last executing test programs: 26.156643134s ago: executing program 2 (id=225): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000005000000", @ANYRES32=r0], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 26.156192174s ago: executing program 2 (id=226): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 26.009859303s ago: executing program 2 (id=230): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) 25.839121272s ago: executing program 2 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 25.762606217s ago: executing program 2 (id=237): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c09}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "0aa4ef40632818b4", "a4af99b36f2afe4cdea2a1ef2c530fe6", "4f4f75db"}, 0x28) 25.643605384s ago: executing program 2 (id=243): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) capset(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000900)={[{@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {}, {@fat=@tz_utc}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@gid}, {@fat=@fmask={'fmask', 0x3d, 0x3511}}, {@fat=@gid}, {@fat=@check_normal}, {@nodots}, {@fat=@nfs}, {@fat=@usefree}]}, 0xfd, 0x1d0, &(0x7f0000000a80)="$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") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.606852976s ago: executing program 32 (id=243): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) capset(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000900)={[{@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {}, {@fat=@tz_utc}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@gid}, {@fat=@fmask={'fmask', 0x3d, 0x3511}}, {@fat=@gid}, {@fat=@check_normal}, {@nodots}, {@fat=@nfs}, {@fat=@usefree}]}, 0xfd, 0x1d0, &(0x7f0000000a80)="$eJzs3UFr02AYB/CnWV1TT7sJohDwstNQP8FEJogBQelBTwrTyyaCu0Qv28fwA/oBZKdeJDKTLS56yKJtav39Ln3S//s2z1tK2kvfvLr17mD//dHbLzc+R5qOItmN3ZiPYiuSOHcSAMA6mZdlfC0rQ/cCACxHh+//b0tuCQBYsOcvXj55kOd7z7IsjTg9KWbFrHqs8keP87272Q9bzazTophtXOT3svZvh7P8Wlyv8/vV/Oxyvhnbd6r8LHv4NG/lk9hf7NIBAAAAAAAAAAAAAAAAAAAAAGAwtyM799v9fXZ22vm0zqujn/YHau3fM46b4/qw2R6oPF7GogAAAAAAAAAAAAAAAAAAAOAfc/Tx08Hrw8M3H5piEhGXn7lKMapfuOf0fsX2NKJHq+MBWl2FIlmNNq5cbHQdnP3RuZK/1nPPj9ZmRCzqPZyXZdlpcHONmAxyZQIAAAAAAAAAAAAAAAAAgP9P86ffX7N0iIYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYADN/f97FMcR0WHwxcmmgy4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfY9AAD//yQlMFE=") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.40851696s ago: executing program 1 (id=652): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x1, 0x8, 0x2020005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x346}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.324533484s ago: executing program 1 (id=656): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.278912817s ago: executing program 1 (id=658): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.174688773s ago: executing program 1 (id=664): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r1) 2.108812177s ago: executing program 3 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.101757177s ago: executing program 1 (id=667): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x147142, 0x0) fallocate(r0, 0x0, 0x9, 0x10001) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc4, 0x80012d58, 0x12d5c}}, 0x44) 2.008284913s ago: executing program 3 (id=670): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000dc0)='>', 0x1}], 0x1}, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142) 1.922176088s ago: executing program 1 (id=672): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000140)) 1.921885338s ago: executing program 3 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair(0x27, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e55dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.658589093s ago: executing program 5 (id=677): inotify_init1(0x0) creat(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 1.570621069s ago: executing program 5 (id=678): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r1) 1.447024406s ago: executing program 5 (id=682): getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x30, 0xffffffffffffffff, 0x7c528000) futex(0x0, 0x88, 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 1.050296339s ago: executing program 0 (id=686): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000e80)='4', 0x1}], 0x1) getdents(r0, &(0x7f0000000100)=""/57, 0x39) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc00c8d4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 956.704325ms ago: executing program 5 (id=687): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20040600) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x6c840, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xb, 0x7ffc0001}]}) lseek(r2, 0x9, 0x2) 956.098815ms ago: executing program 3 (id=689): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_open_dev$MSR(&(0x7f0000000040), 0x420, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 904.333907ms ago: executing program 5 (id=691): r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 813.017843ms ago: executing program 4 (id=693): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) r4 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x1000000, 0x1cf}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xf, 0xc, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x40, 0x7}}) 800.262504ms ago: executing program 0 (id=694): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x4fa3e3ad9948be0d, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4246}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) 788.026404ms ago: executing program 4 (id=695): socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x8, 0xffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0x9}, 0x200, 0x0, 0x4, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0xffffffffffffffff, 0x0) open$dir(0x0, 0x501784, 0x20) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 758.665416ms ago: executing program 4 (id=696): getpid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 728.875797ms ago: executing program 0 (id=697): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) write$cgroup_int(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 496.299771ms ago: executing program 0 (id=698): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) 317.093152ms ago: executing program 0 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x5, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 286.707283ms ago: executing program 0 (id=700): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/130, 0x82}, {0x0}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) 175.99103ms ago: executing program 4 (id=701): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) finit_module(r2, 0x0, 0x3) 114.725433ms ago: executing program 4 (id=702): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 97.273955ms ago: executing program 3 (id=703): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", '\"\vEX', "0100"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 83.800705ms ago: executing program 3 (id=704): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") creat(0x0, 0x4) truncate(0x0, 0x8008) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x45f, &(0x7f0000000d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 66.141106ms ago: executing program 4 (id=705): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000e80)='4', 0x1}], 0x1) getdents(r0, &(0x7f0000000100)=""/57, 0x39) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc00c8d4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 5 (id=706): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) unshare(0x28020480) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 17.431043][ T29] audit: type=1400 audit(1769624592.026:57): avc: denied { transition } for pid=3200 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.435001][ T29] audit: type=1400 audit(1769624592.026:58): avc: denied { noatsecure } for pid=3200 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.437639][ T29] audit: type=1400 audit(1769624592.026:59): avc: denied { write } for pid=3200 comm="sh" path="pipe:[2104]" dev="pipefs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.440787][ T29] audit: type=1400 audit(1769624592.026:60): avc: denied { rlimitinh } for pid=3200 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.443469][ T29] audit: type=1400 audit(1769624592.026:61): avc: denied { siginh } for pid=3200 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.832361][ T29] audit: type=1400 audit(1769624592.426:62): avc: denied { search } for pid=3206 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.854313][ T29] audit: type=1400 audit(1769624592.426:63): avc: denied { search } for pid=3206 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.876869][ T29] audit: type=1400 audit(1769624592.426:64): avc: denied { search } for pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.900777][ T29] audit: type=1400 audit(1769624592.426:65): avc: denied { search } for pid=3206 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.930457][ T29] audit: type=1400 audit(1769624592.526:66): avc: denied { read open } for pid=3207 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 25.063856][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.063871][ T29] audit: type=1400 audit(1769624599.656:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.092788][ T29] audit: type=1400 audit(1769624599.686:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.093508][ T3299] cgroup: Unknown subsys name 'net' [ 25.120387][ T29] audit: type=1400 audit(1769624599.716:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.260469][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.266503][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.395591][ T29] audit: type=1400 audit(1769624599.986:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.419941][ T29] audit: type=1400 audit(1769624599.986:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.440398][ T29] audit: type=1400 audit(1769624599.986:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.460770][ T29] audit: type=1400 audit(1769624599.986:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.468123][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.481209][ T29] audit: type=1400 audit(1769624599.986:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.514476][ T29] audit: type=1400 audit(1769624599.986:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.539559][ T29] audit: type=1400 audit(1769624600.016:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.562747][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.632501][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.649630][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.661418][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.717176][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.770529][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.777597][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.784813][ T3318] bridge_slave_0: entered allmulticast mode [ 26.791219][ T3318] bridge_slave_0: entered promiscuous mode [ 26.797579][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.804638][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.811755][ T3311] bridge_slave_0: entered allmulticast mode [ 26.818129][ T3311] bridge_slave_0: entered promiscuous mode [ 26.828889][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.836048][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.843232][ T3311] bridge_slave_1: entered allmulticast mode [ 26.849540][ T3311] bridge_slave_1: entered promiscuous mode [ 26.866633][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.873712][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.880919][ T3318] bridge_slave_1: entered allmulticast mode [ 26.887379][ T3318] bridge_slave_1: entered promiscuous mode [ 26.895836][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.916565][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.923640][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.930782][ T3315] bridge_slave_0: entered allmulticast mode [ 26.937056][ T3315] bridge_slave_0: entered promiscuous mode [ 26.949161][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.966508][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.973579][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.980868][ T3315] bridge_slave_1: entered allmulticast mode [ 26.987084][ T3315] bridge_slave_1: entered promiscuous mode [ 26.996982][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.014071][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.028170][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.065093][ T3311] team0: Port device team_slave_0 added [ 27.071703][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.081003][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.088018][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.095241][ T3313] bridge_slave_0: entered allmulticast mode [ 27.101704][ T3313] bridge_slave_0: entered promiscuous mode [ 27.108868][ T3318] team0: Port device team_slave_0 added [ 27.117458][ T3311] team0: Port device team_slave_1 added [ 27.124212][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.137836][ T3318] team0: Port device team_slave_1 added [ 27.147452][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.154645][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.162155][ T3313] bridge_slave_1: entered allmulticast mode [ 27.168402][ T3313] bridge_slave_1: entered promiscuous mode [ 27.187917][ T3315] team0: Port device team_slave_0 added [ 27.206164][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.213323][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.220495][ T3316] bridge_slave_0: entered allmulticast mode [ 27.226773][ T3316] bridge_slave_0: entered promiscuous mode [ 27.237374][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.244447][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.251638][ T3316] bridge_slave_1: entered allmulticast mode [ 27.257832][ T3316] bridge_slave_1: entered promiscuous mode [ 27.264761][ T3315] team0: Port device team_slave_1 added [ 27.279918][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.289319][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.296268][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.322221][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.341328][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.348266][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.374165][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.385949][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.395233][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.402245][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.428191][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.443820][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.453216][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.460174][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.486069][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.497064][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.504043][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.530061][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.547418][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.556806][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.563808][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.589745][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.610167][ T3313] team0: Port device team_slave_0 added [ 27.630493][ T3313] team0: Port device team_slave_1 added [ 27.652527][ T3316] team0: Port device team_slave_0 added [ 27.668695][ T3311] hsr_slave_0: entered promiscuous mode [ 27.674655][ T3311] hsr_slave_1: entered promiscuous mode [ 27.685274][ T3316] team0: Port device team_slave_1 added [ 27.691020][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.697937][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.723817][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.738916][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.745869][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.771785][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.801611][ T3315] hsr_slave_0: entered promiscuous mode [ 27.807498][ T3315] hsr_slave_1: entered promiscuous mode [ 27.813340][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.819321][ T3315] Cannot create hsr debugfs directory [ 27.826814][ T3318] hsr_slave_0: entered promiscuous mode [ 27.832805][ T3318] hsr_slave_1: entered promiscuous mode [ 27.838630][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.844397][ T3318] Cannot create hsr debugfs directory [ 27.878095][ T3313] hsr_slave_0: entered promiscuous mode [ 27.884188][ T3313] hsr_slave_1: entered promiscuous mode [ 27.890000][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.895705][ T3313] Cannot create hsr debugfs directory [ 27.901574][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.908490][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.934529][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.945667][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.952619][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.978518][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.032106][ T3316] hsr_slave_0: entered promiscuous mode [ 28.038216][ T3316] hsr_slave_1: entered promiscuous mode [ 28.044132][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.049853][ T3316] Cannot create hsr debugfs directory [ 28.182432][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.191061][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.210447][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.226398][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.256690][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.267032][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.276287][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.284935][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.313177][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.329462][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.338113][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.347000][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.372773][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.386381][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.393498][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.410434][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.419366][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.431559][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.453727][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.460797][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.476470][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.485763][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.494932][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.504208][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.516295][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.523348][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.564277][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.585647][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.598695][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.605780][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.614821][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.621964][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.661875][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.691349][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.702314][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.716894][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.724038][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.742916][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.750021][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.768046][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.783011][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.796384][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.805227][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.815948][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.823072][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.841990][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.849036][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.870057][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.902344][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.909495][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.921632][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.928698][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.953297][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.963677][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.989229][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.028043][ T3315] veth0_vlan: entered promiscuous mode [ 29.038752][ T3311] veth0_vlan: entered promiscuous mode [ 29.053935][ T3315] veth1_vlan: entered promiscuous mode [ 29.081517][ T3311] veth1_vlan: entered promiscuous mode [ 29.098299][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.119204][ T3311] veth0_macvtap: entered promiscuous mode [ 29.132285][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.139726][ T3311] veth1_macvtap: entered promiscuous mode [ 29.167666][ T3316] veth0_vlan: entered promiscuous mode [ 29.182464][ T3315] veth0_macvtap: entered promiscuous mode [ 29.190631][ T3316] veth1_vlan: entered promiscuous mode [ 29.197504][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.207011][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.224471][ T3315] veth1_macvtap: entered promiscuous mode [ 29.230875][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.245837][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.266402][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.283542][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.301636][ T3316] veth0_macvtap: entered promiscuous mode [ 29.311096][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321415][ T3316] veth1_macvtap: entered promiscuous mode [ 29.328509][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.342255][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.359822][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.372774][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.383556][ T1468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.394809][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.415996][ T3313] veth0_vlan: entered promiscuous mode [ 29.424892][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.444470][ T1468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.455480][ T3313] veth1_vlan: entered promiscuous mode [ 29.477155][ T3318] veth0_vlan: entered promiscuous mode [ 29.495949][ T1468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518638][ T3313] veth0_macvtap: entered promiscuous mode [ 29.534971][ T1468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.548198][ T3313] veth1_macvtap: entered promiscuous mode [ 29.549055][ T3488] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 29.565500][ T1468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.574483][ T3318] veth1_vlan: entered promiscuous mode [ 29.611986][ T1468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.621766][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.641052][ T3491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.670201][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.683139][ T3318] veth0_macvtap: entered promiscuous mode [ 29.693904][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.707425][ T3437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.717904][ T3318] veth1_macvtap: entered promiscuous mode [ 29.733619][ T3437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.759866][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.773644][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.803511][ T3437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.822159][ T1468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849064][ T1468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861162][ T1468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.881945][ T1468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.983303][ T3526] loop3: detected capacity change from 0 to 512 [ 29.992630][ T3526] EXT4-fs: Ignoring removed nobh option [ 29.999426][ T3524] loop4: detected capacity change from 0 to 4096 [ 30.017525][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.052784][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.066427][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.077947][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 30.077961][ T29] audit: type=1400 audit(1769624604.666:146): avc: denied { name_connect } for pid=3521 comm="syz.1.14" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 30.080594][ T3526] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.150563][ T29] audit: type=1400 audit(1769624604.746:147): avc: denied { create } for pid=3534 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 30.166356][ T3534] delete_channel: no stack [ 30.175809][ T29] audit: type=1400 audit(1769624604.746:148): avc: denied { execute } for pid=3534 comm="syz.4.17" path="/2/cpu.stat" dev="tmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.198273][ T29] audit: type=1400 audit(1769624604.746:149): avc: denied { bind } for pid=3534 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 30.222461][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.240007][ T29] audit: type=1400 audit(1769624604.786:150): avc: denied { create } for pid=3525 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.288220][ C1] hrtimer: interrupt took 38097 ns [ 30.298501][ T29] audit: type=1400 audit(1769624604.886:151): avc: denied { map_read map_write } for pid=3538 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.344432][ T3537] bridge0: entered promiscuous mode [ 30.351145][ T3537] macvtap1: entered promiscuous mode [ 30.357412][ T3537] macvtap1: entered allmulticast mode [ 30.363314][ T3537] bridge0: entered allmulticast mode [ 30.398820][ T3537] bridge0: port 3(macvtap1) entered blocking state [ 30.407182][ T3537] bridge0: port 3(macvtap1) entered disabled state [ 30.444141][ T3537] bridge0: left allmulticast mode [ 30.450910][ T3537] bridge0: left promiscuous mode [ 30.574915][ T3537] syz.4.19 (3537) used greatest stack depth: 9864 bytes left [ 30.649342][ T29] audit: type=1400 audit(1769624605.236:152): avc: denied { setopt } for pid=3543 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.685751][ T29] audit: type=1400 audit(1769624605.276:153): avc: denied { create } for pid=3545 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.692868][ T3546] Zero length message leads to an empty skb [ 30.731636][ T29] audit: type=1400 audit(1769624605.326:154): avc: denied { setopt } for pid=3547 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.837627][ T29] audit: type=1400 audit(1769624605.426:155): avc: denied { write } for pid=3543 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.176469][ T3568] loop0: detected capacity change from 0 to 128 [ 31.231502][ T3568] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.284799][ T3568] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.361937][ T3562] team_slave_0: entered promiscuous mode [ 31.367980][ T3562] team_slave_1: entered promiscuous mode [ 31.376654][ T3562] macvtap1: entered promiscuous mode [ 31.382464][ T3562] team0: entered promiscuous mode [ 31.407427][ T3572] EXT4-fs (loop0): shut down requested (0) [ 31.419206][ T3562] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 31.437966][ T3562] team0: Device macvtap1 is already an upper device of the team interface [ 31.454663][ T3562] team0: left promiscuous mode [ 31.462707][ T3562] team_slave_0: left promiscuous mode [ 31.468776][ T3562] team_slave_1: left promiscuous mode [ 31.526143][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.812790][ T3579] loop2: detected capacity change from 0 to 512 [ 31.843594][ T3562] syz.1.29 (3562) used greatest stack depth: 9736 bytes left [ 31.874838][ T3579] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.890838][ T3579] EXT4-fs (loop2): mount failed [ 33.124280][ T3621] loop0: detected capacity change from 0 to 512 [ 33.147054][ T3621] EXT4-fs: inline encryption not supported [ 33.153037][ T3621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.168887][ T3621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.177396][ T3621] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.197659][ T3621] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.52: Failed to acquire dquot type 1 [ 33.225119][ T3621] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 33.250952][ T3621] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.52: corrupted inode contents [ 33.263013][ T3621] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.52: mark_inode_dirty error [ 33.274788][ T3621] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.52: corrupted inode contents [ 33.297511][ T3621] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.52: mark_inode_dirty error [ 33.309054][ T3621] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.52: corrupted inode contents [ 33.329085][ T3621] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 33.344620][ T3621] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.52: corrupted inode contents [ 33.356947][ T3621] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.52: mark_inode_dirty error [ 33.368596][ T3621] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 33.400889][ T3621] EXT4-fs (loop0): 1 truncate cleaned up [ 33.410464][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.498341][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.549591][ T3650] batadv_slave_1: entered promiscuous mode [ 33.570667][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 33.753957][ T3649] batadv_slave_1: left promiscuous mode [ 33.767739][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 33.905337][ T3672] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 34.106697][ T3696] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.150418][ T3700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 34.175209][ T3700] veth0_to_team: entered allmulticast mode [ 34.257310][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 34.269304][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 34.388259][ T3733] sctp: [Deprecated]: syz.3.99 (pid 3733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 34.388259][ T3733] Use struct sctp_sack_info instead [ 34.972762][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 34.996590][ T3766] netlink: 'syz.3.111': attribute type 13 has an invalid length. [ 35.042586][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.049868][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.096070][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.107450][ T3766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.193933][ T41] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.203672][ T41] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.221454][ T41] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.231546][ T41] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.594130][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 35.594156][ T29] audit: type=1400 audit(1769624610.186:241): avc: denied { cpu } for pid=3788 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.623796][ T3789] loop2: detected capacity change from 0 to 128 [ 35.669945][ T29] audit: type=1400 audit(1769624610.246:242): avc: denied { mount } for pid=3788 comm="syz.2.120" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.691781][ T29] audit: type=1400 audit(1769624610.256:243): avc: denied { read } for pid=3788 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.770697][ T29] audit: type=1400 audit(1769624610.366:244): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.791660][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.798853][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.826821][ T3794] bridge0: entered allmulticast mode [ 35.838485][ T29] audit: type=1326 audit(1769624610.426:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.861945][ T29] audit: type=1326 audit(1769624610.426:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.885176][ T29] audit: type=1326 audit(1769624610.426:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.908456][ T29] audit: type=1326 audit(1769624610.426:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.931733][ T29] audit: type=1326 audit(1769624610.426:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.956710][ T29] audit: type=1326 audit(1769624610.506:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3796 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857940aeb9 code=0x7ffc0000 [ 35.970393][ T3794] bridge_slave_1: left allmulticast mode [ 35.985649][ T3794] bridge_slave_1: left promiscuous mode [ 35.991326][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.049300][ T3794] bridge_slave_0: left allmulticast mode [ 36.055158][ T3794] bridge_slave_0: left promiscuous mode [ 36.060918][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.340649][ T3803] bond1: entered promiscuous mode [ 36.375707][ T3803] macvlan2: entered promiscuous mode [ 36.381111][ T3803] macvlan2: entered allmulticast mode [ 36.398410][ T3803] bond1: (slave macvlan2): Opening slave failed [ 37.063513][ T3843] capability: warning: `syz.4.140' uses 32-bit capabilities (legacy support in use) [ 37.194941][ T3847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 37.314934][ T3847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 37.395711][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 37.404596][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 37.415219][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 37.424268][ T3852] netlink: 'syz.3.143': attribute type 12 has an invalid length. [ 37.475130][ T3847] macsec1: entered promiscuous mode [ 37.480449][ T3847] bond2: entered promiscuous mode [ 37.485606][ T3847] macsec1: entered allmulticast mode [ 37.490917][ T3847] bond2: entered allmulticast mode [ 37.516077][ T3863] loop4: detected capacity change from 0 to 128 [ 37.531020][ T3858] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 37.559166][ T3437] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.560029][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 37.573501][ T3437] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.576771][ T3852] netlink: 'syz.3.143': attribute type 12 has an invalid length. [ 37.636586][ T3437] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.680703][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 37.720094][ T3437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.731519][ T3868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 37.832851][ T3876] loop1: detected capacity change from 0 to 256 [ 37.867801][ T3876] FAT-fs (loop1): codepage cp932 not found [ 37.883692][ T3874] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 38.823314][ T3912] syz.1.164 (3912) used greatest stack depth: 9488 bytes left [ 39.426668][ T3903] syz.2.161 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 39.440798][ T3903] CPU: 1 UID: 0 PID: 3903 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.440846][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.440861][ T3903] Call Trace: [ 39.440913][ T3903] [ 39.440920][ T3903] __dump_stack+0x1d/0x30 [ 39.440955][ T3903] dump_stack_lvl+0x95/0xd0 [ 39.440987][ T3903] dump_stack+0x15/0x1b [ 39.441013][ T3903] dump_header+0x80/0x240 [ 39.441038][ T3903] oom_kill_process+0x295/0x350 [ 39.441104][ T3903] out_of_memory+0x97d/0xb80 [ 39.441132][ T3903] try_charge_memcg+0x62e/0xa10 [ 39.441162][ T3903] obj_cgroup_charge_pages+0x23/0xc0 [ 39.441209][ T3903] __memcg_kmem_charge_page+0x9e/0x170 [ 39.441241][ T3903] __alloc_frozen_pages_noprof+0x18a/0x350 [ 39.441281][ T3903] alloc_pages_mpol+0xb3/0x260 [ 39.441379][ T3903] alloc_pages_noprof+0x8f/0x130 [ 39.441416][ T3903] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 39.441531][ T3903] __kvmalloc_node_noprof+0x471/0x680 [ 39.441562][ T3903] ? ip_set_alloc+0x24/0x30 [ 39.441593][ T3903] ? ip_set_alloc+0x24/0x30 [ 39.441631][ T3903] ip_set_alloc+0x24/0x30 [ 39.441706][ T3903] hash_netiface_create+0x282/0x740 [ 39.441745][ T3903] ? __pfx_hash_netiface_create+0x10/0x10 [ 39.441796][ T3903] ip_set_create+0x3cf/0x970 [ 39.441911][ T3903] ? __nla_parse+0x40/0x60 [ 39.442035][ T3903] nfnetlink_rcv_msg+0x509/0x5d0 [ 39.442137][ T3903] netlink_rcv_skb+0x123/0x220 [ 39.442172][ T3903] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 39.442213][ T3903] nfnetlink_rcv+0x167/0x1720 [ 39.442272][ T3903] ? __kfree_skb+0x109/0x150 [ 39.442306][ T3903] ? nlmon_xmit+0x4f/0x60 [ 39.442345][ T3903] ? consume_skb+0x49/0x140 [ 39.442413][ T3903] ? nlmon_xmit+0x4f/0x60 [ 39.442471][ T3903] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 39.442521][ T3903] ? __dev_queue_xmit+0x139a/0x1f20 [ 39.442634][ T3903] ? __dev_queue_xmit+0x148/0x1f20 [ 39.442672][ T3903] ? ref_tracker_free+0x37d/0x3e0 [ 39.442713][ T3903] ? __netlink_deliver_tap+0x4dc/0x500 [ 39.442824][ T3903] netlink_unicast+0x5c0/0x690 [ 39.442861][ T3903] netlink_sendmsg+0x5c8/0x6f0 [ 39.442886][ T3903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.442967][ T3903] ____sys_sendmsg+0x5af/0x600 [ 39.443009][ T3903] ___sys_sendmsg+0x195/0x1e0 [ 39.443040][ T3903] __x64_sys_sendmsg+0xd4/0x160 [ 39.443177][ T3903] x64_sys_call+0x17ba/0x3000 [ 39.443209][ T3903] do_syscall_64+0xc0/0x2a0 [ 39.443245][ T3903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.443271][ T3903] RIP: 0033:0x7f857940aeb9 [ 39.443297][ T3903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.443328][ T3903] RSP: 002b:00007f8577e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.443403][ T3903] RAX: ffffffffffffffda RBX: 00007f8579685fa0 RCX: 00007f857940aeb9 [ 39.443418][ T3903] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 39.443432][ T3903] RBP: 00007f8579478c1f R08: 0000000000000000 R09: 0000000000000000 [ 39.443449][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.443464][ T3903] R13: 00007f8579686038 R14: 00007f8579685fa0 R15: 00007fff82cc5478 [ 39.443487][ T3903] [ 39.443517][ T3903] memory: usage 307200kB, limit 307200kB, failcnt 207 [ 39.762061][ T3903] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 39.770099][ T3903] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 39.777386][ T3903] Memory cgroup stats for /syz2: [ 39.777890][ T3903] cache 0 [ 39.785776][ T3903] rss 0 [ 39.788537][ T3903] shmem 0 [ 39.791569][ T3903] mapped_file 0 [ 39.795053][ T3903] dirty 0 [ 39.798000][ T3903] writeback 0 [ 39.801342][ T3903] workingset_refault_anon 54 [ 39.805928][ T3903] workingset_refault_file 0 [ 39.810446][ T3903] swap 184320 [ 39.813723][ T3903] swapcached 0 [ 39.817116][ T3903] pgpgin 14083 [ 39.820514][ T3903] pgpgout 14083 [ 39.823986][ T3903] pgfault 16014 [ 39.827430][ T3903] pgmajfault 28 [ 39.831006][ T3903] inactive_anon 0 [ 39.834748][ T3903] active_anon 0 [ 39.838217][ T3903] inactive_file 0 [ 39.841867][ T3903] active_file 0 [ 39.845384][ T3903] unevictable 0 [ 39.848833][ T3903] hierarchical_memory_limit 314572800 [ 39.854265][ T3903] hierarchical_memsw_limit 9223372036854771712 [ 39.860434][ T3903] total_cache 0 [ 39.864009][ T3903] total_rss 0 [ 39.867390][ T3903] total_shmem 0 [ 39.871024][ T3903] total_mapped_file 0 [ 39.875012][ T3903] total_dirty 0 [ 39.878459][ T3903] total_writeback 0 [ 39.882360][ T3903] total_workingset_refault_anon 54 [ 39.887467][ T3903] total_workingset_refault_file 0 [ 39.892624][ T3903] total_swap 184320 [ 39.896476][ T3903] total_swapcached 0 [ 39.900494][ T3903] total_pgpgin 14083 [ 39.904393][ T3903] total_pgpgout 14083 [ 39.908444][ T3903] total_pgfault 16014 [ 39.912536][ T3903] total_pgmajfault 28 [ 39.916504][ T3903] total_inactive_anon 0 [ 39.920771][ T3903] total_active_anon 0 [ 39.924996][ T3903] total_inactive_file 0 [ 39.929147][ T3903] total_active_file 0 [ 39.933146][ T3903] total_unevictable 0 [ 39.937145][ T3903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.161,pid=3902,uid=0 [ 39.951826][ T3903] Memory cgroup out of memory: Killed process 3902 (syz.2.161) total-vm:96048kB, anon-rss:1204kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 40.114671][ T3903] syz.2.161 (3903) used greatest stack depth: 7232 bytes left [ 40.447615][ T3974] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 40.456346][ T3974] ref_ctr increment failed for inode: 0x103 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810a4a5e80 [ 40.667385][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 40.667401][ T29] audit: type=1400 audit(1769624615.256:310): avc: denied { create } for pid=3983 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.720227][ T29] audit: type=1400 audit(1769624615.266:311): avc: denied { create } for pid=3983 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 40.739598][ T29] audit: type=1400 audit(1769624615.266:312): avc: denied { write } for pid=3983 comm="syz.1.192" path="socket:[6014]" dev="sockfs" ino=6014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 40.762666][ T29] audit: type=1400 audit(1769624615.266:313): avc: denied { listen } for pid=3983 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.839288][ T3989] loop4: detected capacity change from 0 to 8192 [ 40.852588][ T3989] ======================================================= [ 40.852588][ T3989] WARNING: The mand mount option has been deprecated and [ 40.852588][ T3989] and is ignored by this kernel. Remove the mand [ 40.852588][ T3989] option from the mount to silence this warning. [ 40.852588][ T3989] ======================================================= [ 40.900262][ T29] audit: type=1400 audit(1769624615.496:314): avc: denied { sqpoll } for pid=3990 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.944242][ T3989] syz.4.193: attempt to access beyond end of device [ 40.944242][ T3989] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 40.958185][ T3989] Buffer I/O error on dev loop4, logical block 57847, async page read [ 40.967744][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 41.006958][ T29] audit: type=1400 audit(1769624615.596:315): avc: denied { setopt } for pid=4001 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.053975][ T4006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.201'. [ 41.066433][ T29] audit: type=1400 audit(1769624615.626:316): avc: denied { create } for pid=4003 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.086619][ T29] audit: type=1400 audit(1769624615.646:317): avc: denied { create } for pid=4005 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 41.145337][ T29] audit: type=1400 audit(1769624615.736:318): avc: denied { connect } for pid=4011 comm="syz.4.203" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.191291][ T4016] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 41.195919][ T29] audit: type=1400 audit(1769624615.736:319): avc: denied { write } for pid=4011 comm="syz.4.203" path="socket:[6084]" dev="sockfs" ino=6084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.213947][ T4016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.248820][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 41.257634][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 41.270820][ T4016] macsec1: entered promiscuous mode [ 41.276050][ T4016] bond1: entered promiscuous mode [ 41.281296][ T4016] macsec1: entered allmulticast mode [ 41.286686][ T4016] bond1: entered allmulticast mode [ 41.444173][ T4036] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.214'. [ 41.484818][ T4033] loop0: detected capacity change from 0 to 8192 [ 41.592541][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 41.604186][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 