last executing test programs: 3m20.988940148s ago: executing program 1 (id=77): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3m20.888488023s ago: executing program 1 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m20.74028539s ago: executing program 1 (id=81): r0 = syz_io_uring_setup(0x5477, &(0x7f00000011c0)={0x0, 0xbc09, 0x2, 0x2, 0x1}, &(0x7f0000001180), &(0x7f0000001400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') accept4$x25(r1, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4) pread64(r1, &(0x7f0000001240)=""/250, 0xfa, 0x0) 3m20.247662265s ago: executing program 1 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 3m20.181395127s ago: executing program 1 (id=89): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 3m19.907125122s ago: executing program 1 (id=91): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x400000009, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m19.897509792s ago: executing program 32 (id=91): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x400000009, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m26.571081143s ago: executing program 3 (id=786): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 2m26.276306187s ago: executing program 3 (id=792): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 2m26.111297875s ago: executing program 3 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfc0, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf9e, 0x0, @opaque="c36188db1b21bc2399f98fd1cd989dfe01d7c3d227f404606b4c0592153f0f80fec6842533dba5beffd4d44f8a00d33ec86feb6fe8cca450d31cd8c1745d419c207ef81b6728feba48c1fa7fa537d8fb647d47e6ebdaa143eb866356e0ff922826aa225e5340c0f97510244713ba9400073c39f330c81fa96c48deb4f30d7406fd96c1272003a31f184ca6e6bd9856e8db9c0243fc5b81bdd97ed886f408a02eec1a17a5dd8cae119e1d76a9c0ea5baf2422f11334d516a9b24f4f867d058dbec1bb9e79d0192cab3a15f58dc06f047ee3f46a16c3da51b886c2d7224a053ed216e2910176a7f8732ebeef55a0c4e7c10aaead641c7aca6d383669a682e39859e0688b21592cdcfbce7de55d056edc4f50f609f2ae068497836808674ef7cb510aa1d9f74e718e004b04f9005918128b2b127cf89cdd56805d6b57d77c09208e344d2229ef59ec750d4fefca61f16005dbcf229d736c9a4f58aba66c15b603ea8140a0f53aa757e62ec84f7dcf6639a14264213d6b7bca298ea620f6071142bb19e30941489b44cc37593fc805abcfb76a8a59644f54bff1cf632b56625211cfc265a57795d10dca69236c200425b54150996460c30d92b59726097256d130c565160aad5a1bbba56a7a8429e2d8a05395b3374b37aac913af186e3e984147845a9ba90e6843d3f3022b5e04ba458fa54e7b6fe39cfdf73711b7deab0de9a7ab2f7b84ed53ca2536ad0550cff43563a0d387fd16e63974dcf91d113806ac8b693734fb5a439b361544443249650f723408a27b291756052dddbeb2ec97840db4b22f885f12580dc83963dc8eae77994753b496b583b015711dcb0540774884236664ab3dbf308f3449e87c7304b3b404c24413c7ea3f07c232345a64bcdee63867c78a54191139c9fe63f5aaf7da500b2b0553f20eecec18e90f1bb3254648ef3663a6c18d4d0f07b3cae2d18d3a4e764c0a4c90523615f950cd7a4c20974ddceb72f7b8a1830607c5bc6d1c2dead238029f093b7579c428ed492f783657df9eea57da574edbcae25f55ff2cd6ef2923215ddfa569e900ac72dbb1530d5a737cc065204d6f4b0e965488619f966899cccd218eb9c26974d885fd8ccdd482f4245c7201cd2f13e5aef1efaad1a70a2a6e5da24bbf349453bcd71b677d4fa4e2881699a4f1d010c934eccd1453b07e4617636094a5d9dcc645fea2095e7147d07aafdfd5f0e260abe3ef02280bae5398d51a70565a4443c7139c514fcb6bd004bfa69b3c6239783f53c72c34b37dcf6a124ae4bf26326f929635553b72b3176985584d2e424bfa62f967d9da7ca4864c24bf58011a2d279d67b25a36f8889125cfb6ecff8737a91c44c29f4a49b259388f400db063336bad95ade5b2742e6fa6ec1c0be051d6b946fc812d113423060e492944bb29ab0dcc9a468bac617ee8beec89c6d4747777b46ad0defbb679c39bc31524c6e35a0100a5bc5dfbb771c62dffe3d8cee8d47d0fde520a266fa675d58ad893bd3878f92694c75f2d4313ef8f850906b1b303078856e8362022c2df4a3003857c41efc848dbebcb78213c582a7693e74de76fff13734b4f71fe93d5e8a402adf6bc29563ca500013a2fb739bcd00916ca99f57a590b58cf9ab5dadd040d6222c553b83fa61d127918cb388a831c41d243d27f4037cbf911e3e9e94d5ebc39ef02b1f2606c7fc46c1952c529aab3886b96c04abd5be74f2fce3bab3d96e714c9b4eac73f6c4f781c0407289992a057cb62c9746c35abf8a390aa4f7e7ad1f16ffdee3ec2d1300c9ce0377b6bf645adcf064977ba158064285c399ccc5e0af6d55726ab8c7105374a2b1b4dc69f87360ddd67676108c5622a7a29a243ff2f9eec13446299a5fc2882825dc68514c0e1b3ea0c1342dc85e9c78b03323d12b0e3e8ac1b9d03b4fa31998a2e7c355b0a9623d3eb8cfd5e9c634d6a0e89d525f89722a00f51e4d79870d71d468087fa4416037a26cf0f052d94abd2e239e2a71a7354d5ff2e49373127bf4ce959bd661aa607149564817393ea26cdc94a7ea2e67cd6781daf4586366d036f5531bac80e9c0fdfe4129e445c82ed77c8a55effc523dec5da0412d1f8389ffa390bb0fc3c83502bed630693337cacd081d692abdc8416f1943907036a01331544c1b804d31e1fb148e9a1bc3909e71985bec78fb69eaee933701522c8da9b20e5cbc19c14f7f65d8fd0c8d133a58194dd758556e094e77010d315f6b6ab149fa898482f1b3b7e3eeafea99527293ab6a563d5cf3d049ddd9619e0dd221195280aecf0299b77b85d2393516d84d92d4f03f118f9712f5c072eed8ca31bfa5f05dcd5b7d408d1650b758d60c32aa39646c3bc5611d2d7d43cf31ff6a3cc8dc2efe6d2c968b1202408d807b6a01f6848e10ec8a3ee69a02348035dac5c5f5e6247092275f435cecabde71cc2b8d186df01032a195ecbbb92cc093b4e44445dbd1c2f01622e08dbee78bb545d1e29c7d354d51610bd5f5f48a4e42c0924a5ad9577080c5aafedafc7e971d571d2fc7ce41dff9120753dc221d1a4a9552180a52339dfaf697b1721346f34f1ccfc72f7a9d6cb2261a8b1deabe124cf3c18494fa988bd770726adabf7b0e57d09c0ef5a3bbeee271319218a386d7dadd0daa2c40a7131115a1a7c0c0ae654512f61414b6dcfc5d74afb2071cfdf09b00457a5cf04489dc990a0307e0cc46f90f65205457588a71fd4e772f5e5aa6d0e335debac25f40d48d016f285c2e04f36fc7b8d9419c62123e47a4b9acd40a6dcbbb0d1b8f2765e4424ad848d740fd401bc49c0acc971d1de476e8c586fda0eccf35b29a9a326818b245d75ce36b89b18407bd8f0309f5612a97ca15db0eda6048b8f46e914bdad927c2b636673de0966a09c0ecb7a5fc287af412cc427e598b65ba74000eb394eb95a2f114da106e343edb1a46d1debdf3dae2f9ef6e60f7346c2c53411f2e2e27b1f9e2c020a99442a626f94f5202a5f5023e4aac49d8ceaec8074c223707f80a72be638413c80561e6909e489dd9030f8a110b82bf63e576a73f73cdc6b539b86745ff217ce5eafd18137fc2664e2be2320713417ef1c988486acfe1ae51d21ef4ff022f134d0a817a45b862562cb58e2170d1b906358fa30131e8d23bd24b2124c80f204f8f0d3f74a408aff08f567773e95dce095a2fd61a4d7441fb1a54689b34f3ff163e4686f8f1dfec0f066e2d79cf7354a0a2ad791bc0d089adf16711f7a5a9dc66689f55ca4aaf78eca23865180e6cc87ae773bb6c3fffb71138381377ce40ff7810f015b6f2d2d1f01ef64681825eba419ab413287320f61894ded416bb70a8d6fa164d065ec8d0866c7f9f2387efd74a6eec64e4e081d2a6d2937ba00119472ad0e615bbf7df0a6406f11a01d69a95a13e12aac40eaaf07c3bc3f9a73b931ed9a2a302366e5eee5b23775fc2f253d9ef8f22debeaca87a5af2259c649ce1c2cc8d599a245760739d9d4453409707a5a5fb17e79f2461f919793ddb2fd941a2576b7a929915469faf382fbfc0d6df2c1e301a1d74eef0f8e48a5bff8176f14e9a50432f3b3aa1db9a759c51b712645259cd1f29ccc7bca24b4fdaeb2ee8f7df72b5a60d40d49a1216001395699c6f56a060c65b00d7663e9052968aaff057440978378f8ff83acc4e2e462c9a5083c7ed190dcf5b698d6d045827a88c68ef4215cb5c381ad5f233f01df5f96be0d14bb7b15a5ef60abd5a1c5145a761e9ce47152b05466eb5dd397892fb0e6fb2dd5bc5746c5bc02ff7ddce08f296ccf2fb64b60f724185ee458ccf3a2faedc912af18fc0d71f2e99bf7e1c795b3949a5b2848383d1d905b7ec0a7d00f727caaf392bab8b2c21a16079977b9597c701b42b2b7dbb6d0e882d6d0fc21c88c7ec2b6bf1164cd221c20cd31d54e8e09705b0084c12092d3220e4b16747106c9e0694c8704053e89b99fb1c403d7c848140b941879f544e896f753a12cf00ce0c6c0091fe050258b73f39a6c5e45131386d78ccaed5bd904aff197756cdf6da0a640dce609e394e41dd044a35d6a286e1619e5faa06239006c13b559c737285a1680fbd9ff4b3447808fb6fa025572ffd9f15bd37b4470724a9a573aa0c44b65db5dea2493e88e661765e6cee71b0b662dcb0a2456cb59a134e9301f7ecb44f84291bad3d0f6a229ab4a6d45e119e0e465a4d3a01eb960ded6df76a35da9c188ec1398d0ce36fe8b6c9878a92dd007c9738e3f6640c9190e819707aedae6cbfa99dac49cc598066211d231de93b960620037f4a35a3c94f188020fb2e40cc38b3896999f7cb34d7ebded96f0c696cacc12ae867850d99fe0cf2fa6eb9dd71cfd518586ee772b73bedbdc16e438bfcdbedd5bda2f9698f94e1cc85d9560e0410f21f3ca4dadeefcb1539f0126bd119e65b81654c58b0e168797c7edfd4bb72f44df3d5e0a967155d5cce7ddd90dc4e5db48a6fdf3045aab0855c930d85b038fc999a0e6c5da88aa2180c0fe413fc92cf665e0d12bbc166186669b11abb1cc7ed40c360889f5e7a74e58cdc001650145cdbed086dc2f85ba24d70b6dac47c17876a273b98f1b345f503e82b51768720337a689f70a237f8b6476c96c10335d81edc4a063fbbd878ed5108115e38e690f37cac99110fdbcbc1ec0f52afed136b44d2b12e70ca067ad87da23f9f07a79c0582694bee1d7b9d1ded93cae3dc1d509477706414130039bb9f6d6c91ea5f7538d1993373dca2dfb5c40b1ad1305004c4c81931bec9363ba166feafa32e3eee9b26b22778b6d40c11ec09eb57597c4da7ecf049d58cac998cf27498bf0d414ff444f7355d7ffdb5aebcd1f8809ca1aa5ac9b52c6dd4329e51ffbf0368f1d6e1615a1256ad321b38c591218366a20ac6ad33641c6db0e51fa7e57aa3f6f16da3a94edf130a8eb2fe714620d2687388d5c5c4dbaaa852864cd3ab38d067002b9c15268fd4635d38ba6a9eb96bc55dcb4d8df9590ae8bf2b2e5a3ca5d98532b3ec4aeb9cfc4bac61728c3bf41a094afd26151c9859c6106a0e668682e3b0c18b21a1af2ffb206c60146846650c7579a3b01ac6bbe658d17d5453d7652e5dc0dc89f7cd5b76c810a4a111d51fe85a30470f1ed67dd30fdd6d0900c2e729040cd65634c8376377528275542187f9dde3fa779224804c1f43fbbbe7f0c568f7b0b6291ed2d567ded326aaa67ffce3529c8f11251c9d562cd02739935c8e303c1c997d8820876815c763d7802e85885966f5f7e38086b7218c11d65e0f9133ef47cbe1222ea8b0652e924d8924544a88a26461e1ad24bfbc7194005b4fb3fe7344c1e68a5034aaeaedfd46c2204e465617391835af34ec320bd7dad276ae9d7fb1f09aa3dc066bb6aa153394b3edb09491fa913d0e4c158baa16e66809180420596f59f20224f61cce7c1c4bd73d6da82ce9129bc8dab8ece3a255185061b6830c99d73a73563c8880ca33abc07e36219398fb6641c39b22a099920219e66e1130d14a8bbb6f9ee2eba93ee50025970627781b38e5f6b82d7ddd5ae2f6612701758ffff9fb706e599ae109998bbba94505115aa09f36e97adf0ce23a03ec8ecda201b7e2be501122dfafecfdae775f609c215e35a16236214c03053e8ece2"}}}}}, 0x0) 2m25.953621993s ago: executing program 3 (id=799): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m25.694793326s ago: executing program 3 (id=806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 2m25.118968464s ago: executing program 3 (id=816): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) 2m25.118421005s ago: executing program 33 (id=816): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) 2m10.819092272s ago: executing program 5 (id=1029): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x3a, 0xca, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="400102000000e3f53cef54154889d9658bba61290f2b714f06da59a82f8529ca7002000000000000009e04da70e8992a3cd4d80e03ad1e5982d8e5c33f3a53dd7f6d64c47d67987ecc66fdb1c6be2f36582ec428167a65147c18840e3f9a3bf35b18b66de0245f29c7186ca9bab8139d12a1d4edbf40beb3ea07c4e4849607dbd9e5253f7bf2c124fd72d30237246a7f8e2e10e6a33108245b77d51afe61a0505c7f56b7cfe265412079732dedceb7782db131630a1167f9d1eadb2561725b30fb73b810"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m10.159016775s ago: executing program 5 (id=1041): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) ioctl$int_in(r0, 0x5421, &(0x7f00000004c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m10.020261412s ago: executing program 5 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4896) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) 2m9.45332756s ago: executing program 5 (id=1046): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") close_range(0xffffffffffffffff, r0, 0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000480)={[{@nodioread_nolock}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}], [{@uid_gt={'uid>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x66, 0x64, 0x65, 0x32, 0x35, 0x66], 0x2d, [0x65, 0x64, 0x37, 0x35], 0x2d, [0x36, 0x30, 0x66, 0x37], 0x2d, [0x63, 0x65, 0x62, 0x3b], 0x2d, [0x62, 0x32, 0x33, 0x62, 0x35, 0x31, 0x36, 0x35]}}}, {@permit_directio}]}, 0x1, 0x46e, &(0x7f0000000bc0)="$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") 2m9.219731302s ago: executing program 5 (id=1052): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m8.766381744s ago: executing program 5 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m8.682552138s ago: executing program 34 (id=1059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m54.948246349s ago: executing program 2 (id=1281): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x9}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) 1m54.90980713s ago: executing program 2 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000340)='%d\x1e\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 1m54.776749407s ago: executing program 2 (id=1286): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4d600", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10}}}}}}}, 0x0) 1m54.70833091s ago: executing program 2 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0) 1m54.664491382s ago: executing program 2 (id=1291): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = inotify_init() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x8000003b) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x420008c9) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m53.971064936s ago: executing program 2 (id=1303): socket(0x23, 0x2, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x5, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m53.970781117s ago: executing program 35 (id=1303): socket(0x23, 0x2, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x5, 0x0, 0xce, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.116690616s ago: executing program 6 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 2.982028823s ago: executing program 6 (id=2965): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.981775672s ago: executing program 4 (id=2967): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) 2.902495246s ago: executing program 6 (id=2970): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1}, 0x40) 2.614519041s ago: executing program 7 (id=2975): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') 2.41746669s ago: executing program 7 (id=2976): r0 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) r2 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) 2.208493531s ago: executing program 8 (id=2978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.105760536s ago: executing program 4 (id=2980): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2.104524826s ago: executing program 8 (id=2981): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc12}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) 2.070710217s ago: executing program 6 (id=2982): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.054230698s ago: executing program 0 (id=2983): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000f40)="1007166de45c6b84dbdff491512c1602395f9a3f79881174b16694870127d6286dd587938eeaa0bf5fba2efa8a241351b96d405883366daced5e0eb401e76927fd3b892eb761efe8e414e9f1abf0c9c963d8b25f75e1a4f73a6a1fef38c86c20255426ca554cb3bdb95036cb7896c00360fb67e690a2138ea39fb47c356943f6d4a27bfb097bf8dc83bf07f1dd00ff2ea4ea42f4ecf9a022da640ffae31fac80eaba56d9b331c06a4a82aa05be99842e7aa735910988634dcc073d3d95757b1698", 0xc1}, {&(0x7f0000000200)="10", 0x1}, {&(0x7f0000002280)="0f", 0x1}, {&(0x7f00000003c0)='`', 0x1}, {&(0x7f0000000480)="02", 0x1}, {&(0x7f0000000500)='O', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="95", 0x1}, {&(0x7f0000000700)='0', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='\a', 0x1}, {&(0x7f0000002e00)="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", 0x201}, {&(0x7f0000000880)="88", 0x1}, {&(0x7f0000000a80)="d1", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)="bb", 0x1}], 0x1}}], 0x5, 0x4008440) write$cgroup_int(r0, &(0x7f0000000100)=0x8, 0x12) 1.977772912s ago: executing program 7 (id=2984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.502994216s ago: executing program 8 (id=2985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8040) 1.223669539s ago: executing program 4 (id=2986): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') 1.196175221s ago: executing program 0 (id=2987): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.160018323s ago: executing program 4 (id=2988): syz_emit_ethernet(0x69, &(0x7f0000000480)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x33, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e621b"}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.100423956s ago: executing program 6 (id=2989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff", 0x88}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b", 0x50}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1", 0x29}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.071624877s ago: executing program 0 (id=2990): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2a020400) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000080)='bpf\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r3, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 1.070308657s ago: executing program 7 (id=2991): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x52000775) lseek(r2, 0x100, 0x0) getdents(r2, 0x0, 0x0) 962.035372ms ago: executing program 0 (id=2992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="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", 0x11f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179", 0x2d}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 961.804102ms ago: executing program 7 (id=2993): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106a, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) setfsuid(0xee00) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f0000000140)=""/240, 0xf0) 956.237433ms ago: executing program 8 (id=2994): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x80, 0x7fff0043}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setreuid(0x0, 0xee01) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r1, &(0x7f0000000540)="f6", 0x1, 0xd63a66976f7dfbe0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 951.887913ms ago: executing program 4 (id=2995): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32=r3, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800"], 0x84}, 0x1, 0x0, 0x0, 0x20048c00}, 0x20008040) 880.050617ms ago: executing program 8 (id=2996): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x30710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) 852.013538ms ago: executing program 8 (id=2997): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000f40)="1007166de45c6b84dbdff491512c1602395f9a3f79881174b16694870127d6286dd587938eeaa0bf5fba2efa8a241351b96d405883366daced5e0eb401e76927fd3b892eb761efe8e414e9f1abf0c9c963d8b25f75e1a4f73a6a1fef38c86c20255426ca554cb3bdb95036cb7896c00360fb67e690a2138ea39fb47c356943f6d4a27bfb097bf8dc83bf07f1dd00ff2ea4ea42f4ecf9a022da640ffae31fac80eaba56d9b331c06a4a82aa05be99842e7aa735910988634dcc073d3d95757b1698", 0xc1}, {&(0x7f0000000200)="10", 0x1}, {&(0x7f0000002280)="0f", 0x1}, {&(0x7f00000003c0)='`', 0x1}, {&(0x7f0000000480)="02", 0x1}, {&(0x7f0000000500)='O', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="95", 0x1}, {&(0x7f0000000700)='0', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='\a', 0x1}, {&(0x7f0000002e00)="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", 0x201}, {&(0x7f0000000880)="88", 0x1}, {&(0x7f0000000a80)="d1", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)="bb", 0x1}], 0x1}}], 0x5, 0x4008440) write$cgroup_int(r0, &(0x7f0000000100)=0x8, 0x12) 851.427528ms ago: executing program 0 (id=3007): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e21, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x461}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="cf", 0x1}], 0x1}, 0x4040090) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={r3, 0x7}, 0x8) 743.27µs ago: executing program 0 (id=2998): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') 482.09µs ago: executing program 7 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) 242.12µs ago: executing program 6 (id=3000): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x2200003, 0x0, 0x0, 0x3, 0x80000001}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@bloom_filter={0x1e, 0x0, 0x2, 0x18000000, 0x40, 0xffffffffffffffff, 0x7d8593b8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x4}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 4 (id=3001): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$eJzs3c9PHFUcAPDvDGwplLo08VD1QtREEiMU2qpNNJF48dCe7KFHCdBKCq0BTGxD/BGNN000/gH1oP4JHvXg/6Bn60GbEMNB6sFkzezOwLo/aJfuupR+Pslk35s3O+/NvL7Zmdc3jwAeWeMR8VpEDETEqYgo5+vTfIkPa0u23fbWxvzfWxvzSVQqb/6ZRJKvK/aV5J/H8h1MpBHpJ0k81SLftRs3r84tLy+u5vGp9ZV3ptZu3HxhaWXuyuKVxWszL54+c/bsy+dmXurasW6uJJ89++353774dOHLn//4YSwr72ieVn8c3TIe4zvnpNG5bmfWZ0frwslgHwsCAMCe0vzef7B6/1+Ogdi9eSvH5z/1tXAAAABAV1QqxScAAABweCWe/QEAAOCQK8YBbG9tzBdLH4cj8D/bnI2IsVr9382XWsrgzju9pYb3e7tpPCLeOHphJluiR+9hAwAAADzKfpytTfzX3P/3T+Vk3XbDETFSzO3XReMN8eb+n/ROl7OkzuZsxCsRcbep/y8tNhkbyGPHq12FpeTy0vLiqYh4LCImojSUxaf3yOP9p69+1y6tvv/v1u1L01n+2efuFumdwaH/fmdhbn3uQY6ZXZsfRTw52Kr+k50+3/p5MjNLHebx1tL2q+3SsvrP6vvW7Uul1vVPL1W+TuK5lu1/d+bSZO/5Waeq14Op/Kow1JzHr6PffNwu//r2ny1Z/sX/BdB7Wfsf2bv+q/Pk7szXu9Z5Ht//deGXdmn3rv/W1/8jycVqAY/k696bW19fnY44kpxvXj9T6rzQD5t2Ew03qJ2P3fOV1f/EM61//0/W7fp4/ntf3kfRXv/gxMV2adp/f2X1v9BR++888PbIExPt8r+/9n+mWphiJ+7/7u1+K6jf5QQAAAAAAACgO9KIGC0n6WQRjjSdnKyN8308RtLl62vrz1++/u61hdoYwLEopcX4z3LdeNDp2mvkO/GZhvjpiDgREV+Vh6vxyfnh6rgDAAAAoPeOVZ/5m5//M7/v52UPAAAA4GAa63cBAAAAgJ7z/A8AAACH2oPM67+8uFr8iaB9fl3goQskcSCKMZD/wzsop+XwBfp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg/g0AAP//Ogi85g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172e90c799 code=0x7ffc0000 [ 174.203644][ T28] audit: type=1326 audit(1774530242.816:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.2.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172e90c799 code=0x7ffc0000 [ 174.234198][ T6828] loop2: detected capacity change from 0 to 128 [ 174.298930][ T6828] syz.2.1124: attempt to access beyond end of device [ 174.298930][ T6828] loop2: rw=0, sector=121, nr_sectors = 16 limit=128 [ 174.477564][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1127'. [ 174.504435][ T6834] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1127'. [ 174.528344][ T6834] netlink: 'syz.4.1127': attribute type 5 has an invalid length. [ 174.544807][ T6834] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1127'. [ 174.606544][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 175.643030][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 175.784906][ T6894] ref_ctr increment failed for inode: 0x4db offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810470d100 [ 175.796284][ T6893] uprobe: syz.2.1153:6893 failed to unregister, leaking uprobe [ 176.801981][ T6958] netlink: 'syz.7.1180': attribute type 39 has an invalid length. [ 177.231196][ T6963] __nla_validate_parse: 1 callbacks suppressed [ 177.231216][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1182'. [ 177.308355][ T6972] loop6: detected capacity change from 0 to 256 [ 177.348870][ T6972] FAT-fs (loop6): codepage cp863 not found [ 177.355419][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1188'. [ 177.394521][ T6975] loop2: detected capacity change from 0 to 1024 [ 177.402038][ T6975] EXT4-fs: Ignoring removed bh option [ 177.412249][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.425104][ T6975] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.489255][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.1187: lblock 0 mapped to illegal pblock 0 (length 4) [ 177.520977][ T6988] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 177.533685][ T6988] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.533685][ T6988] [ 177.617580][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 177.617596][ T28] audit: type=1400 audit(1774530246.476:676): avc: denied { watch_reads } for pid=6994 comm="syz.0.1194" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 177.619940][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1187: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.688201][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1187: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.705563][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1187: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.719478][ T6988] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1187: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.843094][ T28] audit: type=1326 audit(1774530246.706:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.6.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0c8e7c799 code=0x0 [ 178.171466][ T28] audit: type=1400 audit(1774530247.036:678): avc: denied { create } for pid=7029 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.202360][ T28] audit: type=1400 audit(1774530247.056:679): avc: denied { write } for pid=7029 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.226824][ T83] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:5: lblock 4 mapped to illegal pblock 4 (length 2) [ 178.242795][ T83] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 178.255904][ T83] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.255904][ T83] [ 178.271409][ T83] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 178.286133][ T83] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 178.298684][ T83] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.298684][ T83] [ 178.467937][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.757050][ T28] audit: type=1400 audit(1774530247.616:680): avc: denied { ioctl } for pid=7056 comm="syz.2.1218" path="socket:[33637]" dev="sockfs" ino=33637 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.315317][ T7076] ref_ctr increment failed for inode: 0x4c0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104708d80 [ 179.333461][ T7075] uprobe: syz.0.1225:7075 failed to unregister, leaking uprobe [ 179.347816][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 179.351940][ T28] audit: type=1400 audit(1774530248.206:681): avc: denied { create } for pid=7079 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.387623][ T28] audit: type=1400 audit(1774530248.206:682): avc: denied { ioctl } for pid=7079 comm="syz.4.1229" path="socket:[33683]" dev="sockfs" ino=33683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.414115][ T28] audit: type=1400 audit(1774530248.206:683): avc: denied { bind } for pid=7079 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.418407][ T7082] VFS: Mount too revealing [ 179.514834][ T28] audit: type=1400 audit(1774530248.366:684): avc: denied { watch_reads } for pid=7084 comm="syz.4.1231" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 179.817228][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1241'. [ 179.834185][ T7102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.923413][ T7119] syz_tun: entered allmulticast mode [ 179.933599][ T7117] syz_tun: left allmulticast mode [ 180.580782][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 180.681486][ T28] audit: type=1400 audit(1774530249.546:685): avc: denied { bind } for pid=7144 comm="syz.6.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 180.719746][ T7149] loop6: detected capacity change from 0 to 256 [ 180.726359][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 180.741731][ T7149] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.847543][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 180.882226][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1261'. [ 180.910763][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 181.692920][ T7193] xt_hashlimit: size too large, truncated to 1048576 [ 182.011781][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 182.617331][ T7098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.756211][ T7235] -1: renamed from syzkaller0 [ 183.362470][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 183.514367][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1301'. [ 183.865291][ T4817] bridge_slave_1: left allmulticast mode [ 183.874408][ T4817] bridge_slave_1: left promiscuous mode [ 183.888263][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.908612][ T4817] bridge_slave_0: left allmulticast mode [ 183.914432][ T4817] bridge_slave_0: left promiscuous mode [ 183.928191][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.269958][ T4817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.297014][ T4817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.315313][ T4817] bond0 (unregistering): Released all slaves [ 184.453244][ T4817] hsr_slave_0: left promiscuous mode [ 184.460679][ T4817] hsr_slave_1: left promiscuous mode [ 184.523809][ T7336] loop6: detected capacity change from 0 to 2048 [ 184.559719][ T4817] team0 (unregistering): Port device team_slave_1 removed [ 184.591523][ T7336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.607412][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 184.623293][ T4817] team0 (unregistering): Port device team_slave_0 removed [ 184.871030][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 184.993376][ T7370] ªªªªª6: renamed from wg2 (while UP) [ 185.095182][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.122611][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.169201][ T28] audit: type=1400 audit(1774530254.016:686): avc: denied { connect } for pid=7385 comm="syz.7.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.209676][ T7308] bridge_slave_0: entered allmulticast mode [ 185.223134][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.226289][ T7308] bridge_slave_0: entered promiscuous mode [ 185.260264][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.267387][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.277579][ T28] audit: type=1400 audit(1774530254.016:687): avc: denied { write } for pid=7385 comm="syz.7.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.315572][ T7308] bridge_slave_1: entered allmulticast mode [ 185.329282][ T7308] bridge_slave_1: entered promiscuous mode [ 185.393076][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.425047][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.463651][ T7398] dvmrp1: entered allmulticast mode [ 185.509730][ T7308] team0: Port device team_slave_0 added [ 185.516468][ T7308] team0: Port device team_slave_1 added [ 185.564855][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.578614][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.642372][ T7420] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 185.654126][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.656979][ T7420] ref_ctr increment failed for inode: 0x54a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810afc9b00 [ 185.673149][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.683661][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.713636][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.725027][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1326'. [ 185.791355][ T7308] hsr_slave_0: entered promiscuous mode [ 185.807818][ T7308] hsr_slave_1: entered promiscuous mode [ 185.813999][ T7308] debugfs: 'hsr0' already exists in 'hsr' [ 185.825491][ T7308] Cannot create hsr debugfs directory [ 185.860276][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1329'. [ 186.162321][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1331'. [ 186.180176][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.235508][ T7467] loop6: detected capacity change from 0 to 1024 [ 186.276061][ T7467] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 186.286543][ T7454] bridge_slave_0: left allmulticast mode [ 186.288334][ T7467] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 186.307634][ T7454] bridge_slave_0: left promiscuous mode [ 186.308060][ T7467] EXT4-fs (loop6): mount failed [ 186.317120][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.327844][ T7454] bridge_slave_1: left allmulticast mode [ 186.333731][ T7454] bridge_slave_1: left promiscuous mode [ 186.348169][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.359034][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1336'. [ 186.374135][ T7454] bond0: (slave bond_slave_0): Releasing backup interface [ 186.384484][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 186.433866][ T7454] team0: Port device team_slave_0 removed [ 186.451564][ T7454] team0: Port device team_slave_1 removed [ 186.460579][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.468122][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.488825][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.499071][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.512114][ T7454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.559030][ T7308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 186.582009][ T7308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 186.594495][ T7308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 186.614111][ T7308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 186.747220][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.777992][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.789262][ T2222] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.796404][ T2222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.834264][ T7308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.855429][ T7308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.883377][ T2222] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.890516][ T2222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.170184][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.516038][ T7308] veth0_vlan: entered promiscuous mode [ 187.524707][ T7308] veth1_vlan: entered promiscuous mode [ 187.574732][ T7308] veth0_macvtap: entered promiscuous mode [ 187.592149][ T7308] veth1_macvtap: entered promiscuous mode [ 187.613830][ T7534] geneve3: entered promiscuous mode [ 187.620291][ T314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.629110][ T314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.699562][ T314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.724933][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.739542][ T314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.753948][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.811431][ T4817] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.820422][ T4817] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.864533][ T28] audit: type=1326 audit(1774530256.716:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 187.903610][ T28] audit: type=1326 audit(1774530256.716:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 187.943944][ T4817] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.959723][ T4817] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.968510][ T28] audit: type=1326 audit(1774530256.716:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 188.009664][ T28] audit: type=1326 audit(1774530256.716:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 188.039561][ T28] audit: type=1326 audit(1774530256.716:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 188.070844][ T28] audit: type=1326 audit(1774530256.726:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 188.141156][ T28] audit: type=1326 audit(1774530256.726:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 188.292582][ T7539] delete_channel: no stack [ 188.295324][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 188.310061][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.368747][ T7553] bond0: (slave team0): Releasing backup interface [ 188.392410][ T7553] bridge_slave_0: left allmulticast mode [ 188.398143][ T7553] bridge_slave_0: left promiscuous mode [ 188.404121][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.425173][ T7553] bridge_slave_1: left allmulticast mode [ 188.431068][ T7553] bridge_slave_1: left promiscuous mode [ 188.436817][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.447392][ T7553] bond0: (slave bond_slave_0): Releasing backup interface [ 188.465675][ T7553] bond0: (slave bond_slave_1): Releasing backup interface [ 188.488428][ T7553] team0: Port device team_slave_0 removed [ 188.512250][ T7553] team0: Port device team_slave_1 removed [ 188.518773][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.536473][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.558005][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.572478][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.584438][ T7553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.601501][ T7554] netlink: 'syz.7.1354': attribute type 3 has an invalid length. [ 188.609438][ T7554] netlink: 'syz.7.1354': attribute type 3 has an invalid length. [ 188.677379][ T7566] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1358'. [ 189.116074][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1367'. [ 189.811989][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1384'. [ 190.107653][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1387'. [ 190.119364][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.152016][ T7641] bridge_slave_0: left allmulticast mode [ 190.157796][ T7641] bridge_slave_0: left promiscuous mode [ 190.164030][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.281800][ T7641] bridge_slave_1: left allmulticast mode [ 190.321081][ T7641] bridge_slave_1: left promiscuous mode [ 190.323144][ T3407] IPVS: starting estimator thread 0... [ 190.334478][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.348224][ T7641] bond0: (slave bond_slave_0): Releasing backup interface [ 190.360219][ T7641] bond0: (slave bond_slave_1): Releasing backup interface [ 190.373825][ T7641] team0: Port device team_slave_0 removed [ 190.391129][ T7641] team0: Port device team_slave_1 removed [ 190.407008][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.415555][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.431123][ T7641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.438749][ T7641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.446785][ T7648] IPVS: using max 1968 ests per chain, 98400 per kthread [ 190.457048][ T7641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.728431][ T7677] loop6: detected capacity change from 0 to 512 [ 190.738497][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1399'. [ 190.766235][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 190.775907][ T7677] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.787661][ T7677] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 190.798673][ T7677] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1401: Corrupt directory, running e2fsck is recommended [ 190.832043][ T7677] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 190.840303][ T7677] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1401: corrupted in-inode xattr: invalid ea_ino [ 190.854079][ T7677] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.854542][ T7677] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1401: couldn't read orphan inode 15 (err -117) [ 190.864472][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 190.864489][ C1] EXT4-fs (loop6): initial error at time 1774530259: ext4_iget_extra_inode:5025: inode 15 [ 190.864522][ C1] EXT4-fs (loop6): last error at time 1774530259: ext4_iget_extra_inode:5025: inode 15 [ 190.903625][ T7677] loop6: lost filesystem error report for type 5 error -117 [ 190.904308][ T7677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.911161][ T3414] IPVS: starting estimator thread 0... [ 190.915345][ T7677] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.1401: corrupted xattr block 255: invalid header [ 190.943857][ T7677] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 190.951576][ T7677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.020378][ T7684] IPVS: using max 2112 ests per chain, 105600 per kthread [ 191.803125][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 191.803142][ T28] audit: type=1400 audit(1774530260.666:716): avc: denied { sys_nice } for pid=7723 comm="syz.7.1418" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 192.115742][ T7736] loop8: detected capacity change from 0 to 512 [ 192.147218][ T7736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.322747][ T7736] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1422: invalid indirect mapped block 4294967295 (level 1) [ 192.342623][ T7736] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 192.342765][ T7736] EXT4-fs (loop8): Remounting filesystem read-only [ 192.351973][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 192.351989][ C1] EXT4-fs (loop8): initial error at time 1774530261: ext4_free_branches:1023: inode 11 [ 192.352032][ C1] EXT4-fs (loop8): last error at time 1774530261: ext4_free_branches:1023: inode 11 [ 192.386183][ T7736] EXT4-fs (loop8): 2 truncates cleaned up [ 192.395575][ T7736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.426698][ T7308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.681194][ T7754] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1425'. [ 192.692586][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1425'. [ 192.936163][ T3428] IPVS: starting estimator thread 0... [ 193.060654][ T7761] IPVS: using max 2304 ests per chain, 115200 per kthread [ 193.506773][ T7779] xt_hashlimit: size too large, truncated to 1048576 [ 193.559883][ T7788] syzkaller1: entered promiscuous mode [ 193.575602][ T7788] syzkaller1: entered allmulticast mode [ 194.408500][ T7825] loop7: detected capacity change from 0 to 512 [ 194.442834][ T7825] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.490725][ T7825] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 194.537567][ T7825] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1453: Corrupt directory, running e2fsck is recommended [ 194.647258][ T7832] xt_hashlimit: size too large, truncated to 1048576 [ 194.658894][ T7825] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 194.668787][ T7825] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1453: corrupted in-inode xattr: invalid ea_ino [ 194.709567][ T7825] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.709762][ T7825] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1453: couldn't read orphan inode 15 (err -117) [ 194.730970][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 194.730990][ C1] EXT4-fs (loop7): initial error at time 1774530263: ext4_iget_extra_inode:5025: inode 15 [ 194.731055][ C1] EXT4-fs (loop7): last error at time 1774530263: ext4_iget_extra_inode:5025: inode 15 [ 194.731734][ T7834] syzkaller1: entered promiscuous mode [ 194.731750][ T7834] syzkaller1: entered allmulticast mode [ 194.759750][ T7825] loop7: lost filesystem error report for type 5 error -117 [ 194.780077][ T7825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.869959][ T7825] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #2: comm syz.7.1453: corrupted xattr block 255: invalid header [ 194.894091][ T7825] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 194.911170][ T7825] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.175383][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1462'. [ 195.215982][ T7850] geneve2: entered promiscuous mode [ 196.483535][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 196.855432][ T28] audit: type=1326 audit(1774530265.716:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 196.913118][ T28] audit: type=1326 audit(1774530265.746:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 197.004505][ T28] audit: type=1326 audit(1774530265.746:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 197.065024][ T28] audit: type=1326 audit(1774530265.746:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 197.114184][ T28] audit: type=1326 audit(1774530265.766:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 197.138488][ T28] audit: type=1326 audit(1774530265.776:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 197.165966][ T28] audit: type=1326 audit(1774530265.776:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f765252cfce code=0x7ffc0000 [ 197.190485][ T28] audit: type=1326 audit(1774530265.776:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f765252cfce code=0x7ffc0000 [ 197.215017][ T28] audit: type=1326 audit(1774530265.776:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f765252cfce code=0x7ffc0000 [ 197.240034][ T28] audit: type=1326 audit(1774530265.776:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.4.