23646] EXT4-fs (loop3): 1 orphan inode deleted [ 406.472321][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 406.472345][ C1] EXT4-fs (loop3): initial error at time 1782544916: ext4_xattr_inode_iget:446 [ 406.472380][ C1] EXT4-fs (loop3): last error at time 1782544916: ext4_xattr_inode_iget:446 [ 406.524993][T23653] xt_hashlimit: size too large, truncated to 1048576 [ 406.557947][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.560487][T23646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.663716][T23646] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.6106: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 406.735903][T23646] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.6106: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 406.912835][T21541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.943534][T23662] netlink: 'syz.6.6114': attribute type 11 has an invalid length. [ 406.951931][T23662] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6114'. [ 407.143016][T23676] loop6: detected capacity change from 0 to 128 [ 407.196234][T23676] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 407.221817][T23676] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.235611][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 407.235626][ T28] audit: type=1326 audit(1782544917.557:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.269402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.308008][T23676] EXT4-fs (loop6): shut down requested (2) [ 407.340353][ T28] audit: type=1326 audit(1782544917.557:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.366984][ T28] audit: type=1326 audit(1782544917.597:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.403934][T22619] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.408382][ T28] audit: type=1326 audit(1782544917.597:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.536582][ T3079] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 407.545031][ T3079] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.592849][ T28] audit: type=1326 audit(1782544917.597:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.631955][T23683] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 407.650516][T23688] loop3: detected capacity change from 0 to 4096 [ 407.657635][T23688] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 407.674064][T23683] bond4 (unregistering): Released all slaves [ 407.711266][ T28] audit: type=1326 audit(1782544917.597:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.778811][ T28] audit: type=1326 audit(1782544917.597:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.822531][ T28] audit: type=1326 audit(1782544917.597:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.852850][ T28] audit: type=1326 audit(1782544917.597:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.879341][ T28] audit: type=1326 audit(1782544917.597:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23678 comm="syz.3.6119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaac68ce59 code=0x7ffc0000 [ 407.945003][T23698] syzkaller0: entered promiscuous mode [ 407.951529][T23698] syzkaller0: entered allmulticast mode [ 407.978578][T23700] loop5: detected capacity change from 0 to 256 [ 407.991760][T23700] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.096124][T23702] loop3: detected capacity change from 0 to 512 [ 408.172439][T23702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.206955][T23702] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.308095][ T23] net_ratelimit: 1 callbacks suppressed [ 408.308135][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.332473][T21541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.376438][T23715] loop3: detected capacity change from 0 to 128 [ 408.383004][T23713] gretap0: entered promiscuous mode [ 408.395059][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6130'. [ 408.423952][T23715] syz.3.6132: attempt to access beyond end of device [ 408.423952][T23715] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 408.449417][T23713] gretap0: left promiscuous mode [ 408.469971][T23715] syz.3.6132: attempt to access beyond end of device [ 408.469971][T23715] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 408.492311][T23719] loop6: detected capacity change from 0 to 512 [ 408.520009][T23719] EXT4-fs: Ignoring removed bh option [ 408.527849][T23715] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 408.694416][T23725] syz.3.6132: attempt to access beyond end of device [ 408.694416][T23725] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 408.729545][T23725] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 408.752954][T23725] syz.3.6132: attempt to access beyond end of device [ 408.752954][T23725] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 408.782074][T23725] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 408.810837][T23725] syz.3.6132: attempt to access beyond end of device [ 408.810837][T23725] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 408.832359][T23725] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 408.843273][T23725] syz.3.6132: attempt to access beyond end of device [ 408.843273][T23725] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 408.861086][T23725] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 408.873744][T23719] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.6135: corrupted in-inode xattr: e_value size too large [ 408.889352][T23719] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 408.890189][T23719] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.6135: couldn't read orphan inode 15 (err -117) [ 408.899688][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 408.899783][ C1] EXT4-fs (loop6): initial error at time 1782544919: ext4_iget_extra_inode:5180: inode 15 [ 408.899892][ C1] EXT4-fs (loop6): last error at time 1782544919: ext4_iget_extra_inode:5180: inode 15 [ 408.950439][T23719] loop6: lost filesystem error report for type 5 error -117 [ 408.950947][T23719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.059752][T23719] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.6135: Unrecognised inode hash code 4 [ 409.071881][T23719] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.6135: Corrupt directory, running e2fsck is recommended [ 409.532402][T22619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.548305][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.588471][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.720325][T23740] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6145'. [ 410.631000][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.083284][T23804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6170'. [ 411.189480][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 411.246835][T23812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6184'. [ 411.302848][T23816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23816 comm=syz.5.6174 [ 411.524314][T23827] program syz.7.6180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.667929][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.806471][T23848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6190'. [ 412.549793][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.646653][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.707105][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.745516][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6200'. [ 412.806443][T23869] loop5: detected capacity change from 0 to 256 [ 412.891067][T23871] netlink: 'syz.7.6196': attribute type 1 has an invalid length. [ 412.913023][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6200'. [ 412.929568][T23871] 8021q: adding VLAN 0 to HW filter on device bond12 [ 413.031082][T23871] bond12: (slave veth3): Enslaving as an active interface with an up link [ 413.070526][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6202'. [ 413.106881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.551094][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 413.551114][ T28] audit: type=1400 audit(1782544923.867:2671): avc: denied { bind } for pid=23906 comm="syz.6.6214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 413.597064][T23909] netlink: 'syz.4.6215': attribute type 1 has an invalid length. [ 413.639466][T23909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.686289][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6217'. [ 413.748778][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.868971][T23915] bond5: (slave veth3): Enslaving as an active interface with an up link [ 414.077142][T23933] tmpfs: Bad value for 'mpol' [ 414.106101][T23920] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6217'. [ 414.139360][T23933] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 414.146844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.263291][ T23] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 414.526507][T23961] loop5: detected capacity change from 0 to 1024 [ 414.539617][T23961] EXT4-fs: Ignoring removed orlov option [ 414.576726][T23961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.633002][T19912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.787715][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.821494][T23990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6241'. [ 414.856033][T23997] loop3: detected capacity change from 0 to 1024 [ 414.878290][T23997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.901174][ T28] audit: type=1400 audit(1782544925.217:2672): avc: denied { write } for pid=23995 comm="syz.3.6243" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.929973][T23997] EXT4-fs (loop3): shut down requested (0) [ 415.186847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.681671][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.690862][T24078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'. [ 415.746058][T24084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.765307][T21541] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.769620][T24084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.825653][T24091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6256'. [ 415.834776][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.237562][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 416.277754][T24102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6259'. [ 416.377185][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6260'. [ 416.818130][T24104] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 416.867829][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.204135][T24119] sctp: [Deprecated]: syz.3.6276 (pid 24119) Use of int in max_burst socket option deprecated. [ 417.204135][T24119] Use struct sctp_assoc_value instead [ 417.391542][T24133] loop5: detected capacity change from 0 to 512 [ 417.408564][T16713] Bluetooth: hci0: Frame reassembly failed (-84) [ 417.415244][T24133] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 417.452394][T24133] EXT4-fs (loop5): 1 truncate cleaned up [ 417.458782][T24133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.498277][T24142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.517289][T24142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.530536][ T28] audit: type=1400 audit(1782544927.847:2673): avc: denied { getattr } for pid=24141 comm="syz.4.