41.625367][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 42.100940][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 42.174910][ T4077] loop1: detected capacity change from 0 to 128 [ 42.193377][ T4077] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 42.439163][ T4094] ref_ctr increment failed for inode: 0x12e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104d80d80 [ 42.451484][ T4089] uprobe: syz.4.235:4089 failed to unregister, leaking uprobe [ 42.556028][ T4105] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 42.609542][ T3437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.638006][ T4112] geneve2: entered promiscuous mode [ 42.643256][ T4112] geneve2: entered allmulticast mode [ 42.651511][ T4112] bond1: (slave geneve2): making interface the new active one [ 42.675353][ T4112] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 42.730664][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.743085][ T3437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.772035][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.790062][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.799033][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.817343][ T3437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.863078][ T4126] loop3: detected capacity change from 0 to 512 [ 42.889158][ T4126] EXT4-fs: Ignoring removed bh option [ 42.898533][ T3437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.924737][ T4126] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 42.943682][ T4126] EXT4-fs (loop3): 1 truncate cleaned up [ 42.968212][ T4126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.019752][ T3437] bridge_slave_1: left allmulticast mode [ 43.025464][ T3437] bridge_slave_1: left promiscuous mode [ 43.031297][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.090844][ T3437] bridge_slave_0: left allmulticast mode [ 43.096556][ T3437] bridge_slave_0: left promiscuous mode [ 43.102319][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.165155][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 43.282949][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.324928][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.338698][ T3437] bond0 (unregistering): Released all slaves [ 43.503208][ T3437] hsr_slave_0: left promiscuous mode [ 43.556365][ T3437] hsr_slave_1: left promiscuous mode [ 43.578441][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.585909][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.635652][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.643180][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.674472][ T4176] loop1: detected capacity change from 0 to 1024 [ 43.689537][ T3437] veth1_macvtap: left promiscuous mode [ 43.703744][ T3437] veth0_macvtap: left promiscuous mode [ 43.717974][ T3437] veth1_vlan: left promiscuous mode [ 43.737258][ T3437] veth0_vlan: left promiscuous mode [ 43.765623][ T4176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 43.902737][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.954977][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.008287][ T4206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.037293][ T3437] team0 (unregistering): Port device team_slave_1 removed [ 44.048068][ T3437] team0 (unregistering): Port device team_slave_0 removed [ 44.062482][ T3437] veth0_to_team (unregistering): left allmulticast mode [ 44.147220][ T4210] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 44.168297][ T4114] chnl_net:caif_netlink_parms(): no params data found [ 44.240595][ T4214] kernel read not supported for file /s (pid: 4214 comm: syz.3.265) [ 44.290730][ T4219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.383482][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.390630][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.402449][ T4114] bridge_slave_0: entered allmulticast mode [ 44.411725][ T4114] bridge_slave_0: entered promiscuous mode [ 44.418653][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.425784][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.434079][ T4114] bridge_slave_1: entered allmulticast mode [ 44.440686][ T4114] bridge_slave_1: entered promiscuous mode [ 44.476632][ T4114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.487165][ T4235] loop3: detected capacity change from 0 to 128 [ 44.521617][ T4235] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 44.588461][ T4235] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 44.602601][ T4114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.676984][ T4235] syz.3.269: attempt to access beyond end of device [ 44.676984][ T4235] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 44.718127][ T4253] bridge0: entered promiscuous mode [ 44.734716][ T4114] team0: Port device team_slave_0 added [ 44.740621][ T4253] bridge0: left promiscuous mode [ 44.759396][ T4114] team0: Port device team_slave_1 added [ 44.776108][ T4235] syz.3.269: attempt to access beyond end of device [ 44.776108][ T4235] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 44.800655][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.807608][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.833670][ T4114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.871152][ T4235] syz.3.269: attempt to access beyond end of device [ 44.871152][ T4235] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 44.931274][ T4235] syz.3.269: attempt to access beyond end of device [ 44.931274][ T4235] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 44.952369][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.959327][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.985348][ T4114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.030039][ T4235] syz.3.269: attempt to access beyond end of device [ 45.030039][ T4235] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 45.094647][ T4114] hsr_slave_0: entered promiscuous mode [ 45.100885][ T4114] hsr_slave_1: entered promiscuous mode [ 45.106837][ T4114] debugfs: 'hsr0' already exists in 'hsr' [ 45.112672][ T4114] Cannot create hsr debugfs directory [ 45.113688][ T4235] syz.3.269: attempt to access beyond end of device [ 45.113688][ T4235] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 45.232171][ T4235] syz.3.269: attempt to access beyond end of device [ 45.232171][ T4235] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 45.280083][ T4235] syz.3.269: attempt to access beyond end of device [ 45.280083][ T4235] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 45.300289][ T4235] syz.3.269: attempt to access beyond end of device [ 45.300289][ T4235] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 45.330461][ T4114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.354096][ T4114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.434933][ T4114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.452109][ T4114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.580570][ T4114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.596599][ T4114] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.606209][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.613290][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.668687][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.675790][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.748828][ T4114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.754541][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 45.754556][ T29] audit: type=1400 audit(1769624620.336:350): avc: denied { connect } for pid=4305 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.759268][ T4114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.769933][ T29] audit: type=1400 audit(1769624620.356:351): avc: denied { read } for pid=4305 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.910377][ T4114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.218959][ T29] audit: type=1400 audit(1769624620.426:352): avc: denied { bind } for pid=4305 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.244594][ T4114] veth0_vlan: entered promiscuous mode [ 46.263003][ T4114] veth1_vlan: entered promiscuous mode [ 46.287637][ T4114] veth0_macvtap: entered promiscuous mode [ 46.321749][ T4114] veth1_macvtap: entered promiscuous mode [ 46.346825][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.366141][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.392494][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.402486][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.459760][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.479696][ T4288] syz.4.282 (4288) used greatest stack depth: 6208 bytes left [ 46.500848][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.685448][ T29] audit: type=1400 audit(1769624621.266:353): avc: denied { read } for pid=4350 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.034732][ T29] audit: type=1400 audit(1769624621.626:354): avc: denied { create } for pid=4363 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.054191][ T29] audit: type=1400 audit(1769624621.626:355): avc: denied { listen } for pid=4363 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.172668][ T29] audit: type=1400 audit(1769624621.626:356): avc: denied { accept } for pid=4363 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.192048][ T29] audit: type=1400 audit(1769624621.626:357): avc: denied { shutdown } for pid=4363 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.439784][ T29] audit: type=1400 audit(1769624622.026:358): avc: denied { create } for pid=4367 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.501617][ T29] audit: type=1400 audit(1769624622.026:359): avc: denied { bind } for pid=4367 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.646740][ T4375] __nla_validate_parse: 3 callbacks suppressed [ 47.646757][ T4375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.303'. [ 48.127866][ T4395] netlink: 'syz.5.310': attribute type 27 has an invalid length. [ 48.183607][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.190830][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.273940][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.291183][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.387871][ T4401] loop3: detected capacity change from 0 to 512 [ 48.395069][ T4401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.451671][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.469980][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.590043][ T4396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.605551][ T1468] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.616260][ T4401] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.624276][ T4401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 48.634396][ T1468] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.739262][ T4401] System zones: 0-1, 15-15, 18-18, 34-34 [ 48.745706][ T4401] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.752264][ T4401] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.766900][ T4401] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 48.788791][ T4401] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.312: bg 0: block 40: padding at end of block bitmap is not set [ 48.789969][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.818640][ T4401] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 48.829178][ T4401] EXT4-fs (loop3): 1 truncate cleaned up [ 48.836199][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.849306][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.882032][ T4419] loop1: detected capacity change from 0 to 1024 [ 48.889923][ T4401] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.891369][ T4419] EXT4-fs: Ignoring removed orlov option [ 48.897889][ T4401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 48.929181][ T4419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.966492][ T4428] loop4: detected capacity change from 0 to 512 [ 48.974862][ T4428] EXT4-fs: Ignoring removed oldalloc option [ 48.995798][ T4428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.321: Parent and EA inode have the same ino 15 [ 49.021131][ T4428] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.040640][ T4428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.321: Parent and EA inode have the same ino 15 [ 49.065447][ T4428] EXT4-fs (loop4): 1 orphan inode deleted [ 49.082568][ T4428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.143288][ T4428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'. [ 49.173384][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.182713][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.205008][ T4436] netlink: 'syz.1.323': attribute type 2 has an invalid length. [ 49.213699][ T4436] netlink: 'syz.1.323': attribute type 8 has an invalid length. [ 49.224486][ T4436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.323'. [ 49.245359][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.271674][ T4440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.836149][ T4461] loop0: detected capacity change from 0 to 32768 [ 49.880231][ T4465] netlink: 'syz.5.337': attribute type 2 has an invalid length. [ 49.888644][ T4465] netlink: 'syz.5.337': attribute type 8 has an invalid length. [ 49.898021][ T4465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.337'. [ 49.908333][ T3304] loop0: p1 p2 p3 < p5 > [ 49.912885][ T3304] loop0: p1 size 242222080 extends beyond EOD, truncated [ 49.922158][ T3304] loop0: p2 start 16777215 is beyond EOD, truncated [ 49.934564][ T4461] loop0: p1 p2 p3 < p5 > [ 49.940461][ T4461] loop0: p1 size 242222080 extends beyond EOD, truncated [ 49.955898][ T4461] loop0: p2 start 16777215 is beyond EOD, truncated [ 50.011376][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 50.021987][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.032990][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.050407][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 50.061545][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.072844][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.116169][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 50.125071][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 50.247207][ T4482] loop1: detected capacity change from 0 to 164 [ 50.264971][ T4482] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.282871][ T4482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 50.450390][ T4502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.525506][ T4502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.604086][ T4502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.639394][ T41] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 50.653383][ T4502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.698249][ T3323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.719157][ T3323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.735258][ T3323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.755585][ T3323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.860601][ T4525] loop5: detected capacity change from 0 to 1024 [ 50.868141][ T4525] EXT4-fs: Ignoring removed orlov option [ 50.878578][ T4525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.132794][ T4114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.281399][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 51.281414][ T29] audit: type=1400 audit(1769624625.876:407): avc: denied { connect } for pid=4542 comm="syz.5.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.429138][ T4546] openvswitch: netlink: Missing key (keys=40, expected=100) [ 51.455561][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.463852][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.472215][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.480335][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.517525][ T29] audit: type=1400 audit(1769624626.086:408): avc: denied { mount } for pid=4551 comm="syz.0.368" name="/" dev="configfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 51.540089][ T29] audit: type=1400 audit(1769624626.086:409): avc: denied { search } for pid=4551 comm="syz.0.368" name="/" dev="configfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.562201][ T29] audit: type=1400 audit(1769624626.086:410): avc: denied { mounton } for pid=4551 comm="syz.0.368" path="/" dev="configfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.644647][ T4561] loop5: detected capacity change from 0 to 512 [ 51.648818][ T4562] loop3: detected capacity change from 0 to 1024 [ 51.660871][ T4561] EXT4-fs: Ignoring removed oldalloc option [ 51.691434][ T4562] EXT4-fs: Ignoring removed orlov option [ 51.702292][ T4561] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.372: Parent and EA inode have the same ino 15 [ 51.725614][ T4561] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.372: Parent and EA inode have the same ino 15 [ 51.744047][ T4562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.787277][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.798382][ T4561] EXT4-fs (loop5): 1 orphan inode deleted [ 51.805595][ T4561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.839316][ T4561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.372'. [ 52.024961][ T4114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.082218][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 52.120079][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.128354][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.233312][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.386'. [ 52.296677][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.304943][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.352183][ T4610] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 52.385243][ T4610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 52.398052][ T29] audit: type=1326 audit(1769624626.986:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.421388][ T29] audit: type=1326 audit(1769624626.986:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.444653][ T29] audit: type=1326 audit(1769624626.986:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.467870][ T29] audit: type=1326 audit(1769624626.986:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.491122][ T29] audit: type=1326 audit(1769624626.986:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.514352][ T29] audit: type=1326 audit(1769624626.986:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 52.613324][ T4610] bond3: (slave dummy0): making interface the new active one [ 52.650070][ T4610] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 52.675103][ T4618] loop3: detected capacity change from 0 to 1024 [ 52.711631][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.744013][ T4618] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.765410][ T4610] bond3: entered promiscuous mode [ 52.777765][ T4610] dummy0: entered promiscuous mode [ 52.817387][ T4609] bond3: left promiscuous mode [ 52.822854][ T4618] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.391: bg 0: block 112: padding at end of block bitmap is not set [ 52.843747][ T4609] dummy0: left promiscuous mode [ 52.850621][ T4623] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.864113][ T4623] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.883279][ T4623] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.391: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 52.902751][ T4618] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.921483][ T4626] loop1: detected capacity change from 0 to 1024 [ 52.931546][ T4626] EXT4-fs: Ignoring removed bh option [ 52.941928][ T4618] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.957130][ T4617] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.978226][ T4626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.007617][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 53.016655][ T4618] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.035909][ T4618] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.054649][ T4617] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.391: lblock 0 mapped to illegal pblock 0 (length 1) [ 53.123738][ T4634] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.392: Allocating blocks 449-513 which overlap fs metadata [ 53.160021][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.169853][ T4626] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.392: Allocating blocks 497-513 which overlap fs metadata [ 53.213663][ T4626] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.392: Allocating blocks 497-513 which overlap fs metadata [ 53.596044][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.653141][ T4621] EXT4-fs (loop1): pa ffff88810765d070: logic 48, phys. 177, len 21 [ 53.661228][ T4621] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 53.813916][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.996840][ T4656] IPv6: sit1: Disabled Multicast RS [ 54.665849][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 54.674794][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 55.314194][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.365633][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.934285][ T4749] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.410140][ T4757] loop0: detected capacity change from 0 to 1024 [ 56.460306][ T4757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.473198][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 56.473213][ T29] audit: type=1400 audit(1769624631.066:432): avc: denied { bind } for pid=4762 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.552621][ T4757] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.564287][ T29] audit: type=1326 audit(1769624631.116:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.587628][ T29] audit: type=1326 audit(1769624631.116:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.611178][ T29] audit: type=1326 audit(1769624631.116:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.622262][ T4757] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.430: bg 0: block 112: padding at end of block bitmap is not set [ 56.634704][ T29] audit: type=1326 audit(1769624631.116:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.672242][ T29] audit: type=1326 audit(1769624631.116:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.695774][ T29] audit: type=1326 audit(1769624631.116:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.719149][ T29] audit: type=1326 audit(1769624631.116:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.742497][ T29] audit: type=1326 audit(1769624631.116:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.758832][ T4757] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.765862][ T29] audit: type=1326 audit(1769624631.126:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bfbe7aeb9 code=0x7ffc0000 [ 56.779567][ T4757] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.830176][ T3394] net_ratelimit: 4 callbacks suppressed [ 56.830190][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.900910][ T4757] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 56.920512][ T4768] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.940406][ T4756] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.968204][ T4778] loop3: detected capacity change from 0 to 256 [ 56.978791][ T4768] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.023823][ T4756] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.050224][ T4768] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.087104][ T4756] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.430: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.106043][ T4790] netlink: 176 bytes leftover after parsing attributes in process `syz.1.441'. [ 57.125550][ T4800] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.439'. [ 57.192812][ T4807] loop3: detected capacity change from 0 to 512 [ 57.204675][ T4807] EXT4-fs: Ignoring removed orlov option [ 57.250363][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.298862][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.317718][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.353859][ T4825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 57.365636][ T4821] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.451'. [ 57.377786][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 57.755683][ T4857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.763313][ T4857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 57.817115][ T4861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'. [ 57.836540][ T4863] loop5: detected capacity change from 0 to 1024 [ 57.853082][ T4863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.867288][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.871238][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.883952][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.892058][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.904608][ T4863] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.917421][ T4863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.461: bg 0: block 112: padding at end of block bitmap is not set [ 57.931972][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.942043][ T4863] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.956458][ T4865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 57.965684][ T4863] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.980128][ T4863] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 57.999373][ T4874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.024097][ T4874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.037759][ T4874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.084018][ T4862] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.141756][ T4862] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.156610][ T4874] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.461: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.262382][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 58.271202][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 58.286716][ T4888] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 58.312567][ T4888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.414948][ T4892] bond2: (slave veth3): Enslaving as an active interface with a down link [ 58.431653][ T4888] bond2: (slave dummy0): making interface the new active one [ 58.441021][ T4888] dummy0: entered promiscuous mode [ 58.446367][ T4888] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 58.463292][ T4888] bond2 (unregistering): (slave veth3): Releasing active interface [ 58.485769][ T4888] bond2 (unregistering): (slave dummy0): Releasing active interface [ 58.502998][ T4888] bond2 (unregistering): Released all slaves [ 58.510537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.832073][ T4114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.879520][ T4912] loop0: detected capacity change from 0 to 512 [ 58.907681][ T4912] ext4: Unknown parameter 'noacl' [ 58.916685][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.957972][ T4930] loop3: detected capacity change from 0 to 128 [ 59.028251][ T12] tipc: Subscription rejected, illegal request [ 59.909688][ T4979] loop1: detected capacity change from 0 to 128 [ 59.960068][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.968957][ T4979] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.982426][ T4979] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.095949][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.910010][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.000294][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.051642][ T5038] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 61.061351][ T5038] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 61.094838][ T5040] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.528'. [ 61.273830][ T5055] loop5: detected capacity change from 0 to 1024 [ 61.280907][ T5053] macvlan2: entered promiscuous mode [ 61.294637][ T5053] batman_adv: batadv0: Adding interface: macvlan2 [ 61.301148][ T5053] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.326699][ T5053] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 61.346615][ T5055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.468263][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.477636][ T5065] loop1: detected capacity change from 0 to 256 [ 61.478568][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.495465][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 61.495479][ T29] audit: type=1400 audit(1769624636.086:513): avc: denied { getopt } for pid=5066 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.527786][ T5063] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 61.535691][ T5063] FAT-fs (loop1): Filesystem has been set read-only [ 61.542098][ T4114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.560102][ T5064] ref_ctr_offset mismatch. inode: 0x220 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 61.588773][ T1035] IPVS: starting estimator thread 0... [ 61.617148][ T29] audit: type=1326 audit(1769624636.206:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.640475][ T29] audit: type=1326 audit(1769624636.206:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.663789][ T29] audit: type=1326 audit(1769624636.206:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.686932][ T29] audit: type=1326 audit(1769624636.206:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.710225][ T29] audit: type=1326 audit(1769624636.206:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.733858][ T29] audit: type=1326 audit(1769624636.206:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.757536][ T29] audit: type=1326 audit(1769624636.206:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.780870][ T29] audit: type=1326 audit(1769624636.206:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.804339][ T29] audit: type=1326 audit(1769624636.206:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5074 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22d6afaeb9 code=0x7ffc0000 [ 61.830724][ T5072] IPVS: using max 2640 ests per chain, 132000 per kthread [ 62.040291][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.113930][ T5097] bridge_slave_0: left allmulticast mode [ 62.119584][ T5097] bridge_slave_0: left promiscuous mode [ 62.125367][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.134122][ T5097] bridge_slave_1: left allmulticast mode [ 62.139776][ T5097] bridge_slave_1: left promiscuous mode [ 62.145636][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.155598][ T5097] bond0: (slave bond_slave_0): Releasing backup interface [ 62.165633][ T5097] bond0: (slave bond_slave_1): Releasing backup interface [ 62.178048][ T5097] team0: Port device team_slave_0 removed [ 62.192020][ T5097] team0: Port device team_slave_1 removed [ 62.198904][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.206563][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.215082][ T5097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.222631][ T5097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.231939][ T5097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.641233][ T5123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.711748][ T5123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.773026][ T5123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.821504][ T5123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.907916][ T3323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.928074][ T3323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.948663][ T3323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.979582][ T3323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.011900][ T5142] loop1: detected capacity change from 0 to 512 [ 63.034717][ T5142] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.047900][ T5142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.071322][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.072846][ T5142] EXT4-fs (loop1): 1 truncate cleaned up [ 63.090601][ T5142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.112045][ T5146] loop5: detected capacity change from 0 to 512 [ 63.142830][ T5146] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.243738][ T5146] EXT4-fs (loop5): 1 truncate cleaned up [ 63.259519][ T5146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.260584][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.300554][ T5146] Dead loop on virtual device ip6_vti0, fix it urgently! [ 63.390651][ T4114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.439394][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.580'. [ 63.498521][ T5166] loop0: detected capacity change from 0 to 512 [ 63.560533][ T5166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.583407][ T5166] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.686888][ T5162] loop1: detected capacity change from 0 to 32768 [ 63.728770][ T10] IPVS: starting estimator