last executing test programs: 6m21.453838151s ago: executing program 32 (id=32): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./bus/file0\x00', 0x2) 6m19.996745981s ago: executing program 33 (id=50): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 6m8.486323075s ago: executing program 34 (id=177): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6m5.018082005s ago: executing program 35 (id=51): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m58.465653356s ago: executing program 36 (id=311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 5m12.573745512s ago: executing program 37 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) signalfd(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x800000400000000}, 0x0) 5m12.002890501s ago: executing program 38 (id=1182): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000019140)='@', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 5m2.225114825s ago: executing program 39 (id=1291): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) 4m5.102514525s ago: executing program 40 (id=2503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0xa}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "ec95a8", 0xc, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x1a}, {[], {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x8, 0x100, @void}}}}}}}}, 0x0) 4m1.861244049s ago: executing program 41 (id=2552): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m57.93216268s ago: executing program 42 (id=2616): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3m43.236718353s ago: executing program 43 (id=2944): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 3m33.201761356s ago: executing program 44 (id=3146): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lsm_list_modules(0x0, &(0x7f0000000000)=0xffffffffffffff74, 0x0) 3m30.278224617s ago: executing program 45 (id=3212): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) socket(0x1d, 0x2, 0x6) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m20.774406412s ago: executing program 46 (id=3322): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '\xc0r\xe5\xe1:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0xfd, 0x575, &(0x7f00000013c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x5}) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x529, &(0x7f0000000e00)="$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") 3m15.331940508s ago: executing program 47 (id=3385): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x5) 3m12.021120886s ago: executing program 48 (id=3439): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000ca7b8af8ff00000000bfa200000000000007020000f8ffffff7400000000000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m5.666084355s ago: executing program 49 (id=3530): close(0x3) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000100)="2d000fa7d0b1045c9200", 0xa}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20008024) 2m56.88653329s ago: executing program 50 (id=3689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.633452877s ago: executing program 4 (id=3697): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000}, 0x6}], 0x1, 0x45833af92e4b38ff, 0x0) 2m55.095578964s ago: executing program 4 (id=3710): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)="5b0b6f567217137a2ac90bee3cab93", &(0x7f0000000380), 0xd, r2}, 0x38) 2m54.99940032s ago: executing program 4 (id=3714): ptrace(0x10, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x0) syz_create_resource$binfmt(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 2m54.958288693s ago: executing program 4 (id=3717): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$eJzs3MtrXFUYAPDvzmT6bhNrrba2Gq1i8ZE0adUuXKgouFAQdFGXMUlr7bSRJoItQaNIXUrBvbgU/AvcuRF1IYJbBZdSKBqEpq4i99VMJ5M0SZOMzfx+MDP33Mec8917zsy598ydADpWb/qUROyIiN8iojtP3rxCb/4yMz05fH16cjiJ2dk3/kqy9a5NTw6Xq5bbbS8ShysRlU+TeD6Zn+/4hYtnhur10fNFun/i7Hv94xcuPnX67NCp0VOj5waPHz92dODZZwafXpU407iu7f9w7MC+V966/Nrwictv//hNWqy9B/PljXHc0vUWAbXQm+61v2czzcseXUbZ7wQ7G6aTrjYWhGWpRkR6uGpZ+++OaswdvO54+ZO2Fg5YU+l30+aFF0/NAhtYEq3m1ta/IMA6K7/o0/Pf8rFOXY//hasvRGwqpmemJ4dnbsTfFZVifm0N8++NiBNT/36ZPmK51yEAAFYg69s82ar/V4m92Ws+1rGrGEPpiYi7ImJ3RNwdEXsi4p6IbN17I+K+fOPZ7iXm39uUnt//qVxpWeZVkvb/nmvo+800xF+89FSL1M4s/lpy8nR99EixTw5HbXOaHlgkj+9e+vXzhZY19v/SR5p/2RcsCnClq+kC3cjQxNBq7YSrH0fs72oVf3JjJCCtAfsiYv/y3npXOXH68a8PLLTSreNfxCqMM81+FfFYfvynoin+UrL4+GT/lqiPHukva8V8P/1y6fWF8r+t+FdBevy33Vz/m9bo/ifJx2trUa+Pnh9ffh6Xfv9swXOaldb/Tcmb2Zj1z+/k8z4Ympg4PxCxKXk1S5fndNn8wblty3S5fhr/4UOt2//uYps0/vsjIq3EByPigYh4sCj7QxHxcEQcWiT+H1585N1F4k8iibYe/5GWn3836n9P0jhev4KJ6pnvv11oxHxpx/9YTGWftbns8+8WllrA29x9AAAAcEeoRMSOSCp9+XTvjqhU+vry3/DviW2V+tj4xBMnx94/N5LfI9ATtUp5pau74XroQDJVvGOeHsyvFVfL5UeL68ZfVLdm6b7hsfpIm2OHTrf95vYfZftP/Vltd+mANed+Lehcze2/0qZyAOtvKd//zgVgY2po/+XPCre2qyzA+nL+D52rVfv/qCmt/w8b0/z2/0eLv6wDNiL9f+hc2j90riW1fz8KgI3mdu7rX/lEebPAyt9ny5Lv8O+UifIfL9Yyr60xNycqbQ+5g6pN2mLWN9O5/1ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4k/0XAAD//8Iq5SY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 2m54.606995097s ago: executing program 4 (id=3722): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 2m53.807951342s ago: executing program 4 (id=3728): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2m53.786932914s ago: executing program 51 (id=3728): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2m34.321320156s ago: executing program 7 (id=3998): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x1, 0x1, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x3, {0x1, 0x0, 0x6}, 0xfe}, 0x18) close(0x4) 2m34.249205292s ago: executing program 7 (id=4011): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) ppoll(&(0x7f0000000440)=[{r0, 0x4242}], 0x1, 0x0, 0x0, 0x0) 2m33.537796211s ago: executing program 7 (id=4013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 2m33.449579127s ago: executing program 7 (id=4008): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m33.39472091s ago: executing program 7 (id=4021): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x200, 0x2, 0x200, 0x77, 0x5, 0x9, 0x8001}, 0xc) 2m33.179747435s ago: executing program 7 (id=4014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m33.139479158s ago: executing program 52 (id=4014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m31.967950509s ago: executing program 9 (id=4040): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20de, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000e40)={@val={0x0, 0x8863}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@generic={0x892f}}}}, 0x1a) 2m31.65302626s ago: executing program 9 (id=4047): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7516, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) fallocate(0xffffffffffffffff, 0x3, 0x4100, 0x8000c62) 2m30.895954883s ago: executing program 9 (id=4058): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x1, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m30.673928698s ago: executing program 9 (id=4062): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0xb7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m30.611725412s ago: executing program 9 (id=4063): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r1, &(0x7f0000001ec0)=""/4096, 0x1000) 2m30.314359243s ago: executing program 9 (id=4067): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m30.265999746s ago: executing program 53 (id=4067): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m7.798305076s ago: executing program 0 (id=4463): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m7.427716531s ago: executing program 0 (id=4467): setresuid(0xee00, 0xee00, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 2m7.326798898s ago: executing program 0 (id=4470): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m6.900272748s ago: executing program 0 (id=4474): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 2m6.382520163s ago: executing program 0 (id=4483): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.517933133s ago: executing program 0 (id=4493): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) 2m5.505831754s ago: executing program 54 (id=4493): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) 14.146570744s ago: executing program 2 (id=6272): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.468512721s ago: executing program 2 (id=6293): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) 13.160957113s ago: executing program 2 (id=6300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r4) 12.880726582s ago: executing program 2 (id=6307): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 12.773610599s ago: executing program 2 (id=6311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000000), &(0x7f0000000340)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) 12.021734721s ago: executing program 2 (id=6319): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x341, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 11.990676943s ago: executing program 55 (id=6319): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x341, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.867396062s ago: executing program 5 (id=6497): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.768113279s ago: executing program 5 (id=6499): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x80001e57, 0x0, 0xffff7000, 0x8, 0x2, "e9d3000d000000000008000000000000000004", 0x7, 0x201}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 2.537873785s ago: executing program 5 (id=6502): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2b46, 0x53, 0x1, 0x2, 0x9, 0x9}, &(0x7f0000000280)=0x9c) 2.372988806s ago: executing program 5 (id=6506): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x7}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2.18174621s ago: executing program 5 (id=6507): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.04142637s ago: executing program 5 (id=6511): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$kcm(0xf, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000f40)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000001340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$nci(r0, &(0x7f0000000200)=""/94, 0x5e) 1.252464074s ago: executing program 1 (id=6523): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) 1.202195097s ago: executing program 8 (id=6524): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x771d, 0x16, 0x0, 0xff36) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7fffffff, 0x90, "9900010000000000001300"}) 1.201627417s ago: executing program 6 (id=6525): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x320, 0xfffffffffffffffd}, 0x50c, 0x0, 0xe723, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 1.145047571s ago: executing program 8 (id=6527): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r2, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.039845989s ago: executing program 3 (id=6528): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.039441419s ago: executing program 3 (id=6529): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x1c, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x1, 0x5, 0x0) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) shutdown(r1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x80000004}) 1.008324671s ago: executing program 6 (id=6530): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r1}, 0x10) 1.008128381s ago: executing program 3 (id=6531): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x24, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x4094) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) 1.007928881s ago: executing program 1 (id=6532): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x803}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 969.607313ms ago: executing program 1 (id=6533): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0xac1e0001}}) 944.959955ms ago: executing program 6 (id=6534): ioperm(0x0, 0x6, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 892.218209ms ago: executing program 3 (id=6535): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 841.820952ms ago: executing program 1 (id=6536): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) socket$nl_netfilter(0x10, 0x3, 0xc) 775.621917ms ago: executing program 3 (id=6537): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r2, r3, 0x4000, 0x0) 700.759242ms ago: executing program 3 (id=6538): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001ec0)=ANY=[@ANYRES16], 0x102) 147.0733ms ago: executing program 8 (id=6539): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 96.167843ms ago: executing program 8 (id=6540): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 95.897144ms ago: executing program 8 (id=6541): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000008c0)="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", 0x5c1}], 0x1}}], 0x17, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 95.597224ms ago: executing program 6 (id=6542): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000040) 29.885618ms ago: executing program 8 (id=6543): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 29.666318ms ago: executing program 6 (id=6544): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4044000) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) chdir(0x0) 28.033328ms ago: executing program 1 (id=6545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.01971ms ago: executing program 1 (id=6546): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x4183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 0s ago: executing program 6 (id=6547): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x80001e57, 0x0, 0xffff7000, 0x8, 0x2, "e9d3000d000000000008000000000000000004", 0x7, 0x201}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3939", 0xfe8e}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) kernel console output (not intermixed with test programs): permissive=1 [ 321.973229][ T28] audit: type=1400 audit(1776042991.291:2783): avc: denied { bind } for pid=22934 comm="syz.3.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 322.287696][T22951] loop2: detected capacity change from 0 to 512 [ 322.298747][T22951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.391785][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.781214][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5025'. [ 322.826475][T22980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5025'. [ 323.797843][T23092] loop5: detected capacity change from 0 to 512 [ 323.827694][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.5038: corrupted inode contents [ 323.840243][T23092] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.842536][T23092] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #3: comm syz.5.5038: mark_inode_dirty error [ 323.851692][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 323.851734][ C1] EXT4-fs (loop5): initial error at time 1776042993: ext4_do_update_inode:5602: inode 3 [ 323.851769][ C1] EXT4-fs (loop5): last error at time 1776042993: ext4_do_update_inode:5602: inode 3 [ 323.889742][T23092] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.892097][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #3: comm syz.5.5038: corrupted inode contents [ 323.925910][T23092] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.926219][T23092] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.5038: mark_inode_dirty error [ 323.979991][T23092] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.980354][T23092] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.5038: Failed to acquire dquot type 0 [ 324.024890][T23107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.033535][T23092] loop5: lost filesystem error report for type 5 error -117 [ 324.036966][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.5038: corrupted inode contents [ 324.058112][T23107] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.100116][T23107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.115801][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.118148][T23092] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #16: comm syz.5.5038: mark_inode_dirty error [ 324.144912][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.159214][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.5038: corrupted inode contents [ 324.383421][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.384229][T23092] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.5038: mark_inode_dirty error [ 324.418913][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.419179][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.5038: corrupted inode contents [ 324.440538][T23124] loop2: detected capacity change from 0 to 1024 [ 324.457170][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.457358][T23092] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 324.477287][T23092] loop5: lost filesystem error report for type 5 error -117 [ 324.477530][T23092] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #16: comm syz.5.5038: corrupted inode contents [ 324.497142][T23092] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.497411][T23092] EXT4-fs error (device loop5): ext4_truncate:4602: inode #16: comm syz.5.5038: mark_inode_dirty error [ 324.518238][T23092] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 324.527420][T23092] loop5: lost filesystem error report for type 5 error -117 [ 324.527975][T23092] EXT4-fs (loop5): 1 truncate cleaned up [ 324.543404][T23092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.557960][T23092] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.593084][T23124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.608938][T23092] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.5038: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 324.608938][T23092] [ 324.674797][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.712466][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.749975][T23153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.157222][T23162] bridge2: entered promiscuous mode [ 326.176647][T23162] bridge2: entered allmulticast mode [ 326.353201][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 326.353219][ T28] audit: type=1326 audit(1776042995.671:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.459244][ T28] audit: type=1326 audit(1776042995.671:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.559388][ T28] audit: type=1326 audit(1776042995.671:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.599688][ T28] audit: type=1326 audit(1776042995.671:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.698556][ T28] audit: type=1326 audit(1776042995.721:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.731312][ T28] audit: type=1326 audit(1776042995.751:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.772461][ T28] audit: type=1326 audit(1776042995.751:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.809680][ T28] audit: type=1326 audit(1776042995.841:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.838427][ T28] audit: type=1326 audit(1776042995.841:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.3.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 326.915486][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5075'. [ 327.000230][T23198] loop2: detected capacity change from 0 to 1024 [ 327.007337][ T28] audit: type=1400 audit(1776042996.321:2795): avc: denied { mounton } for pid=23195 comm="syz.1.5078" path="/file0" dev="bpf" ino=68778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 327.127827][T23198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.298835][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.532221][T23228] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.541308][T23228] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 327.553079][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5088'. [ 327.562600][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 327.586488][T23228] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5087'. [ 327.610270][T23228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.621878][T23228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.633841][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5088'. [ 327.645577][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 327.661534][T23228] bond0 (unregistering): Released all slaves [ 327.725510][T23229] loop5: detected capacity change from 0 to 8192 [ 327.900809][T23242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5093'. [ 328.360088][T23261] loop5: detected capacity change from 0 to 512 [ 328.375584][T23261] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 328.385003][T23261] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5100: bad orphan inode 15 [ 328.395463][T23261] loop5: lost filesystem error report for type 5 error -117 [ 328.395736][T23261] ext4_test_bit(bit=14, block=5) = 0 [ 328.408386][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 328.408405][ C1] EXT4-fs (loop5): initial error at time 1776042997: ext4_orphan_get:1423 [ 328.408426][ C1] EXT4-fs (loop5): last error at time 1776042997: ext4_orphan_get:1423 [ 328.432354][T23261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.617212][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.675448][T23276] pim6reg1: entered promiscuous mode [ 328.687414][T23276] pim6reg1: entered allmulticast mode [ 328.902423][ T43] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 328.938265][T23294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5112'. [ 328.949800][T23294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5112'. [ 329.328707][T23312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 329.356328][T23314] loop5: detected capacity change from 0 to 512 [ 329.363708][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 329.364832][T23314] EXT4-fs: inline encryption not supported [ 329.389077][ T7262] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.398614][T23314] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 329.403701][T23312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 329.417990][ T7262] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.430382][T23314] EXT4-fs (loop5): 1 truncate cleaned up [ 329.439729][ T7262] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.440155][T23314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.448800][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 329.473621][ T7262] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.586420][T23321] loop2: detected capacity change from 0 to 512 [ 329.595363][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.736416][T23321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.539308][T23340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23340 comm=syz.5.5129 [ 330.572422][T23340] netlink: 'syz.5.5129': attribute type 1 has an invalid length. [ 330.612285][T23340] bond0: (slave bridge1): making interface the new active one [ 330.623762][T23340] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 330.923543][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 330.923545][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 331.021457][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.172585][T23385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5147'. [ 331.370831][T23399] loop8: detected capacity change from 0 to 512 [ 331.398562][T23399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.593509][T23413] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 331.616424][T23409] loop2: detected capacity change from 0 to 4096 [ 331.668530][T23409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.731366][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.836010][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5163'. [ 331.896891][T23428] netlink: 'syz.5.5164': attribute type 1 has an invalid length. [ 331.920904][T23428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.975494][T23428] bond1: (slave macvlan1): making interface the new active one [ 332.039003][T23428] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 332.162194][T23437] loop5: detected capacity change from 0 to 1024 [ 332.193819][T23437] EXT4-fs: inline encryption not supported [ 332.223421][T23437] EXT4-fs: Ignoring removed nobh option [ 332.277411][T23437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 332.295006][T23437] System zones: 0-1, 3-12 [ 332.319612][T23437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.474002][T21316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.594198][T23477] loop8: detected capacity change from 0 to 512 [ 332.627893][T23477] EXT4-fs: test_dummy_encryption option not supported [ 332.643602][T23477] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 332.755147][T23486] loop8: detected capacity change from 0 to 512 [ 332.787337][T23486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.905050][T23502] loop2: detected capacity change from 0 to 128 [ 332.999217][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.020334][T21316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.093895][T23514] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5194'. [ 333.133532][T23514] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5194'. [ 333.201554][T23513] bridge2: entered promiscuous mode [ 333.208875][T23513] bridge2: entered allmulticast mode [ 333.312816][T23530] loop2: detected capacity change from 0 to 512 [ 333.398876][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5207'. [ 333.412323][T23530] EXT4-fs: Ignoring removed nobh option [ 333.442617][T23530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.476086][T23530] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.574611][T23530] EXT4-fs: Ignoring removed orlov option [ 333.589497][T23551] netlink: 39 bytes leftover after parsing attributes in process `syz.1.5210'. [ 333.590973][T23530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.640186][T23530] EXT4-fs error (device loop2): __ext4_remount:6829: comm syz.2.5200: Abort forced by user [ 333.653419][T23530] EXT4-fs (loop2): Remounting filesystem read-only [ 333.662507][T23530] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 333.705868][T23572] sd 0:0:1:0: device reset [ 333.715605][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.829207][T23567] bridge4: entered promiscuous mode [ 333.838153][T23567] bridge4: entered allmulticast mode [ 334.236321][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 334.236344][ T28] audit: type=1326 audit(1776043003.561:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.383729][ T28] audit: type=1326 audit(1776043003.561:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.439907][ T28] audit: type=1326 audit(1776043003.601:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.500832][ T28] audit: type=1326 audit(1776043003.601:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.526531][ T28] audit: type=1326 audit(1776043003.601:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.551162][ T28] audit: type=1326 audit(1776043003.601:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.576122][ T28] audit: type=1326 audit(1776043003.601:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.612341][ T28] audit: type=1326 audit(1776043003.601:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.664488][ T28] audit: type=1326 audit(1776043003.601:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 334.795706][ T28] audit: type=1326 audit(1776043003.601:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23645 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 335.121305][T23677] loop2: detected capacity change from 0 to 32768 [ 335.209193][T23725] loop5: detected capacity change from 0 to 512 [ 335.306684][ T3302] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 335.312096][ T3302] loop2: p1 start 460800 is beyond EOD, truncated [ 335.322137][ T3302] loop2: p2 size 83886080 extends beyond EOD, truncated [ 335.331712][ T3302] loop2: p5 start 460800 is beyond EOD, truncated [ 335.376225][ T3302] loop2: p6 size 83886080 extends beyond EOD, truncated [ 335.414437][T23677] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 335.422224][T23677] loop2: p1 start 460800 is beyond EOD, truncated [ 335.428882][T23677] loop2: p2 size 83886080 extends beyond EOD, truncated [ 335.437995][T23677] loop2: p5 start 460800 is beyond EOD, truncated [ 335.444717][T23677] loop2: p6 size 83886080 extends beyond EOD, truncated [ 335.508622][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 335.519663][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 335.537979][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 335.569643][ T3759] udevd[3759]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 335.571641][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 335.580733][ T3761] udevd[3761]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 335.920622][T23742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5259'. [ 336.220875][T23750] loop8: detected capacity change from 0 to 128 [ 336.293781][T23756] syzkaller0: entered promiscuous mode [ 336.307040][T23756] syzkaller0: entered allmulticast mode [ 336.327561][T23756] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 336.566222][T23781] bridge0: entered allmulticast mode [ 336.584255][T23781] vlan2: left allmulticast mode [ 336.601652][T23787] sctp: [Deprecated]: syz.3.5279 (pid 23787) Use of int in max_burst socket option deprecated. [ 336.601652][T23787] Use struct sctp_assoc_value instead [ 336.619163][T23781] geneve0: left allmulticast mode [ 336.639856][T23781] bridge0: port 3(vlan2) entered disabled state [ 336.662757][T23781] bridge_slave_1: left allmulticast mode [ 336.668534][T23781] bridge_slave_1: left promiscuous mode [ 336.676666][T23781] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.711413][T23799] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5284'. [ 337.153838][ T7959] bio_check_eod: 24 callbacks suppressed [ 337.153857][ T7959] kworker/u8:62: attempt to access beyond end of device [ 337.153857][ T7959] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 337.272524][T23821] netlink: 'syz.1.5293': attribute type 1 has an invalid length. [ 337.346158][T23823] gretap2: entered allmulticast mode [ 337.400610][T23823] bond6: (slave gretap2): making interface the new active one [ 337.457276][T23823] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 338.374103][T23839] bridge1: entered promiscuous mode [ 338.380645][T23839] bridge1: entered allmulticast mode [ 338.765356][T23868] netlink: 'syz.5.5310': attribute type 4 has an invalid length. [ 338.787044][T23868] netlink: 'syz.5.5310': attribute type 4 has an invalid length. [ 338.944471][T23877] netlink: 'syz.5.5314': attribute type 1 has an invalid length. [ 338.958344][T23877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.979271][T23877] bond2: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 339.002685][T23884] sctp: [Deprecated]: syz.8.5326 (pid 23884) Use of int in maxseg socket option. [ 339.002685][T23884] Use struct sctp_assoc_value instead [ 340.892053][T23893] bridge1: entered promiscuous mode [ 340.911211][T23893] bridge1: entered allmulticast mode [ 341.041202][T23905] syzkaller0: refused to change device tx_queue_len [ 341.123379][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 341.123412][ T28] audit: type=1400 audit(1776043266.429:2925): avc: denied { watch_reads } for pid=23916 comm="syz.3.5331" path="/453/file0" dev="tmpfs" ino=2352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 341.450806][T23929] bridge2: entered promiscuous mode [ 341.457853][T23929] bridge2: entered allmulticast mode [ 341.725153][ T28] audit: type=1326 audit(1776043267.049:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz.8.5333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x0 [ 341.906072][T23939] dvmrp2: entered allmulticast mode [ 342.041659][ T7262] dvmrp2 (unregistering): left allmulticast mode [ 342.732713][T23957] loop5: detected capacity change from 0 to 512 [ 342.777148][T23957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.808513][T23957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.968815][T23957] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.070034][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.131587][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5348'. [ 343.142298][T23964] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.160106][T23964] bridge_slave_1 (unregistering): left allmulticast mode [ 343.181706][T23964] bridge_slave_1 (unregistering): left promiscuous mode [ 343.216251][T23964] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.241643][T23972] raw_sendmsg: syz.2.5352 forgot to set AF_INET. Fix it! [ 343.308771][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 343.328659][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.508823][T23995] loop8: detected capacity change from 0 to 512 [ 343.533786][T23995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.574094][T23995] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.5361: iget: bad i_size value: 38620345925642 [ 343.613432][T23995] fserror_report: 1 callbacks suppressed [ 343.613493][T23995] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 343.623376][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 343.639123][ C1] EXT4-fs (loop8): initial error at time 1776043268: ext4_orphan_get:1397: inode 15 [ 343.648584][ C1] EXT4-fs (loop8): last error at time 1776043268: ext4_orphan_get:1397: inode 15 [ 343.657364][T23995] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.5361: couldn't read orphan inode 15 (err -117) [ 343.725633][T23995] loop8: lost filesystem error report for type 5 error -117 [ 343.726273][T23995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.769666][T23978] hid-generic 0000:0000:0000.0008: pid 23978 passed too short report [ 343.783574][T24006] loop2: detected capacity change from 0 to 128 [ 343.823414][ T28] audit: type=1326 audit(1776043269.139:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 343.850177][T24007] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5361: bg 0: block 5: invalid block bitmap [ 343.899104][ T28] audit: type=1326 audit(1776043269.139:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 343.977408][T24007] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 343.983402][ T28] audit: type=1326 audit(1776043269.139:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.013395][T24007] EXT4-fs (loop8): This should not happen!! Data will be lost [ 344.013395][T24007] [ 344.033377][T24007] EXT4-fs (loop8): Total free blocks count 0 [ 344.049629][T24007] EXT4-fs (loop8): Free/Dirty block details [ 344.076794][T24007] EXT4-fs (loop8): free_blocks=0 [ 344.082148][ T28] audit: type=1326 audit(1776043269.139:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.093712][T24007] EXT4-fs (loop8): dirty_blocks=420 [ 344.105803][ T28] audit: type=1326 audit(1776043269.149:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.138480][T24007] EXT4-fs (loop8): Block reservation details [ 344.148291][ T28] audit: type=1326 audit(1776043269.149:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.172238][T24007] EXT4-fs (loop8): i_reserved_data_blocks=420 [ 344.178551][ T28] audit: type=1326 audit(1776043269.149:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.202746][ T28] audit: type=1326 audit(1776043269.149:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24005 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522fa2c819 code=0x7ffc0000 [ 344.284493][T21316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.360692][T24029] netlink: 'syz.8.5375': attribute type 3 has an invalid length. [ 344.404058][T24034] loop5: detected capacity change from 0 to 2048 [ 344.437670][T24034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.566752][T24034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5376: bg 0: block 234: padding at end of block bitmap is not set [ 344.591452][T24034] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 820 with error 28 [ 344.606739][T24034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 344.606739][T24034] [ 344.616841][T24034] EXT4-fs (loop5): Total free blocks count 0 [ 344.636638][T24034] EXT4-fs (loop5): Free/Dirty block details [ 344.662851][T24034] EXT4-fs (loop5): free_blocks=0 [ 344.678481][T24034] EXT4-fs (loop5): dirty_blocks=832 [ 344.690096][T24034] EXT4-fs (loop5): Block reservation details [ 344.696513][T24034] EXT4-fs (loop5): i_reserved_data_blocks=52 [ 344.833860][T24064] netlink: 'syz.8.5387': attribute type 1 has an invalid length. [ 344.884111][T24064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.987101][T24064] bond1: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 345.028773][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.393688][T24099] syzkaller1: entered promiscuous mode [ 345.405141][T24099] syzkaller1: entered allmulticast mode [ 345.644554][T24111] loop8: detected capacity change from 0 to 2048 [ 345.676905][T24111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.766196][T21316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.290207][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 346.290226][ T28] audit: type=1400 audit(1776043271.609:2949): avc: denied { getopt } for pid=24135 comm="syz.5.5418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 346.650210][T24107] syz.1.5405 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 346.665433][T24107] CPU: 0 UID: 0 PID: 24107 Comm: syz.1.5405 Tainted: G W syzkaller #0 PREEMPT(full) [ 346.665473][T24107] Tainted: [W]=WARN [ 346.665480][T24107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 346.665492][T24107] Call Trace: [ 346.665500][T24107] [ 346.665510][T24107] __dump_stack+0x1d/0x30 [ 346.665544][T24107] dump_stack_lvl+0x95/0xd0 [ 346.665609][T24107] dump_stack+0x15/0x1b [ 346.665638][T24107] dump_header+0x80/0x240 [ 346.665660][T24107] oom_kill_process+0x295/0x350 [ 346.665738][T24107] out_of_memory+0x97d/0xb80 [ 346.665766][T24107] try_charge_memcg+0x62e/0xa10 [ 346.665811][T24107] obj_cgroup_charge_pages+0x23/0xc0 [ 346.665859][T24107] __memcg_kmem_charge_page+0x9e/0x170 [ 346.665920][T24107] __alloc_frozen_pages_noprof+0x18a/0x360 [ 346.665942][T24107] alloc_pages_mpol+0xb3/0x260 [ 346.665991][T24107] alloc_pages_noprof+0x8f/0x140 [ 346.666010][T24107] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 346.666063][T24107] __kvmalloc_node_noprof+0x3d4/0x650 [ 346.666081][T24107] ? futex_hash_allocate+0x190/0x9d0 [ 346.666173][T24107] ? futex_hash_allocate+0x190/0x9d0 [ 346.666193][T24107] futex_hash_allocate+0x190/0x9d0 [ 346.666251][T24107] ? cap_task_prctl+0x13f/0x6e0 [ 346.666269][T24107] futex_hash_prctl+0xd8/0xf0 [ 346.666288][T24107] __se_sys_prctl+0xa3d/0x13f0 [ 346.666453][T24107] __x64_sys_prctl+0x67/0x80 [ 346.666483][T24107] x64_sys_call+0x2533/0x3020 [ 346.666514][T24107] do_syscall_64+0x12c/0x370 [ 346.666633][T24107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.666661][T24107] RIP: 0033:0x7f634009c819 [ 346.666682][T24107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.666700][T24107] RSP: 002b:00007f633eaef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 346.666724][T24107] RAX: ffffffffffffffda RBX: 00007f6340315fa0 RCX: 00007f634009c819 [ 346.666752][T24107] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 346.666769][T24107] RBP: 00007f6340132c91 R08: 0000000000000000 R09: 0000000000000000 [ 346.666783][T24107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.666796][T24107] R13: 00007f6340316038 R14: 00007f6340315fa0 R15: 00007ffe74fb2d88 [ 346.666814][T24107] [ 346.694024][T24107] memory: usage 307072kB, limit 307200kB, failcnt 408 [ 346.938441][T24107] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0 [ 346.953320][T24107] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 346.979434][T24107] Memory cgroup stats for /syz1: [ 346.980264][T24107] cache 8192 [ 346.999815][T24107] rss 0 [ 347.002863][T24107] shmem 0 [ 347.021132][T24107] mapped_file 4096 [ 347.084122][T24107] dirty 4096 [ 347.087366][T24107] writeback 0 [ 347.090668][T24107] workingset_refault_anon 470 [ 347.096529][ T4470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.117772][T24107] workingset_refault_file 698 [ 347.122794][T24107] swap 724992 [ 347.153838][T24107] swapcached 7577600 [ 347.168774][ T4470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.173192][T24107] pgpgin 450817 [ 347.293460][T24107] pgpgout 450811 [ 347.363672][T24107] pgfault 226141 [ 347.406124][T24107] pgmajfault 99 [ 347.446601][ T4470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.465179][T24107] inactive_anon 0 [ 347.468920][T24107] active_anon 16384 [ 347.472750][T24107] inactive_file 0 [ 347.479860][T24107] active_file 8192 [ 347.484018][T24107] unevictable 0 [ 347.487689][T24107] hierarchical_memory_limit 314572800 [ 347.493223][T24107] hierarchical_memsw_limit 9223372036854771712 [ 347.525568][T24107] total_cache 8192 [ 347.529589][T24107] total_rss 0 [ 347.533053][T24107] total_shmem 0 [ 347.537209][T24107] total_mapped_file 4096 [ 347.541523][T24107] total_dirty 4096 [ 347.545660][T24107] total_writeback 0 [ 347.549656][T24107] total_workingset_refault_anon 470 [ 347.555374][T24107] total_workingset_refault_file 698 [ 347.560796][T24107] total_swap 724992 [ 347.579102][T24107] total_swapcached 7577600 [ 347.583881][T24107] total_pgpgin 450817 [ 347.588027][T24107] total_pgpgout 450811 [ 347.603608][T24107] total_pgfault 226141 [ 347.608140][T24107] total_pgmajfault 99 [ 347.612496][T24107] total_inactive_anon 0 [ 347.620103][ T4470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.623412][T24107] total_active_anon 16384 [ 347.635189][T24107] total_inactive_file 0 [ 347.655144][T24107] total_active_file 8192 [ 347.660835][T24107] total_unevictable 0 [ 347.665081][T24107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2103,pid=11053,uid=0 [ 347.680353][T24107] Memory cgroup out of memory: Killed process 11053 (syz.1.2103) total-vm:96080kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 347.785103][ T4470] bridge_slave_1: left allmulticast mode [ 347.790797][ T4470] bridge_slave_1: left promiscuous mode [ 347.805851][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.840973][ T4470] bridge_slave_0: left allmulticast mode [ 347.862602][ T4470] bridge_slave_0: left promiscuous mode [ 347.879087][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.275611][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.287580][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.311755][ T4470] bond0 (unregistering): Released all slaves [ 348.360936][ T4470] hsr_slave_0: left promiscuous mode [ 348.368900][ T4470] hsr_slave_1: left promiscuous mode [ 348.376081][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.387538][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.401639][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.409106][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.573608][ T4470] veth1_macvtap: left promiscuous mode [ 348.579969][ T4470] veth0_macvtap: left promiscuous mode [ 348.606363][ T28] audit: type=1326 audit(1776043273.909:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.632153][ T4470] veth1_vlan: left promiscuous mode [ 348.638828][ T4470] veth0_vlan: left promiscuous mode [ 348.648923][ T28] audit: type=1326 audit(1776043273.909:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.673041][ T28] audit: type=1326 audit(1776043273.919:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.696795][ T28] audit: type=1326 audit(1776043273.919:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.720589][ T28] audit: type=1326 audit(1776043273.919:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.806190][ T28] audit: type=1326 audit(1776043273.969:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.921030][ T28] audit: type=1326 audit(1776043273.969:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 348.973553][ T4470] team0 (unregistering): Port device team_slave_1 removed [ 348.993718][ T4470] team0 (unregistering): Port device team_slave_0 removed [ 349.001091][ T28] audit: type=1326 audit(1776043274.069:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 349.085432][ T28] audit: type=1326 audit(1776043274.069:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24230 comm="syz.3.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 349.243800][T24242] loop5: detected capacity change from 0 to 512 [ 349.271991][T24242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 349.403417][T24242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 349.430077][T24242] System zones: 1-12 [ 349.526501][ T4470] IPVS: stop unused estimator thread 0... [ 349.554119][T24242] EXT4-fs (loop5): 1 truncate cleaned up [ 349.573780][T24242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.622012][T24258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5456'. [ 349.638274][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5457'. [ 349.689442][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5457'. [ 349.698819][T24242] loop5: detected capacity change from 512 to 0 [ 349.739843][ T7262] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4920: inode #18: block 9: comm kworker/u8:21: unable to read itable block [ 349.756860][ T7262] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 349.771794][ T7262] EXT4-fs (loop5): I/O error while writing superblock [ 349.782718][ T7262] EXT4-fs warning (device loop5): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 38) [ 349.830463][ T7262] Buffer I/O error on device loop5, logical block 38 [ 349.860988][ T7262] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4920: inode #15: block 8: comm kworker/u8:21: unable to read itable block [ 349.906265][ T7262] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 349.933995][ T7262] EXT4-fs (loop5): I/O error while writing superblock [ 349.998634][T22584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.033231][T22584] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 350.064869][T22584] EXT4-fs (loop5): I/O error while writing superblock [ 350.427525][T24330] loop2: detected capacity change from 0 to 2048 [ 350.543502][T24330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.660762][ T4487] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 234: padding at end of block bitmap is not set [ 350.691258][ T4487] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 154 with error 28 [ 350.709787][ T4487] EXT4-fs (loop2): This should not happen!! Data will be lost [ 350.709787][ T4487] [ 350.724837][ T4487] EXT4-fs (loop2): Total free blocks count 0 [ 350.734348][ T4487] EXT4-fs (loop2): Free/Dirty block details [ 350.743515][ T4487] EXT4-fs (loop2): free_blocks=0 [ 350.756320][ T4487] EXT4-fs (loop2): dirty_blocks=160 [ 350.780961][ T4487] EXT4-fs (loop2): Block reservation details [ 350.794709][ T4487] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 350.912154][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.955696][T24335] chnl_net:caif_netlink_parms(): no params data found [ 351.009264][T24361] loop2: detected capacity change from 0 to 512 [ 351.046679][T24361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.103641][T24361] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.112832][T24335] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.121400][T24335] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.139319][T24335] bridge_slave_0: entered allmulticast mode [ 351.146395][T24335] bridge_slave_0: entered promiscuous mode [ 351.212546][T24335] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.249909][T24335] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.268786][T24335] bridge_slave_1: entered allmulticast mode [ 351.292099][T24335] bridge_slave_1: entered promiscuous mode [ 351.304201][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5478'. [ 351.379130][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.397619][T24335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.435399][T24335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.478745][T24381] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 351.510750][T24335] team0: Port device team_slave_0 added [ 351.511997][T24381] SELinux: failed to load policy [ 351.539850][T24335] team0: Port device team_slave_1 added [ 351.602895][T24335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.793364][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.856365][T24335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.879326][T24335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.896376][T24335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.958265][T24335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.027874][T24335] hsr_slave_0: entered promiscuous mode [ 352.050205][T24335] hsr_slave_1: entered promiscuous mode [ 352.059448][T24335] debugfs: 'hsr0' already exists in 'hsr' [ 352.065961][T24335] Cannot create hsr debugfs directory [ 352.091459][T24426] dummy0: entered promiscuous mode [ 352.100818][T24426] dummy0: left promiscuous mode [ 352.207726][T24335] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.247084][T24335] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.296725][T24335] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.447529][T24335] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.490072][T24477] bond0: entered promiscuous mode [ 352.502021][T24477] bond_slave_0: entered promiscuous mode [ 352.508249][T24477] bond_slave_1: entered promiscuous mode [ 352.508317][T24481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5497'. [ 352.515527][T24477] bridge4: entered promiscuous mode [ 352.592797][T24335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.611307][T24335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.656205][T24335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.671040][T24335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.707421][T24497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.714728][T24497] IPv6: NLM_F_CREATE should be set when creating new route [ 352.813841][T24512] syzkaller0: entered allmulticast mode [ 352.819732][T24512] syzkaller0: entered promiscuous mode [ 352.854018][T24512] syzkaller0 (unregistering): left promiscuous mode [ 352.860683][T24512] syzkaller0 (unregistering): left allmulticast mode [ 352.928690][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 352.928706][ T28] audit: type=1326 audit(1776043278.239:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 352.968809][ T28] audit: type=1326 audit(1776043278.239:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.015330][T24335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.024842][ T28] audit: type=1326 audit(1776043278.239:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.052723][T24335] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.063546][ T28] audit: type=1326 audit(1776043278.239:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.079931][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.091737][ T28] audit: type=1326 audit(1776043278.239:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.094304][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.129105][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.136468][ T7273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.149182][ T28] audit: type=1326 audit(1776043278.239:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.161641][T24335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.194012][T24335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.214102][ T28] audit: type=1326 audit(1776043278.239:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.251204][ T28] audit: type=1326 audit(1776043278.239:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.300115][ T28] audit: type=1326 audit(1776043278.239:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.361542][T24335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.368669][ T28] audit: type=1326 audit(1776043278.239:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24517 comm="syz.1.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f634009c819 code=0x7ffc0000 [ 353.613269][T24335] veth0_vlan: entered promiscuous mode [ 353.634427][T24335] veth1_vlan: entered promiscuous mode [ 353.675771][T24335] veth0_macvtap: entered promiscuous mode [ 353.687576][T24335] veth1_macvtap: entered promiscuous mode [ 353.700096][T24335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.718426][T24335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.730985][ T7277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.758517][ T7277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.788860][ T7277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.800224][ T7277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.889338][T24569] netlink: 'syz.8.5530': attribute type 4 has an invalid length. [ 353.960864][T24569] netlink: 'syz.8.5530': attribute type 4 has an invalid length. [ 354.069672][T24581] netlink: 41 bytes leftover after parsing attributes in process `syz.5.5523'. [ 354.084474][T24581] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5523'. [ 354.108037][T24581] netlink: 41 bytes leftover after parsing attributes in process `syz.5.5523'. [ 354.274942][T24597] dummy0: entered promiscuous mode [ 354.297242][T24601] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5534'. [ 354.308404][T24597] dummy0: left promiscuous mode [ 354.593925][T24613] io-wq is not configured for unbound workers [ 355.276240][T24635] loop5: detected capacity change from 0 to 1024 [ 355.614198][T24635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.730131][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.791452][T24646] netlink: 'syz.5.5553': attribute type 13 has an invalid length. [ 355.912368][T24654] xt_hashlimit: size too large, truncated to 1048576 [ 357.006894][T24681] syzkaller0: entered promiscuous mode [ 357.012420][T24681] syzkaller0: entered allmulticast mode [ 357.065437][T24686] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 358.557480][T24734] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5583'. [ 358.598180][T24738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'. [ 358.726245][T24748] netlink: 'syz.5.5590': attribute type 2 has an invalid length. [ 358.751704][T24750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5591'. [ 358.773750][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5591'. [ 358.805712][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5592'. [ 359.131851][T24763] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5597'. [ 359.262072][T24772] geneve2: entered promiscuous mode [ 359.269649][ T4470] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 48771 - 0 [ 359.290086][ T4470] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 48771 - 0 [ 359.300128][ T4470] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 48771 - 0 [ 359.332869][ T4470] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 48771 - 0 [ 359.378208][T24778] loop5: detected capacity change from 0 to 128 [ 359.713914][T24779] syz.5.5604: attempt to access beyond end of device [ 359.713914][T24779] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 359.988838][T24776] syz.5.5604: attempt to access beyond end of device [ 359.988838][T24776] loop5: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 360.033903][T24776] syz.5.5604: attempt to access beyond end of device [ 360.033903][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.052602][T24776] syz.5.5604: attempt to access beyond end of device [ 360.052602][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.063081][T24770] syz.2.5600 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 360.091144][T24776] syz.5.5604: attempt to access beyond end of device [ 360.091144][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.093371][T24770] CPU: 1 UID: 0 PID: 24770 Comm: syz.2.5600 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.093453][T24770] Tainted: [W]=WARN [ 360.093460][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.093474][T24770] Call Trace: [ 360.093481][T24770] [ 360.093490][T24770] __dump_stack+0x1d/0x30 [ 360.093533][T24770] dump_stack_lvl+0x95/0xd0 [ 360.093557][T24770] dump_stack+0x15/0x1b [ 360.093639][T24770] dump_header+0x80/0x240 [ 360.093663][T24770] oom_kill_process+0x295/0x350 [ 360.093687][T24770] out_of_memory+0x97d/0xb80 [ 360.093712][T24770] try_charge_memcg+0x62e/0xa10 [ 360.093792][T24770] obj_cgroup_charge_pages+0x23/0xc0 [ 360.093882][T24770] __memcg_kmem_charge_page+0x9e/0x170 [ 360.093915][T24770] __alloc_frozen_pages_noprof+0x18a/0x360 [ 360.093947][T24770] alloc_pages_mpol+0xb3/0x260 [ 360.094026][T24770] alloc_pages_noprof+0x8f/0x140 [ 360.094241][T24770] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 360.094278][T24770] __kvmalloc_node_noprof+0x3d4/0x650 [ 360.094306][T24770] ? futex_hash_allocate+0x190/0x9d0 [ 360.094375][T24770] ? futex_hash_allocate+0x190/0x9d0 [ 360.094405][T24770] futex_hash_allocate+0x190/0x9d0 [ 360.094435][T24770] ? cap_task_prctl+0x13f/0x6e0 [ 360.094485][T24770] futex_hash_prctl+0xd8/0xf0 [ 360.094514][T24770] __se_sys_prctl+0xa3d/0x13f0 [ 360.094631][T24770] __x64_sys_prctl+0x67/0x80 [ 360.094658][T24770] x64_sys_call+0x2533/0x3020 [ 360.094685][T24770] do_syscall_64+0x12c/0x370 [ 360.094714][T24770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.094737][T24770] RIP: 0033:0x7f522fa2c819 [ 360.094785][T24770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.094833][T24770] RSP: 002b:00007f522e487028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 360.094862][T24770] RAX: ffffffffffffffda RBX: 00007f522fca5fa0 RCX: 00007f522fa2c819 [ 360.094877][T24770] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 360.094892][T24770] RBP: 00007f522fac2c91 R08: 0000000000000000 R09: 0000000000000000 [ 360.094906][T24770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.094920][T24770] R13: 00007f522fca6038 R14: 00007f522fca5fa0 R15: 00007fff565f7618 [ 360.094966][T24770] [ 360.094973][T24770] memory: usage 300180kB, limit 307200kB, failcnt 549 [ 360.150258][T24776] syz.5.5604: attempt to access beyond end of device [ 360.150258][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.323802][T24770] memory+swap: usage 240496kB, limit 9007199254740988kB, failcnt 0 [ 360.341854][T24776] syz.5.5604: attempt to access beyond end of device [ 360.341854][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.423432][T24776] syz.5.5604: attempt to access beyond end of device [ 360.423432][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.473448][T24776] syz.5.5604: attempt to access beyond end of device [ 360.473448][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.544991][T24770] kmem: usage 2068kB, limit 9007199254740988kB, failcnt 0 [ 360.552277][T24770] Memory cgroup stats for /syz2: [ 360.552436][T24770] cache 0 [ 360.558012][T24776] syz.5.5604: attempt to access beyond end of device [ 360.558012][T24776] loop5: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 360.573390][T24770] rss 29339648 [ 360.593707][T24770] shmem 0 [ 360.596784][T24770] mapped_file 0 [ 360.600269][T24770] dirty 0 [ 360.603247][T24770] writeback 0 [ 360.607237][T24770] workingset_refault_anon 706 [ 360.611963][T24770] workingset_refault_file 2 [ 360.623852][T24770] swap 67743744 [ 360.627443][T24770] swapcached 84475904 [ 360.641725][T24770] pgpgin 174744 [ 360.645372][T24770] pgpgout 167581 [ 360.649030][T24770] pgfault 168748 [ 360.654618][T24770] pgmajfault 129 [ 360.658200][T24770] inactive_anon 0 [ 360.661906][T24770] active_anon 0 [ 360.668082][T24770] inactive_file 0 [ 360.672089][T24770] active_file 0 [ 360.675852][T24770] unevictable 29339648 [ 360.680023][T24770] hierarchical_memory_limit 314572800 [ 360.685552][T24770] hierarchical_memsw_limit 9223372036854771712 [ 360.692166][T24770] total_cache 0 [ 360.719032][T24770] total_rss 29339648 [ 360.723026][T24770] total_shmem 0 [ 360.726743][T24770] total_mapped_file 0 [ 360.730742][T24770] total_dirty 0 [ 360.734488][T24770] total_writeback 0 [ 360.738351][T24770] total_workingset_refault_anon 706 [ 360.743719][T24770] total_workingset_refault_file 2 [ 360.748792][T24770] total_swap 67743744 [ 360.752781][T24770] total_swapcached 84475904 [ 360.759564][T24770] total_pgpgin 174744 [ 360.764777][T24770] total_pgpgout 167581 [ 360.768859][T24770] total_pgfault 168748 [ 360.773025][T24770] total_pgmajfault 129 [ 360.781003][T24770] total_inactive_anon 0 [ 360.790220][T24770] total_active_anon 0 [ 360.794670][T24770] total_inactive_file 0 [ 360.798869][T24770] total_active_file 0 [ 360.803001][T24770] total_unevictable 29339648 [ 360.826643][T24770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5600,pid=24769,uid=0 [ 360.848141][T24770] Memory cgroup out of memory: Killed process 24770 (syz.2.5600) total-vm:94164kB, anon-rss:29856kB, file-rss:64236kB, shmem-rss:0kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 360.864678][T24797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5609'. [ 361.432193][T24844] netlink: 'syz.1.5617': attribute type 8 has an invalid length. [ 361.440170][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5617'. [ 361.451617][T24844] bond0: entered promiscuous mode [ 361.457310][T24844] bond_slave_0: entered promiscuous mode [ 361.463105][T24844] bond_slave_1: entered promiscuous mode [ 361.473503][T24844] team0: entered promiscuous mode [ 361.478573][T24844] team_slave_0: entered promiscuous mode [ 361.503701][T24852] netlink: 'syz.1.5617': attribute type 8 has an invalid length. [ 361.511522][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5617'. [ 361.543212][T24844] team_slave_1: entered promiscuous mode [ 361.551897][T24844] gretap0: entered promiscuous mode [ 361.558058][T24844] batadv0: entered promiscuous mode [ 361.579189][T24844] debugfs: 'hsr1' already exists in 'hsr' [ 361.590376][T24844] Cannot create hsr debugfs directory [ 361.596382][T24844] hsr1: entered promiscuous mode [ 361.867019][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5621'. [ 361.889327][T24905] geneve0: Caught tx_queue_len zero misconfig [ 361.995571][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 361.995588][ T28] audit: type=1400 audit(1776043287.319:3024): avc: denied { add_name } for pid=24914 comm="syz.5.5625" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 362.041680][ T28] audit: type=1400 audit(1776043287.349:3025): avc: denied { create } for pid=24914 comm="syz.5.5625" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 362.274122][T24942] netlink: 'syz.3.5633': attribute type 10 has an invalid length. [ 362.325091][T24942] veth1_macvtap: left promiscuous mode [ 363.224480][ T7273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.261006][ T7273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48771 - 0 [ 363.369313][ T7273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.402147][ T7273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48771 - 0 [ 363.503664][ T7273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.553580][ T7273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48771 - 0 [ 363.634813][ T7939] Bluetooth: hci0: Frame reassembly failed (-84) [ 363.668821][ T7273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.681720][ T7273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48771 - 0 [ 364.047192][T25067] chnl_net:caif_netlink_parms(): no params data found [ 364.217557][ T7273] bridge_slave_1: left allmulticast mode [ 364.227704][ T7273] bridge_slave_1: left promiscuous mode [ 364.240478][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.260534][ T7273] bridge_slave_0: left allmulticast mode [ 364.274463][ T7273] bridge_slave_0: left promiscuous mode [ 364.289197][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.421460][T25129] __nla_validate_parse: 3 callbacks suppressed [ 364.421479][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5657'. [ 364.472489][T13546] kernel write not supported for file bpf-prog (pid: 13546 comm: kworker/0:10) [ 364.495976][ T7273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.515907][ T7273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.530633][ T7273] bond0 (unregistering): Released all slaves [ 364.617023][ T7273] hsr_slave_0: left promiscuous mode [ 364.623056][ T7273] hsr_slave_1: left promiscuous mode [ 364.642016][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.657815][ T7273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.668611][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.676436][ T7273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.689904][ T7273] veth1_macvtap: left promiscuous mode [ 364.692574][ T28] audit: type=1400 audit(1776043290.009:3026): avc: denied { getopt } for pid=25155 comm="syz.3.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.695821][ T7273] veth0_macvtap: left promiscuous mode [ 364.722423][ T7273] veth1_vlan: left promiscuous mode [ 364.728065][ T7273] veth0_vlan: left promiscuous mode [ 364.736330][T25156] sctp: Trying to GSO but underlying device doesn't support it. [ 364.799237][ T7273] team0 (unregistering): Port device team_slave_1 removed [ 364.817509][ T7273] team0 (unregistering): Port device team_slave_0 removed [ 364.852749][T25067] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.861100][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.868415][T25067] bridge_slave_0: entered allmulticast mode [ 364.875124][T25067] bridge_slave_0: entered promiscuous mode [ 364.890662][T25067] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.898283][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.905678][T25067] bridge_slave_1: entered allmulticast mode [ 364.912530][T25067] bridge_slave_1: entered promiscuous mode [ 364.934510][T25067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.958178][T25067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.002529][T25067] team0: Port device team_slave_0 added [ 365.015343][T25067] team0: Port device team_slave_1 added [ 365.050408][T25172] syz_tun: entered allmulticast mode [ 365.061276][T25067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.077203][T25067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.107503][T25067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.120912][T25171] syz_tun: left allmulticast mode [ 365.141670][T25067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.153275][T25067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.191873][T25067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.261331][T25067] hsr_slave_0: entered promiscuous mode [ 365.270463][T25067] hsr_slave_1: entered promiscuous mode [ 365.280241][T25067] debugfs: 'hsr0' already exists in 'hsr' [ 365.288613][T25067] Cannot create hsr debugfs directory [ 365.643454][T25104] Bluetooth: hci0: command 0x1003 tx timeout [ 365.683587][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.689991][T25102] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 365.804055][T25067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.815845][T25067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.831911][T25067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.851399][T25067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.054205][T25067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.103762][T25067] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.116382][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.123524][ T7277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.221531][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.228635][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.277949][T25261] geneve1: entered promiscuous mode [ 366.297210][T25261] macsec1: entered promiscuous mode [ 366.308948][T25261] macsec1: entered allmulticast mode [ 366.327005][T25261] geneve1: entered allmulticast mode [ 366.526434][T25067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.629952][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5691'. [ 366.656577][T25296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5691'. [ 366.727561][ T4510] Bluetooth: hci0: Frame reassembly failed (-84) [ 366.786382][T25067] veth0_vlan: entered promiscuous mode [ 366.797117][T25067] veth1_vlan: entered promiscuous mode [ 366.819614][T25067] veth0_macvtap: entered promiscuous mode [ 366.845592][T25067] veth1_macvtap: entered promiscuous mode [ 366.872593][T25067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.887452][T25067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.898024][ T7959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.916128][ T7959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.932583][ T7959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.947673][T25327] netlink: 'syz.3.5700': attribute type 1 has an invalid length. [ 366.958837][ T7959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.975479][T25327] bond4: entered promiscuous mode [ 366.980946][T25327] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.005865][T25327] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.019098][T25327] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 367.029711][T25327] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 367.040244][T25327] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.113982][ T28] audit: type=1400 audit(1776043292.439:3027): avc: denied { accept } for pid=25331 comm="syz.1.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 367.206923][T25349] loop5: detected capacity change from 0 to 1024 [ 367.219961][T25349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 367.232855][T25349] System zones: 0-1, 3-36 [ 367.245811][T25349] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5706: bad orphan inode 134217728 [ 367.263401][T25349] loop5: lost filesystem error report for type 5 error -117 [ 367.264350][T25349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.458589][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.567534][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5710'. [ 368.370483][T25376] netlink: 'syz.2.5716': attribute type 11 has an invalid length. [ 368.763886][T25104] Bluetooth: hci0: command 0x1003 tx timeout [ 368.770099][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 368.795606][T25382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 368.828561][T25382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'. [ 368.840092][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5721'. [ 368.994040][T25389] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5723'. [ 369.520088][T25412] loop5: detected capacity change from 0 to 512 [ 369.590438][T25412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.773139][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.896786][T25441] bridge1: entered promiscuous mode [ 370.910313][T25441] bridge1: entered allmulticast mode [ 370.931910][T25441] team0: Port device bridge1 added [ 371.247034][T25459] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 371.340898][ T28] audit: type=1400 audit(1776043296.659:3028): avc: denied { relabelfrom } for pid=25464 comm="syz.1.5752" name="" dev="pipefs" ino=76819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 371.364161][ T28] audit: type=1400 audit(1776043296.659:3029): avc: denied { relabelto } for pid=25464 comm="syz.1.5752" name="" dev="pipefs" ino=76819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=fifo_file permissive=1 [ 371.461219][T25470] loop2: detected capacity change from 0 to 1024 [ 371.499975][T25470] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 371.539668][T25470] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 371.549739][ T28] audit: type=1400 audit(1776043296.859:3030): avc: denied { accept } for pid=25473 comm="syz.1.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 371.554667][T25470] EXT4-fs (loop2): mount failed [ 371.647147][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5756'. [ 372.073407][ T28] audit: type=1326 audit(1776043297.389:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.137868][ T28] audit: type=1326 audit(1776043297.389:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.188269][T25526] syz_tun: entered allmulticast mode [ 372.205171][T25523] syz_tun: left allmulticast mode [ 372.223405][ T28] audit: type=1326 audit(1776043297.389:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.295459][ T28] audit: type=1326 audit(1776043297.389:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.423391][ T28] audit: type=1326 audit(1776043297.389:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.482938][ T28] audit: type=1326 audit(1776043297.389:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.551285][ T28] audit: type=1326 audit(1776043297.389:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.587008][ T28] audit: type=1326 audit(1776043297.399:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.657784][ T28] audit: type=1326 audit(1776043297.399:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.716167][ T28] audit: type=1326 audit(1776043297.399:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.745785][ T28] audit: type=1326 audit(1776043297.399:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz.8.5767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 372.784677][T25583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5776'. [ 375.712052][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5831'. [ 375.919232][T25718] 9p: Bad value for 'rfdno' [ 377.460433][T25776] netlink: 'syz.8.5858': attribute type 1 has an invalid length. [ 377.480304][T25776] bond2: entered promiscuous mode [ 377.497002][T25776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.507769][T25782] netlink: 'syz.2.5859': attribute type 1 has an invalid length. [ 377.522835][T25782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.537920][T25784] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.553868][T25784] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 377.569064][T25784] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 377.579878][T25784] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 377.587230][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5859'. [ 377.614567][T25789] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 377.624556][T25789] bond0: (slave batadv1): making interface the new active one [ 377.633751][T25789] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 377.653280][T25782] bond0: (slave veth11): Enslaving as an active interface with a down link [ 377.747049][T25794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 377.770325][T25794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5866'. [ 377.866532][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 377.866551][ T28] audit: type=1400 audit(1776043303.189:3111): avc: denied { ioctl } for pid=25797 comm="syz.2.5867" path="socket:[78218]" dev="sockfs" ino=78218 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 378.804132][T25826] netlink: 'syz.5.5876': attribute type 1 has an invalid length. [ 378.828348][T25826] bond1: entered promiscuous mode [ 378.858267][T25826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.928008][T25830] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.009428][T25830] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 379.035407][T25830] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 379.060667][T25830] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 379.536069][ T28] audit: type=1400 audit(1776043304.839:3112): avc: denied { write } for pid=25851 comm="syz.5.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.619746][ T28] audit: type=1400 audit(1776043304.859:3113): avc: denied { read write } for pid=19410 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.715176][ T28] audit: type=1400 audit(1776043304.859:3114): avc: denied { open } for pid=19410 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.770569][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5894'. [ 379.800265][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5894'. [ 379.897106][ T28] audit: type=1400 audit(1776043304.859:3115): avc: denied { ioctl } for pid=19410 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.943386][ T28] audit: type=1400 audit(1776043304.889:3116): avc: denied { write } for pid=25851 comm="syz.5.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 379.944591][T25877] vlan0: entered promiscuous mode [ 380.009153][T25877] team0: Port device vlan0 added [ 380.220537][ T28] audit: type=1400 audit(1776043304.929:3117): avc: denied { mount } for pid=25864 comm="syz.3.5893" name="/" dev="ramfs" ino=77289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 380.316839][ T28] audit: type=1400 audit(1776043304.939:3118): avc: denied { open } for pid=25866 comm="syz.2.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 380.383556][ T28] audit: type=1400 audit(1776043304.939:3119): avc: denied { perfmon } for pid=25866 comm="syz.2.5892" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.489893][ T28] audit: type=1400 audit(1776043304.939:3120): avc: denied { kernel } for pid=25866 comm="syz.2.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 381.128754][T25910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 381.145599][T25910] batman_adv: batadv0: Adding interface: ip6gretap1 [ 381.152226][T25910] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.178594][T25910] batman_adv: batadv0: Interface activated: ip6gretap1 [ 381.185841][T25910] batadv0: mtu less than device minimum [ 381.192273][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.203233][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.214218][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.225231][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.236257][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.247133][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.258102][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.269007][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.279964][T25910] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 381.306354][T25915] netlink: 'syz.3.5910': attribute type 21 has an invalid length. [ 381.531282][T25919] netlink: 'syz.8.5914': attribute type 1 has an invalid length. [ 381.568786][T25919] bond3: entered promiscuous mode [ 381.581693][T25919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.610337][T25919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.618478][T25919] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 381.629140][T25919] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 381.642296][T25919] bond3: (slave vti0): making interface the new active one [ 381.650399][T25919] vti0: entered promiscuous mode [ 381.667095][T25919] bond3: (slave vti0): Enslaving as an active interface with an up link [ 382.167914][T25973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=25973 comm=syz.8.5935 [ 382.182451][T25975] loop2: detected capacity change from 0 to 164 [ 382.189828][T25975] Unable to read rock-ridge attributes [ 382.224531][T25973] netlink: 1195 bytes leftover after parsing attributes in process `syz.8.5935'. [ 382.269907][T25975] Unable to read rock-ridge attributes [ 382.741893][T26005] loop2: detected capacity change from 0 to 512 [ 382.773488][T26005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 382.813211][T26005] EXT4-fs (loop2): 1 truncate cleaned up [ 382.832239][T26005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.898385][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 382.898404][ T28] audit: type=1400 audit(1776043308.219:3191): avc: denied { setopt } for pid=26009 comm="syz.5.5948" lport=58638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.948538][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.967092][ T28] audit: type=1400 audit(1776043308.259:3192): avc: denied { create } for pid=26011 comm="syz.5.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.014774][ T28] audit: type=1400 audit(1776043308.259:3193): avc: denied { bind } for pid=26011 comm="syz.5.5949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.056671][ T28] audit: type=1400 audit(1776043308.269:3194): avc: denied { unmount } for pid=19410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.065857][T26014] loop2: detected capacity change from 0 to 512 [ 383.099182][ T28] audit: type=1400 audit(1776043308.329:3195): avc: denied { cpu } for pid=26013 comm="syz.2.5950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 383.121114][T26014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.166994][T26014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.188951][T26014] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.286552][T19410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.315197][ T28] audit: type=1400 audit(1776043308.629:3196): avc: denied { write } for pid=26019 comm="syz.8.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 383.413467][ T28] audit: type=1400 audit(1776043308.729:3197): avc: denied { create } for pid=26029 comm="syz.2.5956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.497848][T26039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5960'. [ 383.546273][ T28] audit: type=1400 audit(1776043308.869:3198): avc: denied { execute } for pid=26034 comm="syz.1.5959" dev="hugetlbfs" ino=78567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 383.599017][T26043] netlink: 'syz.8.5961': attribute type 8 has an invalid length. [ 383.606925][T26043] netlink: 'syz.8.5961': attribute type 7 has an invalid length. [ 383.628092][T26043] netlink: 194488 bytes leftover after parsing attributes in process `syz.8.5961'. [ 383.637465][ T28] audit: type=1400 audit(1776043308.869:3199): avc: denied { execute_no_trans } for pid=26034 comm="syz.1.5959" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=78567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 384.077744][ T28] audit: type=1400 audit(1776043309.389:3200): avc: denied { create } for pid=26051 comm="syz.1.5965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.941790][T26115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'. [ 386.089046][T26117] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 386.183435][T26117] SELinux: failed to load policy [ 386.782638][T26157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6008'. [ 387.357053][T26194] bridge0: port 1(erspan0) entered blocking state [ 387.363850][T26194] bridge0: port 1(erspan0) entered disabled state [ 387.376455][T26194] erspan0: entered allmulticast mode [ 387.389544][T26194] erspan0: entered promiscuous mode [ 387.402295][T26194] bridge0: port 1(erspan0) entered blocking state [ 387.408968][T26194] bridge0: port 1(erspan0) entered forwarding state [ 387.427633][T26202] netlink: 'syz.2.6022': attribute type 10 has an invalid length. [ 387.446644][T26202] bridge0: port 1(erspan0) entered disabled state [ 387.453557][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.500860][T26202] bridge0: port 1(erspan0) entered blocking state [ 387.507374][T26202] bridge0: port 1(erspan0) entered forwarding state [ 387.514200][T26202] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.521295][T26202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.575227][T26202] .`: (slave bridge0): Enslaving as an active interface with an up link [ 387.641852][T26209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6029'. [ 387.690547][T26216] loop5: detected capacity change from 0 to 256 [ 387.712173][T26216] msdos: Unknown parameter '01777777777777777777777' [ 388.522062][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 388.522081][ T28] audit: type=1400 audit(1776043313.839:3231): avc: denied { lock } for pid=26231 comm="syz.1.6039" path="socket:[78919]" dev="sockfs" ino=78919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.624689][ T28] audit: type=1400 audit(1776043313.949:3232): avc: denied { ioctl } for pid=26241 comm="syz.3.6041" path="socket:[78929]" dev="sockfs" ino=78929 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.245400][T26253] bond3: entered allmulticast mode [ 390.250584][ T28] audit: type=1400 audit(1776043315.569:3233): avc: denied { getopt } for pid=26248 comm="syz.1.6045" lport=41983 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 390.250694][T26253] vti0: entered allmulticast mode [ 390.285854][T26250] loop5: detected capacity change from 0 to 512 [ 390.319758][T26250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.345354][T26250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.358032][ T28] audit: type=1400 audit(1776043315.669:3234): avc: denied { ioctl } for pid=26254 comm="syz.2.6054" path="socket:[78987]" dev="sockfs" ino=78987 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.369831][T26250] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.424979][T26251] bond3: left allmulticast mode [ 390.429951][T26251] vti0: left allmulticast mode [ 390.552370][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.583912][T26273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.625412][T26273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.658664][T26276] bridge0: port 1(erspan0) entered disabled state [ 390.675143][ T28] audit: type=1400 audit(1776043315.999:3235): avc: denied { map } for pid=26278 comm="syz.5.6056" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=79897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.704254][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6053'. [ 390.727896][ T28] audit: type=1400 audit(1776043315.999:3236): avc: denied { read write } for pid=26278 comm="syz.5.6056" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=79897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.765467][ T28] audit: type=1400 audit(1776043316.049:3237): avc: denied { write } for pid=26281 comm="syz.8.6057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.792960][ T28] audit: type=1400 audit(1776043316.049:3238): avc: denied { nlmsg_write } for pid=26281 comm="syz.8.6057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.914471][ T28] audit: type=1400 audit(1776043316.229:3239): avc: denied { create } for pid=26292 comm="syz.2.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 390.975724][ T28] audit: type=1400 audit(1776043316.259:3240): avc: denied { bind } for pid=26292 comm="syz.2.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.093599][T26302] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6063'. [ 392.046483][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 392.099104][T26358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6086'. [ 392.864911][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6095'. [ 393.259269][T26402] netlink: 'syz.2.6102': attribute type 8 has an invalid length. [ 393.423705][T26407] loop2: detected capacity change from 0 to 128 [ 393.503007][T26407] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.528847][T26407] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.654286][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 393.654304][ T28] audit: type=1400 audit(1776043318.979:3255): avc: denied { read append open } for pid=26406 comm="syz.2.6105" path="/425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 393.773518][ T28] audit: type=1400 audit(1776043319.029:3256): avc: denied { setattr } for pid=26406 comm="syz.2.6105" path="/425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 393.830967][T19410] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.869057][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6110'. [ 394.057866][ T28] audit: type=1400 audit(1776043319.379:3257): avc: denied { mount } for pid=26437 comm="syz.3.6117" name="/" dev="autofs" ino=80110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 394.098758][T26436] netlink: 'syz.8.6116': attribute type 27 has an invalid length. [ 394.802585][T26436] batman_adv: batadv0: Interface deactivated: dummy0 [ 395.249957][T26464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6127'. [ 395.331485][T26436] bridge1: left promiscuous mode [ 395.343440][T26436] bridge1: left allmulticast mode [ 395.362716][T26436] bond2: left promiscuous mode [ 395.373967][T26436] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 395.383668][T26436] bond3: left promiscuous mode [ 395.388561][T26436] vti0: left promiscuous mode [ 395.420272][T26447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.428595][T26447] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.437284][T26447] batman_adv: batadv0: Interface activated: dummy0 [ 395.444694][T26447] net_ratelimit: 10 callbacks suppressed [ 395.444709][T26447] batadv0: mtu less than device minimum [ 395.457081][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.468043][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.479337][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.490248][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.501604][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.512570][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.523556][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.534490][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.545510][T26447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.578883][ T4510] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.607900][ T4510] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.626373][ T28] audit: type=1400 audit(1776043320.949:3258): avc: denied { create } for pid=26475 comm="syz.1.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.636129][ T4510] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.666498][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'. [ 395.687175][ T4510] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.694350][ T28] audit: type=1400 audit(1776043320.949:3259): avc: denied { setopt } for pid=26475 comm="syz.1.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.738784][ T28] audit: type=1400 audit(1776043320.949:3260): avc: denied { write } for pid=26475 comm="syz.1.6132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.778809][ T28] audit: type=1400 audit(1776043321.029:3261): avc: denied { create } for pid=26473 comm="syz.5.6131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.834641][ T28] audit: type=1400 audit(1776043321.049:3263): avc: denied { mounton } for pid=26479 comm="syz.2.6133" path="/file0" dev="autofs" ino=80173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 395.900977][ T28] audit: type=1400 audit(1776043321.049:3262): avc: denied { write } for pid=26473 comm="syz.5.6131" path="socket:[80170]" dev="sockfs" ino=80170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 396.576192][T26515] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.6145'. [ 396.766577][ T28] audit: type=1400 audit(1776043322.089:3264): avc: denied { ioctl } for pid=26524 comm="syz.5.6150" path="socket:[79480]" dev="sockfs" ino=79480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.033667][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6155'. [ 397.534858][T26536] loop2: detected capacity change from 0 to 512 [ 398.473756][T26610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6181'. [ 398.566628][T26614] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6182'. [ 398.685060][T26614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6182'. [ 398.713360][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6182'. [ 399.527129][T26641] loop5: detected capacity change from 0 to 1024 [ 399.583068][T26641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.795508][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.021456][T26660] loop5: detected capacity change from 0 to 512 [ 400.041068][T26660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.066108][T26660] EXT4-fs (loop5): 1 truncate cleaned up [ 400.079943][T26660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.172499][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.193623][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 400.193640][ T28] audit: type=1400 audit(1776043325.519:3268): avc: denied { bind } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.231445][ T28] audit: type=1400 audit(1776043325.549:3269): avc: denied { listen } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.251749][ T28] audit: type=1400 audit(1776043325.549:3270): avc: denied { connect } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.272933][ T28] audit: type=1400 audit(1776043325.579:3271): avc: denied { write } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.294245][ T28] audit: type=1400 audit(1776043325.609:3272): avc: denied { accept } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.351171][ T28] audit: type=1400 audit(1776043325.609:3273): avc: denied { read } for pid=26662 comm="syz.5.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.376626][ T28] audit: type=1326 audit(1776043325.659:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26664 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 400.402305][T26669] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 400.410921][ T28] audit: type=1326 audit(1776043325.659:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26664 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 400.442519][ T28] audit: type=1326 audit(1776043325.659:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26664 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 400.523019][ T28] audit: type=1326 audit(1776043325.659:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26664 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69317c819 code=0x7ffc0000 [ 400.704513][T26700] tipc: Enabled bearer , priority 10 [ 400.765744][T26703] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 400.840486][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6222'. [ 401.284976][T26761] net_ratelimit: 11 callbacks suppressed [ 401.284996][T26761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.442777][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 401.479376][T26770] ipvlan2: entered promiscuous mode [ 401.500251][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 401.671149][T26780] netlink: 'syz.3.6247': attribute type 4 has an invalid length. [ 401.987374][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6249'. [ 402.064502][T26794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26794 comm=syz.1.6254 [ 402.238614][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6261'. [ 402.253934][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6261'. [ 402.984684][T26830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6267'. [ 403.489957][T26846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 403.512964][T26848] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6276'. [ 403.593612][T26846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 403.919611][T26879] netlink: 'syz.3.6291': attribute type 4 has an invalid length. [ 403.974305][T26883] netlink: 'syz.3.6291': attribute type 4 has an invalid length. [ 404.259094][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.322902][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.334298][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.405405][ T4510] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.420998][ T4510] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.460228][ T7959] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.472715][ T7959] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.496574][ T7959] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.506086][ T7959] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.521953][ T7959] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.531646][ T7959] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.653551][T26922] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 404.717560][T26927] tipc: Failed to remove unknown binding: 66,1,1/0:685020023/685020025 [ 405.472022][T26944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6314'. [ 405.507590][T26946] IPv6: Can't replace route, no match found [ 405.589106][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 405.589127][ T28] audit: type=1400 audit(1776043330.909:3347): avc: denied { create } for pid=26960 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 405.631512][ T28] audit: type=1400 audit(1776043330.929:3348): avc: denied { connect } for pid=26960 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 405.675723][T26968] netem: incorrect gi model size [ 405.680012][T26971] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6325'. [ 405.684118][T26968] netem: change failed [ 405.700490][ T28] audit: type=1400 audit(1776043330.949:3349): avc: denied { mounton } for pid=26964 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 405.754840][T26974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6325'. [ 405.900710][ T28] audit: type=1326 audit(1776043331.219:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 405.965709][ T28] audit: type=1326 audit(1776043331.219:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.009519][T26964] chnl_net:caif_netlink_parms(): no params data found [ 406.041581][ T28] audit: type=1326 audit(1776043331.219:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.068963][ T28] audit: type=1326 audit(1776043331.219:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.108653][T26964] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.115939][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.123138][ T28] audit: type=1326 audit(1776043331.219:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.148130][T26964] bridge_slave_0: entered allmulticast mode [ 406.155011][T26964] bridge_slave_0: entered promiscuous mode [ 406.162185][T26964] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.169346][ T28] audit: type=1326 audit(1776043331.219:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.194187][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.201680][T26964] bridge_slave_1: entered allmulticast mode [ 406.208564][T26964] bridge_slave_1: entered promiscuous mode [ 406.216883][ T28] audit: type=1326 audit(1776043331.219:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.8.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265810c819 code=0x7ffc0000 [ 406.253544][T26964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.265103][T26964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.297638][T26964] team0: Port device team_slave_0 added [ 406.304675][T26964] team0: Port device team_slave_1 added [ 406.322301][T26964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.329884][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.380517][T26964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.410837][T26964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.430092][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.493700][T26964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.535395][T26964] hsr_slave_0: entered promiscuous mode [ 406.541705][T26964] hsr_slave_1: entered promiscuous mode [ 406.551193][T26964] debugfs: 'hsr0' already exists in 'hsr' [ 406.557039][T26964] Cannot create hsr debugfs directory [ 406.585514][T27016] netlink: 'syz.8.6339': attribute type 1 has an invalid length. [ 406.616450][T27016] bond4: entered promiscuous mode [ 406.621819][T27016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.691269][T27016] bond4: (slave bridge5): making interface the new active one [ 406.699139][T27016] bridge5: entered promiscuous mode [ 406.706325][T27016] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 406.831446][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.861756][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.916220][T27035] bridge_slave_0: left allmulticast mode [ 406.942647][T27035] bridge_slave_0: left promiscuous mode [ 406.951198][T27035] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.967328][T27035] bridge_slave_1: left allmulticast mode [ 406.979777][T27035] bridge_slave_1: left promiscuous mode [ 406.992282][T27035] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.018633][T27035] bond0: (slave bond_slave_0): Releasing backup interface [ 407.055278][T27035] bond0: (slave bond_slave_1): Releasing backup interface [ 407.078570][T27035] team0: Port device team_slave_0 removed [ 407.100697][T27035] team0: Port device team_slave_1 removed [ 407.116018][T27035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.132856][T27035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.143290][T27035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.152548][T27035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.162823][T27035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 407.325093][T26964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.342323][T26964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.376310][T26964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.395542][T26964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 407.498362][T26964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.520920][T26964] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.531131][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.538752][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.560411][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.567599][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.728465][T26964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.825389][T27117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27117 comm=syz.1.6352 [ 407.847158][T27119] loop5: detected capacity change from 0 to 512 [ 407.862333][T27119] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 407.889425][T27119] EXT4-fs (loop5): 1 truncate cleaned up [ 407.899630][T27119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.035537][T25067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.153785][T27160] __nla_validate_parse: 2 callbacks suppressed [ 408.153804][T27160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6358'. [ 408.257680][T27168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.264991][T27168] IPv6: NLM_F_CREATE should be set when creating new route [ 408.286124][T26964] veth0_vlan: entered promiscuous mode [ 408.341208][T26964] veth1_vlan: entered promiscuous mode [ 408.384533][T27189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6371'. [ 408.441096][T26964] veth0_macvtap: entered promiscuous mode [ 408.483871][T26964] veth1_macvtap: entered promiscuous mode [ 408.497368][T26964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.508959][T26964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.558716][ T4510] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.601801][ T4510] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.624283][T27212] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.6376'. [ 408.634354][ T4510] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.643237][T27212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6376'. [ 408.663678][ T4510] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.933261][T27315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6393'. [ 409.955820][T27319] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.984551][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6395'. [ 410.008472][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6395'. [ 410.058455][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6395'. [ 410.111425][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6395'. [ 410.246709][T27344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6399'. [ 410.706055][T27382] loop6: detected capacity change from 0 to 512 [ 410.725394][T27382] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.6408: missing EA_INODE flag [ 410.802903][T27382] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 410.803082][T27382] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.6408: error while reading EA inode 12 err=-117 [ 410.812301][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 410.812346][ C1] EXT4-fs (loop6): initial error at time 1776043336: ext4_xattr_inode_iget:441: inode 12 [ 410.812393][ C1] EXT4-fs (loop6): last error at time 1776043336: ext4_xattr_inode_iget:441: inode 12 [ 410.918147][T27382] loop6: lost filesystem error report for type 5 error -117 [ 410.918288][T27382] EXT4-fs (loop6): 1 orphan inode deleted [ 410.946176][T27382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.978312][T27393] IPv6: sit2: Disabled Multicast RS [ 410.990584][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 410.990601][ T28] audit: type=1400 audit(1776043336.309:3454): avc: denied { create } for pid=27381 comm="syz.6.6408" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 411.039551][T27382] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 411.077628][T26964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.088600][ T28] audit: type=1400 audit(1776043336.349:3455): avc: denied { create } for pid=27381 comm="syz.6.6408" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.117227][ T28] audit: type=1400 audit(1776043336.349:3456): avc: denied { add_name } for pid=27381 comm="syz.6.6408" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.141754][ T28] audit: type=1400 audit(1776043336.359:3457): avc: denied { remove_name } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.166099][ T28] audit: type=1400 audit(1776043336.359:3458): avc: denied { rename } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 411.233421][ T28] audit: type=1400 audit(1776043336.359:3459): avc: denied { remove_name } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.306462][ T28] audit: type=1400 audit(1776043336.359:3460): avc: denied { rmdir } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.360794][ T28] audit: type=1400 audit(1776043336.359:3461): avc: denied { rename } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.429720][T27414] tipc: Enabling of bearer rejected, already enabled [ 411.431501][ T28] audit: type=1400 audit(1776043336.359:3462): avc: denied { reparent } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.519386][ T28] audit: type=1400 audit(1776043336.359:3463): avc: denied { unlink } for pid=27381 comm="syz.6.6408" name="file0" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 412.002199][T27426] macsec0: entered promiscuous mode [ 412.008686][T27426] syz_tun: entered promiscuous mode [ 412.463035][T27458] tipc: Started in network mode [ 412.468126][T27458] tipc: Node identity ac1414aa, cluster identity 4711 [ 412.475337][T27458] tipc: Enabled bearer , priority 10 [ 412.825453][T27482] macvlan2: entered promiscuous mode [ 412.830846][T27482] macvlan2: entered allmulticast mode [ 412.896092][T27484] netlink: 'syz.6.6442': attribute type 1 has an invalid length. [ 412.982622][T27486] netlink: 'syz.3.6443': attribute type 2 has an invalid length. [ 413.318700][T27503] geneve2: entered promiscuous mode [ 413.327567][ T7959] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.360085][T27502] __nla_validate_parse: 7 callbacks suppressed [ 413.360106][T27502] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6450'. [ 413.382879][ T7277] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.393154][ T7277] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.410742][ T7277] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.492797][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6454'. [ 413.522841][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 413.573854][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6454'. [ 413.597854][T13555] tipc: Node number set to 2886997162 [ 413.598515][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 413.665078][T27525] netlink: 'syz.6.6457': attribute type 1 has an invalid length. [ 413.693815][T27527] netlink: 'syz.8.6459': attribute type 4 has an invalid length. [ 413.867482][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6468'. [ 413.906200][T27548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.940553][T27554] macvlan2: entered promiscuous mode [ 413.947881][T27554] bond5: entered promiscuous mode [ 413.959913][T27554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 413.975737][T27554] bond5: left promiscuous mode [ 414.022836][T27561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6471'. [ 414.032047][T27561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6471'. [ 414.147463][T27567] xt_CT: No such helper "snmp_trap" [ 414.161670][T27567] xt_time: unknown flags 0xc [ 414.189668][T27576] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 414.204934][T27576] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 414.216711][T27576] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 414.242582][T27583] netlink: 'syz.3.6482': attribute type 4 has an invalid length. [ 414.252332][T27583] netlink: 'syz.3.6482': attribute type 4 has an invalid length. [ 414.352263][T27596] xt_hashlimit: size too large, truncated to 1048576 [ 414.448325][T27602] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6488'. [ 414.586995][T27614] team0 (unregistering): Port device bridge1 removed [ 414.715535][T27624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6497'. [ 414.730832][ T7956] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.742768][ T7956] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.755991][ T7956] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.815486][ T7956] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.658444][T27666] loop5: detected capacity change from 0 to 512 [ 415.683920][T27666] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 416.193660][T27684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.231579][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 416.231600][ T28] audit: type=1400 audit(1776043341.549:3519): avc: denied { cmd } for pid=27688 comm="syz.8.6522" path="socket:[83995]" dev="sockfs" ino=83995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 416.299783][T27684] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 416.317077][ T7283] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.426207][T27703] netlink: 'syz.3.6526': attribute type 22 has an invalid length. [ 416.434250][T27703] netlink: 'syz.3.6526': attribute type 22 has an invalid length. [ 416.443688][ T7277] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.500319][T27709] tipc: Failed to remove unknown binding: 66,0,0/2886997039:1975678253/1975678254 [ 416.629673][ T28] audit: type=1400 audit(1776043341.939:3520): avc: denied { create } for pid=27716 comm="syz.3.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 417.574543][T27753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.585487][T27753] macsec1: entered promiscuous mode [ 417.585508][T27753] bond7: entered promiscuous mode [ 417.597933][T27753] bond7: left promiscuous mode [ 417.598067][T27756] ================================================================== [ 417.611043][T27756] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 417.617991][T27756] [ 417.620319][T27756] write to 0xffffffff86c6ac98 of 8 bytes by task 27753 on cpu 1: [ 417.628042][T27756] data_alloc+0x310/0x390 [ 417.632422][T27756] prb_reserve+0x8d7/0xae0 [ 417.636970][T27756] vprintk_store+0x54a/0x910 [ 417.641583][T27756] vprintk_emit+0x1a4/0x600 [ 417.646164][T27756] vprintk_default+0x26/0x30 [ 417.650839][T27756] vprintk+0x1d/0x30 [ 417.654749][T27756] _printk+0x79/0xa0 [ 417.658753][T27756] __netdev_printk+0x310/0x370 [ 417.663735][T27756] netdev_info+0xa6/0xd0 [ 417.668110][T27756] __dev_set_promiscuity+0x1fb/0x3f0 [ 417.673582][T27756] netif_set_promiscuity+0x39/0x90 [ 417.678806][T27756] dev_set_promiscuity+0xc1/0x170 [ 417.683942][T27756] macsec_dev_stop+0x361/0x3c0 [ 417.688796][T27756] __dev_close_many+0x24b/0x450 [ 417.693926][T27756] netif_close_many+0x101/0x2d0 [ 417.698815][T27756] unregister_netdevice_many_notify+0x521/0x1710 [ 417.705505][T27756] unregister_netdevice_many+0x19/0x20 [ 417.710996][T27756] rtnl_newlink_create+0x563/0x650 [ 417.716133][T27756] rtnl_newlink+0x10a0/0x1330 [ 417.720815][T27756] rtnetlink_rcv_msg+0x64b/0x720 [ 417.725765][T27756] netlink_rcv_skb+0x123/0x220 [ 417.730554][T27756] rtnetlink_rcv+0x1c/0x30 [ 417.734982][T27756] netlink_unicast+0x5c0/0x690 [ 417.739767][T27756] netlink_sendmsg+0x5c8/0x6f0 [ 417.744706][T27756] ____sys_sendmsg+0x563/0x5b0 [ 417.749493][T27756] ___sys_sendmsg+0x195/0x1e0 [ 417.754176][T27756] __x64_sys_sendmsg+0xd4/0x160 [ 417.759162][T27756] x64_sys_call+0x194c/0x3020 [ 417.763841][T27756] do_syscall_64+0x12c/0x370 [ 417.768514][T27756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.774413][T27756] [ 417.776732][T27756] read to 0xffffffff86c6ac98 of 16 bytes by task 27756 on cpu 0: [ 417.784453][T27756] _prb_read_valid+0x1bc/0x950 [ 417.789236][T27756] prb_read_valid+0x3c/0x60 [ 417.793764][T27756] console_unlock+0x146/0x280 [ 417.798446][T27756] con_write+0xca/0x1d0 [ 417.802603][T27756] n_tty_write+0x42b/0xc20 [ 417.807157][T27756] file_tty_write+0x378/0x690 [ 417.811845][T27756] tty_write+0x25/0x30 [ 417.816010][T27756] do_iter_readv_writev+0x4fd/0x5a0 [ 417.821219][T27756] vfs_writev+0x2e1/0x900 [ 417.825558][T27756] do_writev+0xe9/0x210 [ 417.829736][T27756] __x64_sys_writev+0x45/0x50 [ 417.834539][T27756] x64_sys_call+0x1c0c/0x3020 [ 417.839406][T27756] do_syscall_64+0x12c/0x370 [ 417.844097][T27756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.850003][T27756] [ 417.852323][T27756] Reported by Kernel Concurrency Sanitizer on: [ 417.858466][T27756] CPU: 0 UID: 0 PID: 27756 Comm: syz.6.6547 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.869578][T27756] Tainted: [W]=WARN [ 417.873379][T27756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.883453][T27756] ================================================================== [ 418.540688][T27660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512