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 417.554743][T19912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.668349][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.907321][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.045973][T24170] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.132905][T24170] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.252194][T24170] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.267981][ T28] audit: type=1400 audit(1782544928.587:2674): avc: denied { setopt } for pid=24192 comm="syz.4.6301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.331531][T24197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6303'. [ 418.421253][T24170] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.521970][T24209] loop5: detected capacity change from 0 to 128 [ 418.543691][T24209] syz.5.6320: attempt to access beyond end of device [ 418.543691][T24209] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 418.553108][ T9628] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.570211][T24209] syz.5.6320: attempt to access beyond end of device [ 418.570211][T24209] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 418.572036][ T9628] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.600601][T24209] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 418.612061][T16721] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.638255][T16721] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.646913][T24208] syz.5.6320: attempt to access beyond end of device [ 418.646913][T24208] loop5: rw=524288, sector=138, nr_sectors = 8 limit=128 [ 418.674229][T24208] syz.5.6320: attempt to access beyond end of device [ 418.674229][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.708576][T24208] syz.5.6320: attempt to access beyond end of device [ 418.708576][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.736946][T24208] syz.5.6320: attempt to access beyond end of device [ 418.736946][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.756599][T24208] syz.5.6320: attempt to access beyond end of device [ 418.756599][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.770738][T24208] syz.5.6320: attempt to access beyond end of device [ 418.770738][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.784617][T24208] syz.5.6320: attempt to access beyond end of device [ 418.784617][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.799564][T24208] syz.5.6320: attempt to access beyond end of device [ 418.799564][T24208] loop5: rw=0, sector=138, nr_sectors = 8 limit=128 [ 418.914310][T24228] loop6: detected capacity change from 0 to 512 [ 418.947517][ T35] net_ratelimit: 1 callbacks suppressed [ 418.947535][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.000822][T24228] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 419.044149][T24228] EXT4-fs: error: could not find journal device path [ 419.211207][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6318'. [ 419.427104][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 419.432803][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 419.703358][T24135] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 419.988034][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.662077][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6318'. [ 420.732754][T24267] xt_hashlimit: size too large, truncated to 1048576 [ 421.027071][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.278117][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 421.739293][T24282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6337'. [ 421.759707][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.068350][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.099610][T24300] netlink: 'syz.5.6345': attribute type 3 has an invalid length. [ 422.110822][T24300] netlink: 'syz.5.6345': attribute type 1 has an invalid length. [ 422.118921][T24300] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.6345'. [ 422.181333][T24306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6349'. [ 422.242723][T24310] loop5: detected capacity change from 0 to 512 [ 422.361858][T24310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 422.451604][T24310] EXT4-fs (loop5): shut down requested (0) [ 422.469717][T19912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.697508][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 422.717270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.843848][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 422.916415][T24339] loop6: detected capacity change from 0 to 512 [ 422.926931][T24339] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 423.007496][T24339] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.6362: bad orphan inode 131083 [ 423.022269][T24339] loop6: lost filesystem error report for type 5 error -117 [ 423.022906][T24339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.070630][ T28] audit: type=1400 audit(1782544933.387:2675): avc: denied { write } for pid=24338 comm="syz.6.6362" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.122702][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.646037][T22619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.684240][T24348] loop6: detected capacity change from 0 to 128 [ 423.699563][T24348] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 423.713414][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.745617][T24348] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.746711][T24352] sctp: [Deprecated]: syz.4.6367 (pid 24352) Use of int in maxseg socket option. [ 423.746711][T24352] Use struct sctp_assoc_value instead [ 423.770259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.820400][ T9628] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.862540][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.147061][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.301872][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.388075][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.522990][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6378'. [ 424.544542][ T12] bridge_slave_1: left allmulticast mode [ 424.559004][ T12] bridge_slave_1: left promiscuous mode [ 424.577090][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6378'. [ 424.578792][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.629186][ T12] bridge_slave_0: left allmulticast mode [ 424.654035][ T12] bridge_slave_0: left promiscuous mode [ 424.660679][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.682471][T24402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6378'. [ 424.744234][T24409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6383'. [ 424.782527][ T28] audit: type=1400 audit(1782544935.097:2676): avc: denied { write } for pid=24389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.805713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.815139][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.827526][T24380] loop7: detected capacity change from 0 to 512 [ 424.858009][ T28] audit: type=1400 audit(1782544935.177:2677): avc: denied { write } for pid=24416 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.911247][T24380] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 424.934819][T24380] EXT4-fs: error: could not find journal device path [ 425.011116][ T12] bond2 (unregistering): (slave gre2): Releasing backup interface [ 425.019091][ T12] gre2 (unregistering): left promiscuous mode [ 425.039193][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.052161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.062685][ T12] bond0 (unregistering): Released all slaves [ 425.077113][ T12] bond1 (unregistering): Released all slaves [ 425.089298][ T12] bond2 (unregistering): Released all slaves [ 425.188099][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.439621][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 426.088511][ T12] hsr_slave_0: left promiscuous mode [ 426.094392][ T12] hsr_slave_1: left promiscuous mode [ 426.101130][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.113533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.122452][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.140282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.145678][T24446] loop7: detected capacity change from 0 to 256 [ 426.169608][ T12] veth1_macvtap: left promiscuous mode [ 426.183731][ T12] veth0_macvtap: left promiscuous mode [ 426.190581][ T12] veth1_vlan: left promiscuous mode [ 426.195891][ T12] veth0_vlan: left promiscuous mode [ 426.227931][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.307895][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 426.342424][ T12] team0 (unregistering): Port device team_slave_1 removed [ 426.357304][ T12] team0 (unregistering): Port device team_slave_0 removed [ 426.760463][ T28] audit: type=1400 audit(1782544937.077:2678): avc: denied { write } for pid=24460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.856491][ T28] audit: type=1400 audit(1782544937.167:2679): avc: denied { write } for pid=24493 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.269683][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.278589][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.321084][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 