thread 0... [ 63.735275][ T5166] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.581: corrupted inode contents [ 63.761737][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 63.773655][ T5182] process 'syz.5.588' launched './file1' with NULL argv: empty string added [ 63.793988][ T5166] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 63.822341][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.830041][ T5179] IPVS: using max 2544 ests per chain, 127200 per kthread [ 63.937088][ T5197] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 63.950010][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.110152][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.287914][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 64.390412][ T5241] x_tables: unsorted entry at hook 3 [ 64.448190][ T5244] loop3: detected capacity change from 0 to 2048 [ 64.504745][ T5244] Alternate GPT is invalid, using primary GPT. [ 64.511168][ T5244] loop3: p2 p3 p7 [ 65.154791][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.222583][ T5286] loop4: detected capacity change from 0 to 512 [ 65.255822][ T5286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.270358][ T5286] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.288443][ T5286] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.634: corrupted inode contents [ 65.311934][ T5286] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.634: mark_inode_dirty error [ 65.323486][ T5286] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.634: corrupted inode contents [ 65.335691][ T5286] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.634: mark_inode_dirty error [ 65.380166][ T5293] bond4: (slave ip6gretap1): making interface the new active one [ 65.392938][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.428449][ T5293] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.449557][ T5302] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 65.490252][ T5302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.533613][ T5302] vlan2: entered promiscuous mode [ 65.538701][ T5302] bond2: entered promiscuous mode [ 65.557764][ T5302] bond2: (slave geneve2): making interface the new active one [ 65.565294][ T5302] geneve2: entered promiscuous mode [ 65.571744][ T5302] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 65.615614][ T5312] batadv_slave_0: entered promiscuous mode [ 65.625305][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.640692][ T5315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.645'. [ 65.650977][ T5312] batadv_slave_0 (unregistering): left promiscuous mode [ 65.658001][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.740168][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.748452][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.756724][ T5326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.076234][ T5357] loop0: detected capacity change from 0 to 2048 [ 66.111252][ T5357] loop0: p1 < > p4 [ 66.125234][ T5357] loop0: p4 size 8388608 extends beyond EOD, truncated [ 66.144917][ T5365] loop1: detected capacity change from 0 to 1024 [ 66.146264][ T3000] loop0: p1 < > p4 [ 66.156207][ T3000] loop0: p4 size 8388608 extends beyond EOD, truncated [ 66.173164][ T5365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.197077][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 66.207942][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 66.247254][ T5369] loop0: detected capacity change from 0 to 736 [ 66.266960][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.315589][ T3323] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.520991][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 66.521011][ T29] audit: type=1326 audit(1769624641.116:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5384 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f96b4e7aeb9 code=0x7ffc0000 [ 66.575703][ T29] audit: type=1400 audit(1769624641.166:732): avc: denied { mount } for pid=5386 comm="syz.4.676" name="/" dev="autofs" ino=18375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 66.712755][ T29] audit: type=1400 audit(1769624641.286:733): avc: denied { mount } for pid=5394 comm="syz.0.679" name="/" dev="hugetlbfs" ino=17201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 66.749505][ T29] audit: type=1400 audit(1769624641.336:734): avc: denied { create } for pid=5398 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.806193][ T29] audit: type=1326 audit(1769624641.396:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa5c4aeb9 code=0x7ffc0000 [ 66.829643][ T29] audit: type=1326 audit(1769624641.396:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa5c4aeb9 code=0x7ffc0000 [ 66.852964][ T29] audit: type=1326 audit(1769624641.396:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa5c4aeb9 code=0x7ffc0000 [ 66.876430][ T29] audit: type=1326 audit(1769624641.396:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa5c4aeb9 code=0x7ffc0000 [ 66.899798][ T29] audit: type=1326 audit(1769624641.396:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5402 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3aa5c4aeb9 code=0x7ffc0000 [ 66.923206][ T29] audit: type=1400 audit(1769624641.396:740): avc: denied { bind } for pid=5402 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.951180][ T5408] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 67.210310][ T5412] bond3: (slave dummy0): Releasing active interface [ 67.230108][ T3423] net_ratelimit: 12 callbacks suppressed [ 67.230125][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.244743][ T5412] bond0: (slave bond_slave_0): Releasing backup interface [ 67.255466][ T5412] bond0: (slave bond_slave_1): Releasing backup interface [ 67.302687][ T5412] team0: Port device team_slave_0 removed [ 67.315352][ T5412] team0: Port device team_slave_1 removed [ 67.326162][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.333614][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.345821][ T5412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.443484][ T5435] tipc: Started in network mode [ 67.448378][ T5435] tipc: Node identity 4246, cluster identity 4711 [ 67.454843][ T5435] tipc: Node number set to 16966 [ 67.470027][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.532488][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 67.738889][ T5445] loop0: detected capacity change from 0 to 512 [ 67.749258][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.698: inode has both inline data and extents flags [ 67.763188][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.698: couldn't read orphan inode 15 (err -117) [ 67.775985][ T5445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.860894][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.120181][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.150080][ T5460] loop3: detected capacity change from 0 to 512 [ 68.157170][ T5460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.175377][ T5460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.188080][ T5460] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.198796][ T5460] ================================================================== [ 68.206882][ T5460] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 68.214117][ T5460] [ 68.216449][ T5460] write to 0xffffffff8916fc28 of 4 bytes by task 5462 on cpu 1: [ 68.224081][ T5460] avc_ss_reset+0x20c/0x240 [ 68.228601][ T5460] security_set_bools+0x300/0x340 [ 68.233646][ T5460] sel_commit_bools_write+0x1e9/0x270 [ 68.239039][ T5460] vfs_writev+0x42b/0x900 [ 68.241381][ T5462] bridge_slave_0: left allmulticast mode [ 68.243382][ T5460] do_writev+0xe9/0x210 [ 68.249016][ T5462] bridge_slave_0: left promiscuous mode [ 68.253153][ T5460] __x64_sys_writev+0x45/0x50 [ 68.253179][ T5460] x64_sys_call+0x1ba5/0x3000 [ 68.253207][ T5460] do_syscall_64+0xc0/0x2a0 [ 68.253238][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.253260][ T5460] [ 68.253266][ T5460] read to 0xffffffff8916fc28 of 4 bytes by task 5460 on cpu 0: [ 68.253282][ T5460] avc_policy_seqno+0x15/0x30 [ 68.253313][ T5460] selinux_inode_permission+0x3bb/0x7d0 [ 68.253340][ T5460] security_inode_permission+0x69/0xa0 [ 68.259044][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.263515][ T5460] inode_permission+0x20e/0x3c0 [ 68.263547][ T5460] link_path_walk+0x899/0xe30 [ 68.320438][ T5460] path_openat+0x1bf/0x23c0 [ 68.324948][ T5460] do_filp_open+0x15d/0x280 [ 68.329451][ T5460] do_sys_openat2+0xa6/0x150 [ 68.334041][ T5460] __x64_sys_openat+0xf2/0x120 [ 68.338807][ T5460] x64_sys_call+0x2b07/0x3000 [ 68.343480][ T5460] do_syscall_64+0xc0/0x2a0 [ 68.347983][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.353868][ T5460] [ 68.356178][ T5460] value changed: 0x00000003 -> 0x00000004 [ 68.361877][ T5460] [ 68.364183][ T5460] Reported by Kernel Concurrency Sanitizer on: [ 68.370326][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.3.704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.379946][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.389993][ T5460] ================================================================== [ 68.398467][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.408783][ T3601] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.414138][ T5380] Bluetooth: hci0: command 0x1003 tx timeout [ 68.422600][ T5462] bridge_slave_1: left allmulticast mode [ 68.428293][ T5462] bridge_slave_1: left promiscuous mode [ 68.434077][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.467754][ T5462] bond0: (slave bond_slave_0): Releasing backup interface [ 68.478003][ T5462] bond0: (slave bond_slave_1): Releasing backup interface [ 68.486750][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.497247][ T5462] team0: Port device team_slave_0 removed [ 68.509062][ T5462] team0: Port device team_slave_1 removed [ 68.516231][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.523651][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.531975][ T5462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.539410][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.548520][ T5462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.302182][ T5379] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 69.470248][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.510531][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.150012][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.550059][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.600771][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.632094][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.190609][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.670212][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.710058][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.760633][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.070144][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.230178][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.791767][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog