last executing test programs: 4m42.993045053s ago: executing program 32 (id=127): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_setup(0x8, 0x0) r2 = mq_open(&(0x7f00000001c0)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) mq_timedreceive(r2, &(0x7f00000004c0)=""/169, 0xa9, 0x3fffffffffff, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/38, 0x26, 0x6, 0x0) 4m41.929744657s ago: executing program 33 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4m38.811469068s ago: executing program 34 (id=163): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) 4m30.772889355s ago: executing program 35 (id=95): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 4m15.213619846s ago: executing program 36 (id=524): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) 3m44.698706625s ago: executing program 37 (id=1009): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m20.278035339s ago: executing program 4 (id=1343): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/29, 0x1d}, 0x20004}], 0x1, 0x45833af92e4b39ff, 0x0) 3m19.199868964s ago: executing program 4 (id=1363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) 3m18.303799502s ago: executing program 4 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, 0x0, 0x40010) 3m18.111207709s ago: executing program 38 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x6ac03) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3m18.064693821s ago: executing program 4 (id=1380): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3m17.716694852s ago: executing program 4 (id=1395): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff09"], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 3m17.647957564s ago: executing program 4 (id=1386): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/23, 0x17}, 0xfffffff9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m17.615654354s ago: executing program 39 (id=1386): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/23, 0x17}, 0xfffffff9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m58.004815194s ago: executing program 7 (id=1620): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 2m57.931939697s ago: executing program 7 (id=1624): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) socket$netlink(0x10, 0x3, 0x4) read$usbmon(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc81d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="02"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m57.077892764s ago: executing program 7 (id=1659): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x1, 0x0, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x16) 2m57.053581415s ago: executing program 7 (id=1660): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1be, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x181800, 0xfd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 2m56.974910807s ago: executing program 7 (id=1661): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c300e0ff0000000095000000000000003d5f2c6999f6f59f090fe21194843354b1a168b08d6b60abc55a66dee6fde1b7f2c651cd5d239657d7a43356216f4abc79f35851f2051c419e2fc74910a6a90b06e53a4ce43a59391e0cfc920735b82c807fa1416549dcb87e8abac0d3e4aa31e2496efa69191bff32b5f0ca242e9f213a6a"], 0x0, 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x20}}, 0x8000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='(]\x00', &(0x7f0000000180)='./file0\x00', r2) 2m55.699610379s ago: executing program 7 (id=1673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 2m55.600438311s ago: executing program 40 (id=1673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 2m55.383923918s ago: executing program 5 (id=1677): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 2m55.246265503s ago: executing program 5 (id=1680): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) 2m55.175619595s ago: executing program 5 (id=1681): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 2m54.695644151s ago: executing program 5 (id=1688): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1be, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x181800, 0xfd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 2m54.564112445s ago: executing program 5 (id=1691): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x130, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x84, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x2b, [0x4e24, 0x4e23, 0x4e22, 0x4e21, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x2, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x1, 0x0, 0x0, 0x1, 0x1, 0x10, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @local, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x1, 0x3, 0x1c}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400ac1e00011400"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m54.40330249s ago: executing program 5 (id=1693): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x0, r0}, 0x10) 2m54.281714753s ago: executing program 41 (id=1693): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x0, r0}, 0x10) 2m13.197082073s ago: executing program 3 (id=2216): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100001, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2m13.045315868s ago: executing program 3 (id=2219): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0x80102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) unshare(0x26020480) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x221d, 0x771e, 0x16, 0x0, 0x0) 2m12.984360079s ago: executing program 3 (id=2220): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2m12.870543063s ago: executing program 3 (id=2223): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_lower}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@uni_xlateno}, {@fat=@showexec}, {@fat=@umask={'umask', 0x3d, 0x6}}, {@rodir}, {@utf8}, {@fat=@check_strict}, {@shortname_win95}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 2m12.66672271s ago: executing program 3 (id=2226): unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@barrier}, {@i_version}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000807000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000109000/0x1000)=nil, &(0x7f000049c000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000037a000/0x4000)=nil, &(0x7f0000a8f000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00009be000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 2m12.247714334s ago: executing program 3 (id=2234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/97, 0x61}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 2m12.247522574s ago: executing program 42 (id=2234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/97, 0x61}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 56.700313479s ago: executing program 1 (id=3224): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00003b6000/0x2000)=nil, 0x2000, 0x14) 56.520941395s ago: executing program 1 (id=3214): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 56.447413367s ago: executing program 1 (id=3216): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010024bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 55.755953039s ago: executing program 1 (id=3217): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 55.7263198s ago: executing program 1 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 54.698852153s ago: executing program 1 (id=3231): pipe2$9p(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000140)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) 54.675554384s ago: executing program 43 (id=3231): pipe2$9p(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000140)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) 1.058883676s ago: executing program 9 (id=4048): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x8f}, {&(0x7f0000001340)=""/4094, 0xffe}], 0x2, 0x0, 0xffffffffffffff26}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 981.523268ms ago: executing program 9 (id=4053): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x1, 0x20000, {0xa, 0x78, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 870.127332ms ago: executing program 2 (id=4054): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2c, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf866, r0}, 0x90) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x86}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(r1, &(0x7f0000000000)) 783.890545ms ago: executing program 2 (id=4057): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x9}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x54}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 783.705705ms ago: executing program 9 (id=4058): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0x3}, {0xc}}}]}]}, 0x48}}, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) 730.405416ms ago: executing program 2 (id=4060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 710.367497ms ago: executing program 2 (id=4061): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x1c, 0x68, 0x0, 0x7f, 0x1, 0x0, @private=0xa010102, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x7, 0x6}}}}}, 0x0) 693.066738ms ago: executing program 0 (id=4062): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") 692.615818ms ago: executing program 9 (id=4063): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4000}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) pipe2$9p(&(0x7f0000000080), 0x4800) 648.816559ms ago: executing program 2 (id=4064): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 648.522939ms ago: executing program 9 (id=4065): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 595.943471ms ago: executing program 0 (id=4066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 591.784251ms ago: executing program 0 (id=4067): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 591.645411ms ago: executing program 2 (id=4068): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 591.227441ms ago: executing program 9 (id=4069): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x10020, 0x0) shutdown(0xffffffffffffffff, 0x2) mlockall(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 555.291172ms ago: executing program 0 (id=4070): r0 = mq_open(&(0x7f0000000480)='!s\x1c\x1d\x9e\xf3\xd5\xde\'J\x00\x17\x00\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x196, &(0x7f0000000440)={0x0, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000400)={0x7, 0x5, 0x5, 0x3, 0x5, 0x6}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1001}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 527.074543ms ago: executing program 0 (id=4071): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xc) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 455.965255ms ago: executing program 8 (id=4072): syz_socket_connect_nvme_tcp() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 455.756295ms ago: executing program 0 (id=4073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 377.191328ms ago: executing program 8 (id=4074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 329.878389ms ago: executing program 8 (id=4075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 247.942422ms ago: executing program 6 (id=4076): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 247.809052ms ago: executing program 8 (id=4077): r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffc, 0x80, 0x1, 0x8}, 0x0, &(0x7f0000000000)={0x3ff, 0xc, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 247.663312ms ago: executing program 6 (id=4078): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 247.476612ms ago: executing program 8 (id=4079): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 227.012152ms ago: executing program 6 (id=4080): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x5, 0xf, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 189.686354ms ago: executing program 8 (id=4081): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 71.870498ms ago: executing program 6 (id=4082): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x21002, 0x0, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x52, 0x0, 0x0) 53.339008ms ago: executing program 6 (id=4083): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000010) 0s ago: executing program 6 (id=4084): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lstat(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) kernel console output (not intermixed with test programs): 69] EXT4-fs (loop8): can't get journal size [ 224.270256][T13869] EXT4-fs error (device loop8): __ext4_fill_super:5596: inode #2: comm syz.8.2626: casefold flag without casefold feature [ 224.284658][T13869] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 224.286090][T13869] EXT4-fs (loop8): get root inode failed [ 224.301903][T13869] EXT4-fs (loop8): mount failed [ 224.684727][T13896] veth0_macvtap: Caught tx_queue_len zero misconfig [ 225.436428][ T11] page_pool_release_retry() stalled pool shutdown: id 161, 2 inflight 60 sec [ 225.554924][T13947] loop9: detected capacity change from 0 to 1024 [ 225.562571][T13915] loop1: detected capacity change from 0 to 512 [ 225.592380][T13947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.618042][ T28] audit: type=1400 audit(1780013859.979:2103): avc: denied { write } for pid=13946 comm="syz.9.2658" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.651769][T13947] EXT4-fs (loop9): shut down requested (0) [ 225.713348][T13915] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2645: inode has both inline data and extents flags [ 225.725247][ T28] audit: type=1400 audit(1780013860.009:2104): avc: denied { write } for pid=13946 comm="syz.9.2658" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.728770][T13915] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.751376][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.755641][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 225.776030][ C0] EXT4-fs (loop1): initial error at time 1780013860: ext4_orphan_get:1397: inode 15 [ 225.785451][ C0] EXT4-fs (loop1): last error at time 1780013860: ext4_orphan_get:1397: inode 15 [ 225.804900][T13915] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2645: couldn't read orphan inode 15 (err -117) [ 225.833153][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 225.845025][T13915] loop1: lost filesystem error report for type 5 error -117 [ 225.868163][T13958] loop9: detected capacity change from 0 to 512 [ 225.888114][T13956] netlink: 'syz.0.2660': attribute type 30 has an invalid length. [ 225.898071][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 225.934927][T13958] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.950373][ T28] audit: type=1400 audit(1780013860.309:2105): avc: denied { write } for pid=13957 comm="syz.9.2661" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.972803][T13959] netlink: 'syz.0.2660': attribute type 30 has an invalid length. [ 225.992577][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.052511][T13915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.058669][ T3712] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.079481][ T3712] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.106698][ T3712] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.165537][ T3712] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.206398][T13966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.235318][ T28] audit: type=1400 audit(1780013860.559:2106): avc: denied { write } for pid=13914 comm="syz.1.2645" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.351673][ T8568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.414142][T13982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.418869][T13979] loop9: detected capacity change from 0 to 1024 [ 226.430637][T13982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.441959][T13982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.453635][T13982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.483538][T13979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.592030][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.812811][T13992] loop9: detected capacity change from 0 to 4096 [ 226.849705][T13992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.919499][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 226.938859][T14001] netlink: 'syz.2.2676': attribute type 30 has an invalid length. [ 226.990836][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 227.002768][T14004] netlink: 'syz.2.2676': attribute type 30 has an invalid length. [ 227.009303][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.023217][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.063379][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.098125][ T3712] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.431298][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.603902][T14027] pim6reg1: entered promiscuous mode [ 227.617803][T14027] pim6reg1: entered allmulticast mode [ 227.619572][T14028] loop8: detected capacity change from 0 to 512 [ 227.649181][T14028] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2683: iget: bad i_size value: 38620345925642 [ 227.676013][T14028] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.681323][T14028] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2683: couldn't read orphan inode 15 (err -117) [ 227.690538][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 227.690557][ C1] EXT4-fs (loop8): initial error at time 1780013862: ext4_orphan_get:1397: inode 15 [ 227.690602][ C1] EXT4-fs (loop8): last error at time 1780013862: ext4_orphan_get:1397: inode 15 [ 227.695624][T14031] xt_hashlimit: size too large, truncated to 1048576 [ 227.734655][T14028] loop8: lost filesystem error report for type 5 error -117 [ 227.748110][T14028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.037553][T14044] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 228.052267][T14044] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 228.072858][T11672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.592514][T14065] ref_ctr increment failed for inode: 0xb89 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811ba56c00 [ 228.670471][T14064] uprobe: syz.2.2701:14064 failed to unregister, leaking uprobe [ 228.754304][T14071] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2704'. [ 228.783575][T14071] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2704'. [ 229.373318][T14099] ref_ctr increment failed for inode: 0x53c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888112d7ca40 [ 229.523204][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2718'. [ 229.589325][T14098] uprobe: syz.0.2715:14098 failed to unregister, leaking uprobe [ 229.650191][T14110] bridge0: port 3(vlan2) entered blocking state [ 229.675384][T14110] bridge0: port 3(vlan2) entered disabled state [ 229.704172][T14110] vlan2: entered allmulticast mode [ 229.735719][T14110] vlan2: entered promiscuous mode [ 229.749967][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.793053][T14117] bridge_slave_1: left allmulticast mode [ 229.806369][T14117] bridge_slave_1: left promiscuous mode [ 229.818714][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.831024][T14117] bond0: (slave bond_slave_0): Releasing backup interface [ 229.843703][T14117] bond0: (slave bond_slave_1): Releasing backup interface [ 229.887654][T14117] team0: Port device team_slave_0 removed [ 229.905699][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 229.905712][ T28] audit: type=1400 audit(1780013864.259:2108): avc: denied { accept } for pid=14128 comm="syz.9.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.939708][T14117] team0: Port device team_slave_1 removed [ 229.964987][T14117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.020906][T14117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.043633][T14117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.225315][T14147] loop1: detected capacity change from 0 to 4096 [ 230.255228][T14147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.398137][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'. [ 230.416972][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'. [ 230.427916][T14160] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2739'. [ 230.460309][T14143] random: crng reseeded on system resumption [ 230.462444][ T28] audit: type=1400 audit(1780013864.819:2109): avc: denied { read } for pid=14142 comm="syz.8.2732" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 230.534473][ T28] audit: type=1400 audit(1780013864.839:2110): avc: denied { write } for pid=14145 comm="syz.1.2733" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.050799][ T8568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.483138][T14195] __nla_validate_parse: 27 callbacks suppressed [ 231.483167][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 231.504619][T14195] netlink: 'syz.1.2750': attribute type 30 has an invalid length. [ 231.533900][ T3724] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.539981][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 231.551218][ T3724] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.554405][T14195] netlink: 'syz.1.2750': attribute type 30 has an invalid length. [ 231.572549][ T3724] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.600702][ T3724] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.703597][T14203] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2754'. [ 231.790349][ T28] audit: type=1326 audit(1780013866.149:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 231.853906][T14205] xt_hashlimit: invalid rate [ 231.863495][ T28] audit: type=1326 audit(1780013866.149:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 231.913226][ T28] audit: type=1326 audit(1780013866.149:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 231.985676][ T28] audit: type=1326 audit(1780013866.149:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 232.068026][T14212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2758'. [ 232.069585][ T28] audit: type=1326 audit(1780013866.179:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 232.111009][T14212] tipc: Started in network mode [ 232.121802][T14212] tipc: Node identity 9, cluster identity 4711 [ 232.136801][T14212] tipc: Node number set to 9 [ 232.140301][ T28] audit: type=1326 audit(1780013866.179:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 232.217214][ T28] audit: type=1326 audit(1780013866.179:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14206 comm="syz.1.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36fc3dce59 code=0x7ffc0000 [ 233.084950][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2769'. [ 233.910011][T14254] loop1: detected capacity change from 0 to 512 [ 234.073127][T14254] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2775: iget: bad i_size value: 38620345925642 [ 234.099657][T14254] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.108216][T14254] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2775: couldn't read orphan inode 15 (err -117) [ 234.119230][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 234.119479][ C1] EXT4-fs (loop1): initial error at time 1780013868: ext4_orphan_get:1397: inode 15 [ 234.120099][ C1] EXT4-fs (loop1): last error at time 1780013868: ext4_orphan_get:1397: inode 15 [ 234.167690][T14254] loop1: lost filesystem error report for type 5 error -117 [ 234.232578][T14254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.475078][ T8568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.571885][T14285] loop1: detected capacity change from 0 to 512 [ 234.709836][T14285] FAT-fs (loop1): FAT read failed (blocknr 128) [ 235.543366][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2798'. [ 235.617545][T14314] hsr0: entered promiscuous mode [ 235.628226][T14315] hsr_slave_0: left promiscuous mode [ 235.634187][T14315] hsr_slave_1: left promiscuous mode [ 235.653075][T14315] hsr0 (unregistering): left promiscuous mode [ 235.832380][T14328] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 235.889967][T14328] bond1: entered promiscuous mode [ 235.907623][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 235.956104][T14328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.985443][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 236.113175][T14334] bond1: (slave bridge2): making interface the new active one [ 236.132753][T14334] bridge2: entered promiscuous mode [ 236.148079][T14334] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 236.289027][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2812'. [ 236.309707][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2812'. [ 236.560859][T14368] __nla_validate_parse: 2 callbacks suppressed [ 236.560878][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2820'. [ 236.945440][T14389] batadv_slave_1: entered promiscuous mode [ 236.951483][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 236.951499][ T28] audit: type=1326 audit(1780013871.309:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 237.008003][ T28] audit: type=1326 audit(1780013871.349:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 237.083164][ T28] audit: type=1326 audit(1780013871.349:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 237.110634][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2830'. [ 237.137156][ T28] audit: type=1326 audit(1780013871.349:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 237.190582][ T28] audit: type=1326 audit(1780013871.399:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.228728][ T28] audit: type=1326 audit(1780013871.399:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.238428][T14319] loop1: detected capacity change from 0 to 1024 [ 237.275297][ T28] audit: type=1326 audit(1780013871.399:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.352671][ T28] audit: type=1326 audit(1780013871.399:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.423917][ T28] audit: type=1326 audit(1780013871.399:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.485660][ T28] audit: type=1326 audit(1780013871.409:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.9.