427.346270][T24373] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.354166][T24373] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.371214][T24373] bridge_slave_0: entered allmulticast mode [ 427.378527][T24373] bridge_slave_0: entered promiscuous mode [ 427.385485][T24373] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.392635][T24373] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.399910][T24373] bridge_slave_1: entered allmulticast mode [ 427.406455][T24373] bridge_slave_1: entered promiscuous mode [ 427.426158][T24373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.723174][T24373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.773072][T24373] team0: Port device team_slave_0 added [ 427.781964][T24373] team0: Port device team_slave_1 added [ 427.802724][T24373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.810490][T24373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.837157][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.852177][T24373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.863763][T24373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.871464][T24373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.900482][T24373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.957970][T24373] hsr_slave_0: entered promiscuous mode [ 427.962924][ T28] audit: type=1400 audit(1782544938.277:2680): avc: denied { write } for pid=24532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.965327][T24373] hsr_slave_1: entered promiscuous mode [ 427.992833][T24373] debugfs: 'hsr0' already exists in 'hsr' [ 427.999304][T24373] Cannot create hsr debugfs directory [ 428.046435][ T28] audit: type=1400 audit(1782544938.357:2681): avc: denied { write } for pid=24551 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.121046][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 428.307943][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.336649][ T28] audit: type=1400 audit(1782544938.647:2682): avc: denied { write } for pid=24570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.384582][ T28] audit: type=1400 audit(1782544938.687:2683): avc: denied { write } for pid=24585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.434398][ T28] audit: type=1400 audit(1782544938.747:2684): avc: denied { read write } for pid=24590 comm="syz.5.6435" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.458892][ T28] audit: type=1400 audit(1782544938.747:2685): avc: denied { open } for pid=24590 comm="syz.5.6435" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.597053][T24373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.609820][T24373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.623680][T24373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.631451][ T28] audit: type=1400 audit(1782544938.947:2686): avc: denied { write } for pid=24592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.658548][T24373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.666501][T24373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.701819][ T28] audit: type=1400 audit(1782544939.007:2687): avc: denied { write } for pid=24611 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.727652][T24373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.756238][T24618] __nla_validate_parse: 2 callbacks suppressed [ 428.756255][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6440'. [ 428.819958][T24373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.830849][T24373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.922910][T24373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.936531][T24373] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.947591][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.954758][T16721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.969720][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.976848][ T9628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.008243][T24373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.020608][T24373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.041982][ T28] audit: type=1400 audit(1782544939.357:2688): avc: denied { write } for pid=24620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.130905][ T28] audit: type=1400 audit(1782544939.447:2689): avc: denied { write } for pid=24643 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.270257][T24373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.347411][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.395389][T24373] veth0_vlan: entered promiscuous mode [ 429.407253][T24373] veth1_vlan: entered promiscuous mode [ 429.425361][T24373] veth0_macvtap: entered promiscuous mode [ 429.433163][T24373] veth1_macvtap: entered promiscuous mode [ 429.445568][T24373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.456191][T24373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.471489][ T9628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.482856][ T9628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.499970][ T9628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.509615][ T9628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.819357][T24678] loop6: detected capacity change from 0 to 256 [ 430.065980][ T28] audit: type=1400 audit(1782544940.367:2690): avc: denied { kexec_image_load } for pid=24688 comm="syz.3.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 430.410260][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.871006][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.346885][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 431.427627][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.766521][T24724] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.773810][T24724] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.781103][T24724] bridge_slave_0: entered allmulticast mode [ 431.787705][T24724] bridge_slave_0: entered promiscuous mode [ 431.794572][T24724] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.801825][T24724] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.809142][T24724] bridge_slave_1: entered allmulticast mode [ 431.815659][T24724] bridge_slave_1: entered promiscuous mode [ 431.834250][T24724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.844748][T24724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.865077][T24724] team0: Port device team_slave_0 added [ 431.871629][T24724] team0: Port device team_slave_1 added [ 431.888832][T24724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.895819][T24724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.921821][T24724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.935460][T24724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.942525][T24724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.968477][T24724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.997835][T24724] hsr_slave_0: entered promiscuous mode [ 432.003941][T24724] hsr_slave_1: entered promiscuous mode [ 432.010229][T24724] debugfs: 'hsr0' already exists in 'hsr' [ 432.016001][T24724] Cannot create hsr debugfs directory [ 432.133249][ T28] audit: type=1400 audit(1782544942.447:2691): avc: denied { write } for pid=24740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.306695][T24724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.316231][T24724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.316890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.327599][T24724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.343024][T24724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.351907][T24724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.361302][T24724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.370052][T24724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.379568][T24724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.395870][T24724] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.403021][T24724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.410368][T24724] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.417547][T24724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.454177][T24724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.466522][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.474084][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.483822][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.498795][T24724] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.510095][T16721] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.517256][T16721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.530583][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.537794][ T9628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.689013][T24724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.779971][T24724] veth0_vlan: entered promiscuous mode [ 432.791852][T24724] veth1_vlan: entered promiscuous mode [ 432.815657][T24724] veth0_macvtap: entered promiscuous mode [ 432.825156][T24724] veth1_macvtap: entered promiscuous mode [ 432.841103][T24724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.855882][T24724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.869878][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.879979][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.893184][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.902581][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.985341][T24850] loop2: detected capacity change from 0 to 512 [ 433.013693][T24850] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.6472: Unrecognised inode hash code 255 [ 433.042159][T24850] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.6472: Corrupt directory, running e2fsck is recommended [ 433.063727][T24850] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 433.078707][T24850] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6472: corrupted in-inode xattr: e_name out of bounds [ 433.095205][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6484'. [ 433.119607][T24850] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.119811][T24850] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6472: couldn't read orphan inode 15 (err -117) [ 433.129065][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 