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f765252cfce code=0x7ffc0000 [ 198.435879][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1501'. [ 198.496170][ T8002] loop8: detected capacity change from 0 to 128 [ 198.508567][ T8002] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.525637][ T8002] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.573221][ T8002] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.1502: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 198.605199][ T8002] EXT4-fs error (device loop8) in do_split:2027: Corrupt filesystem [ 198.621511][ T8002] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.8.1502: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 198.676366][ T7308] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.341681][ T7901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.382600][ T8055] loop6: detected capacity change from 0 to 128 [ 199.416721][ T8055] syz.6.1521: attempt to access beyond end of device [ 199.416721][ T8055] loop6: rw=0, sector=121, nr_sectors = 16 limit=128 [ 199.437645][ T8057] loop7: detected capacity change from 0 to 1024 [ 199.447267][ T8057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 199.455684][ T8057] System zones: 0-1, 3-36 [ 199.460675][ T8057] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1522: bad orphan inode 134217728 [ 199.473395][ T8057] loop7: lost filesystem error report for type 5 error -117 [ 199.473945][ T8057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.838658][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1527'. [ 199.851179][ T8065] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1525'. [ 199.863497][ T8065] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1525'. [ 199.909673][ T8065] netlink: 'syz.8.1525': attribute type 5 has an invalid length. [ 199.933260][ T8065] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1525'. [ 199.943603][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1530'. [ 200.065987][ T6562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.340891][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 202.166073][ T8131] loop6: detected capacity change from 0 to 128 [ 202.177906][ T8131] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.196045][ T8131] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.232888][ T8131] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.1550: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 202.251477][ T8131] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 202.261908][ T8131] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.6.1550: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 202.296512][ T5918] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.696981][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1557'. [ 202.730143][ T28] kauditd_printk_skb: 387 callbacks suppressed [ 202.730161][ T28] audit: type=1400 audit(1774530271.596:1114): avc: denied { bind } for pid=8151 comm="syz.7.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.859791][ T8165] loop7: detected capacity change from 0 to 1024 [ 202.871016][ T8165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 202.887615][ T8165] System zones: 0-1, 3-36 [ 202.895692][ T8165] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1565: bad orphan inode 134217728 [ 202.912135][ T8165] loop7: lost filesystem error report for type 5 error -117 [ 202.917034][ T8165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.931257][ T28] audit: type=1400 audit(1774530271.786:1115): avc: denied { unmount } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 202.968276][ T8171] netlink: 'syz.6.1567': attribute type 27 has an invalid length. [ 202.992706][ T6562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.001794][ T8079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.340188][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.362174][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.416858][ T8173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.467845][ T8186] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 203.476505][ T2222] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.486275][ T2222] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.511198][ T2222] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.539641][ T4817] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.603994][ T8216] loop6: detected capacity change from 0 to 1024 [ 203.636306][ T8216] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 203.679891][ T8216] System zones: 0-1, 3-36 [ 203.691517][ T8216] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1579: bad orphan inode 134217728 [ 203.733415][ T8216] loop6: lost filesystem error report for type 5 error -117 [ 203.739529][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 203.753391][ C0] EXT4-fs (loop6): initial error at time 1774530272: ext4_orphan_get:1417 [ 203.761939][ C0] EXT4-fs (loop6): last error at time 1774530272: ext4_orphan_get:1417 [ 203.772961][ T8216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.824919][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.151821][ T8232] loop8: detected capacity change from 0 to 512 [ 204.158480][ T8232] EXT4-fs: Ignoring removed bh option [ 204.383518][ T8232] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 204.400125][ T8232] EXT4-fs (loop8): 1 truncate cleaned up [ 204.422970][ T8232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.490503][ T8232] EXT4-fs (loop8): shut down requested (2) [ 204.527353][ T8232] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 204.553227][ T28] audit: type=1326 audit(1774530273.406:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.586721][ T8232] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 204.668049][ T28] audit: type=1326 audit(1774530273.406:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.699601][ T28] audit: type=1326 audit(1774530273.406:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.727573][ T28] audit: type=1326 audit(1774530273.406:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.752140][ T28] audit: type=1326 audit(1774530273.406:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.754337][ T7308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.813157][ T8247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.830001][ T28] audit: type=1326 audit(1774530273.406:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.856083][ T28] audit: type=1326 audit(1774530273.406:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.902859][ T8254] loop8: detected capacity change from 0 to 128 [ 204.909243][ T28] audit: type=1326 audit(1774530273.406:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8241 comm="syz.6.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 204.950133][ T8254] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.973866][ T8247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.050513][ T8247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.087867][ T4824] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.140198][ T8247] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 205.170800][ T8247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.323640][ T4824] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.342959][ T4824] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.360248][ T4824] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.381982][ T4824] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.520270][ T8281] netlink: 'syz.0.1603': attribute type 27 has an invalid length. [ 205.653781][ T8281] bridge0: port 3(hsr0) entered disabled state [ 205.848135][ T8281] geneve2: left promiscuous mode [ 205.906281][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.929757][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.969605][ T8283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.007624][ T4817] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.031946][ T4817] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.079552][ T4817] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.115585][ T4817] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.228355][ T8302] loop6: detected capacity change from 0 to 128 [ 206.272527][ T8302] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.344781][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 206.358318][ T4824] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.427960][ T8315] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 206.443675][ T8315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.466980][ T8315] bond1: (slave veth13): Enslaving as an active interface with a down link [ 206.486176][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.493691][ T8315] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 207.437115][ T8337] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1624'. [ 207.858529][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 207.858543][ T28] audit: type=1326 audit(1774530276.716:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 207.896205][ T8349] loop6: detected capacity change from 0 to 128 [ 208.014458][ T28] audit: type=1326 audit(1774530276.756:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 208.133870][ T28] audit: type=1326 audit(1774530276.756:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 208.245381][ T28] audit: type=1326 audit(1774530276.756:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 208.342981][ T28] audit: type=1326 audit(1774530276.756:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 208.442962][ T28] audit: type=1326 audit(1774530276.756:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa0c8e7c502 code=0x7ffc0000 [ 208.542697][ T28] audit: type=1326 audit(1774530276.756:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa0c8e3cfce code=0x7ffc0000 [ 208.646856][ T28] audit: type=1326 audit(1774530276.756:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa0c8e7c5c7 code=0x7ffc0000 [ 208.720789][ T28] audit: type=1326 audit(1774530276.756:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0c8e3cfce code=0x7ffc0000 [ 208.813054][ T28] audit: type=1326 audit(1774530276.756:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.6.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0c8e7c42b code=0x7ffc0000 [ 209.816509][ T8383] netlink: 'syz.7.1637': attribute type 27 has an invalid length. [ 210.238759][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1642'. [ 210.258287][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.273040][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.287858][ T8384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.307915][ T4824] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.325916][ T4824] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.335303][ T4824] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.350319][ T4824] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.520092][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 210.735102][ T8420] tls_set_device_offload_rx: netdev not found [ 211.197989][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1664'. [ 211.899906][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 211.930695][ T8471] loop8: detected capacity change from 0 to 1024 [ 211.961074][ T8471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 211.977097][ T8471] System zones: 0-1, 3-36 [ 211.988565][ T8471] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1669: bad orphan inode 134217728 [ 212.004966][ T8471] loop8: lost filesystem error report for type 5 error -117 [ 212.005511][ T8471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.029065][ T8481] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 212.055744][ T8481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.210385][ T8481] bond5: (slave veth13): Enslaving as an active interface with a down link [ 212.227763][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 212.247427][ T8491] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 212.397439][ T7308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.887708][ T8531] Zero length message leads to an empty skb [ 213.231418][ T8543] macvtap1: entered promiscuous mode [ 213.242245][ T8543] team0: entered promiscuous mode [ 213.256827][ T8543] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 213.276695][ T8543] team0: Device macvtap1 is already an upper device of the team interface [ 213.357113][ T8543] team0: left promiscuous mode [ 213.577985][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 213.933226][ T8574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8574 comm=syz.0.1707 [ 214.001939][ T8576] syz.7.1708: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 214.016596][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.7.1708 Not tainted syzkaller #0 PREEMPT(full) [ 214.016633][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.016659][ T8576] Call Trace: [ 214.016734][ T8576] [ 214.016744][ T8576] __dump_stack+0x1d/0x30 [ 214.016782][ T8576] dump_stack_lvl+0x95/0xd0 [ 214.016816][ T8576] dump_stack+0x15/0x1b [ 214.016889][ T8576] warn_alloc+0x145/0x1c0 [ 214.016923][ T8576] ? __schedule+0x93c/0xd40 [ 214.016964][ T8576] ? update_load_avg+0x5d/0x680 [ 214.017001][ T8576] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 214.017105][ T8576] ? preempt_schedule_common+0x11/0x30 [ 214.017145][ T8576] ? __rcu_read_unlock+0x4e/0x70 [ 214.017176][ T8576] ? avc_has_perm_noaudit+0xab/0x130 [ 214.017271][ T8576] ? should_fail_ex+0x30/0x280 [ 214.017308][ T8576] ? xskq_create+0x36/0xe0 [ 214.017342][ T8576] vmalloc_user_noprof+0x7d/0xb0 [ 214.017435][ T8576] ? xskq_create+0x80/0xe0 [ 214.017467][ T8576] xskq_create+0x80/0xe0 [ 214.017579][ T8576] xsk_init_queue+0x70/0xb0 [ 214.017611][ T8576] xsk_setsockopt+0x3f5/0x640 [ 214.017641][ T8576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.017670][ T8576] __sys_setsockopt+0x184/0x200 [ 214.017764][ T8576] __x64_sys_setsockopt+0x64/0x80 [ 214.017806][ T8576] x64_sys_call+0x2327/0x3020 [ 214.017851][ T8576] do_syscall_64+0x12c/0x370 [ 214.017995][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.018023][ T8576] RIP: 0033:0x7f1c4f01c799 [ 214.018050][ T8576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.018075][ T8576] RSP: 002b:00007f1c4da77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.018142][ T8576] RAX: ffffffffffffffda RBX: 00007f1c4f295fa0 RCX: 00007f1c4f01c799 [ 214.018158][ T8576] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 214.018174][ T8576] RBP: 00007f1c4f0b2c99 R08: 0000000000000004 R09: 0000000000000000 [ 214.018220][ T8576] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.018236][ T8576] R13: 00007f1c4f296038 R14: 00007f1c4f295fa0 R15: 00007ffcdd82bca8 [ 214.018255][ T8576] [ 214.018267][ T8576] Mem-Info: [ 214.141165][ T8580] netlink: 'syz.4.1709': attribute type 27 has an invalid length. [ 214.155815][ T8576] active_anon:78018 inactive_anon:0 isolated_anon:0 [ 214.155815][ T8576] active_file:16543 inactive_file:13145 isolated_file:0 [ 214.155815][ T8576] unevictable:0 dirty:274 writeback:0 [ 214.155815][ T8576] slab_reclaimable:4074 slab_unreclaimable:22414 [ 214.155815][ T8576] mapped:29244 shmem:69329 pagetables:3492 [ 214.155815][ T8576] sec_pagetables:0 bounce:0 [ 214.155815][ T8576] kernel_misc_reclaimable:0 [ 214.155815][ T8576] free:1781747 free_pcp:6343 free_cma:0 [ 214.298465][ T8580] geneve2: left promiscuous mode [ 214.350374][ T8576] Node 0 active_anon:312304kB inactive_anon:0kB active_file:66172kB inactive_file:52580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116976kB dirty:1096kB writeback:0kB shmem:277316kB kernel_stack:4560kB pagetables:14084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.411176][ T8576] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.446123][ T8580] bond2: left promiscuous mode [ 214.449946][ T8576] lowmem_reserve[]: 0 2879 7857 7857 [ 214.451596][ T8580] bridge3: left promiscuous mode [ 214.459717][ T8576] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 214.463401][ T8580] bond3: left promiscuous mode [ 214.495062][ T8580] vti0: left promiscuous mode [ 214.519854][ T8576] lowmem_reserve[]: 0 0 4978 4978 [ 214.525021][ T8576] Node 0 Normal free:4166992kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:312304kB inactive_anon:0kB active_file:66172kB inactive_file:52580kB unevictable:0kB writepending:1096kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:5068kB free_cma:0kB [ 214.572549][ T8576] lowmem_reserve[]: 0 0 0 [ 214.572627][ T8580] bond4: left promiscuous mode [ 214.583966][ T8576] 0 [ 214.586615][ T8576] Node 0 DMA: [ 214.589236][ T8580] geneve3: left promiscuous mode [ 214.599433][ T8576] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.612725][ T8576] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB [ 214.629247][ T8576] Node 0 Normal: 870*4kB (UME) 514*8kB (UM) 313*16kB (UME) 209*32kB (UME) 161*64kB (UME) 251*128kB (UME) 154*256kB (UME) 96*512kB (UME) 60*1024kB (UME) 34*2048kB (UME) 949*4096kB (UM) = 4168472kB [ 214.659980][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.667810][ T8576] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 214.677663][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.685365][ T8576] 99012 total pagecache pages [ 214.692110][ T8576] 0 pages in swap cache [ 214.697695][ T8576] Free swap = 124996kB [ 214.702411][ T8576] Total swap = 124996kB [ 214.706635][ T8585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.723163][ T8576] 2097051 pages RAM [ 214.727224][ T8576] 0 pages HighMem/MovableOnly [ 214.732146][ T8576] 81611 pages reserved [ 214.737262][ T2222] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.748064][ T2222] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.764579][ T2222] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.779377][ T2222] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 214.857801][ T8593] ref_ctr_offset mismatch. inode: 0x3ac offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 214.984599][ T8607] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1715'. [ 215.963692][ T8625] netlink: 'syz.8.1724': attribute type 27 has an invalid length. [ 215.992735][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 215.992753][ T28] audit: type=1400 audit(1774530284.856:1218): avc: denied { read } for pid=8621 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.043806][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.051072][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.162494][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.181733][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.273024][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.296134][ T8632] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.318504][ T8632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.336547][ T83] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.356670][ T83] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.370149][ T83] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.386316][ T83] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.913754][ T8669] syzkaller0: entered promiscuous mode [ 217.919284][ T8669] syzkaller0: entered allmulticast mode [ 218.605036][ T8687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.625534][ T8687] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 218.672350][ T8696] netlink: 'syz.0.1749': attribute type 27 has an invalid length. [ 218.711509][ T4817] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 218.794257][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.811304][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.841394][ T8697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.931003][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1752'. [ 218.972065][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1752'. [ 219.119241][ T28] audit: type=1326 audit(1774530287.976:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.195607][ T28] audit: type=1326 audit(1774530287.976:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.248934][ T8715] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 219.257293][ T8715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1757'. [ 219.266801][ T28] audit: type=1326 audit(1774530287.976:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.268537][ T8715] .`: renamed from bond0 (while UP) [ 219.299631][ T28] audit: type=1326 audit(1774530287.976:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.339669][ T28] audit: type=1326 audit(1774530287.976:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.457933][ T28] audit: type=1326 audit(1774530287.976:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.530467][ T28] audit: type=1326 audit(1774530287.976:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.603232][ T28] audit: type=1326 audit(1774530287.976:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 219.674359][ T28] audit: type=1326 audit(1774530287.976:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8712 comm="syz.0.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bd7d76517 code=0x7ffc0000 [ 220.049592][ T8725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.095257][ T8725] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 220.149680][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.273892][ T4824] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 220.874553][ T8741] 8021q: adding VLAN 0 to HW filter on device .` [ 220.895968][ T8741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.980735][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 221.004183][ T8744] loop7: detected capacity change from 0 to 512 [ 221.111168][ T8744] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1767: bg 0: block 248: padding at end of block bitmap is not set [ 221.126265][ T8744] loop7: lost filesystem error report for type 5 error -117 [ 221.127549][ T8744] __quota_error: 31 callbacks suppressed [ 221.127653][ T8744] Quota error (device loop7): write_blk: dquota write failed [ 221.135513][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 221.135805][ C1] EXT4-fs (loop7): last error at time 1774530289: ext4_validate_block_bitmap:441 [ 221.182836][ T8744] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 221.194714][ T8744] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1767: Failed to acquire dquot type 1 [ 221.206712][ T8744] loop7: lost filesystem error report for type 5 error -117 [ 221.220499][ T8744] EXT4-fs (loop7): 1 truncate cleaned up [ 221.238825][ T8744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.264406][ T8744] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.307894][ T8744] syz.7.1767 (8744) used greatest stack depth: 8840 bytes left [ 221.316413][ T6562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.575843][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 221.683411][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1778'. [ 221.724797][ T8769] bond2: entered promiscuous mode [ 221.799532][ T28] audit: type=1400 audit(1774530290.656:1259): avc: denied { setopt } for pid=8772 comm="syz.7.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.928378][ T8779] loop8: detected capacity change from 0 to 1024 [ 221.951073][ T8779] EXT4-fs: Ignoring removed orlov option [ 222.018407][ T8779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.070784][ T28] audit: type=1400 audit(1774530290.916:1260): avc: denied { map } for pid=8778 comm="syz.8.1782" path="/79/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 222.122727][ T28] audit: type=1400 audit(1774530290.916:1261): avc: denied { execute } for pid=8778 comm="syz.8.1782" path="/79/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 222.229004][ T7308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.243424][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 222.325452][ T8799] netlink: 'syz.8.1789': attribute type 27 has an invalid length. [ 222.453179][ T8799] bond2: left promiscuous mode [ 222.488798][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.517441][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.563067][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.592960][ T8812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.730240][ T8826] loop7: detected capacity change from 0 to 512 [ 222.780176][ T8826] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1798: inode has both inline data and extents flags [ 222.819761][ T8826] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.819964][ T8826] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1798: couldn't read orphan inode 15 (err -117) [ 222.841037][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 222.841061][ C0] EXT4-fs (loop7): initial error at time 1774530291: ext4_orphan_get:1391: inode 15 [ 222.841100][ C0] EXT4-fs (loop7): last error at time 1774530291: ext4_orphan_get:1391: inode 15 [ 222.866380][ T8826] loop7: lost filesystem error report for type 5 error -117 [ 222.866893][ T8826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.904726][ T6562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.135296][ T8837] loop7: detected capacity change from 0 to 136 [ 223.197962][ T8837] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 223.231155][ T8845] netlink: 'syz.4.1807': attribute type 27 has an invalid length. [ 223.403556][ T28] audit: type=1400 audit(1774530292.206:1262): avc: denied { ioctl } for pid=8846 comm="syz.0.1808" path="socket:[42964]" dev="sockfs" ino=42964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.511151][ T8845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.520521][ T8845] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.530346][ T8845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.586536][ T28] audit: type=1400 audit(1774530292.446:1263): avc: denied { mounton } for pid=8851 comm="syz.6.1810" path="/194/file0" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 224.450521][ T8865] loop6: detected capacity change from 0 to 512 [ 224.477790][ T8865] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1814: inode has both inline data and extents flags [ 224.511087][ T8865] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.515109][ T8865] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1814: couldn't read orphan inode 15 (err -117) [ 224.524338][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 224.524361][ C1] EXT4-fs (loop6): initial error at time 1774530293: ext4_orphan_get:1391: inode 15 [ 224.524409][ C1] EXT4-fs (loop6): last error at time 1774530293: ext4_orphan_get:1391: inode 15 [ 224.589547][ T8865] loop6: lost filesystem error report for type 5 error -117 [ 224.600741][ T8865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.722201][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.399005][ T8918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.420346][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.829973][ T28] audit: type=1400 audit(1774530295.696:1264): avc: denied { map } for pid=8959 comm="syz.0.1853" path="socket:[43431]" dev="sockfs" ino=43431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.853464][ T28] audit: type=1400 audit(1774530295.716:1265): avc: denied { read } for pid=8959 comm="syz.0.1853" path="socket:[43431]" dev="sockfs" ino=43431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.950232][ T8207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.397624][ T8973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.420369][ T8207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.565293][ T28] audit: type=1400 audit(1774530296.426:1266): avc: denied { firmware_load } for pid=8979 comm="syz.8.1862" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 227.761484][ T8990] netlink: 'syz.7.1876': attribute type 1 has an invalid length. [ 227.769372][ T8990] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 227.779325][ T8990] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1876'. [ 227.790248][ T8990] netlink: 'syz.7.1876': attribute type 1 has an invalid length. [ 227.798006][ T8990] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 227.830510][ T8990] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1876'. [ 228.350524][ T8207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.659594][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.905447][ T9010] erspan0: entered promiscuous mode [ 228.918340][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 229.354834][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1892'. [ 229.529782][ T28] audit: type=1400 audit(1774530298.386:1267): avc: denied { read } for pid=9050 comm="syz.6.1889" path="socket:[43675]" dev="sockfs" ino=43675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.882749][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'. [ 229.935824][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1893'. [ 230.017954][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1900'. [ 230.059212][ T9080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1900'. [ 230.746232][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1908'. [ 230.898959][ T28] audit: type=1400 audit(1774530299.756:1268): avc: denied { read } for pid=9111 comm="syz.8.1914" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.950498][ T28] audit: type=1400 audit(1774530299.756:1269): avc: denied { open } for pid=9111 comm="syz.8.1914" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 230.976878][ T28] audit: type=1400 audit(1774530299.786:1270): avc: denied { ioctl } for pid=9111 comm="syz.8.1914" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 231.802421][ T9155] all: renamed from bridge_slave_1 [ 232.714087][ T28] audit: type=1400 audit(1774530301.576:1271): avc: denied { read } for pid=9191 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.836429][ T28] audit: type=1400 audit(1774530301.696:1272): avc: denied { bind } for pid=9196 comm="syz.8.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 233.008001][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 233.018319][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 233.149725][ T9218] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 233.377341][ T28] audit: type=1400 audit(1774530302.226:1273): avc: denied { read } for pid=9220 comm="syz.6.1956" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.452884][ T28] audit: type=1400 audit(1774530302.236:1274): avc: denied { open } for pid=9220 comm="syz.6.1956" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.780431][ T28] audit: type=1400 audit(1774530302.646:1275): avc: denied { create } for pid=9232 comm="syz.8.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.855334][ T28] audit: type=1400 audit(1774530302.716:1276): avc: denied { shutdown } for pid=9232 comm="syz.8.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.877153][ T28] audit: type=1400 audit(1774530302.716:1277): avc: denied { read } for pid=9232 comm="syz.8.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.667502][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1968'. [ 234.689213][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 235.626745][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1975'. [ 235.800641][ T9291] macvtap1: entered promiscuous mode [ 235.822022][ T9291] team0: entered promiscuous mode [ 235.843663][ T9291] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 235.869243][ T9291] team0: Device macvtap1 is already an upper device of the team interface [ 235.895761][ T9291] team0: left promiscuous mode [ 235.951418][ T9288] loop8: detected capacity change from 0 to 136 [ 235.990492][ T9288] ISOFS: Logical zone size(768) < hardware blocksize(1024) [ 236.164341][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1982'. [ 236.203931][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1982'. [ 236.371768][ T9333] loop6: detected capacity change from 0 to 1024 [ 236.418785][ T9333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 236.429964][ T9333] System zones: 0-1, 3-36 [ 236.447685][ T9333] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1983: bad orphan inode 134217728 [ 236.459021][ T9333] loop6: lost filesystem error report for type 5 error -117 [ 236.459636][ T9333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.499594][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.563153][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1990'. [ 237.064283][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 237.073602][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 237.101168][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.237580][ T8178] IPVS: starting estimator thread 0... [ 237.329558][ T9377] IPVS: using max 2496 ests per chain, 124800 per kthread [ 238.295134][ T9405] loop8: detected capacity change from 0 to 8192 [ 238.357419][ T9412] __nla_validate_parse: 5 callbacks suppressed [ 238.357436][ T9412] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2017'. [ 238.762510][ T28] audit: type=1400 audit(1774530307.616:1278): avc: denied { ioctl } for pid=9441 comm="syz.7.2029" path="socket:[45023]" dev="sockfs" ino=45023 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.765501][ T4815] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.798233][ T9467] netlink: 'syz.0.2036': attribute type 1 has an invalid length. [ 239.813178][ T28] audit: type=1400 audit(1774530308.676:1279): avc: denied { unmount } for pid=9468 comm="syz.7.2037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.839716][ T9467] bond0: entered promiscuous mode [ 239.844907][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.852425][ T9471] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 239.884975][ T9472] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 239.922259][ T9476] capability: warning: `syz.4.2040' uses 32-bit capabilities (legacy support in use) [ 239.979621][ T9472] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 240.002594][ T9479] loop6: detected capacity change from 0 to 4096 [ 240.009534][ T9472] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 240.049988][ T9479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.098702][ T4815] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.111326][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2046'. [ 240.131097][ T9491] 8021q: adding VLAN 0 to HW filter on device team1 [ 240.162468][ T4815] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.173356][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.231456][ T4815] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.262734][ T28] audit: type=1400 audit(1774530309.126:1280): avc: denied { nlmsg_read } for pid=9500 comm="syz.8.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.344127][ T28] audit: type=1400 audit(1774530309.206:1281): avc: denied { name_bind } for pid=9509 comm="syz.7.2054" src=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 240.457761][ T28] audit: type=1326 audit(1774530309.316:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.495677][ T28] audit: type=1326 audit(1774530309.316:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.535555][ T28] audit: type=1326 audit(1774530309.316:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.576863][ T28] audit: type=1326 audit(1774530309.316:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.630556][ T28] audit: type=1326 audit(1774530309.316:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.657459][ T4815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.666857][ T28] audit: type=1326 audit(1774530309.316:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9521 comm="syz.0.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd7d7c799 code=0x7ffc0000 [ 240.699871][ T4815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.717051][ T4815] bond0 (unregistering): Released all slaves [ 240.823321][ T4815] tipc: Left network mode [ 240.832290][ T4815] hsr_slave_0: left promiscuous mode [ 240.853301][ T4815] hsr_slave_1: left promiscuous mode [ 240.864558][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.879557][ T4815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.979571][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.990389][ T4815] veth1_macvtap: left promiscuous mode [ 240.996323][ T4815] veth0_macvtap: left promiscuous mode [ 241.022395][ T4815] veth1_vlan: left promiscuous mode [ 241.027840][ T4815] veth0_vlan: left promiscuous mode [ 241.476003][ T4815] team0 (unregistering): Port device team_slave_1 removed [ 241.502785][ T4815] team0 (unregistering): Port device team_slave_0 removed [ 241.799869][ T9568] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2072'. [ 241.820985][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 241.922647][ T4815] IPVS: stop unused estimator thread 0... [ 243.414905][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2089'. [ 243.898731][ T9690] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 243.943431][ T9690] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 243.957299][ T9690] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 243.988842][ T9690] bond6: (slave ip6gre1): making interface the new active one [ 243.997094][ T9690] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 244.157413][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2111'. [ 244.498646][ T9746] IPv6: sit2: Disabled Multicast RS [ 244.758920][ T9775] netlink: 'syz.7.2134': attribute type 4 has an invalid length. [ 244.781819][ T9775] netlink: 'syz.7.2134': attribute type 4 has an invalid length. [ 244.889732][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2140'. [ 244.907813][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 244.907838][ T28] audit: type=1400 audit(1774530313.766:1331): avc: denied { accept } for pid=9785 comm="syz.6.2137" path="socket:[48860]" dev="sockfs" ino=48860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.007162][ T9800] loop6: detected capacity change from 0 to 512 [ 245.035121][ T9800] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2145: inode has both inline data and extents flags [ 245.052279][ T9800] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.052383][ T9800] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2145: couldn't read orphan inode 15 (err -117) [ 245.061676][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 245.061691][ C0] EXT4-fs (loop6): initial error at time 1774530313: ext4_orphan_get:1391: inode 15 [ 245.061733][ C0] EXT4-fs (loop6): last error at time 1774530313: ext4_orphan_get:1391: inode 15 [ 245.098702][ T9800] loop6: lost filesystem error report for type 5 error -117 [ 245.099578][ T9800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.125739][ T9808] io-wq is not configured for unbound workers [ 245.136145][ T28] audit: type=1400 audit(1774530313.996:1332): avc: denied { mounton } for pid=9799 comm="syz.6.2145" path="/262/bus/bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.190172][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.256004][ T9814] loop6: detected capacity change from 0 to 1024 [ 245.308118][ T9814] EXT4-fs: Ignoring removed orlov option [ 245.353669][ T9814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.389981][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.526521][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2156'. [ 245.549597][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2156'. [ 245.623867][ T9834] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 245.672780][ T9834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.695084][ T9834] bond7: (slave veth17): Enslaving as an active interface with a down link [ 245.712681][ T9834] bond7: (slave dummy0): making interface the new active one [ 245.722510][ T9834] dummy0: entered promiscuous mode [ 245.728971][ T9834] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 245.768063][ T9841] bond7 (unregistering): (slave veth17): Releasing active interface [ 245.797638][ T9841] bond7 (unregistering): (slave dummy0): Releasing active interface [ 245.839444][ T9841] bond7 (unregistering): Released all slaves [ 246.344354][ T28] audit: type=1400 audit(1774530315.206:1333): avc: denied { mount } for pid=9876 comm="syz.4.2175" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 246.525159][ T28] audit: type=1400 audit(1774530315.236:1334): avc: denied { watch } for pid=9876 comm="syz.4.2175" path="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 247.119997][ T28] audit: type=1400 audit(1774530315.986:1335): avc: denied { name_bind } for pid=9897 comm="syz.0.2182" src=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 247.297679][ T9908] netlink: 'syz.6.2186': attribute type 2 has an invalid length. [ 247.365277][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 247.412025][ T9921] pimreg: entered allmulticast mode [ 247.614388][ T9942] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2195'. [ 248.057773][ T9999] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 248.071838][ T9999] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.099455][ T9999] bond7: (slave syz_tun): making interface the new active one [ 248.108519][ T9999] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 248.344954][ T28] audit: type=1400 audit(1774530317.206:1336): avc: denied { write } for pid=10014 comm="syz.7.2213" path="socket:[46719]" dev="sockfs" ino=46719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 248.389097][T10017] bridge0: port 1(ipvlan2) entered blocking state [ 248.395669][T10017] bridge0: port 1(ipvlan2) entered disabled state [ 248.403999][T10017] ipvlan2: entered allmulticast mode [ 248.409385][T10017] bridge0: entered allmulticast mode [ 248.415337][T10017] ipvlan2: left allmulticast mode [ 248.420837][T10017] bridge0: left allmulticast mode [ 248.635896][T10037] loop8: detected capacity change from 0 to 1024 [ 248.649393][T10037] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 249.059516][ T28] audit: type=1326 audit(1774530317.916:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 249.119539][ T28] audit: type=1326 audit(1774530317.916:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 249.209800][ T28] audit: type=1326 audit(1774530317.916:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 249.240432][ T28] audit: type=1326 audit(1774530317.916:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765256c799 code=0x7ffc0000 [ 249.541966][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2235'. [ 249.574509][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2235'. [ 250.402887][T10099] loop6: detected capacity change from 0 to 1024 [ 250.452834][T10099] ext4: Unknown parameter 'measure' [ 250.537115][ T8176] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.555739][ T8176] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.609668][T10116] netlink: 'syz.7.2250': attribute type 22 has an invalid length. [ 250.618381][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 250.639587][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 250.639873][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2250'. [ 250.672489][ T2222] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.682590][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 250.699556][ T2222] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.712658][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 250.724545][T10116] netlink: 'syz.7.2250': attribute type 22 has an invalid length. [ 250.724572][ T2222] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.755030][ T2222] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.759713][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2250'. [ 250.773933][ T2222] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.798174][ T2222] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.807289][ T2222] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.816272][ T2222] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.886949][T10121] netlink: 'syz.7.2251': attribute type 1 has an invalid length. [ 250.906798][T10121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.923393][T10121] bond1: (slave syz_tun): making interface the new active one [ 250.932357][T10121] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 251.013622][T10127] all: renamed from bridge_slave_1 [ 251.455745][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2275'. [ 251.675112][T10174] netlink: 'syz.0.2272': attribute type 2 has an invalid length. [ 252.499632][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.706788][T10208] netlink: 'syz.4.2286': attribute type 2 has an invalid length. [ 252.735958][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 252.735974][ T28] audit: type=1326 audit(1774530321.596:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10207 comm="syz.6.2285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0c8e7c799 code=0x0 [ 253.661542][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 255.664264][T10361] loop6: detected capacity change from 0 to 1024 [ 255.677094][T10361] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 256.817951][T10386] netlink: 'syz.6.2329': attribute type 22 has an invalid length. [ 256.849635][T10386] __nla_validate_parse: 3 callbacks suppressed [ 256.849653][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2329'. [ 256.903774][T10386] netlink: 'syz.6.2329': attribute type 22 has an invalid length. [ 256.935245][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2329'. [ 257.080122][ T2222] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.088910][ T2222] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.149248][ T2222] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.158318][ T2222] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.370799][T10393] loop6: detected capacity change from 0 to 1024 [ 257.399186][T10393] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.453063][T10393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.469716][T10393] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.603690][ T28] audit: type=1400 audit(1774530326.466:1410): avc: denied { append } for pid=10391 comm="syz.6.2333" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.710431][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.728577][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 257.878518][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2346'. [ 259.361415][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 259.780402][T10462] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2364'. [ 259.794934][T10462] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2364'. [ 260.048082][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 260.305681][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2371'. [ 261.081118][T10498] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2376'. [ 261.171548][T10502] 8021q: adding VLAN 0 to HW filter on device team1 [ 262.308451][T10512] __nla_validate_parse: 2 callbacks suppressed [ 262.308469][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2382'. [ 262.331880][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2385'. [ 262.342439][T10513] loop6: detected capacity change from 0 to 256 [ 262.359581][ T28] audit: type=1400 audit(1774530331.216:1411): avc: denied { unmount } for pid=10517 comm="syz.8.2383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.424340][T10521] netlink: 'syz.8.2386': attribute type 4 has an invalid length. [ 262.446892][T10521] netlink: 'syz.8.2386': attribute type 4 has an invalid length. [ 262.797641][ T28] audit: type=1326 audit(1774530331.656:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 262.841330][ T28] audit: type=1326 audit(1774530331.656:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 262.867567][ T28] audit: type=1326 audit(1774530331.656:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 262.921142][ T28] audit: type=1326 audit(1774530331.656:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.008201][ T28] audit: type=1326 audit(1774530331.656:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.114894][ T28] audit: type=1326 audit(1774530331.656:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.155031][ T28] audit: type=1326 audit(1774530331.686:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.182061][ T28] audit: type=1326 audit(1774530331.686:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.219466][ T28] audit: type=1326 audit(1774530331.686:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10545 comm="syz.7.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 263.956902][T10584] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 263.971311][T10584] netlink: 'syz.4.2407': attribute type 4 has an invalid length. [ 263.990974][T10584] erspan0: left promiscuous mode [ 264.056854][ T4817] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.070707][ T4817] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.089650][ T4817] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.109870][ T4817] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.910926][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2430'. [ 265.920345][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2430'. [ 267.942125][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 268.725903][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2491'. [ 268.735044][T10800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2491'. [ 268.770195][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 268.779829][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 269.290798][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2506'. [ 269.308720][T10841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2506'. [ 269.403481][T10852] netlink: 'syz.6.2513': attribute type 1 has an invalid length. [ 269.419039][T10852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.452488][T10852] bond1: (slave veth5): Enslaving as an active interface with a down link [ 269.481406][T10852] bond1: (slave dummy0): making interface the new active one [ 269.498739][T10852] dummy0: entered promiscuous mode [ 269.504198][T10852] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 269.514109][T10857] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 269.540865][T10852] bond1 (unregistering): (slave veth5): Releasing active interface [ 269.572719][T10852] bond1 (unregistering): (slave dummy0): Releasing active interface [ 269.607659][T10852] bond1 (unregistering): Released all slaves [ 269.741739][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 269.741753][ T28] audit: type=1326 audit(1774530338.606:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 269.795198][ T28] audit: type=1326 audit(1774530338.606:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 269.843960][ T28] audit: type=1326 audit(1774530338.606:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 269.894713][ T28] audit: type=1326 audit(1774530338.606:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 269.942632][ T28] audit: type=1326 audit(1774530338.606:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 269.992390][ T28] audit: type=1326 audit(1774530338.636:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 270.039496][ T28] audit: type=1326 audit(1774530338.636:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 270.088043][ T28] audit: type=1326 audit(1774530338.636:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 270.135245][ T28] audit: type=1326 audit(1774530338.636:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 270.182715][ T28] audit: type=1326 audit(1774530338.636:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.6.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 271.290372][T10931] geneve2: entered promiscuous mode [ 271.303542][ T2222] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.326108][ T2222] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.353988][ T2222] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.382284][ T2222] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.592012][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2560'. [ 272.661541][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2563'. [ 272.689574][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2563'. [ 273.007700][T11003] tipc: Enabling of bearer rejected, failed to enable media [ 273.103389][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2572'. [ 273.264161][T11007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.289000][T11009] macsec1: entered promiscuous mode [ 273.297715][T11009] bond2: entered promiscuous mode [ 273.313018][T11009] bond2: left promiscuous mode [ 273.330530][T11014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.392191][T11014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.441767][T11014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.490812][T11014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.547061][ T2222] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.567794][ T2222] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.593866][ T2222] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.602524][ T2222] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.965251][T11058] netlink: 'syz.0.2591': attribute type 1 has an invalid length. [ 273.992967][T11058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.028029][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 274.037071][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 274.056041][T11058] macsec1: entered promiscuous mode [ 274.061373][T11058] bond3: entered promiscuous mode [ 274.066534][T11058] macsec1: entered allmulticast mode [ 274.071969][T11058] bond3: entered allmulticast mode [ 274.094543][T11065] netlink: 'syz.7.2602': attribute type 13 has an invalid length. [ 274.112131][T11065] netlink: 'syz.7.2602': attribute type 17 has an invalid length. [ 274.209756][T11065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.230427][T11065] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.246878][T11065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.363585][T11091] netlink: 63 bytes leftover after parsing attributes in process `syz.7.2603'. [ 274.451171][ T2222] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.765746][T11107] netlink: 'syz.8.2610': attribute type 1 has an invalid length. [ 274.813653][T11107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.843607][T11109] bond3: (slave ip6gretap2): making interface the new active one [ 274.871857][T11109] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 274.910806][T11113] veth0_vlan: left promiscuous mode [ 274.911940][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2611'. [ 274.916087][T11113] veth0_vlan: entered allmulticast mode [ 274.932403][T11113] veth0_vlan: entered promiscuous mode [ 274.958935][T11111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.980359][T11111] macsec1: entered promiscuous mode [ 274.985698][T11111] bond4: entered promiscuous mode [ 274.993239][T11111] bond4: left promiscuous mode [ 275.124074][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2613'. [ 275.264822][T11139] netlink: 'syz.8.2623': attribute type 1 has an invalid length. [ 275.305237][T11139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.316203][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2623'. [ 275.382746][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2623'. [ 275.399015][T11145] macsec1: entered promiscuous mode [ 275.408884][T11145] bond5: entered promiscuous mode [ 275.414168][T11145] macsec1: entered allmulticast mode [ 275.419656][T11145] bond5: entered allmulticast mode [ 275.932452][T11174] loop6: detected capacity change from 0 to 4096 [ 275.961071][T11174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.099254][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.288281][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 276.288298][ T28] audit: type=1400 audit(1774530345.146:1547): avc: denied { watch } for pid=11200 comm="syz.7.2643" path="/" dev="ramfs" ino=52975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 276.513128][ T4815] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.536757][ T4815] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.558859][ T4815] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.583386][ T4815] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.794155][T11210] loop6: detected capacity change from 0 to 512 [ 276.848785][T11210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 276.871213][T11210] EXT4-fs (loop6): 1 truncate cleaned up [ 276.899419][T11210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.919749][ T28] audit: type=1326 audit(1774530345.756:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 276.953075][ T28] audit: type=1326 audit(1774530345.756:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 276.994472][ T28] audit: type=1326 audit(1774530345.756:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.019141][T11234] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2655'. [ 277.029267][ T28] audit: type=1326 audit(1774530345.756:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.053731][ T28] audit: type=1326 audit(1774530345.756:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.085754][ T28] audit: type=1326 audit(1774530345.756:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.109806][ T28] audit: type=1326 audit(1774530345.766:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.127246][T11236] bond6: entered promiscuous mode [ 277.135696][ T28] audit: type=1326 audit(1774530345.766:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.162146][ T28] audit: type=1326 audit(1774530345.766:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.8.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf100c799 code=0x7ffc0000 [ 277.194915][T11236] macvlan2: entered promiscuous mode [ 277.201828][T11236] macvlan2: entered allmulticast mode [ 277.208029][T11236] bond6: (slave macvlan2): Opening slave failed [ 278.364431][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2670'. [ 278.515681][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.923958][ T4824] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.938530][ T4824] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.947195][ T4824] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.947379][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2684'. [ 278.955885][ T4824] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.015601][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2684'. [ 279.015958][ T4815] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.037517][ T4815] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.046709][ T4815] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.055775][ T4815] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.552067][T11326] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2702'. [ 280.198590][T11313] syz.7.2688 (11313) used greatest stack depth: 7224 bytes left [ 280.525521][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 280.711300][T11376] bond5: left allmulticast mode [ 280.716205][T11376] bond5: left promiscuous mode [ 280.747788][ T4815] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.772619][ T4815] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.792581][ T4815] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.801923][ T4815] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.811261][ T4815] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.820580][ T4815] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.829857][ T4815] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.838969][ T4815] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.080610][T11403] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2722'. [ 282.099576][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 282.099634][ T28] audit: type=1400 audit(1774530350.956:1699): avc: denied { getopt } for pid=11434 comm="syz.8.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.241970][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 282.264606][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 282.371381][T11453] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2740'. [ 282.410188][T11457] loop6: detected capacity change from 0 to 512 [ 282.426986][T11457] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.438227][T11457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.468342][T11457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.481051][T11457] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.565377][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.047431][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2750'. [ 283.086625][ T30] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.101642][ T30] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.126005][ T30] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.151633][ T30] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.054280][T11508] __nla_validate_parse: 1 callbacks suppressed [ 284.054298][T11508] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2760'. [ 284.116649][T11508] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.2760'. [ 284.199240][T11521] loop6: detected capacity change from 0 to 1024 [ 284.229028][T11521] EXT4-fs: Ignoring removed bh option [ 284.288937][T11521] EXT4-fs: Ignoring removed oldalloc option [ 284.305377][T11521] EXT4-fs: Ignoring removed nobh option [ 284.340829][T11521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.463203][T11521] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2767: Allocating blocks 497-513 which overlap fs metadata [ 284.499028][T11521] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2767: Allocating blocks 497-513 which overlap fs metadata [ 284.539133][T11520] EXT4-fs (loop6): pa ffff888106753230: logic 48, phys. 177, len 21 [ 284.547648][T11520] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 284.585976][ T5918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.659548][T11539] netlink: 'syz.6.2774': attribute type 4 has an invalid length. [ 284.668785][T11539] netlink: 'syz.6.2774': attribute type 4 has an invalid length. [ 285.115890][T11558] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2781'. [ 285.275702][T11567] netlink: 11522 bytes leftover after parsing attributes in process `syz.0.2785'. [ 286.326441][T11600] netlink: 1472 bytes leftover after parsing attributes in process `syz.8.2798'. [ 286.357162][T11600] netlink: 1472 bytes leftover after parsing attributes in process `syz.8.2798'. [ 286.996842][ T28] audit: type=1400 audit(1774530355.856:1700): avc: denied { read } for pid=11610 comm="syz.4.2804" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.839409][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 290.024428][ T28] audit: type=1326 audit(1774530358.886:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.092819][ T28] audit: type=1326 audit(1774530358.916:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.129809][ T28] audit: type=1326 audit(1774530358.916:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.155230][ T28] audit: type=1326 audit(1774530358.916:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.293720][ T28] audit: type=1326 audit(1774530358.926:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.341882][ T28] audit: type=1326 audit(1774530358.926:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.401743][ T28] audit: type=1326 audit(1774530358.926:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.465059][ T28] audit: type=1326 audit(1774530358.926:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.531938][ T28] audit: type=1326 audit(1774530358.926:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.557060][T11758] netlink: 'syz.6.2862': attribute type 1 has an invalid length. [ 290.616602][ T28] audit: type=1326 audit(1774530358.926:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.6.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0c8e7c799 code=0x7ffc0000 [ 290.741533][ T30] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.934289][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 290.958451][T11791] netlink: 'syz.6.2874': attribute type 1 has an invalid length. [ 291.012674][T11791] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 291.058921][T11791] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 291.103018][T11791] bond1: (slave vxcan1): making interface the new active one [ 291.112920][T11791] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 291.126213][T11803] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.138057][T11803] bond1: (slave vxcan3): Enslaving as a backup interface with an up link [ 291.790664][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 291.809602][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 291.818515][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 291.846948][T11854] netlink: 'syz.0.2901': attribute type 1 has an invalid length. [ 291.903575][T11854] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.957784][T11860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.005364][T11860] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.060669][T11860] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 292.197212][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2914'. [ 292.208812][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2914'. [ 292.487819][T11888] cgroup: fork rejected by pids controller in /syz0 [ 293.137809][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2933'. [ 293.156481][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2933'. [ 293.988177][T12643] netlink: 'syz.4.2945': attribute type 1 has an invalid length. [ 293.990115][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2955'. [ 294.014826][T12643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.046585][T12643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.054365][T12643] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 294.065569][T12643] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 294.085809][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2955'. [ 294.278967][T12676] loop6: detected capacity change from 0 to 512 [ 294.299030][T12676] ext4: Unknown parameter 'noacl' [ 294.669953][T12700] netlink: 'syz.8.2964': attribute type 1 has an invalid length. [ 294.707905][T12700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.731747][T12700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.739319][T12700] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.752843][T12700] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 295.140591][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.327861][T12726] __nla_validate_parse: 3 callbacks suppressed [ 295.327885][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2977'. [ 295.364065][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2977'. [ 295.671714][T12749] netlink: 'syz.7.2984': attribute type 1 has an invalid length. [ 295.687473][T12749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.103247][T12752] netlink: 'syz.8.2985': attribute type 1 has an invalid length. [ 296.398936][T12749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.406463][T12749] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.418580][T12749] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 296.521108][T12753] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.545654][T12753] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 296.598666][T12753] bond8: (slave vxcan3): making interface the new active one [ 296.613835][T12753] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 296.634910][T12754] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 296.646638][T12754] bond8: (slave vxcan5): Enslaving as a backup interface with an up link [ 296.708515][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. [ 296.721793][T12777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2995'. [ 296.733486][T12777] macvlan0: entered allmulticast mode [ 296.739442][T12777] veth1_vlan: entered allmulticast mode [ 296.815348][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 296.815366][ T28] audit: type=1326 audit(1774530621.675:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.849087][ T28] audit: type=1326 audit(1774530621.705:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.872846][ T28] audit: type=1326 audit(1774530621.705:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.896768][ T28] audit: type=1326 audit(1774530621.705:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.921539][ T28] audit: type=1326 audit(1774530621.705:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.946225][ T28] audit: type=1326 audit(1774530621.705:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.970218][ T28] audit: type=1326 audit(1774530621.705:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 296.993861][ T28] audit: type=1326 audit(1774530621.705:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 297.017545][ T28] audit: type=1326 audit(1774530621.705:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 297.041324][ T28] audit: type=1326 audit(1774530621.705:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.7.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f01c799 code=0x7ffc0000 [ 297.720337][T12790] bond4: entered promiscuous mode [ 297.889644][T12798] ================================================================== [ 297.897783][T12798] BUG: KCSAN: data-race in touch_atime / touch_atime [ 297.904504][T12798] [ 297.906849][T12798] write to 0xffff888104c466b8 of 4 bytes by task 12794 on cpu 0: [ 297.914695][T12798] touch_atime+0x1d7/0x330 [ 297.919167][T12798] shmem_file_read_iter+0x477/0x540 [ 297.924411][T12798] copy_splice_read+0x471/0x6c0 [ 297.929384][T12798] splice_direct_to_actor+0x28f/0x670 [ 297.934783][T12798] do_splice_direct+0x119/0x1a0 [ 297.939710][T12798] do_sendfile+0x382/0x650 [ 297.944170][T12798] __x64_sys_sendfile64+0x105/0x150 [ 297.949424][T12798] x64_sys_call+0x2dc4/0x3020 [ 297.954133][T12798] do_syscall_64+0x12c/0x370 [ 297.958756][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.964715][T12798] [ 297.967053][T12798] read to 0xffff888104c466b8 of 4 bytes by task 12798 on cpu 1: [ 297.974703][T12798] touch_atime+0x16c/0x330 [ 297.979164][T12798] shmem_file_read_iter+0x477/0x540 [ 297.984584][T12798] copy_splice_read+0x471/0x6c0 [ 297.989463][T12798] splice_direct_to_actor+0x28f/0x670 [ 297.994882][T12798] do_splice_direct+0x119/0x1a0 [ 297.999746][T12798] do_sendfile+0x382/0x650 [ 298.004178][T12798] __x64_sys_sendfile64+0x105/0x150 [ 298.009408][T12798] x64_sys_call+0x2dc4/0x3020 [ 298.014131][T12798] do_syscall_64+0x12c/0x370 [ 298.018742][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.024654][T12798] [ 298.026995][T12798] value changed: 0x2c6e0c38 -> 0x2d06a2b8 [ 298.032723][T12798] [ 298.035089][T12798] Reported by Kernel Concurrency Sanitizer on: [ 298.041284][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.4.3001 Not tainted syzkaller #0 PREEMPT(full) [ 298.050680][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.060769][T12798] ================================================================== [ 304.339618][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!