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc10976d68e code=0x7ffc0000 [ 237.547612][T14319] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.873105][T14432] xt_hashlimit: size too large, truncated to 1048576 [ 237.926567][T14319] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2799: Invalid block bitmap block 0 in block_group 0 [ 237.958065][T14319] loop1: lost filesystem error report for type 5 error -117 [ 237.965610][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 237.979378][ C1] EXT4-fs (loop1): initial error at time 1780013872: ext4_read_block_bitmap_nowait:483 [ 237.989241][ C1] EXT4-fs (loop1): last error at time 1780013872: ext4_read_block_bitmap_nowait:483 [ 238.002051][T14319] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2799: Failed to acquire dquot type 0 [ 238.057807][T14319] loop1: lost filesystem error report for type 5 error -117 [ 238.117205][T14319] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.2799: Freeing blocks not in datazone - block = 0, count = 4096 [ 238.176340][T14319] loop1: lost filesystem error report for type 5 error -117 [ 238.356038][T14319] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2799: Invalid inode bitmap blk 0 in block_group 0 [ 238.380050][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 238.413109][ T49] loop1: lost filesystem error report for type 5 error -117 [ 238.416454][T14319] loop1: lost filesystem error report for type 5 error -117 [ 238.523443][T14319] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 238.655192][T14319] loop1: lost filesystem error report for type 5 error -117 [ 238.690960][T14319] EXT4-fs (loop1): 1 orphan inode deleted [ 238.855715][T14319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.980796][ T8568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.797327][T14527] netlink: 'syz.9.2879': attribute type 1 has an invalid length. [ 239.823723][T14532] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 240.329113][T14535] bond1: (slave veth7): Enslaving as an active interface with a down link [ 240.349054][T14532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.412627][T14536] bond1: (slave veth0_to_bond): making interface the new active one [ 240.421903][T14536] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 240.431812][T14527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.453837][T14537] bond1: entered promiscuous mode [ 240.494668][T14537] veth0_to_bond: entered promiscuous mode [ 240.506916][T14537] bond1: entered allmulticast mode [ 240.512288][T14537] veth0_to_bond: entered allmulticast mode [ 240.528638][T14546] netlink: 'syz.8.2884': attribute type 39 has an invalid length. [ 240.540051][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2883'. [ 240.676962][T14548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2885'. [ 241.183256][T14561] loop1: detected capacity change from 0 to 128 [ 241.354245][T14561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.393387][T14561] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.738088][ T8568] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.145328][T14598] netlink: 'syz.0.2906': attribute type 1 has an invalid length. [ 242.195360][T14598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.207508][T14604] veth1_macvtap: left promiscuous mode [ 242.235670][T14604] macsec0: entered allmulticast mode [ 242.246445][T14606] macvlan2: entered promiscuous mode [ 242.272365][T14606] macvlan2: entered allmulticast mode [ 242.279425][T14606] bond2: entered promiscuous mode [ 242.284948][T14606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.384477][T14606] bond2: left promiscuous mode [ 242.401272][T14609] veth1_macvtap: entered promiscuous mode [ 242.407332][T14609] veth1_macvtap: entered allmulticast mode [ 242.414301][T14609] macsec0: left allmulticast mode [ 242.431023][T14609] veth1_macvtap: left allmulticast mode [ 242.568359][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2914'. [ 242.570224][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 242.587041][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 242.597262][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 242.606609][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 242.647046][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2917'. [ 242.689626][T14630] netlink: 'syz.8.2917': attribute type 7 has an invalid length. [ 242.722637][T14630] netlink: 'syz.8.2917': attribute type 8 has an invalid length. [ 242.735623][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 242.735643][ T28] audit: type=1400 audit(1780013877.089:2193): avc: denied { listen } for pid=14636 comm="syz.1.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.751644][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2917'. [ 242.804746][ T28] audit: type=1400 audit(1780013877.159:2194): avc: denied { name_bind } for pid=14641 comm="syz.1.2924" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 242.875281][ T28] audit: type=1400 audit(1780013877.229:2195): avc: denied { name_bind } for pid=14639 comm="syz.9.2923" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 243.022668][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2929'. [ 243.099002][T14658] loop1: detected capacity change from 0 to 1024 [ 243.113138][T14658] EXT4-fs: inline encryption not supported [ 243.135936][T14658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.149535][T14658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 243.170059][T14658] System zones: 0-1, 3-36 [ 243.193692][T14658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.241016][ T28] audit: type=1400 audit(1780013877.599:2196): avc: denied { write } for pid=14657 comm="syz.1.2931" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.530409][ T8568] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.580718][T14664] tipc: Started in network mode [ 243.594983][T14664] tipc: Node identity 4, cluster identity 4711 [ 243.608454][T14664] tipc: Node number set to 4 [ 244.652530][ T28] audit: type=1400 audit(1780013879.009:2197): avc: denied { connect } for pid=14699 comm="syz.2.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.690360][T14704] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 244.705683][T14704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.055434][T14704] macvlan2: entered promiscuous mode [ 245.065712][T14704] macvlan2: entered allmulticast mode [ 245.112267][T14704] bond8: entered promiscuous mode [ 245.118033][T14710] loop8: detected capacity change from 0 to 512 [ 245.142100][T14704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 245.179630][T14710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.203562][T14704] bond8: left promiscuous mode [ 245.209296][T14710] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.284614][ T28] audit: type=1400 audit(1780013879.639:2198): avc: denied { write } for pid=14709 comm="syz.8.2950" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.319083][T14717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2952'. [ 245.358947][T11672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.444383][ T28] audit: type=1400 audit(1780013879.799:2199): avc: denied { firmware_load } for pid=14727 comm="syz.8.2954" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 245.813117][T14735] loop8: detected capacity change from 0 to 512 [ 245.834083][T14735] EXT4-fs (loop8): orphan cleanup on readonly fs [ 245.872072][T14735] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.2960: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 245.925695][T14735] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 245.932018][T14735] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.2960: Bad quota inode: 4, type: 1 [ 245.941332][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 245.941351][ C0] EXT4-fs (loop8): last error at time 1780013880: ext4_ext_check_inode:521: inode 4 [ 245.968382][T14735] loop8: lost filesystem error report for type 5 error -117 [ 245.968619][T14735] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.018700][T14735] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 246.027468][T14735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.063099][T14735] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 246.182672][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2967'. [ 246.270534][ T28] audit: type=1400 audit(1780013880.629:2200): avc: denied { read } for pid=14755 comm="syz.2.2969" name="file0" dev="tmpfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.400146][T14761] loop9: detected capacity change from 0 to 512 [ 246.428283][T14761] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2971: iget: bad i_size value: 38620345925642 [ 246.458857][T14761] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.459109][T14761] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2971: couldn't read orphan inode 15 (err -117) [ 246.468304][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 246.468325][ C1] EXT4-fs (loop9): initial error at time 1780013880: ext4_orphan_get:1397: inode 15 [ 246.468356][ C1] EXT4-fs (loop9): last error at time 1780013880: ext4_orphan_get:1397: inode 15 [ 246.543952][T14761] loop9: lost filesystem error report for type 5 error -117 [ 246.544651][T14761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.626271][T14735] EXT4-fs warning (device loop8): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 246.626271][T14735] [ 246.650341][T11672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.775331][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.195280][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 248.302602][T14773] loop8: detected capacity change from 0 to 512 [ 248.313431][ T28] audit: type=1400 audit(1780013882.669:2201): avc: denied { map } for pid=14792 comm="syz.0.2984" path="socket:[43799]" dev="sockfs" ino=43799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.345995][ T28] audit: type=1400 audit(1780013882.669:2202): avc: denied { read accept } for pid=14792 comm="syz.0.2984" path="socket:[43799]" dev="sockfs" ino=43799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.409568][T14773] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2976: inode has both inline data and extents flags [ 248.433298][T14773] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.434372][T14773] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2976: couldn't read orphan inode 15 (err -117) [ 248.444425][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 248.444511][ C1] EXT4-fs (loop8): initial error at time 1780013882: ext4_orphan_get:1397: inode 15 [ 248.444611][ C1] EXT4-fs (loop8): last error at time 1780013882: ext4_orphan_get:1397: inode 15 [ 248.494834][T14773] loop8: lost filesystem error report for type 5 error -117 [ 248.502451][T14773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.567147][ T28] audit: type=1400 audit(1780013882.929:2203): avc: denied { write } for pid=14772 comm="syz.8.2976" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.654737][T11672] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.027066][T14829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.055239][T14831] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2995'. [ 250.082187][T14829] team0: Mode changed to "loadbalance" [ 250.174209][T14835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.205350][T14835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.389198][T14847] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3007'. [ 250.781932][ T28] audit: type=1400 audit(1780013885.139:2204): avc: denied { name_bind } for pid=14852 comm="syz.0.3010" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 250.810613][ T28] audit: type=1400 audit(1780013885.159:2205): avc: denied { setopt } for pid=14852 comm="syz.0.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.218223][T14869] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 251.243864][T14869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.253132][ T28] audit: type=1400 audit(1780013885.619:2206): avc: denied { create } for pid=14871 comm="syz.9.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.258024][T14869] vlan4: entered allmulticast mode [ 251.286029][T14869] veth0_to_bond: entered allmulticast mode [ 251.293135][T14869] bond3: (slave vlan4): Opening slave failed [ 251.610533][ T28] audit: type=1400 audit(1780013885.969:2207): avc: denied { shutdown } for pid=14882 comm="syz.9.3021" lport=38142 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.092503][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.128567][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.132134][T14891] loop9: detected capacity change from 0 to 512 [ 252.343513][T14891] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3024: inode has both inline data and extents flags [ 252.361314][T14891] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.367085][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 252.390003][ C0] EXT4-fs (loop9): initial error at time 1780013886: ext4_orphan_get:1397: inode 15 [ 252.407034][ C0] EXT4-fs (loop9): last error at time 1780013886: ext4_orphan_get:1397: inode 15 [ 252.431039][T14891] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3024: couldn't read orphan inode 15 (err -117) [ 252.448036][T14891] loop9: lost filesystem error report for type 5 error -117 [ 252.520432][T14891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.644139][ T28] audit: type=1400 audit(1780013886.989:2208): avc: denied { write } for pid=14890 comm="syz.9.3024" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.910703][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.000150][ T28] audit: type=1400 audit(1780013887.359:2209): avc: denied { cmd } for pid=14913 comm="syz.0.3032" path="socket:[45078]" dev="sockfs" ino=45078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.206876][T14928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3040'. [ 253.245766][T14928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3040'. [ 253.289841][ T28] audit: type=1400 audit(3927497535.656:2210): avc: denied { write } for pid=14929 comm="syz.9.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.608262][ T3724] bridge_slave_1: left allmulticast mode [ 253.624577][ T3724] bridge_slave_1: left promiscuous mode [ 253.639726][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.663422][ T3724] bridge_slave_0: left allmulticast mode [ 253.675487][ T3724] bridge_slave_0: left promiscuous mode [ 253.700728][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.746556][ T28] audit: type=1400 audit(3927497536.106:2211): avc: denied { write } for pid=14965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.790807][ T28] audit: type=1400 audit(3927497536.156:2212): avc: denied { write } for pid=14978 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.833195][ T49] smc: removing ib device syz1 [ 253.839663][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.849273][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.858692][ T3724] bond0 (unregistering): Released all slaves [ 253.866604][ T3724] bond1 (unregistering): Released all slaves [ 253.887339][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 253.913762][T14984] loop1: detected capacity change from 0 to 256 [ 253.937255][T14984] msdos filesystem being mounted at /326/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 253.955997][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 253.977330][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 254.380618][ T28] audit: type=1400 audit(3927497536.746:2213): avc: denied { write } for pid=15009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.465433][ T28] audit: type=1400 audit(3927497536.826:2214): avc: denied { write } for pid=15023 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.544136][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 254.696179][T15040] netlink: 'syz.0.3070': attribute type 2 has an invalid length. [ 254.717819][T15040] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3070'. [ 254.897276][ T28] audit: type=1400 audit(3927497537.256:2215): avc: denied { write } for pid=15038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.963809][ T28] audit: type=1400 audit(3927497537.326:2216): avc: denied { write } for pid=15055 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.965098][T15061] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 254.996407][T14944] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.009140][T14944] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.016566][T14944] bridge_slave_0: entered allmulticast mode [ 255.023359][T14944] bridge_slave_0: entered promiscuous mode [ 255.030587][T14944] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.037879][T14944] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.045143][T14944] bridge_slave_1: entered allmulticast mode [ 255.051860][T14944] bridge_slave_1: entered promiscuous mode [ 255.058694][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 255.081400][T15061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.140541][T15063] vlan2: entered allmulticast mode [ 255.155331][T15063] bond2: (slave vlan2): making interface the new active one [ 255.164776][T15063] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 255.298988][T15067] loop1: detected capacity change from 0 to 8192 [ 255.343784][T15067] vfat filesystem being mounted at /332/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 255.492668][T15060] vlan4: entered promiscuous mode [ 255.500203][T15060] bridge0: entered promiscuous mode [ 255.623193][ T3724] hsr_slave_0: left promiscuous mode [ 255.630494][ T3724] hsr_slave_1: left promiscuous mode [ 255.636209][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.645313][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.698684][ T3724] team0 (unregistering): Port device team_slave_1 removed [ 255.722097][ T3724] team0 (unregistering): Port device team_slave_0 removed [ 255.803146][T14944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.833517][T14944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.857928][T15080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3080'. [ 255.953633][T14944] team0: Port device team_slave_0 added [ 255.979800][T14944] team0: Port device team_slave_1 added [ 256.028327][T14944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.037317][T15091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3082'. [ 256.050068][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.102937][T14944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.107764][T15091] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3082'. [ 256.133542][T14944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.161245][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.187505][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3086'. [ 256.217682][ T28] audit: type=1400 audit(3927497538.586:2217): avc: denied { write } for pid=15092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.227064][T14944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.287249][ T28] audit: type=1400 audit(3927497538.656:2218): avc: denied { write } for pid=15110 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.328698][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 256.348855][T14944] hsr_slave_0: entered promiscuous mode [ 256.373009][T14944] hsr_slave_1: entered promiscuous mode [ 256.381891][T14944] debugfs: 'hsr0' already exists in 'hsr' [ 256.394441][T14944] Cannot create hsr debugfs directory [ 256.432670][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3091'. [ 256.547487][T15135] loop1: detected capacity change from 0 to 1024 [ 256.555223][T15135] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 256.555223][T15135] [ 256.681806][ T28] audit: type=1400 audit(3927497539.046:2219): avc: denied { write } for pid=15140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.750098][ T28] audit: type=1400 audit(3927497539.116:2220): avc: denied { write } for pid=15154 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.904722][T14944] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.933828][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.961195][T14944] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.985205][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.008828][T14944] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.034555][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.059676][T14944] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.083654][T14944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.211836][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.273054][T14944] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.304895][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.312034][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.351539][T15207] macsec0: entered allmulticast mode [ 257.376611][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.383720][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.688728][ T68] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.724450][ T68] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.802393][ T68] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.828678][ T68] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.858588][T14944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.908719][ T68] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.938997][ T68] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.018353][ T68] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.039999][ T68] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.144980][ T68] bridge_slave_1: left allmulticast mode [ 258.151182][ T68] bridge_slave_1: left promiscuous mode [ 258.169801][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.549018][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.569908][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.581231][ T68] bond0 (unregistering): Released all slaves [ 258.598578][ T68] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 258.617926][ T68] veth0_to_bond: left promiscuous mode [ 258.627861][ T68] bond1 (unregistering): Released all slaves [ 258.653487][ T68] bond2 (unregistering): (slave vlan2): Releasing active interface [ 258.685546][ T68] bond2 (unregistering): Released all slaves [ 258.767533][ T68] tipc: Left network mode [ 258.826549][T14944] veth0_vlan: entered promiscuous mode [ 258.921090][ T68] hsr_slave_0: left promiscuous mode [ 258.937395][ T68] hsr_slave_1: left promiscuous mode [ 258.954389][ T68] veth1_macvtap: left promiscuous mode [ 258.964608][ T68] veth0_macvtap: left promiscuous mode [ 258.967198][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 258.967211][ T28] audit: type=1400 audit(3927497541.326:2227): avc: denied { write } for pid=15278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.982286][ T68] veth1_vlan: left promiscuous mode [ 259.055819][ T68] veth0_vlan: left promiscuous mode [ 259.065301][ T28] audit: type=1400 audit(3927497541.426:2228): avc: denied { write } for pid=15289 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.339850][ T68] team0 (unregistering): Port device team_slave_1 removed [ 259.363311][ T68] team0 (unregistering): Port device team_slave_0 removed [ 259.414010][ T68] team0 (unregistering): Port device dummy0 removed [ 259.489284][T14944] veth1_vlan: entered promiscuous mode [ 259.529467][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 259.549111][T14944] veth0_macvtap: entered promiscuous mode [ 259.560962][T14944] veth1_macvtap: entered promiscuous mode [ 259.618024][T14944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.631392][T14944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.667623][ T3710] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.695130][ T3710] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.714094][T15302] loop9: detected capacity change from 0 to 512 [ 259.781732][ T3710] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.799619][ T3712] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.819615][T15302] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3119: iget: bad i_size value: 38620345925642 [ 259.835748][T15302] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.836602][T15302] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3119: couldn't read orphan inode 15 (err -117) [ 259.845826][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 259.845848][ C1] EXT4-fs (loop9): initial error at time 3927497542: ext4_orphan_get:1397: inode 15 [ 259.845880][ C1] EXT4-fs (loop9): last error at time 3927497542: ext4_orphan_get:1397: inode 15 [ 259.909686][ T28] audit: type=1400 audit(3927497542.266:2229): avc: denied { write } for pid=15300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.938308][T15302] loop9: lost filesystem error report for type 5 error -117 [ 259.938979][T15302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.963016][ T68] IPVS: stop unused estimator thread 0... [ 259.981282][ T28] audit: type=1400 audit(3927497542.346:2230): avc: denied { write } for pid=15316 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.062834][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.073123][ T28] audit: type=1400 audit(3927497542.416:2231): avc: denied { write } for pid=15296 comm="syz.9.3119" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.083876][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.108904][T15245] bridge_slave_0: entered allmulticast mode [ 260.115609][T15245] bridge_slave_0: entered promiscuous mode [ 260.131587][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 260.195182][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.230458][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.245232][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.265868][T15245] bridge_slave_1: entered allmulticast mode [ 260.279336][T15245] bridge_slave_1: entered promiscuous mode [ 260.319164][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.363441][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.430613][T15245] team0: Port device team_slave_0 added [ 260.444823][T15245] team0: Port device team_slave_1 added [ 260.494974][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.510536][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.587247][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.609079][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.624606][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.655768][ T28] audit: type=1400 audit(3927497542.986:2232): avc: denied { write } for pid=15334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.684674][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.696081][ T28] audit: type=1400 audit(3927497543.026:2233): avc: denied { write } for pid=15346 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.735987][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 260.800993][T15245] hsr_slave_0: entered promiscuous mode [ 260.807240][T15245] hsr_slave_1: entered promiscuous mode [ 260.813204][T15245] debugfs: 'hsr0' already exists in 'hsr' [ 260.819303][T15245] Cannot create hsr debugfs directory [ 260.975123][ T28] audit: type=1400 audit(3927497543.336:2234): avc: denied { write } for pid=15355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.981982][T15365] team0: Port device vlan2 added [ 261.084217][ T28] audit: type=1400 audit(3927497543.446:2235): avc: denied { write } for pid=15370 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.303812][ T28] audit: type=1400 audit(3927497543.666:2236): avc: denied { write } for pid=15375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.529232][T15245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.552639][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.563131][T15245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.581773][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.598368][T15245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.619060][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.639336][T15245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.673631][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.818901][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.864640][T15245] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.899141][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.906347][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.934704][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.941874][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.253825][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.533907][T15245] veth0_vlan: entered promiscuous mode [ 262.562364][T15245] veth1_vlan: entered promiscuous mode [ 262.602704][T15245] veth0_macvtap: entered promiscuous mode [ 262.610892][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3133'. [ 262.630318][T15245] veth1_macvtap: entered promiscuous mode [ 262.679001][T15245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.708575][T15245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.736658][ T3724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.754008][ T3724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.776352][ T3724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.793901][ T3724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.270312][T15578] loop8: detected capacity change from 0 to 8192 [ 264.301680][T15578] vfat filesystem being mounted at /3/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 265.882874][T15614] loop9: detected capacity change from 0 to 2048 [ 265.902455][T15614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.931167][T15614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.992559][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 265.992577][ T28] audit: type=1400 audit(3927497548.356:2256): avc: denied { write } for pid=15613 comm="syz.9.3156" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.997086][T15617] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 265.999153][ T28] audit: type=1400 audit(3927497548.356:2257): avc: denied { write } for pid=15613 comm="syz.9.3156" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.021960][T15614] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.3156: corrupted in-inode xattr: invalid ea_ino [ 266.085971][T15617] EXT4-fs (loop9): Remounting filesystem read-only [ 266.167523][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.179562][T15620] netlink: 'syz.8.3158': attribute type 1 has an invalid length. [ 266.247349][T15620] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 266.430316][T15632] loop9: detected capacity change from 0 to 8192 [ 266.460554][T15632] vfat filesystem being mounted at /186/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 267.243357][T15640] loop8: detected capacity change from 0 to 512 [ 267.264504][T15648] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3168'. [ 267.298294][T15648] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3168'. [ 267.412290][ T28] audit: type=1326 audit(3927497549.776:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.482898][ T28] audit: type=1326 audit(3927497549.806:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.575243][ T28] audit: type=1326 audit(3927497549.806:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.672346][ T28] audit: type=1326 audit(3927497549.806:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.743166][ T28] audit: type=1326 audit(3927497549.806:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.795649][ T28] audit: type=1326 audit(3927497549.806:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.821774][ T28] audit: type=1326 audit(3927497549.806:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.847831][ T28] audit: type=1326 audit(3927497549.806:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.9.3169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x7ffc0000 [ 267.916980][T15640] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.3166: iget: bad i_size value: 38620345925642 [ 267.956801][T15640] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.965634][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 267.981468][ C0] EXT4-fs (loop8): initial error at time 3927497550: ext4_orphan_get:1397: inode 15 [ 267.990953][ C0] EXT4-fs (loop8): last error at time 3927497550: ext4_orphan_get:1397: inode 15 [ 268.018146][T15663] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 268.028309][T15640] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3166: couldn't read orphan inode 15 (err -117) [ 268.073997][T15663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.101128][T15640] loop8: lost filesystem error report for type 5 error -117 [ 268.146294][T15640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.186843][T15663] bond4: (slave geneve2): making interface the new active one [ 268.231854][T15663] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 268.277240][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.289025][ T68] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.316594][ T68] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.333458][ T68] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.469188][T15667] loop9: detected capacity change from 0 to 512 [ 268.522433][T14944] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.543209][T15667] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.3174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 268.571375][T15667] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 268.571555][T15667] EXT4-fs error (device loop9): ext4_quota_enable:7228: comm syz.9.3174: Bad quota inode: 4, type: 1 [ 268.580913][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 268.580930][ C0] EXT4-fs (loop9): initial error at time 3927497550: ext4_ext_check_inode:521: inode 4 [ 268.580967][ C0] EXT4-fs (loop9): last error at time 3927497550: ext4_ext_check_inode:521: inode 4 [ 268.609389][T15678] netlink: 'syz.0.3180': attribute type 2 has an invalid length. [ 268.627663][T15667] loop9: lost filesystem error report for type 5 error -117 [ 268.627915][T15667] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 268.666198][T15678] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3180'. [ 268.678385][T15667] EXT4-fs (loop9): mount failed [ 268.710409][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3181'. [ 268.950860][T15698] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 269.234619][T15666] loop9: detected capacity change from 0 to 512 [ 269.575922][T15666] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.733813][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.183209][T15719] loop9: detected capacity change from 0 to 128 [ 270.325606][T15706] loop1: detected capacity change from 0 to 512 [ 270.591407][T15734] veth1_macvtap: left promiscuous mode [ 270.612334][T15736] netlink: 'syz.2.3205': attribute type 3 has an invalid length. [ 270.620523][T15734] macsec0: entered allmulticast mode [ 270.628578][T15736] netlink: 'syz.2.3205': attribute type 1 has an invalid length. [ 270.628875][T15706] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.3192: iget: bad i_size value: 38620345925642 [ 270.659239][T15706] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.662316][T15736] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3205'. [ 270.671556][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 270.671578][ C0] EXT4-fs (loop1): initial error at time 3927497553: ext4_orphan_get:1397: inode 15 [ 270.671609][ C0] EXT4-fs (loop1): last error at time 3927497553: ext4_orphan_get:1397: inode 15 [ 270.709991][T15706] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3192: couldn't read orphan inode 15 (err -117) [ 270.724411][T15719] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.732966][T15706] loop1: lost filesystem error report for type 5 error -117 [ 270.857261][T15719] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.931636][T15741] sctp: [Deprecated]: syz.8.3207 (pid 15741) Use of int in max_burst socket option. [ 270.931636][T15741] Use struct sctp_assoc_value instead [ 270.983797][T15706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.068577][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 271.068593][ T28] audit: type=1400 audit(3927497553.426:2294): avc: denied { write } for pid=15718 comm="syz.9.3198" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.106951][T15745] bond3: entered allmulticast mode [ 271.117792][T15744] bond3: left allmulticast mode [ 271.191443][T12503] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.315652][T15743] loop8: detected capacity change from 0 to 512 [ 271.331616][T15750] veth0_vlan: left promiscuous mode [ 271.367637][T15750] veth0_vlan: entered allmulticast mode [ 271.402280][ T28] audit: type=1400 audit(3927497553.766:2295): avc: denied { write } for pid=15705 comm="syz.1.3192" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.446007][T15750] veth0_vlan: entered promiscuous mode [ 271.498319][T15245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.560216][T15743] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.3208: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 271.593815][T15743] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 271.595611][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 271.611337][ C1] EXT4-fs (loop8): initial error at time 3927497553: ext4_ext_check_inode:521: inode 4 [ 271.621055][ C1] EXT4-fs (loop8): last error at time 3927497553: ext4_ext_check_inode:521: inode 4 [ 271.639150][T15743] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.3208: Bad quota inode: 4, type: 1 [ 271.654487][T15743] loop8: lost filesystem error report for type 5 error -117 [ 271.675603][T15743] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.744915][T15743] EXT4-fs (loop8): mount failed [ 272.054624][T15774] netlink: 'syz.1.3216': attribute type 4 has an invalid length. [ 272.089874][T15774] netlink: 'syz.1.3216': attribute type 4 has an invalid length. [ 272.193360][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.200620][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.313161][T15743] loop8: detected capacity change from 0 to 512 [ 272.405744][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.443237][T15774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.566725][T15743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 272.603333][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.635435][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.663499][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.688580][ T68] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.770966][T14944] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.904982][T15782] loop8: detected capacity change from 0 to 8192 [ 272.922361][T15782] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.935752][T15782] vfat filesystem being mounted at /19/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 274.140461][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.147838][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.155183][T15804] bridge_slave_0: entered allmulticast mode [ 274.161884][T15804] bridge_slave_0: entered promiscuous mode [ 274.169350][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.176528][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.183921][T15804] bridge_slave_1: entered allmulticast mode [ 274.201076][T15804] bridge_slave_1: entered promiscuous mode [ 274.215505][ T3705] bridge_slave_1: left allmulticast mode [ 274.227081][ T3705] bridge_slave_1: left promiscuous mode [ 274.234642][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.256376][ T3705] bridge_slave_0: left allmulticast mode [ 274.275170][ T3705] bridge_slave_0: left promiscuous mode [ 274.286909][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.324022][T15753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.390791][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.402197][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.426195][ T3705] bond0 (unregistering): Released all slaves [ 274.486642][T15804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.514821][T15804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.617130][T15842] veth1_macvtap: left promiscuous mode [ 274.649458][T15842] macsec0: entered allmulticast mode [ 274.744825][ T28] audit: type=1400 audit(3927497557.106:2296): avc: denied { write } for pid=15845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.810863][ T28] audit: type=1400 audit(3927497557.166:2297): avc: denied { write } for pid=15866 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.877489][ T3705] hsr_slave_0: left promiscuous mode [ 274.889872][ T3705] hsr_slave_1: left promiscuous mode [ 274.896023][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.915881][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.062881][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 275.073186][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 275.697106][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 275.758245][T15804] team0: Port device team_slave_0 added [ 275.783569][T15804] team0: Port device team_slave_1 added [ 275.799277][T15879] xt_hashlimit: size too large, truncated to 1048576 [ 275.878367][T15804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.885486][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.929337][T15804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.940847][T15804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.962129][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.008352][T15804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.071272][ T28] audit: type=1400 audit(3927497558.436:2298): avc: denied { write } for pid=15884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.151654][T15804] hsr_slave_0: entered promiscuous mode [ 276.152462][ T28] audit: type=1400 audit(3927497558.516:2299): avc: denied { write } for pid=15904 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.166226][T15804] hsr_slave_1: entered promiscuous mode [ 276.192232][T15804] debugfs: 'hsr0' already exists in 'hsr' [ 276.218446][T15804] Cannot create hsr debugfs directory [ 276.250066][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 276.479650][T15916] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3257'. [ 276.485224][ T28] audit: type=1400 audit(3927497558.846:2300): avc: denied { write } for pid=15919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.600293][ T28] audit: type=1400 audit(3927497558.966:2301): avc: denied { write } for pid=15935 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.659564][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 276.727922][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 276.843544][T15804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.875201][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.891800][ T28] audit: type=1400 audit(3927497559.256:2302): avc: denied { write } for pid=15947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.898683][T15804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.938122][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.953237][T15804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.964776][ T28] audit: type=1400 audit(3927497559.326:2303): avc: denied { write } for pid=15971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.991010][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.999696][T15804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.008671][T15804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.019225][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 277.129362][T15804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.184172][T15804] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.202918][ T2062] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.210075][ T2062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.232899][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.240055][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.481720][T15804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.763665][T15804] veth0_vlan: entered promiscuous mode [ 277.787610][T15804] veth1_vlan: entered promiscuous mode [ 277.830393][T15804] veth0_macvtap: entered promiscuous mode [ 277.857977][T15804] veth1_macvtap: entered promiscuous mode [ 277.896665][T15804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.932771][T15804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.953483][ T3718] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.981251][ T3718] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.032755][ T3718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.055920][ T3718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.380967][T16044] loop6: detected capacity change from 0 to 512 [ 278.419053][T16044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.455011][T16044] EXT4-fs (loop6): 1 truncate cleaned up [ 278.465398][T16044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.480304][ T28] audit: type=1400 audit(3927497816.848:2304): avc: denied { write } for pid=16043 comm="syz.6.3280" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.678309][T15804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.227687][T16077] loop8: detected capacity change from 0 to 2048 [ 282.242395][T16077] journal_path: Lookup failure for './bus' [ 282.249627][T16077] EXT4-fs: error: could not find journal device path [ 282.321500][ T28] audit: type=1400 audit(3927497820.688:2305): avc: denied { ioctl } for pid=16084 comm="syz.2.3300" path="socket:[50093]" dev="sockfs" ino=50093 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.686057][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 282.805082][T16123] ref_ctr_offset mismatch. inode: 0xea2 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 283.132934][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'. [ 283.191273][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 283.220954][T16141] bond9: entered promiscuous mode [ 283.243674][T16141] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.333310][T16141] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.354465][T16141] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 283.401127][T16141] bond9: (slave sit3): Error -95 calling set_mac_address [ 283.454483][T16154] xt_hashlimit: size too large, truncated to 1048576 [ 285.289062][T16181] loop8: detected capacity change from 0 to 512 [ 285.332368][T16181] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 285.345694][T16181] EXT4-fs (loop8): bad block size 32768 [ 285.681669][T16181] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3336'. [ 286.140300][ T3363] IPVS: starting estimator thread 0... [ 286.157602][T16279] loop6: detected capacity change from 0 to 1024 [ 286.189676][T16279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.214665][ T28] audit: type=1400 audit(3927498080.571:2306): avc: denied { create } for pid=16286 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.223941][T16287] netlink: 'syz.9.3360': attribute type 8 has an invalid length. [ 286.235731][T16280] IPVS: using max 2736 ests per chain, 136800 per kthread [ 286.401972][T15804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.412293][ T28] audit: type=1326 audit(3927498080.781:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16288 comm="syz.9.3361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1097ace59 code=0x0 [ 286.482685][ T3707] IPVS: stop unused estimator thread 0... [ 286.670047][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 286.705656][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 286.992804][T16326] loop6: detected capacity change from 0 to 512 [ 287.039363][T16326] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3376: inode has both inline data and extents flags [ 287.085203][T16326] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.085579][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 287.101319][ C0] EXT4-fs (loop6): initial error at time 3927498081: ext4_orphan_get:1397: inode 15 [ 287.110761][ C0] EXT4-fs (loop6): last error at time 3927498081: ext4_orphan_get:1397: inode 15 [ 287.153810][T16326] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3376: couldn't read orphan inode 15 (err -117) [ 287.166541][T16326] loop6: lost filesystem error report for type 5 error -117 [ 287.170265][T16326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.403519][T15804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.503228][ T28] audit: type=1400 audit(3927498081.861:2308): avc: denied { write } for pid=16334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.658787][ T28] audit: type=1400 audit(3927498082.011:2309): avc: denied { write } for pid=16350 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.873827][ T28] audit: type=1400 audit(3927498082.231:2310): avc: denied { write } for pid=16355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.955119][ T28] audit: type=1400 audit(3927498082.311:2311): avc: denied { write } for pid=16382 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.340672][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3391'. [ 288.362448][T16398] netlink: 'syz.6.3391': attribute type 7 has an invalid length. [ 288.382945][T16398] netlink: 'syz.6.3391': attribute type 8 has an invalid length. [ 288.402923][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3391'. [ 288.499344][ T28] audit: type=1400 audit(3927498082.861:2312): avc: denied { write } for pid=16395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.554384][ T28] audit: type=1400 audit(3927498082.911:2313): avc: denied { write } for pid=16414 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.921924][ T28] audit: type=1400 audit(3927498084.281:2314): avc: denied { write } for pid=16448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.971075][ T28] audit: type=1400 audit(3927498084.331:2315): avc: denied { write } for pid=16463 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.045683][T16442] loop9: detected capacity change from 0 to 512 [ 290.145306][T16442] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 290.163085][T16442] EXT4-fs (loop9): bad block size 32768 [ 290.291493][T16473] loop6: detected capacity change from 0 to 2048 [ 290.293012][T16442] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3401'. [ 290.302822][T16473] journal_path: Lookup failure for './bus' [ 290.318338][T16473] EXT4-fs: error: could not find journal device path [ 290.407973][ T3400] kernel write not supported for file /sysvipc/shm (pid: 3400 comm: kworker/0:5) [ 290.473101][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3411'. [ 292.289192][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3437'. [ 292.320226][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3437'. [ 293.548438][T16573] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.3449' sets config #0 [ 293.571611][ T28] audit: type=1400 audit(3927498087.901:2316): avc: denied { getopt } for pid=16572 comm="syz.9.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.999592][T16562] loop6: detected capacity change from 0 to 512 [ 294.129771][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3455'. [ 294.262011][T16581] bridge0: port 3(gretap0) entered blocking state [ 294.322743][T16581] bridge0: port 3(gretap0) entered disabled state [ 294.395613][T16581] gretap0: entered allmulticast mode [ 294.415751][T16581] gretap0: entered promiscuous mode [ 294.443928][T16581] bridge0: port 3(gretap0) entered blocking state [ 294.445927][T16562] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3443: iget: bad i_size value: 38620345925642 [ 294.451853][T16562] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.456679][T16581] bridge0: port 3(gretap0) entered forwarding state [ 294.507013][T16562] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3443: couldn't read orphan inode 15 (err -117) [ 294.521225][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 294.521325][ C1] EXT4-fs (loop6): initial error at time 3927498088: ext4_orphan_get:1397: inode 15 [ 294.522121][ C1] EXT4-fs (loop6): last error at time 3927498088: ext4_orphan_get:1397: inode 15 [ 294.571647][T16562] loop6: lost filesystem error report for type 5 error -117 [ 294.585997][T16562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.619363][T16589] team0: Device gtp0 is of different type [ 294.748087][ T28] audit: type=1400 audit(3927498089.051:2317): avc: denied { write } for pid=16560 comm="syz.6.3443" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.820491][T15804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.601257][T16601] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3459'. [ 295.840321][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 295.871253][T16628] team1: entered promiscuous mode [ 295.880538][T16628] team1: entered allmulticast mode [ 295.912393][T16628] 8021q: adding VLAN 0 to HW filter on device team1 [ 295.926323][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 295.964289][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3471'. [ 295.970353][T16632] team2: entered promiscuous mode [ 295.995643][T16632] team2: entered allmulticast mode [ 296.027721][T16632] 8021q: adding VLAN 0 to HW filter on device team2 [ 296.048320][T16633] gretap0: entered promiscuous mode [ 296.053760][T16633] macvlan2: entered allmulticast mode [ 296.069948][T16633] gretap0: entered allmulticast mode [ 296.220834][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3477'. [ 296.917026][T16648] loop6: detected capacity change from 0 to 512 [ 296.971246][T16648] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 296.985092][T16648] EXT4-fs (loop6): bad block size 32768 [ 297.107156][T16648] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3478'. [ 298.040926][T16690] loop8: detected capacity change from 0 to 128 [ 298.071218][T16690] msdos: Bad value for 'gid' [ 298.114556][T16690] msdos: Bad value for 'gid' [ 298.178955][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3495'. [ 298.231807][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3495'. [ 298.276031][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3495'. [ 298.525861][T16708] loop8: detected capacity change from 0 to 128 [ 298.532469][T16702] loop6: detected capacity change from 0 to 1024 [ 298.556193][T16702] EXT4-fs: Ignoring removed bh option [ 298.575983][T16708] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 298.662876][T16708] vfat filesystem being mounted at /81/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 298.708303][T16702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.797487][T16708] syz.8.3503: attempt to access beyond end of device [ 298.797487][T16708] loop8: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 298.832772][ T28] audit: type=1400 audit(3927498093.191:2318): avc: denied { write } for pid=16701 comm="syz.6.3499" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.992053][ T28] audit: type=1400 audit(3927498093.351:2319): avc: denied { write } for pid=16701 comm="syz.6.3499" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.138671][T16734] __nla_validate_parse: 1 callbacks suppressed [ 299.138690][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3512'. [ 299.172317][T15804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.189242][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3512'. [ 299.274411][T16742] tipc: Enabling of bearer rejected, failed to enable media [ 299.344630][T16745] loop8: detected capacity change from 0 to 256 [ 299.414605][T16745] vfat filesystem being mounted at /84/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 299.561368][T16752] bridge0: port 3(gretap0) entered blocking state [ 299.619877][T16752] bridge0: port 3(gretap0) entered disabled state [ 299.863324][T16774] xt_hashlimit: size too large, truncated to 1048576 [ 299.883754][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3531'. [ 299.900348][T16778] netlink: 'syz.2.3531': attribute type 7 has an invalid length. [ 299.910093][T16778] netlink: 'syz.2.3531': attribute type 8 has an invalid length. [ 299.927460][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 300.282873][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.308298][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.329030][ T3393] IPVS: starting estimator thread 0... [ 300.425708][T16794] IPVS: using max 2688 ests per chain, 134400 per kthread [ 300.434294][T16800] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3539'. [ 300.623535][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.631180][T16800] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.939327][T16800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.954142][T16800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.274098][T16800] gretap0: left allmulticast mode [ 301.335858][T16803] team0: Port device gtp0 added [ 301.362148][T16806] bridge0: port 3(gretap0) entered blocking state [ 301.369969][T16806] bridge0: port 3(gretap0) entered disabled state [ 301.386772][T16806] gretap0: entered allmulticast mode [ 301.406931][T16806] gretap0: entered promiscuous mode [ 301.423502][T16806] bridge0: port 3(gretap0) entered blocking state [ 301.430064][T16806] bridge0: port 3(gretap0) entered forwarding state [ 301.469294][ T3710] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.481228][ T3710] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.503085][ T3710] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.538446][ T3710] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.554927][ T3710] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.569260][ T3710] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.591653][ T3710] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.607384][ T3710] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.253282][T16831] loop8: detected capacity change from 0 to 4096 [ 302.299507][T16831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.433954][T16837] loop6: detected capacity change from 0 to 128 [ 302.440605][T16837] EXT4-fs: Ignoring removed nobh option [ 302.452416][T16837] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.466604][T16837] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.493236][ T28] audit: type=1400 audit(3927498096.851:2320): avc: denied { write } for pid=16836 comm="syz.6.3553" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.718355][ T28] audit: type=1400 audit(3927498097.081:2321): avc: denied { write } for pid=16836 comm="syz.6.3553" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.942260][T14944] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.997356][T15804] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.061955][T16853] netlink: 'syz.6.3557': attribute type 5 has an invalid length. [ 303.085785][T16853] netlink: 'syz.6.3557': attribute type 5 has an invalid length. [ 303.130776][ T28] audit: type=1326 audit(3927498097.491:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.8.3561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84081ce59 code=0x0 [ 303.222495][T16863] geneve2: entered promiscuous mode [ 303.228139][T16863] geneve2: entered allmulticast mode [ 303.542769][T16878] loop9: detected capacity change from 0 to 1024 [ 303.581356][T16878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.628568][ T28] audit: type=1400 audit(3927498097.991:2323): avc: denied { write } for pid=16877 comm="syz.9.3569" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.678401][ T28] audit: type=1400 audit(3927498097.991:2324): avc: denied { write } for pid=16877 comm="syz.9.3569" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.701354][T16878] EXT4-fs warning (device loop9): ext4_rmdir:3192: inode #11: comm syz.9.3569: empty directory 'file0' has too many links (111) [ 303.746539][ T28] audit: type=1400 audit(3927498097.991:2325): avc: denied { write } for pid=16877 comm="syz.9.3569" name="file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.796851][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.807497][ T28] audit: type=1400 audit(3927498097.991:2326): avc: denied { rename } for pid=16877 comm="syz.9.3569" name="file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.856133][ T28] audit: type=1400 audit(3927498097.991:2327): avc: denied { reparent } for pid=16877 comm="syz.9.3569" name="file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.896198][ T28] audit: type=1400 audit(3927498098.041:2328): avc: denied { write } for pid=16877 comm="syz.9.3569" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.981234][ T28] audit: type=1400 audit(3927498098.341:2329): avc: denied { watch } for pid=16885 comm="syz.9.3571" path="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 304.159614][T16900] xt_hashlimit: size too large, truncated to 1048576 [ 304.554150][ T28] audit: type=1400 audit(3927498098.911:2330): avc: denied { create } for pid=16929 comm="syz.6.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.445821][T16948] loop9: detected capacity change from 0 to 4096 [ 305.472748][T16948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.565639][T16943] loop8: detected capacity change from 0 to 512 [ 305.665524][T12503] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.725590][T16943] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 305.772693][T16943] EXT4-fs (loop8): bad block size 32768 [ 305.966103][T16955] xt_hashlimit: size too large, truncated to 1048576 [ 306.082210][T16943] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3593'. [ 306.200326][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 306.231260][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 306.786416][T16988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3608'. [ 306.826478][T16988] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3608'. [ 306.850848][T16988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3608'. [ 307.401185][T17010] tipc: Started in network mode [ 307.410950][T17010] tipc: Node identity 86b1341925b5, cluster identity 4711 [ 307.422838][T17010] tipc: Enabled bearer , priority 0 [ 307.439937][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3620'. [ 307.451757][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3620'. [ 307.484744][T17010] syzkaller0: entered promiscuous mode [ 307.490372][T17010] syzkaller0: entered allmulticast mode [ 307.497059][T17010] tipc: Resetting bearer [ 307.534241][T17009] tipc: Resetting bearer [ 307.558156][T17009] tipc: Disabling bearer [ 307.667203][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3622'. [ 307.993943][ T28] audit: type=1404 audit(3927498102.351:2331): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 308.067934][ T28] audit: type=1400 audit(3927498102.351:2332): avc: denied { sqpoll } for pid=17003 comm="syz.2.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 308.134617][ T28] audit: type=1400 audit(3927498102.401:2333): avc: denied { create } for pid=17030 comm="syz.8.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 308.192971][ T28] audit: type=1400 audit(3927498102.411:2334): avc: denied { allowed } for pid=17030 comm="syz.8.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 308.254575][ T28] audit: type=1400 audit(3927498102.411:2335): avc: denied { map_create } for pid=17030 comm="syz.8.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 308.297882][ T28] audit: type=1400 audit(3927498102.461:2336): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 308.459248][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3639'. [ 308.506666][T17069] Process accounting resumed [ 309.023285][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 309.023300][ T28] audit: type=1400 audit(3927498103.381:2385): avc: denied { read write } for pid=15804 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.087618][ T28] audit: type=1400 audit(3927498103.431:2386): avc: denied { mount } for pid=17087 comm="syz.0.3651" name="/" dev="autofs" ino=53108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=0 [ 309.096810][T17090] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 309.111121][ T28] audit: type=1400 audit(3927498103.441:2387): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.140769][ T28] audit: type=1400 audit(3927498103.451:2388): avc: denied { open } for pid=17089 comm="syz.6.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 309.160600][ T28] audit: type=1400 audit(3927498103.451:2389): avc: denied { open } for pid=17089 comm="syz.6.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 309.216534][ T28] audit: type=1400 audit(3927498103.451:2390): avc: denied { prog_load } for pid=17089 comm="syz.6.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 309.236020][ T28] audit: type=1400 audit(3927498103.481:2391): avc: denied { create } for pid=17091 comm="syz.8.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 309.256073][ T28] audit: type=1400 audit(3927498103.561:2392): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 309.281046][ T28] audit: type=1400 audit(3927498103.571:2393): avc: denied { prog_load } for pid=17085 comm="syz.2.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 309.317510][ T28] audit: type=1400 audit(3927498103.571:2394): avc: denied { open } for pid=17085 comm="syz.2.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 310.552361][T17168] bond1: entered promiscuous mode [ 310.585485][T17168] ip6gre1: entered promiscuous mode [ 310.595185][T17168] ip6gre1: entered allmulticast mode [ 310.610237][T17168] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 310.664999][T17168] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 310.701728][ T9] IPVS: starting estimator thread 0... [ 310.815733][T17181] IPVS: using max 2736 ests per chain, 136800 per kthread [ 310.934547][T17204] bond10: entered promiscuous mode [ 311.537042][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3713'. [ 311.574792][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3713'. [ 311.949694][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3722'. [ 312.007260][T17251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.060384][T17257] vlan2: entered allmulticast mode [ 312.083362][T17257] bond1: entered allmulticast mode [ 312.168542][T17251] bond1: (slave wireguard0): refused to change device type [ 312.220156][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 312.327691][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 312.347205][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 312.358567][ T2062] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.381722][ T2062] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.401647][ T2062] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.425753][ T2062] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.474371][ T2062] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.501119][ T2062] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.521631][ T2062] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.539405][ T2062] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.679974][T17294] netlink: 'syz.2.3740': attribute type 4 has an invalid length. [ 312.708603][T17294] netlink: 'syz.2.3740': attribute type 4 has an invalid length. [ 312.758117][T17298] xfrm1: entered allmulticast mode [ 312.905236][T17312] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 313.193410][T17327] bond5: entered allmulticast mode [ 313.257608][T17327] macvlan2: entered promiscuous mode [ 313.283619][T17327] macvlan2: entered allmulticast mode [ 313.289920][T17327] bond5: (slave macvlan2): Opening slave failed [ 313.957085][T17300] syz.2.3742 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 313.966186][T17357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.978578][T17357] IPv6: NLM_F_CREATE should be set when creating new route [ 314.041947][T17300] CPU: 0 UID: 0 PID: 17300 Comm: syz.2.3742 Not tainted syzkaller #0 PREEMPT(lazy) [ 314.041992][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.042007][T17300] Call Trace: [ 314.042014][T17300] [ 314.042023][T17300] __dump_stack+0x1d/0x30 [ 314.042069][T17300] dump_stack_lvl+0x95/0xd0 [ 314.042088][T17300] dump_stack+0x15/0x1b [ 314.042109][T17300] dump_header+0x80/0x240 [ 314.042137][T17300] oom_kill_process+0x295/0x350 [ 314.042296][T17300] out_of_memory+0x97d/0xb80 [ 314.042404][T17300] try_charge_memcg+0x62f/0xa10 [ 314.042434][T17300] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 314.042486][T17300] __alloc_frozen_pages_noprof+0x18a/0x350 [ 314.042509][T17300] alloc_pages_mpol+0xb3/0x260 [ 314.042532][T17300] alloc_pages_noprof+0x8f/0x140 [ 314.042567][T17300] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 314.042594][T17300] __kvmalloc_node_noprof+0x3d4/0x640 [ 314.042640][T17300] ? futex_hash_allocate+0x190/0x9a0 [ 314.042670][T17300] ? futex_hash_allocate+0x190/0x9a0 [ 314.042761][T17300] futex_hash_allocate+0x190/0x9a0 [ 314.042797][T17300] ? cap_task_prctl+0x13f/0x6b0 [ 314.042825][T17300] futex_hash_prctl+0xd8/0xf0 [ 314.042860][T17300] __se_sys_prctl+0x4f4/0x1400 [ 314.042891][T17300] __x64_sys_prctl+0x67/0x80 [ 314.042972][T17300] x64_sys_call+0x2533/0x3020 [ 314.042998][T17300] do_syscall_64+0x12c/0x3b0 [ 314.043030][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.043128][T17300] RIP: 0033:0x7f02274dce59 [ 314.043147][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.043170][T17300] RSP: 002b:00007f0225f2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 314.043256][T17300] RAX: ffffffffffffffda RBX: 00007f0227755fa0 RCX: 00007f02274dce59 [ 314.043273][T17300] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 314.043289][T17300] RBP: 00007f0227572d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.043304][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.043318][T17300] R13: 00007f0227756038 R14: 00007f0227755fa0 R15: 00007fffac86a348 [ 314.043335][T17300] [ 314.051581][ T28] kauditd_printk_skb: 401 callbacks suppressed [ 314.051598][ T28] audit: type=1400 audit(3927498108.411:2796): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.067543][T17300] memory: usage 307200kB, limit 307200kB, failcnt 184 [ 314.092202][ T28] audit: type=1400 audit(3927498108.461:2797): avc: denied { mount } for pid=17360 comm="syz.8.3767" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 314.167525][T17300] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 314.276103][ T28] audit: type=1400 audit(3927498108.461:2798): avc: denied { mac_admin } for pid=17360 comm="syz.8.3767" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 314.294306][T17300] kmem: usage 238548kB, limit 9007199254740988kB, failcnt 0 [ 314.374053][T17300] Memory cgroup stats for /syz2: [ 314.374437][T17300] cache 69918720 [ 314.381214][ T28] audit: type=1401 audit(3927498108.461:2799): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 314.386548][ T28] audit: type=1400 audit(3927498108.551:2800): avc: denied { read write } for pid=17360 comm="syz.8.3767" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.399155][T17300] rss 118784 [ 314.513104][T17300] shmem 69836800 [ 314.516906][T17300] mapped_file 81920 [ 314.520780][T17300] dirty 81920 [ 314.524094][T17300] writeback 167936 [ 314.528163][T17300] workingset_refault_anon 3022 [ 314.532973][T17300] workingset_refault_file 1207 [ 314.555724][T17300] swap 90112 [ 314.577370][ T28] audit: type=1400 audit(3927498108.621:2801): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.587132][T17300] swapcached 19603456 [ 314.637651][T17300] pgpgin 197718 [ 314.647072][T17300] pgpgout 180577 [ 314.654111][ T28] audit: type=1400 audit(3927498108.721:2802): avc: denied { create } for pid=17362 comm="syz.0.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 314.670341][T17300] pgfault 215955 [ 314.689723][T17300] pgmajfault 292 [ 314.701886][T17300] inactive_anon 70127616 [ 314.718108][ T28] audit: type=1400 audit(3927498108.721:2803): avc: denied { create } for pid=17362 comm="syz.0.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 314.725018][T17300] active_anon 0 [ 314.755826][T17300] inactive_file 81920 [ 314.766875][T17300] active_file 0 [ 314.767163][ T28] audit: type=1400 audit(3927498108.921:2804): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.801163][T17300] unevictable 0 [ 314.819879][T17300] hierarchical_memory_limit 314572800 [ 314.845361][T17384] netlink: 'syz.9.3777': attribute type 1 has an invalid length. [ 314.848950][ T28] audit: type=1400 audit(3927498108.941:2805): avc: denied { open } for pid=17367 comm="syz.8.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 314.856411][T17300] hierarchical_memsw_limit 9223372036854771712 [ 314.916910][T17384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.925621][T17300] total_cache 69918720 [ 314.929810][T17300] total_rss 118784 [ 314.933565][T17300] total_shmem 69836800 [ 314.937881][T17300] total_mapped_file 81920 [ 314.942343][T17300] total_dirty 81920 [ 314.946383][T17300] total_writeback 167936 [ 314.951145][T17300] total_workingset_refault_anon 3022 [ 314.956834][T17300] total_workingset_refault_file 1207 [ 314.962191][T17300] total_swap 90112 [ 314.966069][T17300] total_swapcached 19603456 [ 314.970632][T17300] total_pgpgin 197718 [ 314.976357][T17300] total_pgpgout 180577 [ 314.980601][T17300] total_pgfault 215955 [ 314.981780][T17389] vlan3: entered allmulticast mode [ 314.984700][T17300] total_pgmajfault 292 [ 314.984712][T17300] total_inactive_anon 70127616 [ 314.999098][T17300] total_active_anon 0 [ 315.003152][T17300] total_inactive_file 81920 [ 315.007824][T17300] total_active_file 0 [ 315.011856][T17300] total_unevictable 0 [ 315.016316][T17300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3742,pid=17299,uid=0 [ 315.026265][T17389] bond2: entered allmulticast mode [ 315.032090][T17300] Memory cgroup out of memory: Killed process 17299 (syz.2.3742) total-vm:96084kB, anon-rss:1332kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 315.143825][T17392] bond2: (slave geneve2): making interface the new active one [ 315.196735][T17392] geneve2: entered allmulticast mode [ 315.243330][T17392] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 315.282324][T16242] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.297766][T16233] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.311807][T16233] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.325504][T16233] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.568950][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3789'. [ 315.593711][T17417] ip6gre1: entered promiscuous mode [ 315.599360][T17417] ip6gre1: entered allmulticast mode [ 315.623253][T17417] netlink: 'syz.9.3789': attribute type 6 has an invalid length. [ 315.631211][T17417] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3789'. [ 316.214266][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3804'. [ 316.230606][T16233] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.239308][T16233] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.247894][T16233] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.263886][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3804'. [ 316.273113][T16233] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.299734][T17499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.376651][T17505] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 317.418411][T16215] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 317.453414][T17511] 8021q: VLANs not supported on gre0 [ 317.547051][T16215] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 317.575086][T17528] netem: change failed [ 317.678681][T17543] __nla_validate_parse: 1 callbacks suppressed [ 317.678700][T17543] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3840'. [ 317.703344][T17543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3840'. [ 318.554738][T17562] netlink: 'syz.0.3850': attribute type 1 has an invalid length. [ 318.577080][T17562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.597733][T17562] vlan5: entered allmulticast mode [ 318.607253][T17562] bond6: entered allmulticast mode [ 318.625347][T17562] bond6: (slave geneve3): making interface the new active one [ 318.633162][T17562] geneve3: entered allmulticast mode [ 318.640166][T17562] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 318.650161][T16242] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.659408][T16242] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.688605][T16242] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.704344][T16242] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.096976][ T28] kauditd_printk_skb: 293 callbacks suppressed [ 319.096993][ T28] audit: type=1400 audit(3927498877.467:3099): avc: denied { create } for pid=17607 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 319.144791][ T28] audit: type=1400 audit(3927498877.487:3100): avc: denied { create } for pid=17607 comm="syz.6.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 319.211435][ T28] audit: type=1400 audit(3927498877.577:3101): avc: denied { read write } for pid=12503 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 319.281793][ T28] audit: type=1400 audit(3927498877.607:3102): avc: denied { open } for pid=17612 comm="syz.9.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 319.352074][ T28] audit: type=1400 audit(3927498877.607:3103): avc: denied { create } for pid=17612 comm="syz.9.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 319.408889][ T28] audit: type=1400 audit(3927498877.607:3104): avc: denied { create } for pid=17612 comm="syz.9.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 319.478195][ T28] audit: type=1400 audit(3927498877.627:3105): avc: denied { read write } for pid=12503 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 319.548681][ T28] audit: type=1400 audit(3927498877.627:3106): avc: denied { prog_load } for pid=17610 comm="syz.0.3874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 319.597924][ T28] audit: type=1400 audit(3927498877.637:3107): avc: denied { prog_load } for pid=17614 comm="syz.9.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 319.635704][ T28] audit: type=1400 audit(3927498877.637:3108): avc: denied { create } for pid=17614 comm="syz.9.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 319.802626][T17653] netlink: 'syz.2.3893': attribute type 1 has an invalid length. [ 320.096494][T17671] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 320.493320][T17703] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 321.974852][T17755] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 321.983624][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3936'. [ 321.985798][T17755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3934'. [ 322.020799][T17755] bond0: entered promiscuous mode [ 322.026041][T17755] bond_slave_0: entered promiscuous mode [ 322.031846][T17755] bond_slave_1: entered promiscuous mode [ 322.037849][T17755] bridge0: port 4(bond0) entered blocking state [ 322.044175][T17755] bridge0: port 4(bond0) entered disabled state [ 322.050753][T17755] bond0: entered allmulticast mode [ 322.056048][T17755] bond_slave_0: entered allmulticast mode [ 322.067038][T17755] bond_slave_1: entered allmulticast mode [ 323.206294][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3958'. [ 323.222854][T17810] macvlan2: entered promiscuous mode [ 323.228484][T17810] bond0: entered promiscuous mode [ 323.233828][T17810] bond_slave_0: entered promiscuous mode [ 323.240587][T17810] bond_slave_1: entered promiscuous mode [ 323.248559][T17810] geneve2: entered promiscuous mode [ 323.254795][T17810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.474965][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3971'. [ 323.550140][T17850] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3974'. [ 323.662365][T17857] netlink: 'syz.6.3978': attribute type 4 has an invalid length. [ 324.394487][ T28] kauditd_printk_skb: 372 callbacks suppressed [ 324.394503][ T28] audit: type=1400 audit(3927498882.757:3481): avc: denied { read write } for pid=12503 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.548207][ T28] audit: type=1400 audit(3927498882.917:3482): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.587827][ T28] audit: type=1400 audit(3927498882.957:3483): avc: denied { read } for pid=17872 comm="syz.8.3982" dev="nsfs" ino=4026532841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 324.623406][ T28] audit: type=1400 audit(3927498882.977:3484): avc: denied { name_bind } for pid=17872 comm="syz.8.3982" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 324.693355][ T28] audit: type=1400 audit(3927498883.057:3485): avc: denied { read write } for pid=12503 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.754161][ T28] audit: type=1400 audit(3927498883.107:3486): avc: denied { read } for pid=17881 comm="syz.9.3985" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 324.843960][ T28] audit: type=1400 audit(3927498883.107:3487): avc: denied { nlmsg_write } for pid=17881 comm="syz.9.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=0 [ 324.906518][ T28] audit: type=1400 audit(3927498883.147:3488): avc: denied { read write } for pid=12503 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 324.971631][ T28] audit: type=1400 audit(3927498883.157:3489): avc: denied { open } for pid=17884 comm="syz.9.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 325.029486][ T28] audit: type=1400 audit(3927498883.157:3490): avc: denied { write } for pid=17884 comm="syz.9.3986" name="kcm" dev="proc" ino=4026534184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 325.510169][T17906] netlink: 'syz.6.3996': attribute type 9 has an invalid length. [ 325.549550][T17906] netlink: 'syz.6.3996': attribute type 6 has an invalid length. [ 325.993518][T17918] bond0: (slave vlan0): Opening slave failed [ 326.050779][T17920] netlink: 'syz.8.4002': attribute type 1 has an invalid length. [ 326.096945][T17920] bond2: entered promiscuous mode [ 326.117025][T17920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.224976][T17929] bond2: (slave bridge3): making interface the new active one [ 326.246312][T17929] bridge3: entered promiscuous mode [ 326.254497][T17929] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 326.369070][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4014'. [ 326.778657][T17986] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.4029'. [ 326.980149][T17994] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 326.989282][T17994] bond7: entered allmulticast mode [ 326.999125][T17994] ip6gretap1: entered promiscuous mode [ 327.006630][T17994] ip6gretap1: entered allmulticast mode [ 327.012512][T17994] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 327.327618][T18020] netlink: 'syz.9.4044': attribute type 11 has an invalid length. [ 327.336538][T18020] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4044'. [ 327.501375][T18039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4052'. [ 327.527717][T18039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.565887][T18039] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.585420][T18039] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 327.631862][T18039] bond8: (slave vti0): Error -95 calling set_mac_address [ 327.673956][T18046] veth9: entered promiscuous mode [ 327.698700][T18046] bond8: (slave veth9): Error -99 calling set_mac_address [ 327.715924][T18050] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4058'. [ 327.728554][T18050] tc_dump_action: action bad kind [ 327.751605][ T9] bridge0: entered promiscuous mode [ 328.004070][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4072'. [ 328.851958][T18084] ================================================================== [ 328.860121][T18084] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 328.868751][T18084] [ 328.871102][T18084] write to 0xffff888103a79520 of 8 bytes by task 18079 on cpu 0: [ 328.878831][T18084] shmem_file_splice_read+0x40e/0x5a0 [ 328.884228][T18084] splice_direct_to_actor+0x26e/0x670 [ 328.889632][T18084] do_splice_direct+0x119/0x1a0 [ 328.894520][T18084] do_sendfile+0x382/0x650 [ 328.898977][T18084] __x64_sys_sendfile64+0x105/0x150 [ 328.904188][T18084] x64_sys_call+0x2dc4/0x3020 [ 328.908899][T18084] do_syscall_64+0x12c/0x3b0 [ 328.913529][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.919443][T18084] [ 328.921787][T18084] write to 0xffff888103a79520 of 8 bytes by task 18084 on cpu 1: [ 328.929518][T18084] shmem_file_splice_read+0x40e/0x5a0 [ 328.934920][T18084] splice_direct_to_actor+0x26e/0x670 [ 328.940322][T18084] do_splice_direct+0x119/0x1a0 [ 328.945212][T18084] do_sendfile+0x382/0x650 [ 328.949645][T18084] __x64_sys_sendfile64+0x105/0x150 [ 328.954855][T18084] x64_sys_call+0x2dc4/0x3020 [ 328.959558][T18084] do_syscall_64+0x12c/0x3b0 [ 328.964230][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.970350][T18084] [ 328.972680][T18084] value changed: 0x000000000000ace6 -> 0x000000000000acea [ 328.979799][T18084] [ 328.982133][T18084] Reported by Kernel Concurrency Sanitizer on: [ 328.988292][T18084] CPU: 1 UID: 0 PID: 18084 Comm: syz.2.4068 Not tainted syzkaller #0 PREEMPT(lazy) [ 328.997687][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.007775][T18084] ==================================================================