433.129092][ C1] EXT4-fs (loop2): initial error at time 1782544943: ext4_iget_extra_inode:5180: inode 15 [ 433.129149][ C1] EXT4-fs (loop2): last error at time 1782544943: ext4_iget_extra_inode:5180: inode 15 [ 433.172396][T24850] loop2: lost filesystem error report for type 5 error -117 [ 433.172992][T24850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.233615][T24724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.340997][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 433.341017][ T28] audit: type=1400 audit(1782544943.657:2706): avc: denied { write } for pid=24866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.347413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.407448][ T28] audit: type=1400 audit(1782544943.727:2707): avc: denied { write } for pid=24885 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.530060][ T28] audit: type=1400 audit(1782544943.847:2708): avc: denied { write } for pid=24887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.578637][ T28] audit: type=1400 audit(1782544943.897:2709): avc: denied { write } for pid=24898 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.740892][ T28] audit: type=1400 audit(1782544944.057:2710): avc: denied { write } for pid=24900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.816834][ T28] audit: type=1400 audit(1782544944.117:2711): avc: denied { write } for pid=24911 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.907338][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.942124][ T28] audit: type=1400 audit(1782544944.257:2712): avc: denied { write } for pid=24913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.004294][ T28] audit: type=1400 audit(1782544944.307:2713): avc: denied { write } for pid=24924 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.120777][ T28] audit: type=1400 audit(1782544944.437:2714): avc: denied { write } for pid=24926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.192315][ T28] audit: type=1400 audit(1782544944.507:2715): avc: denied { write } for pid=24937 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.243533][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.386877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.549626][T24972] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 434.754686][T24985] syzkaller0: entered promiscuous mode [ 434.760699][T24985] syzkaller0: entered allmulticast mode [ 434.873716][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.887179][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.297119][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.466315][T25010] loop7: detected capacity change from 0 to 1024 [ 435.502710][T25010] EXT4-fs: inline encryption not supported [ 435.516988][T25010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.553506][T25010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 435.600342][T25010] System zones: 0-1, 3-36 [ 435.605852][T25010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.652523][T25022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6508'. [ 435.979018][T25037] sctp: [Deprecated]: syz.3.6515 (pid 25037) Use of int in maxseg socket option. [ 435.979018][T25037] Use struct sctp_assoc_value instead [ 436.351681][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.389197][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 436.873700][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.938962][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.961547][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.045981][T25065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'. [ 437.047848][T25067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6530'. [ 437.055776][T25065] netlink: 'syz.2.6529': attribute type 7 has an invalid length. [ 437.055796][T25065] netlink: 'syz.2.6529': attribute type 8 has an invalid length. [ 437.083162][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6529'. [ 437.097123][T25073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6529'. [ 437.125527][T25073] netlink: 'syz.2.6529': attribute type 7 has an invalid length. [ 437.142536][T25073] netlink: 'syz.2.6529': attribute type 8 has an invalid length. [ 437.160411][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6529'. [ 437.162486][T25065] erspan0: entered promiscuous mode [ 437.176738][T25065] gretap0: entered promiscuous mode [ 437.207832][T25065] erspan0: left promiscuous mode [ 437.221396][T25065] gretap0: left promiscuous mode [ 437.240784][T25073] erspan0: entered promiscuous mode [ 437.254718][T25073] gretap0: entered promiscuous mode [ 437.265136][T25073] erspan0: left promiscuous mode [ 437.273356][T25073] gretap0: left promiscuous mode [ 437.427392][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.583137][T25109] SET target dimension over the limit! [ 437.758043][T25123] loop2: detected capacity change from 0 to 256 [ 437.792429][T25123] FAT-fs (loop2): Directory bread(block 64) failed [ 437.799119][T25123] FAT-fs (loop2): Directory bread(block 65) failed [ 437.805956][T25123] FAT-fs (loop2): Directory bread(block 66) failed [ 437.813670][T25123] FAT-fs (loop2): Directory bread(block 67) failed [ 437.820942][T25123] FAT-fs (loop2): Directory bread(block 68) failed [ 437.827804][T25123] FAT-fs (loop2): Directory bread(block 69) failed [ 437.834360][T25123] FAT-fs (loop2): Directory bread(block 70) failed [ 437.841561][T25123] FAT-fs (loop2): Directory bread(block 71) failed [ 437.849197][T25123] FAT-fs (loop2): Directory bread(block 72) failed [ 437.855944][T25123] FAT-fs (loop2): Directory bread(block 73) failed [ 437.930733][T25131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6558'. [ 437.947286][T25132] bio_check_eod: 87 callbacks suppressed [ 437.947320][T25132] syz.2.6554: attempt to access beyond end of device [ 437.947320][T25132] loop2: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 438.019284][T25132] syz.2.6554: attempt to access beyond end of device [ 438.019284][T25132] loop2: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 438.123428][T25132] syz.2.6554: attempt to access beyond end of device [ 438.123428][T25132] loop2: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 438.229132][T25132] syz.2.6554: attempt to access beyond end of device [ 438.229132][T25132] loop2: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 438.279963][T25132] syz.2.6554: attempt to access beyond end of device [ 438.279963][T25132] loop2: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 438.311726][T25132] syz.2.6554: attempt to access beyond end of device [ 438.311726][T25132] loop2: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 438.344560][T25132] syz.2.6554: attempt to access beyond end of device [ 438.344560][T25132] loop2: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 438.378334][T25132] syz.2.6554: attempt to access beyond end of device [ 438.378334][T25132] loop2: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 438.424119][T25132] syz.2.6554: attempt to access beyond end of device [ 438.424119][T25132] loop2: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 438.442008][T25132] syz.2.6554: attempt to access beyond end of device [ 438.442008][T25132] loop2: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 438.467271][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.614382][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6568'. [ 439.209491][T25173] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6575'. [ 439.508682][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.834831][T25193] SET target dimension over the limit! [ 439.987456][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.067134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.547157][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.558482][T25218] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 440.576989][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 440.577007][ T28] audit: type=1400 audit(1782544950.887:2743): avc: denied { relabelto } for pid=25214 comm="syz.5.6593" name="cpuset.effective_mems" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 440.663471][ T28] audit: type=1400 audit(1782544950.887:2744): avc: denied { associate } for pid=25214 comm="syz.5.6593" name="cpuset.effective_mems" dev="tmpfs" ino=1666 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 440.752813][ T28] audit: type=1400 audit(1782544950.897:2745): avc: denied { append } for pid=25214 comm="syz.5.6593" path="/319/cpuset.effective_mems" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 440.815036][ T28] audit: type=1400 audit(1782544950.957:2746): avc: denied { unlink } for pid=19912 comm="syz-executor" name="cpuset.effective_mems" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 441.023547][T25233] sctp: [Deprecated]: syz.4.6599 (pid 25233) Use of int in maxseg socket option. [ 441.023547][T25233] Use struct sctp_assoc_value instead [ 441.435216][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 441.605766][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.918794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.638811][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.946926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.028516][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.109984][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6619'. [ 443.133659][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6619'. [ 443.222974][T25291] loop2: detected capacity change from 0 to 256 [ 443.304996][T25299] tipc: Started in network mode [ 443.317664][T25299] tipc: Node identity 84e, cluster identity 4711 [ 443.324696][T25299] tipc: Node number set to 2126 [ 443.428847][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6631'. [ 443.668328][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.986810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.709597][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.027379][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6645'. [ 445.151208][T25353] netlink: 'syz.2.6650': attribute type 2 has an invalid length. [ 445.223619][T25360] netlink: 'syz.2.6650': attribute type 2 has an invalid length. [ 445.610778][ T28] audit: type=1400 audit(1782544955.927:2747): avc: denied { ioctl } for pid=25377 comm="syz.3.6660" path="socket:[78518]" dev="sockfs" ino=78518 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.748270][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.916039][ T28] audit: type=1400 audit(1782544956.227:2748): avc: denied { shutdown } for pid=25386 comm="syz.5.6664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 446.068877][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.468534][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 446.479605][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.592130][ T361] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 446.787998][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.948208][T25426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25426 comm=syz.5.6679 [ 447.018528][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6682'. [ 447.313828][T25414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.888288][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.999403][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6690'. [ 448.527551][T25479] loop7: detected capacity change from 0 to 1024 [ 448.543402][T25479] EXT4-fs: Ignoring removed bh option [ 448.577668][T25479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.611688][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.680359][T25498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6705'. [ 448.872227][T25508] loop7: detected capacity change from 0 to 512 [ 448.880302][T25508] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 448.900193][T25508] EXT4-fs (loop7): 1 truncate cleaned up [ 448.914506][T25508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.956223][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.110177][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.194227][T25513] loop2: detected capacity change from 0 to 8192 [ 449.215788][T25513] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.229509][T25513] FAT-fs (loop2): Filesystem has been set read-only [ 449.244029][T25513] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.264560][T25513] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.287187][T25513] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.308474][T25513] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.320675][T25514] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.349723][T25514] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.368036][T25514] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.389199][T25514] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 449.988310][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.338546][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.408269][T25540] loop2: detected capacity change from 0 to 512 [ 450.451629][T25540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.492219][T25540] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.790613][T24724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.934348][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 451.028502][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.506831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.515095][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 451.790454][T25669] loop2: detected capacity change from 0 to 4096 [ 451.834646][T25669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.854480][ T28] audit: type=1400 audit(1782544962.167:2749): avc: denied { write } for pid=25667 comm="syz.2.6737" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.900214][ T28] audit: type=1400 audit(1782544962.197:2750): avc: denied { write } for pid=25667 comm="syz.2.6737" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.067703][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.111506][ T28] audit: type=1400 audit(1782544962.417:2751): avc: denied { write } for pid=24724 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.138025][ T28] audit: type=1400 audit(1782544962.417:2752): avc: denied { write } for pid=24724 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.161778][ T28] audit: type=1400 audit(1782544962.417:2753): avc: denied { write } for pid=24724 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.187791][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.188444][T24724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.205513][ T28] audit: type=1400 audit(1782544962.417:2754): avc: denied { unlink } for pid=24724 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 452.231097][ T28] audit: type=1400 audit(1782544962.417:2755): avc: denied { write } for pid=24724 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.253741][ T28] audit: type=1400 audit(1782544962.417:2756): avc: denied { write } for pid=24724 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.303021][T25681] syzkaller1: entered promiscuous mode [ 452.315284][T25681] syzkaller1: entered allmulticast mode [ 452.348310][ T28] audit: type=1400 audit(1782544962.427:2757): avc: denied { write } for pid=24724 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.371907][ T28] audit: type=1400 audit(1782544962.427:2758): avc: denied { write } for pid=24724 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.402922][T25687] ±ÿ]×0¢ÊÞª: renamed from lo (while UP) [ 452.546819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.733036][T25701] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6749'. [ 452.950079][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 452.956326][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 453.108273][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.185067][T25706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25706 comm=syz.2.6752 [ 453.598405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.713720][T25718] -1: renamed from syzkaller0 [ 453.960336][T25728] loop7: detected capacity change from 0 to 4096 [ 454.064526][T25728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.128236][T25750] RDS: rds_bind could not find a transport for 8775:7300:0:0:e00::, load rds_tcp or rds_rdma? [ 454.148526][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.198981][T25754] netlink: 'syz.5.6768': attribute type 1 has an invalid length. [ 454.243861][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6768'. [ 454.266668][T25754] bond4: entered promiscuous mode [ 454.286120][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6768'. [ 454.295744][T25754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.325043][T25754] bond4: (slave bridge2): making interface the new active one [ 454.332865][T25754] bridge2: entered promiscuous mode [ 454.340701][T25754] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 454.481342][T25773] loop2: detected capacity change from 0 to 256 [ 454.520893][T25773] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.769624][T25784] loop2: detected capacity change from 0 to 256 [ 454.785530][T25784] FAT-fs (loop2): data area starts beyond volume (32 > 0) [ 454.813017][T25784] FAT-fs (loop2): Can't find a valid FAT filesystem [ 454.949132][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.188799][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.396694][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.628067][T25820] netlink: 'syz.7.6791': attribute type 39 has an invalid length. [ 455.846792][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 455.867664][T25834] can: request_module (can-proto-0) failed. [ 455.894119][T25834] batman_adv: batadv0: Adding interface: dummy0 [ 455.921232][T25834] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.947563][T25834] batman_adv: batadv0: Interface activated: dummy0 [ 455.960002][T25834] batadv0: mtu less than device minimum [ 455.966146][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.977246][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.988153][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.999251][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.010213][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.021111][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.032065][T25834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 456.546874][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 456.791039][ T3398] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 456.799146][ T3398] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 456.833833][T25894] loop7: detected capacity change from 0 to 4096 [ 456.885099][T25894] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 456.964272][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 456.964293][ T28] audit: type=1400 audit(1782544967.277:2776): avc: denied { setopt } for pid=25899 comm="syz.3.6832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.204120][ T8074] Bluetooth: hci0: Frame reassembly failed (-84) [ 457.279077][ T28] audit: type=1400 audit(1782544967.597:2777): avc: denied { open } for pid=25919 comm="syz.7.6838" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.416224][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6849'. [ 458.211561][T25960] loop7: detected capacity change from 0 to 1764 [ 458.241904][T25960] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 458.832653][T25975] netlink: 'syz.3.6862': attribute type 4 has an invalid length. [ 458.869851][T25975] netlink: 'syz.3.6862': attribute type 4 has an invalid length. [ 459.267528][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 459.268625][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.017729][T26006] loop7: detected capacity change from 0 to 512 [ 460.108905][T26006] EXT4-fs: Ignoring removed nobh option [ 460.118139][T26006] EXT4-fs: Ignoring removed oldalloc option [ 460.130655][T26006] ext4: Unknown parameter 'noacl' [ 460.467711][ T23] net_ratelimit: 18 callbacks suppressed [ 460.467727][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.823832][T26035] syz_tun: entered allmulticast mode [ 460.831069][T26034] syz_tun: left allmulticast mode [ 460.858894][T26033] netlink: 'syz.7.6881': attribute type 1 has an invalid length. [ 460.870029][T26033] netlink: 'syz.7.6881': attribute type 4 has an invalid length. [ 460.890284][T26043] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6886'. [ 460.912184][T26033] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.6881'. [ 460.951055][T26048] loop7: detected capacity change from 0 to 1024 [ 460.962061][T26048] EXT4-fs: Ignoring removed bh option [ 460.968770][T26048] EXT4-fs (loop7): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 461.026993][T26048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.107864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.210471][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.345734][T26068] loop7: detected capacity change from 0 to 512 [ 461.351558][T26070] netlink: 'syz.3.6896': attribute type 4 has an invalid length. [ 461.400091][T26070] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6896'. [ 461.402953][T26068] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 461.422810][T26068] EXT4-fs (loop7): 1 truncate cleaned up [ 461.476616][T26068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.507094][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.515298][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.559564][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.580443][T26077] loop7: detected capacity change from 0 to 128 [ 461.587842][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 461.600518][T26077] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.613031][T26077] ext4 filesystem being mounted at /1051/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 461.784428][ T28] audit: type=1400 audit(1782544972.097:2778): avc: denied { watch watch_reads } for pid=26086 comm="syz.4.6903" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 461.868547][ T361] Bluetooth: hci1: Frame reassembly failed (-84) [ 461.877817][ T5844] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.886996][T25979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.964926][T26099] io-wq is not configured for unbound workers [ 462.146830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.547867][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.162385][ T28] audit: type=1400 audit(1782544973.477:2779): avc: denied { mount } for pid=26124 comm="syz.5.6920" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 463.188142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.266849][ T3892] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 463.587265][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.613089][T26140] program syz.3.6926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.906835][T26091] Bluetooth: hci1: command 0x1003 tx timeout [ 463.907503][ T3573] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 464.105246][T26166] netlink: 'syz.2.6938': attribute type 4 has an invalid length. [ 464.127559][T26166] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6938'. [ 464.493257][T26184] xt_hashlimit: size too large, truncated to 1048576 [ 464.546946][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.631007][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.927372][T26204] netlink: 'syz.4.6952': attribute type 4 has an invalid length. [ 464.935378][T26204] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6952'. [ 464.992536][T26208] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6954'. [ 465.009730][T26208] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6954'. [ 465.231708][T26223] ipip1: entered promiscuous mode [ 465.668039][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.676180][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.685562][ T361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.695493][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.704320][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.736544][T26233] netlink: 'syz.7.6964': attribute type 4 has an invalid length. [ 465.745484][T26233] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6964'. [ 466.627378][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 466.707102][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.588562][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.751299][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.035310][T26272] loop7: detected capacity change from 0 to 128 [ 468.053867][T26272] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.169883][T26272] ext4 filesystem being mounted at /1069/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.424076][ T5844] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.763637][T26323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.788556][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.844347][T26323] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 469.043347][T26345] netlink: 'syz.5.7007': attribute type 1 has an invalid length. [ 469.086527][T26345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.118724][T26349] macvlan2: entered promiscuous mode [ 469.135841][T26349] macvlan2: entered allmulticast mode [ 469.155944][T26349] bond5: entered promiscuous mode [ 469.168145][T26349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.184919][T26349] bond5: left promiscuous mode [ 469.827143][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.982701][T26384] loop2: detected capacity change from 0 to 512 [ 470.023469][T26384] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.049016][T26384] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 470.086344][T26384] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 470.104728][T26384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 470.135571][T26384] System zones: 0-2, 18-18, 34-35 [ 470.157651][T26384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.219709][ T28] audit: type=1400 audit(1782544980.527:2780): avc: denied { connect } for pid=26392 comm="syz.4.7026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 470.257330][T24724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.368229][T26405] bond10: entered allmulticast mode [ 470.374040][T26405] ip6gre2: entered allmulticast mode [ 470.380861][T26404] bond10: left allmulticast mode [ 470.385875][T26404] ip6gre2: left allmulticast mode [ 470.706834][ C0] net_ratelimit: 1 callbacks suppressed [ 470.706851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.807452][T26418] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.814972][T26418] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.822341][T26418] bridge_slave_0: entered allmulticast mode [ 470.829196][T26418] bridge_slave_0: entered promiscuous mode [ 470.836263][T26418] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.844183][T26418] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.851531][T26418] bridge_slave_1: entered allmulticast mode [ 470.859519][T26418] bridge_slave_1: entered promiscuous mode [ 470.867921][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.889862][T26418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.902670][T26418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.928469][T26418] team0: Port device team_slave_0 added [ 470.935831][T26418] team0: Port device team_slave_1 added [ 470.954404][T26418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.962140][T26418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.991404][T26418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.004245][T26418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.011652][T26418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.039095][T26418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.073014][T26418] hsr_slave_0: entered promiscuous mode [ 471.081107][T26418] hsr_slave_1: entered promiscuous mode [ 471.087525][T26418] debugfs: 'hsr0' already exists in 'hsr' [ 471.093594][T26418] Cannot create hsr debugfs directory [ 471.311498][ T28] audit: type=1400 audit(1782544981.627:2781): avc: denied { write } for pid=26444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.384926][ T28] audit: type=1400 audit(1782544981.697:2782): avc: denied { write } for pid=26457 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.428803][T16721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.438166][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.447832][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.622418][ T28] audit: type=1400 audit(1782544981.937:2783): avc: denied { write } for pid=26459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.668710][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 471.686139][ T28] audit: type=1400 audit(1782544981.997:2784): avc: denied { write } for pid=26472 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.740422][T26438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.749251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.763100][T26418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.795391][T26418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.821205][T26418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.846484][T26418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.866566][T26418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.893389][T26418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.907699][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.931159][T26418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 471.939799][ T28] audit: type=1400 audit(1782544982.257:2785): avc: denied { write } for pid=26475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.965943][T26418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.032116][ T28] audit: type=1400 audit(1782544982.347:2786): avc: denied { write } for pid=26495 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.159326][T26418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.209057][T26418] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.229123][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.236252][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.253629][T16721] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.260789][T16721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.318754][ T28] audit: type=1400 audit(1782544982.637:2787): avc: denied { write } for pid=26499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.384516][ T28] audit: type=1400 audit(1782544982.697:2788): avc: denied { write } for pid=26516 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.500132][T26418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.545659][ T28] audit: type=1400 audit(1782544982.857:2789): avc: denied { write } for pid=26522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.603415][T26418] veth0_vlan: entered promiscuous mode [ 472.612821][T26418] veth1_vlan: entered promiscuous mode [ 472.661318][T26418] veth0_macvtap: entered promiscuous mode [ 472.696331][T26418] veth1_macvtap: entered promiscuous mode [ 472.702523][T26558] netlink: 'syz.5.7047': attribute type 4 has an invalid length. [ 472.729784][T26558] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7047'. [ 472.758072][T26418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.786819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.791533][T26418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.949450][T16720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.958835][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.961111][T16720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.999450][T16720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.009283][T16720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.666992][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.731516][T16721] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.740703][T16721] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.762869][T16721] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.796330][T16721] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.201645][ T361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.315640][ T361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.629321][ T361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.705178][ T361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.914731][ T361] bridge_slave_1: left allmulticast mode [ 474.924191][ T361] bridge_slave_1: left promiscuous mode [ 474.938308][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.972449][ T361] bridge_slave_0: left allmulticast mode [ 474.979007][ T361] bridge_slave_0: left promiscuous mode [ 474.984806][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.070355][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.084644][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.095175][ T361] bond0 (unregistering): Released all slaves [ 475.112221][T26724] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.7074'. [ 475.150092][ T361] hsr_slave_0: left promiscuous mode [ 475.158456][ T361] hsr_slave_1: left promiscuous mode [ 475.164602][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.178196][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.197333][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.218215][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.248609][ T361] veth1_macvtap: left promiscuous mode [ 475.254142][ T361] veth0_macvtap: left promiscuous mode [ 475.282840][ T361] veth1_vlan: left promiscuous mode [ 475.301263][ T361] veth0_vlan: left promiscuous mode [ 475.342067][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 475.342086][ T28] audit: type=1400 audit(1782544985.657:2808): avc: denied { write } for pid=26734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.443402][ T28] audit: type=1400 audit(1782544985.757:2809): avc: denied { write } for pid=26752 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.560111][ T361] team0 (unregistering): Port device team_slave_1 removed [ 475.571360][T26751] loop7: detected capacity change from 0 to 512 [ 475.608970][ T361] team0 (unregistering): Port device team_slave_0 removed [ 475.622407][T26751] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 475.672045][T26751] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 475.716541][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 475.726678][T26757] syzkaller1: entered promiscuous mode [ 475.735009][T26757] syzkaller1: entered allmulticast mode [ 475.802249][T26783] netlink: 'syz.3.7093': attribute type 1 has an invalid length. [ 475.826515][T26783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.849468][T26783] bond2: (slave veth0_to_bond): making interface the new active one [ 475.859159][T26783] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 475.883201][T26783] bond2: entered promiscuous mode [ 475.888458][T26783] veth0_to_bond: entered promiscuous mode [ 475.895363][T26783] bond2: entered allmulticast mode [ 475.900996][T26783] veth0_to_bond: entered allmulticast mode [ 475.911643][T26751] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 475.946314][T26751] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 475.958667][T26751] System zones: 0-2, 18-18, 34-35 [ 476.000222][ T28] audit: type=1400 audit(1782544986.317:2810): avc: denied { write } for pid=26785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.047822][ T28] audit: type=1400 audit(1782544986.357:2811): avc: denied { write } for pid=26806 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.078477][ T3079] net_ratelimit: 5 callbacks suppressed [ 476.078506][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.079764][T26751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.140891][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 476.235796][T26823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7102'. [ 476.262262][ T28] audit: type=1400 audit(1782544986.577:2812): avc: denied { write } for pid=26816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.319544][ T28] audit: type=1400 audit(1782544986.637:2813): avc: denied { write } for pid=26833 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.358068][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 476.397833][T26839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7105'. [ 476.476540][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.611629][ T28] audit: type=1400 audit(1782544986.917:2814): avc: denied { write } for pid=26840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.657377][ T28] audit: type=1400 audit(1782544986.967:2815): avc: denied { write } for pid=26857 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.706826][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 476.727327][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 476.787773][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.116933][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.664404][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7135'. [ 477.683849][T26928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7135'. [ 477.784204][T26933] unsupported nla_type 210 [ 477.786688][T26936] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.7136'. [ 477.809022][T26936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7136'. [ 478.149565][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.288723][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7145'. [ 478.956336][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7151'. [ 478.983807][T26972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7151'. [ 479.100874][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7156'. [ 479.187939][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.827008][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.227732][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.891231][ T28] audit: type=1400 audit(1782544991.207:2816): avc: denied { watch watch_reads } for pid=27023 comm="syz.0.7172" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 481.028879][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.278534][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.572206][T27072] netlink: 'syz.7.7192': attribute type 1 has an invalid length. [ 481.749388][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 482.113503][T27088] Invalid option length (287) for dns_resolver key [ 482.307582][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.353361][T27099] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7204'. [ 482.364515][T27102] loop7: detected capacity change from 0 to 128 [ 482.455369][T27110] futex_wake_op: syz.7.7219 tries to shift op by 32; fix this program [ 482.506055][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 482.520043][T27112] Bluetooth: hci0: Frame reassembly failed (-84) [ 482.584610][T27117] program syz.7.7211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.870024][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.093340][T27152] loop7: detected capacity change from 0 to 512 [ 483.102470][T27152] EXT4-fs: Ignoring removed orlov option [ 483.110744][T27152] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 483.122754][T27152] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #16: comm syz.7.7227: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 483.140172][T27152] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.144117][T27152] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.7227: couldn't read orphan inode 16 (err -117) [ 483.153367][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 483.153386][ C0] EXT4-fs (loop7): initial error at time 1782544993: ext4_ext_check_inode:521: inode 16 [ 483.153425][ C0] EXT4-fs (loop7): last error at time 1782544993: ext4_ext_check_inode:521: inode 16 [ 483.210356][T27152] loop7: lost filesystem error report for type 5 error -117 [ 483.210648][T27152] EXT4-fs (loop7): 1 orphan inode deleted [ 483.224584][T27152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.239064][T27152] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.7227: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 483.239631][ T28] audit: type=1400 audit(1782544993.557:2817): avc: denied { write } for pid=27151 comm="syz.7.7227" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.293896][T27152] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.7227: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 483.314126][ T28] audit: type=1400 audit(1782544993.607:2818): avc: denied { write } for pid=27151 comm="syz.7.7227" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.347036][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.359992][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.588071][ T28] audit: type=1400 audit(1782544993.907:2819): avc: denied { create } for pid=27167 comm="syz.4.7232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 483.677680][ T28] audit: type=1326 audit(1782544993.987:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27174 comm="syz.4.7234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f058a5dce59 code=0x0 [ 483.706510][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7245'. [ 483.727663][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7245'. [ 484.374150][T27191] loop7: detected capacity change from 0 to 512 [ 484.396261][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.426976][T27191] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 484.436715][T27191] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 484.447500][T27191] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 484.457936][T27191] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 484.471414][T27191] System zones: 0-2, 18-18, 34-35 [ 484.491362][T27191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.547554][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 484.683800][ T28] audit: type=1400 audit(1782544994.997:2821): avc: denied { read } for pid=27198 comm="syz.0.7241" path="socket:[86574]" dev="sockfs" ino=86574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.762200][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.423456][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7254'. [ 485.437709][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.456121][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7254'. [ 485.500331][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7254'. [ 485.713015][ T28] audit: type=1400 audit(1782544996.027:2822): avc: denied { mount } for pid=27238 comm="syz.3.7257" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 485.765251][ T28] audit: type=1400 audit(1782544996.057:2823): avc: denied { watch } for pid=27238 comm="syz.3.7257" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 486.066841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.306429][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.474610][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.788725][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 486.843706][ T28] audit: type=1400 audit(1782544997.157:2824): avc: denied { write } for pid=27286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.912347][ T28] audit: type=1400 audit(1782544997.227:2825): avc: denied { write } for pid=27306 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.106795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.254307][ T28] audit: type=1326 audit(1782544997.567:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x0 [ 487.358914][ T28] audit: type=1326 audit(1782544997.667:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.442536][ T28] audit: type=1326 audit(1782544997.677:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.469311][ T28] audit: type=1326 audit(1782544997.677:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.498004][ T28] audit: type=1326 audit(1782544997.677:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.525230][ T28] audit: type=1326 audit(1782544997.677:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.527454][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.562693][ T28] audit: type=1326 audit(1782544997.677:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 487.590143][ T28] audit: type=1326 audit(1782544997.737:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.3.7288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1975ce59 code=0x7ffc0000 [ 488.147707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.255578][T27361] bond2: entered allmulticast mode [ 488.268425][T27361] ip6gre1: entered allmulticast mode [ 488.547588][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.558958][T27390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.582509][T27390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.349542][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.588026][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.671568][T27431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7313'. [ 489.787243][T27440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7315'. [ 490.578237][T27491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7340'. [ 490.588657][T27491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7340'. [ 490.628360][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.643388][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.760051][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7347'. [ 491.240086][T16720] Bluetooth: hci0: Frame reassembly failed (-84) [ 491.249489][T27522] Bluetooth: hci0: Frame reassembly failed (-84) [ 491.394504][T27526] loop7: detected capacity change from 0 to 512 [ 491.445245][T27526] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 491.486291][T27526] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 491.503610][T27526] System zones: 0-1, 15-15, 18-18, 34-34 [ 491.539649][T27526] EXT4-fs (loop7): orphan cleanup on readonly fs [ 491.550236][T27526] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 491.580434][T27526] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 491.600626][T27526] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.7353: bad orphan inode 16 [ 491.611978][T27526] loop7: lost filesystem error report for type 5 error -117 [ 491.613554][T27526] ext4_test_bit(bit=15, block=18) = 1 [ 491.622092][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 491.622313][ C0] EXT4-fs (loop7): initial error at time 1782545001: ext4_orphan_get:1425 [ 491.622563][ C0] EXT4-fs (loop7): last error at time 1782545001: ext4_orphan_get:1425 [ 491.669531][T27526] is_bad_inode(inode)=0 [ 491.672491][T27531] netlink: 'syz.5.7354': attribute type 1 has an invalid length. [ 491.674410][T27526] NEXT_ORPHAN(inode)=0 [ 491.692760][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.693066][T27526] max_ino=32 [ 491.708810][T27526] i_nlink=2 [ 491.717537][T27526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.829010][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 491.887262][ T5844] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.929836][T27548] ip6erspan0: left promiscuous mode [ 491.943884][T27548] bond2: left promiscuous mode [ 491.956900][T27548] ip6gre1: left promiscuous mode [ 491.963637][T27548] bond3: left promiscuous mode [ 491.968949][T27548] gre1: left promiscuous mode [ 491.974410][T27548] bond4: left promiscuous mode [ 491.979530][T27548] bridge2: left promiscuous mode [ 492.164218][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7371'. [ 492.392813][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.711961][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.916242][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 492.916261][ T28] audit: type=1400 audit(1782545003.227:2843): avc: denied { setopt } for pid=27602 comm="syz.4.7385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 493.006059][T27609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7388'. [ 493.267049][ T3573] Bluetooth: hci0: command 0x1003 tx timeout [ 493.273185][T26091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 493.440907][T27624] xt_hashlimit: size too large, truncated to 1048576 [ 493.493489][T27626] @ÿ: renamed from bond_slave_0 (while UP) [ 493.747087][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.229282][T27625] ================================================================== [ 494.237423][T27625] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 494.244390][T27625] [ 494.246848][T27625] read-write to 0xffff88813bbb02a4 of 4 bytes by task 27618 on cpu 0: [ 494.255034][T27625] fifo_open+0x179/0x5b0 [ 494.259317][T27625] do_dentry_open+0x49f/0xa60 [ 494.264039][T27625] vfs_open+0x37/0x1e0 [ 494.268159][T27625] path_openat+0x1b39/0x2000 [ 494.272800][T27625] do_file_open+0x16c/0x290 [ 494.277348][T27625] do_sys_openat2+0xa0/0x130 [ 494.281992][T27625] __se_sys_openat2+0x193/0x1f0 [ 494.286900][T27625] __x64_sys_openat2+0x55/0x70 [ 494.291805][T27625] x64_sys_call+0x2170/0x3020 [ 494.296518][T27625] do_syscall_64+0x136/0x3c0 [ 494.301159][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.307103][T27625] [ 494.309457][T27625] read to 0xffff88813bbb02a4 of 4 bytes by task 27625 on cpu 1: [ 494.317119][T27625] wait_for_partner+0x109/0x1d0 [ 494.322011][T27625] fifo_open+0x443/0x5b0 [ 494.326295][T27625] do_dentry_open+0x49f/0xa60 [ 494.331011][T27625] vfs_open+0x37/0x1e0 [ 494.335133][T27625] path_openat+0x1b39/0x2000 [ 494.339779][T27625] do_file_open+0x16c/0x290 [ 494.344319][T27625] do_sys_openat2+0xa0/0x130 [ 494.348956][T27625] __x64_sys_openat+0xf2/0x120 [ 494.353758][T27625] x64_sys_call+0x1e39/0x3020 [ 494.358481][T27625] do_syscall_64+0x136/0x3c0 [ 494.363135][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.369087][T27625] [ 494.371531][T27625] value changed: 0x00000002 -> 0x00000001 [ 494.377365][T27625] [ 494.379805][T27625] Reported by Kernel Concurrency Sanitizer on: [ 494.385986][T27625] CPU: 1 UID: 0 PID: 27625 Comm: syz.0.7391 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 494.397075][T27625] Tainted: [W]=WARN [ 494.400902][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.410986][T27625] ================================================================== [ 494.797504][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.427633][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.666922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.827665][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.706834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.867481][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 496.875957][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.746849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.907012][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.467305][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.947929][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.986976][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.227958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.237571][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.027520][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.907044][T16199] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 502.067011][ T3079] net_ratelimit: 1 callbacks suppressed [ 502.067033][ T3079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.107010][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.147531][ T4976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog